last executing test programs: 23m25.442027282s ago: executing program 32 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000cf7018008000700ac1e00010a"], 0x48}}, 0x2000c000) 23m25.271719807s ago: executing program 33 (id=682): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x181) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, 0x0, 0x0, 0x80, &(0x7f0000001300)={0x10, 0x2}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20001000) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 22m40.425242451s ago: executing program 34 (id=798): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f0000000040), 0x80000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)=ANY=[], 0x40}}, 0x0) 22m30.900107909s ago: executing program 35 (id=810): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)={0x2, 0x0, [{0xeeee5000, 0xf0, &(0x7f0000000940)=""/240}, {0x4, 0x5a, &(0x7f00000006c0)=""/90}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) 22m25.445858825s ago: executing program 36 (id=821): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)={[{@nls={'nls', 0x3d, 'euc-jp'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@uid}, {@force}, {@umask={'umask', 0x3d, 0xd65}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 22m17.332648369s ago: executing program 37 (id=829): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2a100, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=""/23, 0x17}, &(0x7f00000002c0)=0x40) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x1003}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x6, {0x8, 0x4, 0x8, 0x1000}}, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc0046686, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) 22m10.375754226s ago: executing program 38 (id=836): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 21m41.559040264s ago: executing program 39 (id=843): syz_emit_vhci(&(0x7f0000001940)=ANY=[@ANYBLOB="02c90012670e0005"], 0x17) 19m43.101792239s ago: executing program 40 (id=1062): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0x841, 0x0) 19m21.689717828s ago: executing program 41 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000280)={0xed, 0x0, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x101) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x2) listen(r4, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/cpu_byteorder', 0x200, 0x126) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8, {0x686912bc}}, './file1\x00'}) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) 19m21.140624533s ago: executing program 42 (id=1100): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/223, 0xdf}], 0x4, &(0x7f0000000f80)=""/4096, 0x1000}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 19m6.803131673s ago: executing program 43 (id=1122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000010000000000000001000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b702000014000000b7030000000000008500000005000000bf0920000000000045090100000003709500000000000000bf91000000000000b70200"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001e40)=""/4107, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18m20.296258555s ago: executing program 44 (id=1166): syz_usbip_server_init(0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 14m23.501530881s ago: executing program 45 (id=1732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x101402, 0x134) acct(&(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x73f, 0x2, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 14m20.622919755s ago: executing program 46 (id=1738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc01a, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x40c0) 13m17.470679859s ago: executing program 47 (id=1855): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5, 0xfffffffffffffffe}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006401010200"/324], 0x310) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xffffffffffffffff) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 13m4.207672479s ago: executing program 48 (id=1876): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/223, 0xdf}], 0x4, &(0x7f0000000f80)=""/4096, 0x1000}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 11m59.439400408s ago: executing program 49 (id=1999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x101402, 0x134) acct(&(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000007060108000000000000b3310b2b10e18c42d029b0f6b5e40ee398a948b8f351fe452b72cdc33431a945cf6c873f2770a121928b21c3ae9a57e661f6cc1c5069209c10edb2a100b1652000c9ea13657bf3cb95dcb1e49ba85fbc54fb732ad8389f0c2cc16bea38bec5dac2b441f0a1163ac473e6079563b03ee1784f60f0a59334d63459d3c3c9f2d80b09e461e85fe89ef1d5b9b717cb59a309a1241e864b22bc24ddfdf1d8e1b2677edf1d1e861680e404977e08bd1e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x73f, 0x2, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) unshare(0x68060200) 11m44.937458405s ago: executing program 50 (id=2028): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 11m14.010535975s ago: executing program 51 (id=2084): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) r0 = io_uring_setup(0x6084, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x3, 0x4143}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 9m38.585871417s ago: executing program 52 (id=2236): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r2 = memfd_secret(0x80000) recvmsg$kcm(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 9m38.24875183s ago: executing program 53 (id=2238): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff785", 0xde}, {&(0x7f0000000b80)}], 0x3}}, {}], 0x2, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000600}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x2e229ef2833254cd, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="010026bd0b736cf6fa4e1b0d0000180001801400020064756d6d7930f99e1deb171d355779d1ab32f7364f1082665911b3627f578186ed8b1265cef7f290aa209372cca5cc073d05daf4f9ca48b5edb3f93534438040781a9fb4bafb242bd615f79ab17bdf1dea8d03dea00f47c4a05c24bd32ba5545811cad99bda7fb819ff08656dd7f370cb01d3ae098d8a06ebd0c0a2f053257881e1d7ada5fa853b13fafa6da07a398d6b57d0364e7a8"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000406010100000000000005000100000705000100070061cdd9677500"/43], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 9m20.310399384s ago: executing program 54 (id=2262): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffff9c, 0x0, 0x219002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) setns(r2, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x200000000000000e, @void, @value, @void, @value}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x191c) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000000100000000000000"]) 8m38.812359509s ago: executing program 55 (id=2301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/157) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8m32.067954961s ago: executing program 56 (id=2322): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) r0 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x0, 0x2, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x5, 0x8, 0x0, 0x200, 0xe821, 0xfffffff9, 0xa000, 0xd, r3, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) listen(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1720}], 0x1, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) mount$afs(&(0x7f00000019c0)=ANY=[@ANYBLOB='#'], &(0x7f0000001a00)='.\x00', &(0x7f0000001a40), 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8m27.415054044s ago: executing program 57 (id=2308): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xc8}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capget(&(0x7f0000000200)={0x19971634}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) unshare(0x54000800) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IIF={0x8, 0x1b}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x44}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)=""/44, &(0x7f0000000340)=""/68, &(0x7f0000000480)=""/227, 0x3000}) openat$vsock(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 8m19.423651755s ago: executing program 58 (id=2333): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008"], 0x58}}, 0x0) 8m8.321570228s ago: executing program 59 (id=2341): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$msr(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x244180, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r2, r0, 0x0, 0x578410eb) 7m32.658620418s ago: executing program 60 (id=2349): r0 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) socket$netlink(0x10, 0x3, 0x8) r2 = socket(0x8000000010, 0x2, 0x0) r3 = open$dir(&(0x7f0000000700)='./file0\x00', 0x22c401, 0x25) mkdirat(r3, &(0x7f0000000740)='./file0\x00', 0x105) write(r2, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 7m23.178059602s ago: executing program 61 (id=2359): syz_emit_ethernet(0xb1, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000004a900d97f3c0200000092d0dd303166d6593d62e9e54fb9384f659696b23849d2a199af547b3a475657e7be0598340dfed58a02156633111625ce45bb88c5e19f79c16549b47b9da5543078ab9e8c1655432b3809fc36a8a3ac93e8069f843d3a87b0625f04d5ba030000008b888e22bfb2ffec95f7a7291f07b9635f37477f74ba5b2b5ab5bdfd0defc57c777eda6f5026535695d2835d78bce3550283aaf0a81be76fe143cef90000000000000000000000000037eecb21"], 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') socket$alg(0x26, 0x5, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) io_uring_setup(0x2195, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 7m16.581340162s ago: executing program 62 (id=2334): creat(&(0x7f0000000000)='./file1\x00', 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m14.641861994s ago: executing program 63 (id=2355): r0 = socket$isdn(0x22, 0x3, 0x21) r1 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5710, 0x80}) r2 = socket$kcm(0x21, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x9, &(0x7f0000000180)=""/53, 0x35) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close_range(r1, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000054) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'netdevsim0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000c28285fdd242a6f7aa7810add3538879dd54982e53730a1200001300000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402060602"], 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r8, &(0x7f00000011c0)="d8698454db1ec0c2a2c01c9395dd5680ca"}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) 6m29.345013902s ago: executing program 64 (id=2393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r2 = socket(0x840000000002, 0x3, 0xf8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) msgctl$IPC_INFO(0x0, 0x3, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 6m27.034413145s ago: executing program 65 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$isdn(0x22, 0x2, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYBLOB], 0x50) socket$isdn(0x22, 0x2, 0x26) dup3(r2, r3, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 6m7.563724712s ago: executing program 66 (id=2401): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xc8}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capget(&(0x7f0000000200)={0x19971634}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) unshare(0x54000800) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IIF={0x8, 0x1b}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)=""/44, &(0x7f0000000340)=""/68, &(0x7f0000000480)=""/227, 0x3000}) openat$vsock(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 5m23.268951462s ago: executing program 67 (id=2399): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r1, 0x0, 0x0, 0x50) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/102399, 0x18fff, 0x200) 5m12.047335852s ago: executing program 5 (id=2440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={r3, r4, 0x0, 0x0, 0x5}) close_range(r1, 0xffffffffffffffff, 0x0) 5m10.364790753s ago: executing program 5 (id=2442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000060000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m5.881332989s ago: executing program 5 (id=2444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) pipe2(0x0, 0xb0800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000620000/0x3000)=nil, 0x3000}, 0x6ccc217a99a6c5b6}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x6}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 5m3.086891088s ago: executing program 5 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) 5m2.305049398s ago: executing program 5 (id=2451): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r8, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="010000000000000000005200090008000300a1c8511346a3c1b995b2c0da2c1e3fed751070cd3b81049394e73beb53655b6a21afb44a3a7134c5ba41ef7bb2b0d3cbeb5247b804db663d564e8f100b48727582e761f6d840d8e5764f0afa88c2b2a088b7df8326d7845031fdafc68be8de44a80d213878e21a85bbdf09610b7389515409775c6d99d4bb44bf1bf3955ac72ba4bd581a3faa7503926d78debc8daa86bc86b6f5a83c29f8790b4ea757fc8decc09a222f67763ffa2cabf7ca9dfd1ac6a8", @ANYRESOCT=r2, @ANYBLOB], 0x1c}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x105000) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00036f14cfe84b5b360df4a2dfb70cdc1725bd7000fddbdf25270000000c"], 0x24}, 0x1, 0x0, 0x0, 0x10044801}, 0x40040) 4m56.144908005s ago: executing program 5 (id=2456): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) fanotify_init(0x200, 0x0) socket(0x10, 0x3, 0x0) r0 = open(0x0, 0x400141042, 0x766c618eb221465a) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)=0x8000030) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) close_range(r2, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m45.238762002s ago: executing program 4 (id=2468): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000007c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x3, 0x2}, 0x20) getpeername$packet(r4, 0x0, &(0x7f0000000380)) dup(r0) gettid() socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00'}) 4m44.020648731s ago: executing program 4 (id=2470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) 4m43.061637439s ago: executing program 4 (id=2471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 4m41.136768654s ago: executing program 4 (id=2473): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) 4m40.802546829s ago: executing program 68 (id=2456): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) fanotify_init(0x200, 0x0) socket(0x10, 0x3, 0x0) r0 = open(0x0, 0x400141042, 0x766c618eb221465a) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)=0x8000030) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) close_range(r2, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m40.282159345s ago: executing program 4 (id=2475): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r0, 0x0, &(0x7f0000000680)=""/87}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = userfaultfd(0x80801) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_io_uring_submit(r7, 0x0, 0x0) 4m38.396683094s ago: executing program 4 (id=2478): syz_io_uring_setup(0x31c7, 0x0, &(0x7f00000012c0), &(0x7f00000005c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xbd, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4m22.165398468s ago: executing program 69 (id=2478): syz_io_uring_setup(0x31c7, 0x0, &(0x7f00000012c0), &(0x7f00000005c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xbd, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m26.623111385s ago: executing program 6 (id=2570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) pipe2(0x0, 0xb0800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000620000/0x3000)=nil, 0x3000}, 0x6ccc217a99a6c5b6}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x6}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 3m24.129873159s ago: executing program 6 (id=2579): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x2, 0x5}}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20084814) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185) r3 = socket$inet(0x2, 0x1, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1", 0x25, 0x11, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8000) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x0) 3m20.678733513s ago: executing program 6 (id=2586): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0x11, 0x0, 0x70bd28, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1}]}, 0x88}}, 0x0) syz_emit_ethernet(0xad6, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r4], 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 3m18.912375712s ago: executing program 6 (id=2590): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='subflow_check_data_avail\x00', r1}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 3m18.085043151s ago: executing program 6 (id=2592): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setrlimit(0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x7e7541, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r0, 0xae80, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$dsp(r1, &(0x7f0000000040)="3b6053b022f4623475689a3c438f8b4c7ae97e1f271a2fa3e238316e885e96a7c9fb6369ef7b3c5dcd9e432bdc8272148cdb9a2a463014c1754b03b94310a277db4cecfd835129d35763dde4f56a2f9a206c19459bd44f7dd35f31d7b1d17313b31ccffaadfb77e0304371a2f4f72459dc14b8e638a8a2792b57d50b93cffdc16504db459417c75f734ab1322114b65bb2f2f832096269e6c074", 0x9a) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESOCT=r1, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x927b, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x48000, &(0x7f0000000100)={[{@memory_localevents}]}) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r8, r7, 0x0) 3m13.781264509s ago: executing program 6 (id=2595): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)={0x134, 0x15, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x97, 0x8, "228f8fd4c42cd85b664f953055b5ad9cf837dcad1bf14e0b5554babe210402f91759bcf4719127d02c794b158286e6be90e3c84481dbefbf335fd7ef53a6bcce2fb78df74f63f3ba584effcf36ef396972c0fe6b750c35aecbccdd3e4abc03712b7666f25fb4d247088e234879b306f6fcd54e5c3a5cc665892fb224edaae94b511ee246b56275a8de0b99804720625516d0ba"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "c87539daf8013a482275fd10f1acec84b0f2271634b9124b0a60fef574d2b125659bf22a8741f38871d009df0fc2b2387169ee784d8c9413a1142bd3005eea"}]}, 0x134}, 0x1, 0x0, 0x0, 0x22008000}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m11.323718293s ago: executing program 1 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b4b, &(0x7f0000002080)) socket(0x27, 0x3, 0x80000000) 3m4.567420892s ago: executing program 9 (id=2604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) pipe2(0x0, 0xb0800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000620000/0x3000)=nil, 0x3000}, 0x6ccc217a99a6c5b6}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x6}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 3m2.683283519s ago: executing program 9 (id=2605): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setrlimit(0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x7e7541, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r0, 0xae80, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$dsp(r1, &(0x7f0000000040)="3b6053b022f4623475689a3c438f8b4c7ae97e1f271a2fa3e238316e885e96a7c9fb6369ef7b3c5dcd9e432bdc8272148cdb9a2a463014c1754b03b94310a277db4cecfd835129d35763dde4f56a2f9a206c19459bd44f7dd35f31d7b1d17313b31ccffaadfb77e0304371a2f4f72459dc14b8e638a8a2792b57d50b93cffdc16504db459417c75f734ab1322114b65bb2f2f832096269e6c074", 0x9a) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESOCT=r1, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x927b, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x48000, &(0x7f0000000100)={[{@memory_localevents}]}) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r8, r7, 0x0) 3m0.157411339s ago: executing program 9 (id=2608): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/2, 0x1a, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2m59.448761211s ago: executing program 0 (id=2609): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NFNL_MSG_ACCT_NEW(r2, 0x0, 0x40800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m59.336789226s ago: executing program 9 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xe47, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x40012121) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000dd4512000091f9d56a2f1c99ee4d83e9f5a38c9fcecba73a83b890df21f171f0793905803376a9362329fb83a0b7d00e1916b9ab99ec9a716d2f64c7fe452e20efd3ba390fd8ebc97c6e523acceaaa1ec97aa08e1b71617e2d6439aea609ab5da8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r7, r9, 0x3, 0x0, @val=@perf_event={0x3}}, 0x18) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r10, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/183, 0xb7}], 0x1, &(0x7f00000004c0)=""/88, 0x58}, 0x1}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000640)=""/255, 0xff}, {0x0}, {&(0x7f00000007c0)=""/135, 0x87}], 0x4, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x2a}], 0x2, 0x2000, 0x0) 2m58.34558813s ago: executing program 70 (id=2595): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)={0x134, 0x15, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x97, 0x8, "228f8fd4c42cd85b664f953055b5ad9cf837dcad1bf14e0b5554babe210402f91759bcf4719127d02c794b158286e6be90e3c84481dbefbf335fd7ef53a6bcce2fb78df74f63f3ba584effcf36ef396972c0fe6b750c35aecbccdd3e4abc03712b7666f25fb4d247088e234879b306f6fcd54e5c3a5cc665892fb224edaae94b511ee246b56275a8de0b99804720625516d0ba"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "c87539daf8013a482275fd10f1acec84b0f2271634b9124b0a60fef574d2b125659bf22a8741f38871d009df0fc2b2387169ee784d8c9413a1142bd3005eea"}]}, 0x134}, 0x1, 0x0, 0x0, 0x22008000}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m58.202716192s ago: executing program 0 (id=2613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m56.688598608s ago: executing program 9 (id=2615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) pipe2(0x0, 0xb0800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000620000/0x3000)=nil, 0x3000}, 0x6ccc217a99a6c5b6}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x6}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2m53.73418012s ago: executing program 9 (id=2617): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_init_net_socket$ax25(0x3, 0x2, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getdents(r1, &(0x7f0000000ec0)=""/4096, 0x1000) 2m53.01121047s ago: executing program 0 (id=2619): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 2m52.188083082s ago: executing program 0 (id=2620): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/2, 0x26, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2m49.598460054s ago: executing program 0 (id=2622): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NFNL_MSG_ACCT_NEW(r2, 0x0, 0x40800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m48.278379179s ago: executing program 0 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) timer_gettime(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r5, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) 2m38.379909813s ago: executing program 71 (id=2617): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_init_net_socket$ax25(0x3, 0x2, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getdents(r1, &(0x7f0000000ec0)=""/4096, 0x1000) 2m36.008798341s ago: executing program 1 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b4b, &(0x7f0000002080)) socket(0x27, 0x3, 0x80000000) 2m29.811305628s ago: executing program 72 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) timer_gettime(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r5, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) 1m44.874644792s ago: executing program 1 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b4b, &(0x7f0000002080)) socket(0x27, 0x3, 0x80000000) 1m17.956299022s ago: executing program 1 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b4b, &(0x7f0000002080)) socket(0x27, 0x3, 0x80000000) 44.073054275s ago: executing program 2 (id=2805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066009d8800001c0033"], 0x4c}}, 0x0) 43.891688389s ago: executing program 1 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b4b, &(0x7f0000002080)) socket(0x27, 0x3, 0x80000000) 40.002215434s ago: executing program 2 (id=2807): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 38.022839066s ago: executing program 2 (id=2811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 36.262119565s ago: executing program 2 (id=2814): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 35.074977021s ago: executing program 2 (id=2817): getrusage(0x1, 0x0) 33.630296885s ago: executing program 2 (id=2820): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) 19.207453577s ago: executing program 8 (id=2845): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={0x0}) 17.819621802s ago: executing program 73 (id=2820): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) 16.760338664s ago: executing program 8 (id=2850): dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x1000}) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 15.447704716s ago: executing program 8 (id=2852): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(0x0, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 14.365591776s ago: executing program 8 (id=2856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 13.275330711s ago: executing program 8 (id=2857): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x2, 0xcc8}) 12.648837555s ago: executing program 7 (id=2859): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={0x0}) 11.084017155s ago: executing program 3 (id=2860): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r1, 0x0, 0x40800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 9.396536329s ago: executing program 7 (id=2861): dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x1000}) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 8.98541197s ago: executing program 3 (id=2862): creat(&(0x7f0000000000)='./file1\x00', 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x4}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 7.734851953s ago: executing program 3 (id=2863): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x800001, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 7.667097581s ago: executing program 7 (id=2864): capset(0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) 6.439316991s ago: executing program 7 (id=2865): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(0x0, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 6.289499835s ago: executing program 1 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b4b, &(0x7f0000002080)) socket(0x27, 0x3, 0x80000000) 6.04359635s ago: executing program 3 (id=2866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 1.082428395s ago: executing program 8 (id=2867): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b2000093"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000200)={0x3, 0x100, 0xfffffff0, 0x6, 0x10, 0x2}) 1.064691815s ago: executing program 3 (id=2868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 1.014940437s ago: executing program 7 (id=2869): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 526.861871ms ago: executing program 7 (id=2870): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000340)=[{0x8, 0x2000, 0x4, &(0x7f0000000200)="5da6342a"}], 0x1}) 0s ago: executing program 3 (id=2871): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40440cc) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x2dee, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(0xffffffffffffffff, r5, 0x8f5, 0x100000000000000) kernel console output (not intermixed with test programs): e [ 1669.118459][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.126158][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.416606][T16720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1669.427734][T16720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1669.696024][T16722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1669.873558][ T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1670.126648][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1670.156795][ T11] usb 7-1: config 0 has no interfaces? [ 1670.162620][ T11] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1670.172298][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.206555][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 1670.283304][ T11] usb 7-1: config 0 descriptor?? [ 1670.434889][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.633157][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.678323][T16725] Bluetooth: hci5: adv larger than maximum supported [ 1670.678518][T16725] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1670.698032][ T11] usb 7-1: USB disconnect, device number 7 [ 1670.833793][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.037075][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.427413][ T35] bridge_slave_1: left allmulticast mode [ 1671.433338][ T35] bridge_slave_1: left promiscuous mode [ 1671.440127][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.480189][ T35] bridge_slave_0: left allmulticast mode [ 1671.486447][ T35] bridge_slave_0: left promiscuous mode [ 1671.493096][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.306939][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1672.357333][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.393119][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.408399][ T35] bond0 (unregistering): Released all slaves [ 1672.984010][T16720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.378567][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2511'. [ 1674.489784][ T35] hsr_slave_0: left promiscuous mode [ 1674.527201][ T35] hsr_slave_1: left promiscuous mode [ 1674.535049][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.544008][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.618681][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.626865][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.724585][ T35] veth1_macvtap: left promiscuous mode [ 1674.731878][ T35] veth0_macvtap: left promiscuous mode [ 1674.738304][ T35] veth1_vlan: left promiscuous mode [ 1675.803420][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.617897][T16722] veth0_vlan: entered promiscuous mode [ 1676.699046][T16720] veth0_vlan: entered promiscuous mode [ 1676.811355][T16720] veth1_vlan: entered promiscuous mode [ 1676.840245][T16722] veth1_vlan: entered promiscuous mode [ 1677.208131][T16720] veth0_macvtap: entered promiscuous mode [ 1677.253550][T16722] veth0_macvtap: entered promiscuous mode [ 1677.299269][T16720] veth1_macvtap: entered promiscuous mode [ 1677.350091][T16722] veth1_macvtap: entered promiscuous mode [ 1677.480578][T16720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.592329][T16720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.630252][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.677243][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2515'. [ 1677.721842][T16720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.732977][T16720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.742178][T16720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.751344][T16720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.781185][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.895548][T16722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.907336][T16722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.916545][T16722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.925537][T16722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.994980][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2515'. [ 1679.108824][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.117335][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.398163][ T8376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.406448][ T8376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.566261][T14917] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1679.768833][T14917] usb 7-1: Using ep0 maxpacket: 8 [ 1679.809111][T14917] usb 7-1: config 0 has no interfaces? [ 1679.814941][T14917] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1679.825305][T14917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.938433][T14917] usb 7-1: config 0 descriptor?? [ 1680.201255][T14917] usb 7-1: USB disconnect, device number 8 [ 1681.146011][ T5858] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1681.388874][ T5858] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1681.398665][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.407245][ T5858] usb 10-1: Product: syz [ 1681.411730][ T5858] usb 10-1: Manufacturer: syz [ 1681.417801][ T5858] usb 10-1: SerialNumber: syz [ 1681.498013][ T5858] usb 10-1: config 0 descriptor?? [ 1681.535635][ T5858] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 011 [ 1682.230268][T16952] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1682.515878][ T5858] i2c i2c-1: failure reading functionality [ 1682.547315][ T5858] i2c i2c-1: connected i2c-tiny-usb device [ 1682.604893][ T5858] usb 10-1: USB disconnect, device number 11 [ 1684.582774][T17003] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2526'. [ 1684.887039][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2526'. [ 1684.995328][T12488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.003689][T12488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.421543][T12486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.430136][T12486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.496043][T12488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.504281][T12488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.726610][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.734789][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.620876][ T5080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.862057][ T5080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.152763][ T5080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.285615][ T5858] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1687.351794][ T5080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.472800][ T5858] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.490982][ T5858] usb 9-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1687.506847][ T5858] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1687.516483][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.638000][ T5858] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1687.743141][ T5858] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1687.756513][ T5080] bridge_slave_1: left allmulticast mode [ 1687.762437][ T5080] bridge_slave_1: left promiscuous mode [ 1687.769312][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.832646][ T5080] bridge_slave_0: left allmulticast mode [ 1687.838798][ T5080] bridge_slave_0: left promiscuous mode [ 1687.845561][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.917597][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.927370][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.944790][T15344] usb 9-1: USB disconnect, device number 9 [ 1688.393367][ T5080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.437702][ T5080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.461619][ T5080] bond0 (unregistering): Released all slaves [ 1688.975009][ T5080] hsr_slave_0: left promiscuous mode [ 1688.988250][ T5080] hsr_slave_1: left promiscuous mode [ 1688.998722][ T5080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1689.006641][ T5080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.028259][ T5080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.036154][ T5080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.063463][ T5080] veth1_macvtap: left promiscuous mode [ 1689.069775][ T5080] veth0_macvtap: left promiscuous mode [ 1689.075883][ T5080] veth1_vlan: left promiscuous mode [ 1689.081469][ T5080] veth0_vlan: left promiscuous mode [ 1689.715194][ T5080] team0 (unregistering): Port device team_slave_1 removed [ 1689.794214][ T5080] team0 (unregistering): Port device team_slave_0 removed [ 1690.680476][T14868] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1690.950245][T14868] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1690.960787][T14868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.970715][T14868] usb 9-1: Product: syz [ 1690.975160][T14868] usb 9-1: Manufacturer: syz [ 1690.980515][T14868] usb 9-1: SerialNumber: syz [ 1691.100436][T14868] usb 9-1: config 0 descriptor?? [ 1691.128024][T14868] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 010 [ 1691.435640][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1691.445379][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1691.455565][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1691.470301][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1691.489707][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1691.860148][T17047] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1692.077073][T14868] i2c i2c-1: failure reading functionality [ 1692.138903][T14868] i2c i2c-1: connected i2c-tiny-usb device [ 1692.184237][T14868] usb 9-1: USB disconnect, device number 10 [ 1692.930199][T17056] chnl_net:caif_netlink_parms(): no params data found [ 1693.333109][T17080] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2542'. [ 1693.457280][T17080] vlan0: entered promiscuous mode [ 1693.491602][T17080] team0: Port device vlan0 added [ 1693.502696][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2542'. [ 1693.570663][ T5812] Bluetooth: hci2: command tx timeout [ 1693.779835][T17082] team0 (unregistering): Port device team_slave_0 removed [ 1693.803422][T17082] team0 (unregistering): Port device team_slave_1 removed [ 1693.884127][T17082] team0 (unregistering): Port device vlan0 removed [ 1694.086243][T14868] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1694.303977][T14868] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.315178][T14868] usb 10-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1694.328876][T14868] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1694.338432][T14868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.513281][T14868] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1694.664157][T14868] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1694.798556][T14868] usb 10-1: USB disconnect, device number 12 [ 1694.876483][T17056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.884170][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.892022][T17056] bridge_slave_0: entered allmulticast mode [ 1694.901436][T17056] bridge_slave_0: entered promiscuous mode [ 1694.988827][T17056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.996536][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.004251][T17056] bridge_slave_1: entered allmulticast mode [ 1695.022374][T17056] bridge_slave_1: entered promiscuous mode [ 1695.407120][T17056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.518329][T17056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.647777][ T5812] Bluetooth: hci2: command tx timeout [ 1696.016533][T17056] team0: Port device team_slave_0 added [ 1696.061228][T17056] team0: Port device team_slave_1 added [ 1696.244971][T17095] syz.8.2544 (17095): drop_caches: 2 [ 1696.322007][T17095] syz.8.2544 (17095): drop_caches: 2 [ 1696.517863][T17056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.526452][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.553751][T17056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.757506][T17056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.764924][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.792363][T17056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.399318][T17056] hsr_slave_0: entered promiscuous mode [ 1697.409408][T17056] hsr_slave_1: entered promiscuous mode [ 1697.419767][T17056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1697.427630][T17056] Cannot create hsr debugfs directory [ 1697.730387][ T5812] Bluetooth: hci2: command tx timeout [ 1698.640621][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2554'. [ 1698.892093][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2554'. [ 1698.893769][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1698.908339][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1698.936213][ T5858] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1699.207249][ T5858] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1699.216837][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.225134][ T5858] usb 1-1: Product: syz [ 1699.229737][ T5858] usb 1-1: Manufacturer: syz [ 1699.234594][ T5858] usb 1-1: SerialNumber: syz [ 1699.377858][ T5858] usb 1-1: config 0 descriptor?? [ 1699.423993][ T5858] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 010 [ 1699.806434][ T5812] Bluetooth: hci2: command tx timeout [ 1699.865373][T17056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1699.908827][T17056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1699.966051][T17056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1700.030684][T17056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1700.147804][T17122] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1700.430644][T17149] capability: warning: `syz.9.2559' uses 32-bit capabilities (legacy support in use) [ 1700.455233][ T5858] i2c i2c-1: failure reading functionality [ 1700.500989][ T5858] i2c i2c-1: connected i2c-tiny-usb device [ 1700.532202][ T5858] usb 1-1: USB disconnect, device number 10 [ 1700.763028][T17150] syz.8.2558 (17150): drop_caches: 2 [ 1700.861927][T17150] syz.8.2558 (17150): drop_caches: 2 [ 1701.216191][T17056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.413796][T17056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.500023][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.507692][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.636378][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.644192][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.449317][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2565'. [ 1704.554180][T17056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.818730][T17199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2570'. [ 1705.049215][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2570'. [ 1705.152751][T17056] veth0_vlan: entered promiscuous mode [ 1705.309618][T17056] veth1_vlan: entered promiscuous mode [ 1705.777449][T17056] veth0_macvtap: entered promiscuous mode [ 1705.867121][T17056] veth1_macvtap: entered promiscuous mode [ 1706.094412][T17214] syz.8.2573 (17214): drop_caches: 2 [ 1706.165471][T17056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.232942][T17214] syz.8.2573 (17214): drop_caches: 2 [ 1706.236384][T17056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.361994][T17056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.371472][T17056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.380902][T17056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.390085][T17056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.176221][ T30] audit: type=1326 audit(1747948497.003:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.8.2578" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 1707.417951][T15737] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1707.506624][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2580'. [ 1707.637116][T15737] usb 7-1: Using ep0 maxpacket: 8 [ 1707.688285][T15737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.701510][T15737] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1707.710997][T15737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.739875][T15737] usb 7-1: config 0 descriptor?? [ 1709.150748][T15737] usbhid 7-1:0.0: can't add hid device: -71 [ 1709.158508][T15737] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1709.257700][T15737] usb 7-1: USB disconnect, device number 9 [ 1709.674948][T17264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1711.169053][T16725] Bluetooth: hci1: command 0x0406 tx timeout [ 1712.278462][T17286] syz.9.2588 (17286): drop_caches: 2 [ 1712.322619][T17286] syz.9.2588 (17286): drop_caches: 2 [ 1712.457457][T17293] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2589'. [ 1712.747458][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2589'. [ 1714.676004][T15737] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1714.928630][T15344] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1715.280846][T15737] usb 10-1: device descriptor read/64, error -71 [ 1715.286484][T15344] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.286756][T15344] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1715.286953][T15344] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1715.287089][T15344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.872234][T15344] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1716.059065][T15737] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1716.763579][T15344] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1716.777807][T15344] usb 7-1: USB disconnect, device number 10 [ 1717.799162][ T8376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.799272][ T8376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.224303][ T8376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.224396][ T8376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.577945][ T3582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.905582][ T3582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.171408][ T3582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.430091][ T3582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.824186][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2599'. [ 1721.348318][T15737] usb 10-1: device descriptor read/64, error -110 [ 1721.457047][T15737] usb usb10-port1: attempt power cycle [ 1721.656680][ T3582] bridge_slave_1: left allmulticast mode [ 1721.663140][ T3582] bridge_slave_1: left promiscuous mode [ 1721.670532][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.797348][ T3582] bridge_slave_0: left allmulticast mode [ 1721.803503][ T3582] bridge_slave_0: left promiscuous mode [ 1721.810156][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.826871][T15737] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1721.937597][T15737] usb 10-1: device descriptor read/8, error -32 [ 1722.646390][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1722.750321][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.794616][ T3582] bond0 (unregistering): Released all slaves [ 1723.495242][ T3582] hsr_slave_0: left promiscuous mode [ 1723.536403][ T3582] hsr_slave_1: left promiscuous mode [ 1723.544604][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.552528][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.666113][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1723.673824][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1723.807574][ T3582] veth1_macvtap: left promiscuous mode [ 1723.813368][ T3582] veth0_macvtap: left promiscuous mode [ 1723.819623][ T3582] veth1_vlan: left promiscuous mode [ 1723.825231][ T3582] veth0_vlan: left promiscuous mode [ 1724.654827][ T3582] team0 (unregistering): Port device team_slave_1 removed [ 1724.682972][ T3582] team0 (unregistering): Port device team_slave_0 removed [ 1726.216977][T16725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1726.228388][T16725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1726.238569][T16725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1726.253977][T16725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1726.266627][T16725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1726.478160][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2604'. [ 1726.639354][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2604'. [ 1727.077645][T14917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1727.337102][T14917] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1727.346685][T14917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.354861][T14917] usb 1-1: Product: syz [ 1727.359457][T14917] usb 1-1: Manufacturer: syz [ 1727.364228][T14917] usb 1-1: SerialNumber: syz [ 1727.468098][T14917] usb 1-1: config 0 descriptor?? [ 1727.503622][T14917] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 011 [ 1727.883135][T17377] chnl_net:caif_netlink_parms(): no params data found [ 1728.252454][T17389] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1728.361397][T14917] i2c i2c-1: failure reading functionality [ 1728.369776][T16725] Bluetooth: hci2: command tx timeout [ 1728.398245][T14917] i2c i2c-1: connected i2c-tiny-usb device [ 1728.414137][T14917] usb 1-1: USB disconnect, device number 11 [ 1729.180842][T14917] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1729.412704][T14917] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.423644][T14917] usb 10-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1729.437558][T14917] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1729.447223][T14917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.647537][T14917] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1729.764863][T14917] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1729.791240][T17377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.798762][T17377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.806436][T17377] bridge_slave_0: entered allmulticast mode [ 1729.814909][T17377] bridge_slave_0: entered promiscuous mode [ 1729.891530][T14917] usb 10-1: USB disconnect, device number 17 [ 1729.940522][T17377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.950407][T17377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.959409][T17377] bridge_slave_1: entered allmulticast mode [ 1729.967961][T17377] bridge_slave_1: entered promiscuous mode [ 1730.247829][T17377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.269847][T17377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.446255][T16725] Bluetooth: hci2: command tx timeout [ 1730.482175][T17377] team0: Port device team_slave_0 added [ 1730.529750][T17377] team0: Port device team_slave_1 added [ 1730.890355][T17377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.897869][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1730.932815][T17377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.267448][T17377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.274774][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1731.301564][T17377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.910373][T17377] hsr_slave_0: entered promiscuous mode [ 1731.920521][T17377] hsr_slave_1: entered promiscuous mode [ 1731.935032][T17377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1731.942845][T17377] Cannot create hsr debugfs directory [ 1732.526496][T16725] Bluetooth: hci2: command tx timeout [ 1734.421755][T17377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1734.456208][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1734.466493][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1734.477511][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1734.499022][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1734.511184][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1734.577909][T17377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1734.610587][ T5812] Bluetooth: hci2: command tx timeout [ 1734.649947][T17377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1734.714507][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2615'. [ 1734.728946][T17377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1734.947538][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2615'. [ 1735.521586][T14917] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1735.752344][T14917] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1735.762202][T14917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.770912][T14917] usb 9-1: Product: syz [ 1735.775291][T14917] usb 9-1: Manufacturer: syz [ 1735.780215][T14917] usb 9-1: SerialNumber: syz [ 1736.061385][T14917] usb 9-1: config 0 descriptor?? [ 1736.169589][T14917] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 011 [ 1736.435042][T17377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.621082][ T5812] Bluetooth: hci4: command tx timeout [ 1736.649423][T17377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.767126][T17449] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1736.790392][T14917] i2c i2c-1: failure reading functionality [ 1736.802838][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.810287][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.823791][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.831224][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1736.904192][T14917] i2c i2c-1: connected i2c-tiny-usb device [ 1736.963040][T14917] usb 9-1: USB disconnect, device number 11 [ 1736.970730][T17439] chnl_net:caif_netlink_parms(): no params data found [ 1738.583702][T15737] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1738.693771][ T5812] Bluetooth: hci4: command tx timeout [ 1738.820619][T15737] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.831914][T15737] usb 9-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1738.845573][T15737] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1738.855105][T15737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.380268][T17439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.389462][T17439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.402282][T17439] bridge_slave_0: entered allmulticast mode [ 1739.412502][T17439] bridge_slave_0: entered promiscuous mode [ 1739.544693][T15737] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1739.638649][T17439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.646429][T17439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.654060][T17439] bridge_slave_1: entered allmulticast mode [ 1739.664737][T17439] bridge_slave_1: entered promiscuous mode [ 1739.792263][T17377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.048848][T17439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.192152][T17439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.207618][T15737] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1740.550681][T17439] team0: Port device team_slave_0 added [ 1740.598545][T17377] veth0_vlan: entered promiscuous mode [ 1740.644178][T15737] usb 9-1: USB disconnect, device number 12 [ 1740.658257][T17439] team0: Port device team_slave_1 added [ 1740.767131][ T5812] Bluetooth: hci4: command tx timeout [ 1740.829947][T17377] veth1_vlan: entered promiscuous mode [ 1741.033743][T17439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.045576][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.073421][T17439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.136971][T17439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.148454][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.178102][T17439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.686169][T17439] hsr_slave_0: entered promiscuous mode [ 1741.695027][T17439] hsr_slave_1: entered promiscuous mode [ 1741.703228][T17439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1741.711052][T17439] Cannot create hsr debugfs directory [ 1741.905309][T17377] veth0_macvtap: entered promiscuous mode [ 1742.460956][T17377] veth1_macvtap: entered promiscuous mode [ 1742.822496][T17377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.846876][ T5812] Bluetooth: hci4: command tx timeout [ 1742.913435][T17377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1742.980604][T17377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.995335][T17377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.007326][T17377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.019316][T17377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.703687][T17439] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1744.794320][T17439] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1744.905278][T17439] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1745.039850][T17439] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1745.224322][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2626'. [ 1745.421652][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2626'. [ 1748.566494][T17439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.759085][T17439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.060317][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.067814][ T8376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.083909][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.091652][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.926264][ T5858] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1750.189625][ T5858] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1750.199105][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.209524][ T5858] usb 9-1: Product: syz [ 1750.213838][ T5858] usb 9-1: Manufacturer: syz [ 1750.218816][ T5858] usb 9-1: SerialNumber: syz [ 1750.348613][ T5858] usb 9-1: config 0 descriptor?? [ 1750.419970][ T5858] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 013 [ 1751.216380][T17542] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1751.375832][ T5858] i2c i2c-1: failure reading functionality [ 1751.427819][ T5858] i2c i2c-1: connected i2c-tiny-usb device [ 1751.474285][ T5858] usb 9-1: USB disconnect, device number 13 [ 1753.197210][T12486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.205227][T12486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.353371][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2631'. [ 1753.514026][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.522243][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.817771][T16725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1753.863256][T17439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.872449][T16725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1753.882930][T16725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1753.927500][T16725] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1753.958879][T16725] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1754.972527][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.240875][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.364397][T17439] veth0_vlan: entered promiscuous mode [ 1755.461200][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.636534][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.689450][T14917] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1755.742689][T17439] veth1_vlan: entered promiscuous mode [ 1755.876975][T14917] usb 9-1: Using ep0 maxpacket: 8 [ 1755.985368][T14917] usb 9-1: config 0 has no interfaces? [ 1755.996047][T14917] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1756.005369][T14917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.057220][ T5812] Bluetooth: hci6: command tx timeout [ 1756.070985][T14917] usb 9-1: config 0 descriptor?? [ 1756.147340][ T1143] bridge_slave_1: left allmulticast mode [ 1756.153261][ T1143] bridge_slave_1: left promiscuous mode [ 1756.160688][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.230749][ T1143] bridge_slave_0: left allmulticast mode [ 1756.236904][ T1143] bridge_slave_0: left promiscuous mode [ 1756.243512][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.331554][T14917] usb 9-1: USB disconnect, device number 14 [ 1757.264856][T16725] Bluetooth: hci3: command 0x0406 tx timeout [ 1758.047868][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.126891][ T5812] Bluetooth: hci6: command tx timeout [ 1758.147895][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.176778][ T1143] bond0 (unregistering): Released all slaves [ 1758.248714][T17439] veth0_macvtap: entered promiscuous mode [ 1758.331194][T17439] veth1_macvtap: entered promiscuous mode [ 1758.587801][T17569] chnl_net:caif_netlink_parms(): no params data found [ 1758.767692][T17439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.965780][T17439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.052676][ T1143] hsr_slave_0: left promiscuous mode [ 1759.071877][ T1143] hsr_slave_1: left promiscuous mode [ 1759.079981][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.087997][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.129661][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.137887][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.227283][ T1143] veth1_macvtap: left promiscuous mode [ 1759.233178][ T1143] veth0_macvtap: left promiscuous mode [ 1759.239384][ T1143] veth1_vlan: left promiscuous mode [ 1759.244841][ T1143] veth0_vlan: left promiscuous mode [ 1760.225998][ T5812] Bluetooth: hci6: command tx timeout [ 1760.311179][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.317982][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1760.710324][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1760.945196][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1762.103091][T16725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1762.123492][T16725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1762.140486][T16725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1762.161854][T16725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1762.208769][T16725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1762.226297][T17439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.240444][T17439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.250832][T17439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.259788][T17439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.288362][T16725] Bluetooth: hci6: command tx timeout [ 1762.681049][T17599] pim6reg: entered allmulticast mode [ 1762.697359][T17602] pim6reg: left allmulticast mode [ 1763.450951][ T1143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.612706][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2636'. [ 1763.677488][ T1143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.890331][ T1143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.183198][ T1143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.216916][T17620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2636'. [ 1764.367312][T16725] Bluetooth: hci2: command tx timeout [ 1764.781843][ T1143] bridge_slave_1: left allmulticast mode [ 1764.789909][ T1143] bridge_slave_1: left promiscuous mode [ 1764.803114][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.820043][ T1143] bridge_slave_0: left allmulticast mode [ 1764.826955][ T1143] bridge_slave_0: left promiscuous mode [ 1764.833299][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.846530][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1764.864607][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1764.936948][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1765.237413][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1765.261091][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1765.452730][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.471848][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.497868][ T1143] bond0 (unregistering): Released all slaves [ 1765.884345][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.892058][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.900465][T17569] bridge_slave_0: entered allmulticast mode [ 1765.908954][T17569] bridge_slave_0: entered promiscuous mode [ 1766.259831][T17569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.267576][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.275383][T17569] bridge_slave_1: entered allmulticast mode [ 1766.285228][T17569] bridge_slave_1: entered promiscuous mode [ 1766.344771][T17600] chnl_net:caif_netlink_parms(): no params data found [ 1766.445958][ T5812] Bluetooth: hci2: command tx timeout [ 1766.816830][ T1143] hsr_slave_0: left promiscuous mode [ 1766.886695][ T1143] hsr_slave_1: left promiscuous mode [ 1766.894278][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.902038][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1767.002776][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.010679][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1767.117755][ T1143] veth1_macvtap: left promiscuous mode [ 1767.124276][ T1143] veth0_macvtap: left promiscuous mode [ 1767.130262][ T1143] veth1_vlan: left promiscuous mode [ 1767.407166][ T5812] Bluetooth: hci5: command tx timeout [ 1768.334430][T17569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.636385][ T5812] Bluetooth: hci2: command tx timeout [ 1768.650880][T17569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.857739][T17569] team0: Port device team_slave_0 added [ 1768.903678][T17569] team0: Port device team_slave_1 added [ 1769.252607][T17569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.259958][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.288107][T17569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.350973][T17569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.358434][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.384980][T17569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.509781][ T5812] Bluetooth: hci5: command tx timeout [ 1770.027017][ T5858] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1770.217795][T17600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.230880][T17600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.240013][T17600] bridge_slave_0: entered allmulticast mode [ 1770.249065][T17600] bridge_slave_0: entered promiscuous mode [ 1770.260138][T17628] chnl_net:caif_netlink_parms(): no params data found [ 1770.283628][T17600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.291377][T17600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.299188][T17600] bridge_slave_1: entered allmulticast mode [ 1770.308180][T17600] bridge_slave_1: entered promiscuous mode [ 1770.348955][ T5858] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1770.358363][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.366696][ T5858] usb 9-1: Product: syz [ 1770.370990][ T5858] usb 9-1: Manufacturer: syz [ 1770.375931][ T5858] usb 9-1: SerialNumber: syz [ 1770.429932][ T5858] usb 9-1: config 0 descriptor?? [ 1770.453362][ T5858] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 015 [ 1770.686898][ T5812] Bluetooth: hci2: command tx timeout [ 1770.709827][T17569] hsr_slave_0: entered promiscuous mode [ 1770.720084][T17569] hsr_slave_1: entered promiscuous mode [ 1770.728893][T17569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1770.736936][T17569] Cannot create hsr debugfs directory [ 1770.833511][T17600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.950540][T17600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.175890][T17651] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1771.566342][ T5812] Bluetooth: hci5: command tx timeout [ 1771.597915][T17600] team0: Port device team_slave_0 added [ 1771.622515][T17600] team0: Port device team_slave_1 added [ 1771.721900][ T5858] i2c i2c-1: failure reading functionality [ 1771.730797][ T5858] i2c i2c-1: connected i2c-tiny-usb device [ 1771.780216][ T5858] usb 9-1: USB disconnect, device number 15 [ 1772.107759][T17600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.114957][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1772.142540][T17600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.249219][T17600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.256675][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1772.287460][T17600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.026643][T17600] hsr_slave_0: entered promiscuous mode [ 1773.035515][T17600] hsr_slave_1: entered promiscuous mode [ 1773.043475][T17600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1773.051329][T17600] Cannot create hsr debugfs directory [ 1773.681545][ T5812] Bluetooth: hci5: command tx timeout [ 1774.239757][T17569] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1774.551173][T17569] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1774.582990][T17628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.590514][T17628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.598363][T17628] bridge_slave_0: entered allmulticast mode [ 1774.607194][T17628] bridge_slave_0: entered promiscuous mode [ 1774.650877][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.659772][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.679378][T17569] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1774.790104][T17628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.798157][T17628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.806512][T17628] bridge_slave_1: entered allmulticast mode [ 1774.815178][T17628] bridge_slave_1: entered promiscuous mode [ 1774.842637][T17569] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1775.082376][ T3934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.090684][ T3934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.193248][ T30] audit: type=1326 audit(1747948564.030:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.8.2643" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 1775.281640][T17628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.367740][T17628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.704859][T17628] team0: Port device team_slave_0 added [ 1775.791033][T17628] team0: Port device team_slave_1 added [ 1776.224133][T17628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.231429][T17628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.259762][T17628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.593742][T17628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.601160][T17628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.629004][T17628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.104953][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2644'. [ 1777.574154][T17628] hsr_slave_0: entered promiscuous mode [ 1777.583387][T17628] hsr_slave_1: entered promiscuous mode [ 1777.591824][T17628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1777.604015][T17628] Cannot create hsr debugfs directory [ 1777.629335][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2644'. [ 1777.734109][T17600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1777.747412][T16725] Bluetooth: hci0: command 0x0406 tx timeout [ 1777.807837][T17600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1778.418400][T17600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1778.538733][T17600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1778.624880][T17569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.444204][T17569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.590135][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.598046][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1780.189903][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.197580][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1780.346101][T14917] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1780.628610][T14917] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1780.638405][T14917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.647822][T14917] usb 3-1: Product: syz [ 1780.652114][T14917] usb 3-1: Manufacturer: syz [ 1780.657603][T14917] usb 3-1: SerialNumber: syz [ 1780.689762][T17569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1780.700623][T17569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1780.787844][T14917] usb 3-1: config 0 descriptor?? [ 1780.852361][T14917] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 035 [ 1780.999818][T17600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.339998][T17600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1781.672666][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.680148][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1781.699326][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.706782][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1781.840577][T17700] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1782.181627][T17628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1782.412196][T14917] i2c i2c-1: failure reading functionality [ 1782.448610][T14917] i2c i2c-1: connected i2c-tiny-usb device [ 1782.514069][T14917] usb 3-1: USB disconnect, device number 35 [ 1782.717467][T17628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1782.835184][T17628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1782.977044][T17628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1784.567981][T17569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1785.314724][T17628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1785.656069][ T30] audit: type=1326 audit(1747948574.490:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.8.2652" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 1785.714132][T17628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1785.835288][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.842793][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.031419][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.038892][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1786.118345][T17600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.317554][T17600] veth0_vlan: entered promiscuous mode [ 1787.535561][T17600] veth1_vlan: entered promiscuous mode [ 1788.189728][T17600] veth0_macvtap: entered promiscuous mode [ 1788.340505][T17600] veth1_macvtap: entered promiscuous mode [ 1788.861505][T17749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1788.930828][ T1139] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.508356][T17749] vlan0: entered promiscuous mode [ 1789.542279][T17749] team0: Port device vlan0 added [ 1789.567307][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1789.716648][ T1139] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.817837][T17600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1789.942883][ T1139] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.282195][T17752] team0 (unregistering): Port device team_slave_0 removed [ 1790.423130][T17752] team0 (unregistering): Port device team_slave_1 removed [ 1790.631488][T17752] team0 (unregistering): Port device vlan0 removed [ 1790.787365][ T1139] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.846868][T17600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.199063][T17600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.208135][T17600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.221610][T17600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.231836][T17600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.272203][T17628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.484511][T17569] veth0_vlan: entered promiscuous mode [ 1791.675362][ T1139] bridge_slave_1: left allmulticast mode [ 1791.682541][ T1139] bridge_slave_1: left promiscuous mode [ 1791.689410][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.819566][ T1139] bridge_slave_0: left allmulticast mode [ 1791.825504][ T1139] bridge_slave_0: left promiscuous mode [ 1791.839737][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.485823][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.504632][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.532410][ T1139] bond0 (unregistering): Released all slaves [ 1792.737260][T17569] veth1_vlan: entered promiscuous mode [ 1792.911461][T17628] veth0_vlan: entered promiscuous mode [ 1793.203142][T17628] veth1_vlan: entered promiscuous mode [ 1793.649120][ T1139] hsr_slave_0: left promiscuous mode [ 1793.658796][ T1139] hsr_slave_1: left promiscuous mode [ 1793.666810][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1793.679016][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.735401][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1793.743402][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.837140][ T8186] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1793.866293][ T1139] veth1_macvtap: left promiscuous mode [ 1793.872087][ T1139] veth0_macvtap: left promiscuous mode [ 1793.882342][ T1139] veth1_vlan: left promiscuous mode [ 1794.250040][ T8186] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1794.260845][ T8186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.269505][ T8186] usb 3-1: Product: syz [ 1794.273832][ T8186] usb 3-1: Manufacturer: syz [ 1794.278787][ T8186] usb 3-1: SerialNumber: syz [ 1794.302637][ T8186] usb 3-1: config 0 descriptor?? [ 1794.422785][ T8186] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 036 [ 1795.259277][T17569] veth0_macvtap: entered promiscuous mode [ 1795.337272][T17628] veth0_macvtap: entered promiscuous mode [ 1795.388315][T17569] veth1_macvtap: entered promiscuous mode [ 1795.404741][T17628] veth1_macvtap: entered promiscuous mode [ 1795.510461][T17770] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1795.686168][T17628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.762729][T17569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.959589][T17628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1796.004927][T17569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1796.046573][ T8186] i2c i2c-1: failure reading functionality [ 1796.094093][T17628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.106051][T17628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.115132][T17628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.124746][T17628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.263024][ T8186] i2c i2c-1: connected i2c-tiny-usb device [ 1796.279964][ T8186] usb 3-1: USB disconnect, device number 36 [ 1796.320235][T17569] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.329649][T17569] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.343495][T17569] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.354383][T17569] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.488328][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.604344][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.861630][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.081680][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.856681][ T1139] bridge_slave_1: left allmulticast mode [ 1797.862619][ T1139] bridge_slave_1: left promiscuous mode [ 1797.869430][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.976625][ T1139] bridge_slave_0: left allmulticast mode [ 1797.982686][ T1139] bridge_slave_0: left promiscuous mode [ 1797.990190][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.867224][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.915051][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.965937][ T1139] bond0 (unregistering): Released all slaves [ 1799.877164][ T1139] hsr_slave_0: left promiscuous mode [ 1799.911035][ T1139] hsr_slave_1: left promiscuous mode [ 1799.921585][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1799.930721][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1800.001294][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1800.009331][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1800.112852][ T30] audit: type=1326 audit(1747948588.960:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.2.2663" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x0 [ 1800.139090][ T1139] veth1_macvtap: left promiscuous mode [ 1800.144960][ T1139] veth0_macvtap: left promiscuous mode [ 1800.152018][ T1139] veth1_vlan: left promiscuous mode [ 1800.157644][ T1139] veth0_vlan: left promiscuous mode [ 1801.093571][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 1801.139487][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 1802.286572][T15344] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1802.518457][T15344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.532281][T15344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.543727][T15344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1802.559003][T15344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1802.568657][T15344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.758541][T15344] usb 3-1: config 0 descriptor?? [ 1803.252558][T15344] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1803.260527][T15344] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1803.268698][T15344] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1803.276462][T15344] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1803.284137][T15344] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1803.292001][T15344] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1803.441697][T15344] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1803.507408][T15344] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1803.567966][T15344] usb 3-1: USB disconnect, device number 37 [ 1804.916358][T14917] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1804.945896][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.953987][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.119098][ T5080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.127548][ T5080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.158398][T14917] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1805.168120][T14917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.177120][T14917] usb 3-1: Product: syz [ 1805.181538][T14917] usb 3-1: Manufacturer: syz [ 1805.186504][T14917] usb 3-1: SerialNumber: syz [ 1805.214839][T14917] usb 3-1: config 0 descriptor?? [ 1805.256940][T14917] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 038 [ 1805.998187][T17863] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1806.046448][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.252078][T14917] i2c i2c-1: failure reading functionality [ 1806.289452][T14917] i2c i2c-1: connected i2c-tiny-usb device [ 1806.303207][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.326389][T14917] usb 3-1: USB disconnect, device number 38 [ 1806.430189][ T5080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.438793][ T5080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.533284][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.631860][T17632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.640183][T17632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.700575][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.945781][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.953901][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.208058][ T3711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.216295][ T3711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.386571][ T1143] bridge_slave_1: left allmulticast mode [ 1807.392482][ T1143] bridge_slave_1: left promiscuous mode [ 1807.399457][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.481344][ T1143] bridge_slave_0: left allmulticast mode [ 1807.487575][ T1143] bridge_slave_0: left promiscuous mode [ 1807.494205][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.121433][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1808.145078][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1808.179903][ T1143] bond0 (unregistering): Released all slaves [ 1808.727460][ T1143] hsr_slave_0: left promiscuous mode [ 1808.748371][ T1143] hsr_slave_1: left promiscuous mode [ 1808.756785][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.764490][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.798879][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1808.808907][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.866284][ T1143] veth1_macvtap: left promiscuous mode [ 1808.872157][ T1143] veth0_macvtap: left promiscuous mode [ 1808.878374][ T1143] veth1_vlan: left promiscuous mode [ 1808.883986][ T1143] veth0_vlan: left promiscuous mode [ 1809.677863][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1809.714538][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1810.736467][ T5858] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1810.933801][ T5858] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.947398][ T5858] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1810.962735][ T5858] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1810.972879][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.113696][ T5858] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1811.280773][ T5858] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1811.323359][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1811.334128][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1811.366958][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1811.390471][T15737] usb 8-1: USB disconnect, device number 24 [ 1811.390709][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1811.431608][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1811.812802][T15344] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1812.143019][T15344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.154475][T15344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.164703][T15344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1812.178730][T15344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1812.191608][T15344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.397339][T15344] usb 3-1: config 0 descriptor?? [ 1812.831129][T17925] chnl_net:caif_netlink_parms(): no params data found [ 1812.865994][T15344] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1812.873792][T15344] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1812.882056][T15344] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1812.889854][T15344] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1812.903032][T15344] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1812.912872][T15344] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1812.964572][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 1813.010114][T15344] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1813.026631][T15344] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1813.266747][ T5858] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1813.474666][ T5858] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1813.484483][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.493104][ T5858] usb 4-1: Product: syz [ 1813.497423][ T5812] Bluetooth: hci0: command tx timeout [ 1813.503505][ T5858] usb 4-1: Manufacturer: syz [ 1813.508639][ T5858] usb 4-1: SerialNumber: syz [ 1813.582942][ T5858] usb 4-1: config 0 descriptor?? [ 1813.606368][ T5858] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 010 [ 1814.372735][T17947] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1814.588527][T17925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.596894][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.605222][T17925] bridge_slave_0: entered allmulticast mode [ 1814.617905][T17925] bridge_slave_0: entered promiscuous mode [ 1814.657223][ T5858] i2c i2c-1: failure reading functionality [ 1814.671905][ T5858] i2c i2c-1: connected i2c-tiny-usb device [ 1814.700770][ C1] hrtimer: interrupt took 345413 ns [ 1814.711939][ T5858] usb 4-1: USB disconnect, device number 10 [ 1814.778967][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2687'. [ 1814.787231][T17925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.795364][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.803051][T17925] bridge_slave_1: entered allmulticast mode [ 1814.811594][T17925] bridge_slave_1: entered promiscuous mode [ 1814.951488][T17972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.960499][T17972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.985827][T15344] usb 3-1: USB disconnect, device number 39 [ 1814.999740][T17925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1815.018719][T17925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1815.370770][T17925] team0: Port device team_slave_0 added [ 1815.416154][T17925] team0: Port device team_slave_1 added [ 1815.566105][ T5812] Bluetooth: hci0: command tx timeout [ 1815.623834][T17925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.631160][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.658420][T17925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.810745][T17925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.818163][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.844732][T17925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.418223][T17925] hsr_slave_0: entered promiscuous mode [ 1816.428876][T17925] hsr_slave_1: entered promiscuous mode [ 1816.468036][T14917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1816.816694][T14917] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.827448][T14917] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1816.840905][T14917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1816.850470][T14917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.087321][T14917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1817.470351][T14917] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1817.605884][T14917] usb 4-1: USB disconnect, device number 11 [ 1817.657044][ T5812] Bluetooth: hci0: command tx timeout [ 1818.414743][T17925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1818.454694][T17925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1818.564731][T17925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1818.656987][T17925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1819.057645][ T5858] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1819.138212][T14917] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1819.277958][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.289542][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.299784][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1819.313560][ T5858] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1819.323115][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.477063][T14917] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1819.486861][T14917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.495162][T14917] usb 8-1: Product: syz [ 1819.499963][T14917] usb 8-1: Manufacturer: syz [ 1819.504846][T14917] usb 8-1: SerialNumber: syz [ 1819.531274][ T5858] usb 4-1: config 0 descriptor?? [ 1819.635529][T14917] usb 8-1: config 0 descriptor?? [ 1819.671597][T14917] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 025 [ 1819.737308][ T5812] Bluetooth: hci0: command tx timeout [ 1819.838417][T17925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1819.998962][ T5858] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1820.007292][ T5858] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1820.015310][ T5858] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1820.023750][ T5858] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1820.031760][ T5858] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1820.039812][ T5858] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1820.063879][T17925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1820.137203][ T5858] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1820.192961][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.200608][T17632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1820.223368][ T5858] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1820.360250][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.367930][T17632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1820.490462][T18031] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1820.809308][T18032] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2703'. [ 1820.837885][T14917] i2c i2c-1: failure reading functionality [ 1820.886535][T14917] i2c i2c-1: connected i2c-tiny-usb device [ 1820.927155][T14917] usb 8-1: USB disconnect, device number 25 [ 1821.312053][T15344] usb 4-1: USB disconnect, device number 12 [ 1821.780474][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1821.787342][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1822.996407][T17925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.103779][ T30] audit: type=1326 audit(1747948611.890:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.7.2710" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x0 [ 1823.321011][T17925] veth0_vlan: entered promiscuous mode [ 1823.371319][T17925] veth1_vlan: entered promiscuous mode [ 1823.387265][ T5858] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1823.598765][ T5858] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.609834][ T5858] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1823.624299][ T5858] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1823.633874][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.708501][ T5858] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1823.811214][ T5858] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1823.824615][T17925] veth0_macvtap: entered promiscuous mode [ 1823.932173][T17925] veth1_macvtap: entered promiscuous mode [ 1823.961233][ T5858] usb 4-1: USB disconnect, device number 13 [ 1824.139584][T17925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.232622][T17925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.324371][T17925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.333845][T17925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.343084][T17925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.352216][T17925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.180813][T18087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1825.371497][T15737] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1825.607732][T15737] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1825.617645][T15737] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.626094][T15737] usb 8-1: Product: syz [ 1825.630542][T15737] usb 8-1: Manufacturer: syz [ 1825.635368][T15737] usb 8-1: SerialNumber: syz [ 1825.666443][T15737] usb 8-1: config 0 descriptor?? [ 1825.682584][T15737] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 026 [ 1825.854593][ T5858] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1826.120309][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.135352][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.147166][ T5858] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1826.161457][ T5858] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1826.171615][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.421381][ T5858] usb 9-1: config 0 descriptor?? [ 1826.726950][T15737] i2c i2c-1: failure reading functionality [ 1826.763786][T15737] i2c i2c-1: connected i2c-tiny-usb device [ 1826.817199][T15737] usb 8-1: USB disconnect, device number 26 [ 1826.963765][ T5858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1826.971761][ T5858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1826.981473][ T5858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1826.989291][ T5858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1826.997396][ T5858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1827.005098][ T5858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1827.172054][ T5858] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 1827.221769][ T5858] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1827.318806][ T5858] usb 9-1: USB disconnect, device number 16 [ 1828.567171][ T30] audit: type=1326 audit(1747948617.400:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18125 comm="syz.8.2724" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 1829.091571][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2726'. [ 1830.476145][ T5858] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1830.530602][T18149] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1830.768455][ T5858] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.779434][ T5858] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1830.793069][ T5858] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1830.802583][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.954354][ T5858] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1831.101025][ T5858] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1831.187208][ T5858] usb 8-1: USB disconnect, device number 27 [ 1831.850692][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.858991][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.013991][ T5080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.022792][ T5080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.280686][T15737] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1832.494041][T15737] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1832.504817][T15737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.513181][T15737] usb 9-1: Product: syz [ 1832.517657][T15737] usb 9-1: Manufacturer: syz [ 1832.522381][T15737] usb 9-1: SerialNumber: syz [ 1832.656288][T15737] usb 9-1: config 0 descriptor?? [ 1832.668617][T15344] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1832.698328][T15737] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 017 [ 1832.838017][T15344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.849824][T15344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.860071][T15344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1832.877272][T15344] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1832.888059][T15344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.898573][T11833] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1832.945476][ T3934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.058174][T15344] usb 4-1: config 0 descriptor?? [ 1833.066548][T11833] usb 8-1: Using ep0 maxpacket: 8 [ 1833.086778][T11833] usb 8-1: config 0 has no interfaces? [ 1833.092946][T11833] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1833.102500][T11833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.196885][ T3934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.227043][T11833] usb 8-1: config 0 descriptor?? [ 1833.524818][ T3934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.556614][T15344] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1833.564687][T15344] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1833.572679][T15344] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1833.580505][T15344] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1833.595005][T15344] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1833.604623][T15344] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1833.698307][ T5812] Bluetooth: hci6: adv larger than maximum supported [ 1833.698435][ T5812] Bluetooth: hci6: Malformed LE Event: 0x0d [ 1833.709037][T11833] usb 8-1: USB disconnect, device number 28 [ 1833.744720][T15344] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 1833.849886][T15737] i2c i2c-1: failure reading functionality [ 1833.873965][ T3934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.916977][T15344] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1833.943408][T15737] i2c i2c-1: connected i2c-tiny-usb device [ 1833.965955][T15737] usb 9-1: USB disconnect, device number 17 [ 1834.003338][T15344] usb 4-1: USB disconnect, device number 14 [ 1834.175565][ T3934] bridge_slave_1: left allmulticast mode [ 1834.183435][ T3934] bridge_slave_1: left promiscuous mode [ 1834.190392][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.216934][ T3934] bridge_slave_0: left allmulticast mode [ 1834.224154][ T3934] bridge_slave_0: left promiscuous mode [ 1834.230741][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.170072][ T3934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.218720][ T3934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.269511][ T3934] bond0 (unregistering): Released all slaves [ 1835.964873][ T3934] hsr_slave_0: left promiscuous mode [ 1835.981814][ T3934] hsr_slave_1: left promiscuous mode [ 1835.989819][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.997616][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1836.030289][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1836.041399][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.083981][ T3934] veth1_macvtap: left promiscuous mode [ 1836.089845][ T3934] veth0_macvtap: left promiscuous mode [ 1836.095966][ T3934] veth1_vlan: left promiscuous mode [ 1836.101521][ T3934] veth0_vlan: left promiscuous mode [ 1837.076261][ T3934] team0 (unregistering): Port device team_slave_1 removed [ 1837.161272][ T3934] team0 (unregistering): Port device team_slave_0 removed [ 1838.288310][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 1838.343302][ T30] audit: type=1326 audit(1747948627.180:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.7.2739" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x0 [ 1839.072107][T16725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1839.099169][T16725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1839.118139][T16725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1839.158524][T16725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1839.192915][T16725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1839.260767][T18213] syz.8.2741 (18213): drop_caches: 2 [ 1839.290002][T18213] syz.8.2741 (18213): drop_caches: 2 [ 1840.276319][T14868] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1840.458223][T14868] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.469663][T14868] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1840.483288][T14868] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1840.492832][T14868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.611441][T14868] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1840.623503][T18214] chnl_net:caif_netlink_parms(): no params data found [ 1840.638291][ T5858] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1840.651702][ T8186] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1840.720611][T14868] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1840.868294][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.880669][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.891726][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1840.905180][ T5858] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1840.914831][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.941597][ T5858] usb 3-1: config 0 descriptor?? [ 1840.957697][ T8186] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1840.967538][ T8186] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.976209][ T8186] usb 9-1: Product: syz [ 1840.981757][ T8186] usb 9-1: Manufacturer: syz [ 1840.987290][ T8186] usb 9-1: SerialNumber: syz [ 1841.010719][T14917] usb 8-1: USB disconnect, device number 29 [ 1841.076959][ T8186] usb 9-1: config 0 descriptor?? [ 1841.100110][ T8186] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 018 [ 1841.247159][T16725] Bluetooth: hci0: command tx timeout [ 1841.433750][ T5858] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1841.444086][ T5858] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1841.453741][ T5858] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1841.461903][ T5858] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1841.472736][ T5858] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1841.481558][ T5858] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1841.570996][T14917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1841.617957][ T5858] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 1841.669576][ T5858] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1841.718392][ T5858] usb 3-1: USB disconnect, device number 40 [ 1841.752649][T14917] usb 4-1: Using ep0 maxpacket: 8 [ 1841.811191][T14917] usb 4-1: config 0 has no interfaces? [ 1841.818220][T14917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1841.828509][T14917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.949728][T14917] usb 4-1: config 0 descriptor?? [ 1841.973335][ T8186] i2c i2c-1: failure reading functionality [ 1842.017558][ T8186] i2c i2c-1: connected i2c-tiny-usb device [ 1842.037785][ T8186] usb 9-1: USB disconnect, device number 18 [ 1842.201686][T16725] Bluetooth: hci5: adv larger than maximum supported [ 1842.202030][T16725] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1842.210695][T14868] usb 4-1: USB disconnect, device number 15 [ 1842.298603][T18214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.306420][T18214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.314188][T18214] bridge_slave_0: entered allmulticast mode [ 1842.324178][T18214] bridge_slave_0: entered promiscuous mode [ 1842.430908][T18214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.439078][T18214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.447105][T18214] bridge_slave_1: entered allmulticast mode [ 1842.457197][T18214] bridge_slave_1: entered promiscuous mode [ 1842.794283][T18214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.818281][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2752'. [ 1843.028476][T18214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1843.358735][T16725] Bluetooth: hci0: command tx timeout [ 1843.402727][T18214] team0: Port device team_slave_0 added [ 1843.424538][T18214] team0: Port device team_slave_1 added [ 1843.691283][T18214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.699772][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.725897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1843.734536][T18214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.788156][T18275] binder: BINDER_SET_CONTEXT_MGR already set [ 1843.794415][T18275] binder: 18271:18275 ioctl 4018620d 80000040 returned -16 [ 1843.891864][T18214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.899373][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.925528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1843.934722][T18214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1844.052861][T18274] syz.8.2756 (18274): drop_caches: 2 [ 1844.125451][T18274] syz.8.2756 (18274): drop_caches: 2 [ 1844.389456][T18214] hsr_slave_0: entered promiscuous mode [ 1844.400223][T18214] hsr_slave_1: entered promiscuous mode [ 1845.306133][T14868] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1845.416253][T16725] Bluetooth: hci0: command tx timeout [ 1845.502286][T14868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.513821][T14868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.524937][T14868] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1845.538681][T14868] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1845.548118][T14868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.633769][T14868] usb 8-1: config 0 descriptor?? [ 1845.706088][T15344] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1845.923884][T15344] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1845.933721][T15344] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.942298][T15344] usb 9-1: Product: syz [ 1845.947020][T15344] usb 9-1: Manufacturer: syz [ 1845.952057][T15344] usb 9-1: SerialNumber: syz [ 1846.020485][T15344] usb 9-1: config 0 descriptor?? [ 1846.051915][T15344] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 019 [ 1846.094498][T14868] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1846.102908][T14868] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1846.111139][T14868] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1846.119375][T14868] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1846.127661][T14868] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1846.136447][T14868] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1846.146134][ T8186] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1846.215180][T14868] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1846.320766][T14868] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1846.374671][T14868] usb 8-1: USB disconnect, device number 30 [ 1846.454911][T18214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1846.466713][ T8186] usb 4-1: Using ep0 maxpacket: 8 [ 1846.526719][ T8186] usb 4-1: config 0 has no interfaces? [ 1846.532547][ T8186] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1846.542297][ T8186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.596070][ T8186] usb 4-1: config 0 descriptor?? [ 1846.608306][T18214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1846.652044][T18214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1846.800499][T18214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1846.817216][T15344] i2c i2c-1: failure reading functionality [ 1846.845119][T15344] i2c i2c-1: connected i2c-tiny-usb device [ 1846.866362][T16725] Bluetooth: hci5: adv larger than maximum supported [ 1846.866473][T16725] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1846.904995][T14868] usb 4-1: USB disconnect, device number 16 [ 1846.918507][T15344] usb 9-1: USB disconnect, device number 19 [ 1847.486702][T16725] Bluetooth: hci0: command tx timeout [ 1847.892323][T18214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1848.107252][T18214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1848.162354][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 1848.425362][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.433113][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1848.544095][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.551918][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.831760][T18214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1849.243594][T18322] syz.8.2771 (18322): drop_caches: 2 [ 1849.331683][T18322] syz.8.2771 (18322): drop_caches: 2 [ 1854.295974][ T8186] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1854.356114][T14917] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1854.559843][ T8186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.571878][ T8186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.586283][ T8186] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1854.601081][ T8186] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1854.610995][ T8186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.623147][T14917] usb 8-1: Using ep0 maxpacket: 8 [ 1854.680118][T14917] usb 8-1: config 0 has no interfaces? [ 1854.687254][T14917] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1854.696742][T14917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.773540][T14917] usb 8-1: config 0 descriptor?? [ 1854.862634][ T8186] usb 4-1: config 0 descriptor?? [ 1854.940971][T18214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.017310][T14917] usb 8-1: USB disconnect, device number 31 [ 1855.027329][T16725] Bluetooth: hci6: adv larger than maximum supported [ 1855.027410][T16725] Bluetooth: hci6: Malformed LE Event: 0x0d [ 1855.306411][ T8186] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1855.315967][ T8186] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1855.323741][ T8186] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1855.332213][ T8186] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1855.340087][ T8186] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1855.347934][ T8186] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1855.517309][ T8186] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1855.606794][ T8186] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1855.653602][T18214] veth0_vlan: entered promiscuous mode [ 1855.748538][ T8186] usb 4-1: USB disconnect, device number 17 [ 1855.878911][T18214] veth1_vlan: entered promiscuous mode [ 1856.277557][T18214] veth0_macvtap: entered promiscuous mode [ 1856.403943][T18214] veth1_macvtap: entered promiscuous mode [ 1856.596431][T18214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.637984][T11833] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1856.701212][T18214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.774450][T18214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.783814][T18214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.792997][T18214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.802469][T18214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.917060][T11833] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1856.927132][T11833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.939744][T11833] usb 8-1: Product: syz [ 1856.944271][T11833] usb 8-1: Manufacturer: syz [ 1856.950819][T11833] usb 8-1: SerialNumber: syz [ 1857.053115][T11833] usb 8-1: config 0 descriptor?? [ 1857.093427][T11833] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 032 [ 1857.817122][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 1858.251617][T11833] i2c i2c-1: failure reading functionality [ 1858.298166][T11833] i2c i2c-1: connected i2c-tiny-usb device [ 1858.341400][T11833] usb 8-1: USB disconnect, device number 32 [ 1859.458867][T18380] syz.3.2785 (18380): drop_caches: 2 [ 1859.510971][T18380] syz.3.2785 (18380): drop_caches: 2 [ 1859.646809][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 1860.297804][ T30] audit: type=1326 audit(1747948649.140:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.3.2790" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x0 [ 1862.609868][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2795'. [ 1863.900874][ T8186] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1864.194535][ T8186] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1864.206364][ T8186] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.214663][ T8186] usb 8-1: Product: syz [ 1864.220625][ T8186] usb 8-1: Manufacturer: syz [ 1864.226485][ T8186] usb 8-1: SerialNumber: syz [ 1864.378164][ T8186] usb 8-1: config 0 descriptor?? [ 1864.434619][ T8186] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 033 [ 1865.373792][T18430] syz.2.2800 (18430): drop_caches: 2 [ 1865.458814][T18430] syz.2.2800 (18430): drop_caches: 2 [ 1865.642104][ T8186] i2c i2c-1: failure reading functionality [ 1865.697705][ T8186] i2c i2c-1: connected i2c-tiny-usb device [ 1865.752967][ T8186] usb 8-1: USB disconnect, device number 33 [ 1865.937025][T12488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.946782][T12488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.239574][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.252206][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.108009][ T3711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.302959][ T3711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.593620][ T3711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.871719][ T3711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.286769][ T3711] bridge_slave_1: left allmulticast mode [ 1868.292601][ T3711] bridge_slave_1: left promiscuous mode [ 1868.303989][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.356441][ T3711] bridge_slave_0: left allmulticast mode [ 1868.362279][ T3711] bridge_slave_0: left promiscuous mode [ 1868.369184][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.987420][ T3711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.053027][ T3711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.069837][ T3711] bond0 (unregistering): Released all slaves [ 1869.641652][ T3711] hsr_slave_0: left promiscuous mode [ 1869.666118][ T3711] hsr_slave_1: left promiscuous mode [ 1869.673518][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1869.681395][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1869.710786][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1869.718716][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1869.767381][ T3711] veth1_macvtap: left promiscuous mode [ 1869.773123][ T3711] veth0_macvtap: left promiscuous mode [ 1869.779486][ T3711] veth1_vlan: left promiscuous mode [ 1869.784981][ T3711] veth0_vlan: left promiscuous mode [ 1870.458618][ T3711] team0 (unregistering): Port device team_slave_1 removed [ 1870.483782][ T3711] team0 (unregistering): Port device team_slave_0 removed [ 1871.211178][ T30] audit: type=1326 audit(1747948660.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18451 comm="syz.7.2808" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x0 [ 1871.406368][ T8186] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1871.569304][ T8186] usb 3-1: Using ep0 maxpacket: 8 [ 1871.609186][ T8186] usb 3-1: config 0 has no interfaces? [ 1871.615336][ T8186] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1871.625014][ T8186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.650077][ T8186] usb 3-1: config 0 descriptor?? [ 1871.941431][T16725] Bluetooth: hci4: adv larger than maximum supported [ 1871.941557][T16725] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1871.962886][T16725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1871.973001][T16725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1871.990934][ T8186] usb 3-1: USB disconnect, device number 41 [ 1872.032787][T16725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1872.062457][T16725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1872.078136][T16725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1872.935105][T18458] chnl_net:caif_netlink_parms(): no params data found [ 1874.146088][T16725] Bluetooth: hci0: command tx timeout [ 1874.608207][T18482] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2813'. [ 1876.538545][T16725] Bluetooth: hci0: command tx timeout [ 1876.549825][T18458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.557794][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.573210][T18458] bridge_slave_0: entered allmulticast mode [ 1876.581882][T18458] bridge_slave_0: entered promiscuous mode [ 1876.605119][T18458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.612992][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.621033][T18458] bridge_slave_1: entered allmulticast mode [ 1876.630072][T18458] bridge_slave_1: entered promiscuous mode [ 1876.840071][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.882220][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.068809][T18458] team0: Port device team_slave_0 added [ 1877.107032][T18458] team0: Port device team_slave_1 added [ 1877.300641][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.310033][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.339361][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.375497][T18498] syz.7.2818 (18498): drop_caches: 2 [ 1877.432999][T18498] syz.7.2818 (18498): drop_caches: 2 [ 1877.464786][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.472280][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.499167][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.857197][T18458] hsr_slave_0: entered promiscuous mode [ 1877.867706][T18458] hsr_slave_1: entered promiscuous mode [ 1878.610649][ T5812] Bluetooth: hci0: command tx timeout [ 1879.099981][ T5812] Bluetooth: hci5: adv larger than maximum supported [ 1879.100100][ T5812] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1880.621579][T18458] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1880.829746][T18458] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1881.013896][T18458] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1881.107143][ T5812] Bluetooth: hci6: command 0x0406 tx timeout [ 1881.113805][ T52] Bluetooth: hci0: command tx timeout [ 1881.199990][T18458] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1881.777360][T18532] syz.8.2831 (18532): drop_caches: 2 [ 1881.809377][T18532] syz.8.2831 (18532): drop_caches: 2 [ 1882.957246][T14917] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1883.071539][T18458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.132364][T14917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.147582][T14917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.157639][T14917] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1883.174604][T14917] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1883.185063][T14917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.202064][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1883.208911][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1883.324634][T14917] usb 9-1: config 0 descriptor?? [ 1883.347397][T18458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.585216][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.592898][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.772458][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.780715][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.857258][T14917] usbhid 9-1:0.0: can't add hid device: -71 [ 1883.867972][T14917] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1883.933662][T14917] usb 9-1: USB disconnect, device number 20 [ 1886.753227][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1887.408790][T18458] veth0_vlan: entered promiscuous mode [ 1888.783830][T18458] veth1_vlan: entered promiscuous mode [ 1889.334025][T18458] veth0_macvtap: entered promiscuous mode [ 1889.452794][T18458] veth1_macvtap: entered promiscuous mode [ 1889.464861][T11833] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1889.710002][T11833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.721607][T11833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.731813][T11833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1889.745001][T11833] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1889.754358][T11833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.787055][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1889.860352][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1890.008585][T11833] usb 4-1: config 0 descriptor?? [ 1890.049323][T18458] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.058614][T18458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.067769][T18458] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.076881][T18458] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.559923][T11833] usbhid 4-1:0.0: can't add hid device: -71 [ 1890.567741][T11833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1890.637589][T11833] usb 4-1: USB disconnect, device number 18 [ 1890.686777][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 1891.021395][T18564] syz.8.2843 (18564): drop_caches: 2 [ 1891.152020][T18564] syz.8.2843 (18564): drop_caches: 2 [ 1892.446134][T14917] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1892.647587][T14917] usb 9-1: Using ep0 maxpacket: 8 [ 1892.780944][T14917] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1892.791266][T14917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.800328][T14917] usb 9-1: Product: syz [ 1892.804646][T14917] usb 9-1: Manufacturer: syz [ 1892.809793][T14917] usb 9-1: SerialNumber: syz [ 1892.978174][T14917] usb 9-1: config 0 descriptor?? [ 1893.046111][T14917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1893.054649][T14917] usb 9-1: setting power ON [ 1893.060171][T14917] dvb-usb: bulk message failed: -22 (2/0) [ 1893.245300][T14917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1893.312395][T14917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1893.321500][T14917] usb 9-1: media controller created [ 1893.447959][T14917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1893.785369][T14917] usb 9-1: selecting invalid altsetting 6 [ 1893.792055][T14917] usb 9-1: digital interface selection failed (-22) [ 1893.802420][T14917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1893.956648][T14917] usb 9-1: setting power OFF [ 1893.962023][T14917] dvb-usb: bulk message failed: -22 (2/0) [ 1893.968915][T14917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1893.978977][T14917] (NULL device *): no alternate interface [ 1894.627187][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1894.694036][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1894.709337][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1894.729586][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1894.747217][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1894.880084][T14917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1894.958815][T14917] usb 9-1: USB disconnect, device number 21 [ 1896.525189][T18583] chnl_net:caif_netlink_parms(): no params data found [ 1896.563218][T14868] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1896.757110][T14868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.772942][T14868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.784623][T14868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1896.798163][T14868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1896.807899][T14868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.876069][ T5812] Bluetooth: hci1: command tx timeout [ 1896.927622][T14868] usb 4-1: config 0 descriptor?? [ 1897.411638][T14868] usbhid 4-1:0.0: can't add hid device: -71 [ 1897.418565][T14868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1897.502236][T14868] usb 4-1: USB disconnect, device number 19 [ 1897.767866][T18612] syz.7.2855 (18612): drop_caches: 2 [ 1898.940107][ T5812] Bluetooth: hci1: command tx timeout [ 1899.011686][T18583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.023975][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.032278][T18583] bridge_slave_0: entered allmulticast mode [ 1899.041236][T18583] bridge_slave_0: entered promiscuous mode [ 1899.645841][T14868] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1899.700034][T18583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.708446][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.716317][T18583] bridge_slave_1: entered allmulticast mode [ 1899.724892][T18583] bridge_slave_1: entered promiscuous mode [ 1899.867674][T14868] usb 8-1: Using ep0 maxpacket: 8 [ 1899.980822][T14868] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1899.990433][T14868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.998870][T14868] usb 8-1: Product: syz [ 1900.003240][T14868] usb 8-1: Manufacturer: syz [ 1900.008226][T14868] usb 8-1: SerialNumber: syz [ 1900.114485][T14868] usb 8-1: config 0 descriptor?? [ 1900.161212][T14868] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1900.169690][T14868] usb 8-1: setting power ON [ 1900.174497][T14868] dvb-usb: bulk message failed: -22 (2/0) [ 1900.314971][T18583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1900.366993][T14868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1900.414980][T14868] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1900.423869][T14868] usb 8-1: media controller created [ 1900.498304][T18583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1900.565503][T14868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1901.009342][ T5812] Bluetooth: hci1: command tx timeout [ 1901.059954][T14868] usb 8-1: selecting invalid altsetting 6 [ 1901.072942][T14868] usb 8-1: digital interface selection failed (-22) [ 1901.081648][T14868] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1901.192914][T18583] team0: Port device team_slave_0 added [ 1901.283035][T18583] team0: Port device team_slave_1 added [ 1901.292129][T14868] usb 8-1: setting power OFF [ 1901.297266][T14868] dvb-usb: bulk message failed: -22 (2/0) [ 1901.303213][T14868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1901.313061][T14868] (NULL device *): no alternate interface [ 1901.723097][T18583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1901.736822][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1901.763694][T18583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.083251][T18583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.093109][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.120590][T18583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1902.150963][T14868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1902.181685][T12488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.193884][T12488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.410592][T14868] usb 8-1: USB disconnect, device number 34 [ 1902.501882][T17632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.510152][T17632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1903.101355][ T5812] Bluetooth: hci1: command tx timeout [ 1903.292645][T18583] hsr_slave_0: entered promiscuous mode [ 1903.301738][T18583] hsr_slave_1: entered promiscuous mode [ 1903.309741][T18583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1903.319857][T18583] Cannot create hsr debugfs directory [ 1904.617416][ T3582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.878305][ T3582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.102433][ T3582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.409140][ T3582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.196354][ T3582] bridge_slave_1: left allmulticast mode [ 1906.202335][ T3582] bridge_slave_1: left promiscuous mode [ 1906.210313][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.366655][ T3582] bridge_slave_0: left allmulticast mode [ 1906.372610][ T3582] bridge_slave_0: left promiscuous mode [ 1906.379925][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.625848][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1907.664421][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1907.711719][ T3582] bond0 (unregistering): Released all slaves [ 1908.579633][ T3582] hsr_slave_0: left promiscuous mode [ 1908.597192][ T3582] hsr_slave_1: left promiscuous mode [ 1908.604650][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1908.615457][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1908.627892][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1908.635832][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1908.680285][ T3582] veth1_macvtap: left promiscuous mode [ 1908.686107][ T3582] veth0_macvtap: left promiscuous mode [ 1908.691916][ T3582] veth1_vlan: left promiscuous mode [ 1908.698006][ T3582] veth0_vlan: left promiscuous mode [ 1909.296648][ T3582] team0 (unregistering): Port device team_slave_1 removed [ 1909.342860][ T3582] team0 (unregistering): Port device team_slave_0 removed [ 1909.807673][T18583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1909.907603][T18583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1909.962781][T18583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1910.167562][T18583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1910.340730][T18651] syz.3.2868 (18651): drop_caches: 2 [ 1910.448151][T14868] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1910.516242][T18651] syz.3.2868 (18651): drop_caches: 2 [ 1910.575915][ T3582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.676976][T14868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.693269][T14868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.704937][T14868] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1910.718669][T14868] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1910.728149][T14868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.834389][ T3582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.842324][T14868] usb 9-1: config 0 descriptor?? [ 1910.871180][T16725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1910.939279][T16725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1910.966394][T16725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1911.011504][T16725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1911.030217][T16725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1911.036913][T11833] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1911.050964][ T3582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.236572][ T3582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.309441][T11833] usb 8-1: Using ep0 maxpacket: 8 [ 1911.354723][T11833] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1911.364540][T11833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.373116][T11833] usb 8-1: Product: syz [ 1911.377874][T11833] usb 8-1: Manufacturer: syz [ 1911.382923][T11833] usb 8-1: SerialNumber: syz [ 1911.423828][T14868] usbhid 9-1:0.0: can't add hid device: -71 [ 1911.430827][T14868] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1911.504020][T14868] usb 9-1: USB disconnect, device number 22 [ 1911.538647][T11833] usb 8-1: config 0 descriptor?? [ 1911.566717][T11833] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1911.575022][T11833] usb 8-1: setting power ON [ 1911.579886][T11833] dvb-usb: bulk message failed: -22 (2/0) [ 1911.676581][T11833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1911.753920][ T3582] bridge_slave_1: left allmulticast mode [ 1911.760032][ T3582] bridge_slave_1: left promiscuous mode [ 1911.766578][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.781198][ T3582] bridge_slave_0: left allmulticast mode [ 1911.788296][ T3582] bridge_slave_0: left promiscuous mode [ 1911.794894][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.833739][T11833] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1911.843738][T11833] usb 8-1: media controller created [ 1911.887385][T11833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1911.903295][T18656] dvb-usb: bulk message failed: -22 (3/0) [ 1911.909610][T18656] ===================================================== [ 1911.921964][T18656] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 1911.931437][T18656] cxusb_i2c_xfer+0x1303/0x18e0 [ 1911.936738][T18656] __i2c_transfer+0xeca/0x30e0 [ 1911.942240][T18656] i2c_transfer+0x300/0x4b0 [ 1911.947111][T18656] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 1911.952296][T18656] compat_i2cdev_ioctl+0xaa3/0xb40 [ 1911.958011][T18656] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 1911.963857][T18656] ia32_sys_call+0x2d07/0x42c0 [ 1911.969032][T18656] __do_fast_syscall_32+0xb0/0x110 [ 1911.974491][T18656] do_fast_syscall_32+0x38/0x80 [ 1911.979783][T18656] do_SYSENTER_32+0x1f/0x30 [ 1911.984537][T18656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1911.992798][T18656] [ 1911.995250][T18656] Local variable timer created at: [ 1912.000795][T18656] schedule_timeout+0x44/0x240 [ 1912.005958][T18656] wait_for_completion_interruptible+0x345/0x8a0 [ 1912.012610][T18656] [ 1912.015102][T18656] CPU: 1 UID: 0 PID: 18656 Comm: syz.7.2870 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(undef) [ 1912.032204][T18656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1912.044183][T18656] ===================================================== [ 1912.051450][T18656] Disabling lock debugging due to kernel taint [ 1912.057864][T18656] Kernel panic - not syncing: kmsan.panic set ... [ 1912.064464][T18656] CPU: 1 UID: 0 PID: 18656 Comm: syz.7.2870 Tainted: G B 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(undef) [ 1912.078417][T18656] Tainted: [B]=BAD_PAGE [ 1912.082643][T18656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1912.092813][T18656] Call Trace: [ 1912.096180][T18656] [ 1912.099189][T18656] __dump_stack+0x26/0x30 [ 1912.103655][T18656] dump_stack_lvl+0x53/0x270 [ 1912.108414][T18656] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1912.114404][T18656] dump_stack+0x1e/0x25 [ 1912.118690][T18656] panic+0x4bd/0xd50 [ 1912.122823][T18656] kmsan_report+0x29d/0x2a0 [ 1912.127584][T18656] ? vprintk_default+0x3f/0x50 [ 1912.132635][T18656] ? __msan_warning+0x96/0x120 [ 1912.137542][T18656] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 1912.142705][T18656] ? __i2c_transfer+0xeca/0x30e0 [ 1912.147768][T18656] ? i2c_transfer+0x300/0x4b0 [ 1912.152601][T18656] ? i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 1912.157842][T18656] ? compat_i2cdev_ioctl+0xaa3/0xb40 [ 1912.163241][T18656] ? __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 1912.169095][T18656] ? ia32_sys_call+0x2d07/0x42c0 [ 1912.174159][T18656] ? __do_fast_syscall_32+0xb0/0x110 [ 1912.179597][T18656] ? do_fast_syscall_32+0x38/0x80 [ 1912.184790][T18656] ? do_SYSENTER_32+0x1f/0x30 [ 1912.189625][T18656] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1912.196261][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.201599][T18656] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1912.208091][T18656] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1912.214305][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.219661][T18656] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1912.226168][T18656] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1912.232465][T18656] ? mutex_unlock+0x29/0x50 [ 1912.237133][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.242503][T18656] __msan_warning+0x96/0x120 [ 1912.247244][T18656] cxusb_i2c_xfer+0x1303/0x18e0 [ 1912.252272][T18656] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1912.258234][T18656] ? should_fail_ex+0x45/0x8a0 [ 1912.263194][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.268543][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.273886][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.279209][T18656] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 1912.284530][T18656] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 1912.289855][T18656] __i2c_transfer+0xeca/0x30e0 [ 1912.294729][T18656] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1912.301184][T18656] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1912.307020][T18656] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1912.313244][T18656] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1912.319097][T18656] i2c_transfer+0x300/0x4b0 [ 1912.323739][T18656] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 1912.328859][T18656] compat_i2cdev_ioctl+0xaa3/0xb40 [ 1912.334192][T18656] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1912.339953][T18656] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 1912.345700][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.351074][T18656] ? kmsan_get_metadata+0x105/0x1b0 [ 1912.356506][T18656] ia32_sys_call+0x2d07/0x42c0 [ 1912.361374][T18656] __do_fast_syscall_32+0xb0/0x110 [ 1912.366634][T18656] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1912.372558][T18656] do_fast_syscall_32+0x38/0x80 [ 1912.377565][T18656] do_SYSENTER_32+0x1f/0x30 [ 1912.382209][T18656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1912.388719][T18656] RIP: 0023:0xf7f58539 [ 1912.392882][T18656] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1912.412633][T18656] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1912.421208][T18656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1912.429319][T18656] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1912.437436][T18656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1912.445494][T18656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1912.453599][T18656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1912.461755][T18656] [ 1912.465291][T18656] Kernel Offset: disabled [ 1912.469724][T18656] Rebooting in 86400 seconds..