last executing test programs: 18m30.48602368s ago: executing program 32 (id=16): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 18m21.907345581s ago: executing program 33 (id=36): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) 17m57.689460876s ago: executing program 34 (id=62): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2040600) syz_open_dev$usbmon(0x0, 0x3, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x451, 0x8000010, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x500, 0x0) 16m26.221170135s ago: executing program 35 (id=245): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x100) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 16m19.726906043s ago: executing program 36 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 11m48.716562884s ago: executing program 37 (id=851): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 10m12.471546317s ago: executing program 38 (id=1014): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x9532fb06ea5433d}, {0x7, 0x9}, {0x8, 0xa}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) socket$netlink(0x10, 0x3, 0xa) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r8) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$apparmor_exec(r4, &(0x7f0000000000)=ANY=[], 0x8) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1) 8m15.563254443s ago: executing program 39 (id=1121): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 6m17.073382048s ago: executing program 4 (id=1345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x9, 0x0, 0x6, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x9d, 0xfe, 0x38c, 0x2f, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x3, 0x5}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, r3, 0xa17c5000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)={0xfecf, 0x3, [{0x3}, {0xf}, {0x9, 0x1}]}) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) fsopen(&(0x7f0000000180)='adfs\x00', 0x0) 6m11.074702016s ago: executing program 40 (id=1324): write$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000840)={0x50, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x5800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f00000000c0)) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x10, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="6dd1d20ea33b64dbe6df735b9074eb86e9a529a699a96487493109f2801696a5425c51cb5072d9f04d9c543f26e945afa51b569b4f914ff985667c169e73e024227211247d6dcb6e73e4ab396d78cefa4ba4dcf264719c73331cc7", 0x5b}, {&(0x7f0000000380)="921c9e65615110daa76091b3a1565773b980939c14df3f4cab15dbaee58017ecc78959698882f1f850a3a5ad1579717477b2801b6b63eea2b01f3832e455b684d099d12bef4dcf1ba51c3ddc2a6d38df71a30c1368f368707de1a8489451b42d0202a7c03c5a4f487a880f36354e4331f1205cb8d1f4b3a8aa663edc586a9d303d90f7c3a73ddeda7e63942716527926bc542a4adbc5416c539bc0c0bf2c5c04c1f1192a1488424659099c7b8ed8f792f34477801cd05cfd96cb52e1294414d9794835bf827428bd5851be7a2e3dc4ec39921c588098eb53cb5cd011", 0xdc}, {&(0x7f0000000480)="0d6a2cf672e1062fd84f908e58ac9337bc441bef40de382c7d130e55c0cf23e3e94a9bf68f8835cbcf49f47e23fe8568f345bf40362eb121de489ff00ecadf43c4", 0x41}, {&(0x7f0000000540)="553ec8b992b4", 0x6}], 0x4}}], 0x1, 0x40004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000680)=""/71, 0x47, 0x120, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x5, 0x9, 0x2, 0x1}, 0x9, 0x0, 0x3, 0x3, 0xc, 0x1a, 0x12, 0x7, 0x5, 0x3ff, {0xe, 0x9, 0xfffffffe, 0x7, 0x6, 0x7ff}}}}]}, 0x78}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x5c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) 6m9.076978701s ago: executing program 41 (id=1329): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001040)={'xfrm0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x3, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 6m0.996954578s ago: executing program 42 (id=1345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x9, 0x0, 0x6, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x9d, 0xfe, 0x38c, 0x2f, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x3, 0x5}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, r3, 0xa17c5000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)={0xfecf, 0x3, [{0x3}, {0xf}, {0x9, 0x1}]}) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) fsopen(&(0x7f0000000180)='adfs\x00', 0x0) 4m13.387826697s ago: executing program 43 (id=1564): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x40}, 0x20) 4m5.767984065s ago: executing program 44 (id=1576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40140, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xa1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 3m21.824731391s ago: executing program 8 (id=1646): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) 3m20.697036341s ago: executing program 8 (id=1649): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 3m20.065519012s ago: executing program 8 (id=1651): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x86006) 3m18.846401174s ago: executing program 8 (id=1654): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r1, 0x9988000) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r0, 0x18, 0x0, 0x4) 3m16.718039599s ago: executing program 8 (id=1659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x141008, 0x40, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/seq/clients\x00', 0x0, 0x0) 3m9.416476069s ago: executing program 6 (id=1668): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 3m7.634757934s ago: executing program 45 (id=1644): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff785", 0xde}, {&(0x7f0000000b80)}], 0x3}}, {}], 0x2, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x40}], 0x1, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000600}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x2e229ef2833254cd, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r6 = syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC=r6, @ANYBLOB="010026bd0b736cf6fa4e1b0d0000180001801400020064756d6d7930f99e1deb171d355779d1ab32f7364f1082665911b3627f578186ed8b1265cef7f290aa209372cca5cc073d05daf4f9ca48b5edb3f93534438040781a9fb4bafb242bd615f79ab17bdf1dea8d03dea00f47c4a05c24bd32ba5545811cad99bda7fb819ff08656dd7f370cb01d3ae098d8a06ebd0c0a2f053257881e1d7ada5fa853b13fafa6da07a398d6b57d0364e7a8"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000406010100000000000005000100000705000100070061cdd9677500"/43], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 3m7.536171704s ago: executing program 6 (id=1671): unshare(0x62040200) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 3m5.615299223s ago: executing program 6 (id=1674): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x5, 0x4}}}}]}, 0x44}}, 0x40080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0x8, 0xffe5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.215414716s ago: executing program 6 (id=1676): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x86006) 3m3.352987178s ago: executing program 6 (id=1677): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4020744f, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfce1) 3m2.162656184s ago: executing program 6 (id=1680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3m2.027214734s ago: executing program 8 (id=1681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m57.537181571s ago: executing program 46 (id=1663): getsockname$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r2, &(0x7f0000000240)=' ', 0x1) close(r2) 2m46.634639689s ago: executing program 47 (id=1681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.876705076s ago: executing program 48 (id=1680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m58.141202267s ago: executing program 4 (id=1689): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4020744f, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xfce1) 1m57.383037868s ago: executing program 4 (id=1715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x1, 0x2, 0x8, 0x0}) 1m55.533588044s ago: executing program 2 (id=1718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000001}) socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xd04}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 1m54.752269919s ago: executing program 4 (id=1723): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') epoll_create1(0x0) r4 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x8184c, 0x0, 0x9, 0x0, 0x0) 1m53.271386798s ago: executing program 4 (id=1725): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4020744f, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xfce1) 1m51.987935668s ago: executing program 4 (id=1727): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 1m51.539139713s ago: executing program 2 (id=1730): r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000240)={"1acc00d331000000e3c918040d8b7500000000000000001d0900", r4}) 1m48.166702521s ago: executing program 49 (id=1727): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 1m48.135429942s ago: executing program 2 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 1m48.12848938s ago: executing program 5 (id=1733): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x1, 0x2, 0x8, 0x0}) 1m47.356824439s ago: executing program 2 (id=1735): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') epoll_create1(0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x8184c, 0x0, 0x9, 0x0, 0x0) 1m46.329727991s ago: executing program 2 (id=1737): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4020744f, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xfce1) 1m45.573144079s ago: executing program 5 (id=1739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) shutdown(r0, 0x1) 1m44.801395308s ago: executing program 2 (id=1740): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000001}) socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xd04}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 1m41.395056906s ago: executing program 50 (id=1740): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000001}) socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xd04}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 1m41.321334011s ago: executing program 5 (id=1743): r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000005c0)={"6739669f274d13b6910000000000000000000000d02acecdc67c6d3126628168", r1, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"1acc00d331000000e3c918040d8b7500000000000000001d0900", r6}) 1m40.511009505s ago: executing program 5 (id=1746): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') epoll_create1(0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x8184c, 0x0, 0x9, 0x0, 0x0) 1m39.166373056s ago: executing program 5 (id=1749): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 1m37.29340014s ago: executing program 5 (id=1750): open(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x3f40, &(0x7f00000001c0)={0x0, 0x4, 0x1000}, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408c4}}], 0x1, 0x6001010) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m34.272181344s ago: executing program 51 (id=1750): open(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x3f40, &(0x7f00000001c0)={0x0, 0x4, 0x1000}, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408c4}}], 0x1, 0x6001010) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 44.209451082s ago: executing program 9 (id=1846): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd20", 0x27}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000004100000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 43.290943842s ago: executing program 9 (id=1850): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 41.938558588s ago: executing program 9 (id=1854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_buf(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000000240)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200]}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 39.555808533s ago: executing program 9 (id=1859): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000400)=0x8) 38.696262438s ago: executing program 9 (id=1862): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) r2 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 37.32955486s ago: executing program 9 (id=1866): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 21.906008771s ago: executing program 52 (id=1866): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 8.594153273s ago: executing program 3 (id=1926): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 8.534430717s ago: executing program 0 (id=1927): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x20, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x3ff, 0x4005, 0x0, 0x2, 0x41, 0x0, 0x0, 0x0, 0x4, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x9, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000070a0102000000000000000001000e"], 0x20}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) 7.662484805s ago: executing program 7 (id=1929): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.222608125s ago: executing program 0 (id=1930): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x54}]}) msgget$private(0x0, 0x0) 7.016967445s ago: executing program 3 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xe9a, 0x1ff, 0xb29ada242d571f6}}, {0x14, 0x1, {0x7fff, 0x677, 0x7fff, 0x88a8}}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) 6.362272112s ago: executing program 0 (id=1932): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2c9ab000) mlock(&(0x7f000039c000/0x3000)=nil, 0x3000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x2) fadvise64(0xffffffffffffffff, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.358859461s ago: executing program 7 (id=1933): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x0, 0x9}, {0xeeee8000, 0x0, 0xa, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x26, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8080000, [0xffffffffffffffff, 0x0, 0x8]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 5.822949772s ago: executing program 7 (id=1935): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="f4416eb4e859495d589fb5", 0xb, 0x84, &(0x7f0000000100)={0x11, 0x3, r2, 0x1, 0x75, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) 5.087119479s ago: executing program 1 (id=1936): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x20000000) 4.758203928s ago: executing program 7 (id=1937): gettid() pause() socket(0xf, 0x6, 0x80000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100), 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4.400244245s ago: executing program 3 (id=1938): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 3.914660343s ago: executing program 1 (id=1939): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x20, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x3ff, 0x4005, 0x0, 0x2, 0x41, 0x0, 0x0, 0x0, 0x4, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x9, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000070a0102000000000000000001000e"], 0x20}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) 3.671544053s ago: executing program 0 (id=1940): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 3.377679678s ago: executing program 3 (id=1941): unshare(0x20040600) r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x5, 0x0, 0x7, 0x1fe, 0xf7fffffd, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x21, 0xff}) 2.898186376s ago: executing program 1 (id=1942): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x54}]}) msgget$private(0x0, 0x0) 2.720464193s ago: executing program 7 (id=1943): pipe2(0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.389554321s ago: executing program 3 (id=1944): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x0, 0x9}, {0xeeee8000, 0x0, 0xa, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x26, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8080000, [0xffffffffffffffff, 0x0, 0x8]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 2.069242389s ago: executing program 0 (id=1945): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 2.001569032s ago: executing program 1 (id=1946): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="f4416eb4e859495d589fb5", 0xb, 0x84, &(0x7f0000000100)={0x11, 0x3, r2, 0x1, 0x75, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) 1.624346606s ago: executing program 3 (id=1947): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201101000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x23300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(r3, 0xe) read$FUSE(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000540)={0x1, 0x8, 0x2, &(0x7f0000000500)={0x11, "e78da5d0ce240742f712606d24dc95914798a0f15b49ef0272e7f67fec00"}}) 1.12441568s ago: executing program 1 (id=1948): unshare(0x6020400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x1}, {0x9}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 1.025278848s ago: executing program 0 (id=1949): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2c9ab000) mlock(&(0x7f000039c000/0x3000)=nil, 0x3000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x2) fadvise64(0xffffffffffffffff, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.568049ms ago: executing program 1 (id=1950): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) r2 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 0s ago: executing program 7 (id=1951): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x82000) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) kernel console output (not intermixed with test programs): lback - 6 bytes [ 1178.708720][T12163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.716713][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.724556][T12163] bridge_slave_0: entered allmulticast mode [ 1178.845879][T12163] bridge_slave_0: entered promiscuous mode [ 1178.939103][T12163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.947518][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.955351][T12163] bridge_slave_1: entered allmulticast mode [ 1178.965580][T12163] bridge_slave_1: entered promiscuous mode [ 1179.511700][ T5790] Bluetooth: hci1: command tx timeout [ 1179.628972][T12163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.667098][T12163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.678812][ T8978] usb 1-1: USB disconnect, device number 9 [ 1180.483927][T12163] team0: Port device team_slave_0 added [ 1180.697512][T12163] team0: Port device team_slave_1 added [ 1180.720399][T12125] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1181.005943][ T5849] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1181.048579][T12235] bio_check_eod: 2 callbacks suppressed [ 1181.049871][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.049871][T12235] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1181.070495][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.070495][T12235] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1181.084162][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1181.094679][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.094679][T12235] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1181.108158][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1181.130992][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.130992][T12235] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1181.146899][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.146899][T12235] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1181.161234][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1181.171658][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.171658][T12235] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1181.185169][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1181.201667][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.201667][T12235] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1181.215149][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.215149][T12235] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1181.228588][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1181.235879][ T5849] usb 10-1: Using ep0 maxpacket: 32 [ 1181.238666][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.238666][T12235] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1181.259106][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1181.312350][ T5849] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1181.345070][T12235] syz.2.1596: attempt to access beyond end of device [ 1181.345070][T12235] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1181.360823][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1181.360948][ T5849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 1181.373335][T12235] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1181.392150][T12235] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1181.408761][T12125] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1181.444538][ T5849] usb 10-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1181.447902][T12163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.458116][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.462954][T12163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.472607][ T5849] usb 10-1: Product: syz [ 1181.498298][T12163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.502474][ T5849] usb 10-1: Manufacturer: syz [ 1181.519161][ T5849] usb 10-1: SerialNumber: syz [ 1181.782571][ T5849] usb 10-1: config 0 descriptor?? [ 1181.819176][T12125] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1181.868576][T12163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.876001][T12163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.902776][T12163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.960339][T12125] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1182.150482][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.442117][T12249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.240616][T12163] hsr_slave_0: entered promiscuous mode [ 1183.251960][T12163] hsr_slave_1: entered promiscuous mode [ 1183.261225][T12163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.269287][T12163] Cannot create hsr debugfs directory [ 1183.357462][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1598'. [ 1183.508677][ T5849] usbtouchscreen 10-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1183.554944][ T5849] usb 10-1: USB disconnect, device number 4 [ 1183.920375][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.432455][T12125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.164499][T12125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.315824][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.323419][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.528858][T11399] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1185.553582][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.561352][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.783275][T11399] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1185.793673][T11399] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1185.805103][T11399] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1185.814817][T11399] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1185.826638][T11399] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1185.891719][T11399] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1185.901601][T11399] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1185.910493][T11399] usb 10-1: Product: syz [ 1185.915005][T11399] usb 10-1: Manufacturer: syz [ 1186.109059][T11399] cdc_wdm 10-1:1.0: skipping garbage [ 1186.114660][T11399] cdc_wdm 10-1:1.0: skipping garbage [ 1186.180220][T11399] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1186.186758][T11399] cdc_wdm 10-1:1.0: Unknown control protocol [ 1186.590672][T12163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1186.688063][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 6 bytes [ 1186.705248][T12163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1186.766740][T12280] bio_check_eod: 2 callbacks suppressed [ 1186.766824][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.766824][T12280] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1186.789696][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.789696][T12280] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1186.804003][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1186.814891][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.814891][T12280] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1186.829003][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1186.843444][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.843444][T12280] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1186.857350][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.857350][T12280] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1186.870672][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1186.883180][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.883180][T12280] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1186.897817][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1186.913803][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.913803][T12280] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1186.928097][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.928097][T12280] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1186.941772][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1186.956244][T12280] syz.2.1607: attempt to access beyond end of device [ 1186.956244][T12280] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1186.969952][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1187.063694][T12280] syz.2.1607: attempt to access beyond end of device [ 1187.063694][T12280] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1187.078201][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1187.090603][T12280] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1187.101458][T12280] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1187.138425][T12163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1187.327458][T12163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1188.464141][T12298] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1188.472023][T12298] overlayfs: failed to set xattr on upper [ 1188.479207][T12298] overlayfs: ...falling back to redirect_dir=nofollow. [ 1188.486592][T12298] overlayfs: ...falling back to index=off. [ 1188.492630][T12298] overlayfs: ...falling back to uuid=null. [ 1188.794479][ T8912] usb 10-1: USB disconnect, device number 5 [ 1189.381877][T12163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.413760][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1612'. [ 1189.672480][T12163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.790490][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.798333][ T8415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.918777][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.926711][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.201727][T12125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.216590][T11399] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1191.488674][T11399] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.499837][T11399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1191.512926][T11399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1191.523519][T11399] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1191.787846][T11399] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1191.800076][T11399] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1191.809252][T11399] usb 10-1: Manufacturer: syz [ 1191.928070][T11399] usb 10-1: config 0 descriptor?? [ 1193.192818][T12163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.516052][T11399] rc_core: IR keymap rc-hauppauge not found [ 1193.522232][T11399] Registered IR keymap rc-empty [ 1193.528260][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1193.639421][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1193.681326][T11399] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1193.699490][T11399] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input26 [ 1193.906693][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1193.947974][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.006694][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.095953][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.140075][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.221872][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.327208][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.364287][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.436087][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.486754][T11399] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1194.502873][T12125] veth0_vlan: entered promiscuous mode [ 1194.536900][T11399] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1194.545312][T11399] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1194.777631][T11399] usb 10-1: USB disconnect, device number 6 [ 1194.902069][T12125] veth1_vlan: entered promiscuous mode [ 1195.351373][T12352] bio_check_eod: 2 callbacks suppressed [ 1195.351429][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.351429][T12352] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1195.372825][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.372825][T12352] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1195.390763][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1195.402395][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.402395][T12352] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1195.415894][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1195.629002][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.629002][T12352] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1195.642626][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.642626][T12352] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1195.656060][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1195.666252][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.666252][T12352] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1195.679660][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1195.693652][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.693652][T12352] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1195.707917][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.707917][T12352] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1195.721952][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1195.732131][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.732131][T12352] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1195.745582][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1195.757586][T12352] syz.0.1618: attempt to access beyond end of device [ 1195.757586][T12352] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1195.771306][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1195.781692][T12352] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1195.792854][T12352] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1195.809428][T12125] veth0_macvtap: entered promiscuous mode [ 1195.944549][T12125] veth1_macvtap: entered promiscuous mode [ 1196.578240][T12125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.743717][T12125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.930617][T12125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.939904][T12125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.949124][T12125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.958300][T12125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.024204][T12366] loop0: detected capacity change from 0 to 2048 [ 1197.313593][T12372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1198.090372][T12163] veth0_vlan: entered promiscuous mode [ 1198.212293][T12163] veth1_vlan: entered promiscuous mode [ 1198.609949][T12163] veth0_macvtap: entered promiscuous mode [ 1198.698823][T12163] veth1_macvtap: entered promiscuous mode [ 1198.931722][T12163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.054128][T12163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.220164][T12163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.230276][T12163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.239544][T12163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.248703][T12163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.038794][ T8912] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1202.272764][ T8912] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1202.284391][ T8912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.296372][ T8912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.313903][ T8912] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1202.434285][ T8912] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1202.445820][ T8912] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1202.454307][ T8912] usb 10-1: Manufacturer: syz [ 1202.591952][ T8912] usb 10-1: config 0 descriptor?? [ 1203.107122][ T8912] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 1203.170642][ T8912] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 1203.418358][ T8912] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1203.934890][T12431] bio_check_eod: 2 callbacks suppressed [ 1203.934947][T12431] syz.2.1628: attempt to access beyond end of device [ 1203.934947][T12431] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1203.954529][T12431] syz.2.1628: attempt to access beyond end of device [ 1203.954529][T12431] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1203.968117][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1203.980674][T12431] syz.2.1628: attempt to access beyond end of device [ 1203.980674][T12431] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1203.994954][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1204.012888][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.012888][T12431] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1204.028361][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.028361][T12431] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1204.041725][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1204.051798][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.051798][T12431] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1204.065180][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1204.086490][ T8912] usb 10-1: USB disconnect, device number 7 [ 1204.096582][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.096582][T12431] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1204.112781][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.112781][T12431] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1204.126654][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1204.136683][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.136683][T12431] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1204.150515][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1204.231654][T12431] syz.2.1628: attempt to access beyond end of device [ 1204.231654][T12431] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1204.246281][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1204.256606][T12431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1204.266643][T12431] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1204.667496][T12429] fido_id[12429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1206.144958][T12444] loop9: detected capacity change from 0 to 2048 [ 1206.656483][T12453] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1208.128802][ T5841] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.145988][ T5841] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1208.270873][ T5846] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.292087][ T5846] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1208.598460][ T5841] usb 3-1: USB disconnect, device number 12 [ 1209.496476][ T5846] usb 2-1: USB disconnect, device number 19 [ 1209.680566][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.688976][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.057819][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.066169][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.156129][T12477] bio_check_eod: 2 callbacks suppressed [ 1211.156185][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.156185][T12477] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1211.175871][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.175871][T12477] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1211.189632][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1211.200050][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.200050][T12477] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1211.214532][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1211.269668][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.269668][T12477] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1211.284376][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.284376][T12477] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1211.298068][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1211.308319][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.308319][T12477] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1211.321831][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1211.566052][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.566052][T12477] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1211.579769][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.579769][T12477] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1211.593290][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1211.603509][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.603509][T12477] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1211.616978][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1211.734656][T12477] syz.2.1639: attempt to access beyond end of device [ 1211.734656][T12477] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1211.751724][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1211.766603][T12477] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1211.777846][T12477] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1212.782933][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.792662][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.063626][ T3869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.072101][ T3869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.566130][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.575041][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.546136][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1644'. [ 1214.786936][ T5846] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1214.995899][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 1215.034823][ T5846] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1215.048815][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.158161][ T5846] usb 7-1: config 0 descriptor?? [ 1215.488101][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1215.558139][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1215.640430][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1215.648131][ T5846] usb 7-1: media controller created [ 1215.886446][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1216.196142][ T5846] az6027: usb out operation failed. (-71) [ 1216.204101][ T5846] az6027: usb out operation failed. (-71) [ 1216.217753][ T5846] stb0899_attach: Driver disabled by Kconfig [ 1216.223980][ T5846] az6027: no front-end attached [ 1216.223980][ T5846] [ 1216.346788][ T5846] az6027: usb out operation failed. (-71) [ 1216.352791][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1216.365037][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 1216.527784][ T5846] dvb-usb: schedule remote query interval to 400 msecs. [ 1216.535100][ T5846] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1216.657337][ T5846] usb 7-1: USB disconnect, device number 10 [ 1217.071794][T12528] netlink: 'syz.2.1652': attribute type 24 has an invalid length. [ 1217.365161][ T5846] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1218.960648][T12545] mmap: syz.6.1657 (12545) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1219.399095][T12554] bio_check_eod: 2 callbacks suppressed [ 1219.399178][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.399178][T12554] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1219.418597][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.418597][T12554] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1219.432291][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1219.447177][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.447177][T12554] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1219.461879][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1219.582967][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.582967][T12554] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1219.598743][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.598743][T12554] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1219.612279][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1219.622442][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.622442][T12554] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1219.635905][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1219.681079][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.681079][T12554] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1219.696110][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.696110][T12554] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1219.709447][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1219.719399][T12554] syz.0.1656: attempt to access beyond end of device [ 1219.719399][T12554] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1219.732844][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1220.006615][T12554] syz.0.1656: attempt to access beyond end of device [ 1220.006615][T12554] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1220.020237][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1220.030433][T12554] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1220.040335][T12554] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1223.485775][ T5846] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1223.715958][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1223.790202][ T5846] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1223.799736][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.923723][ T5846] usb 3-1: config 0 descriptor?? [ 1224.205026][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1224.266628][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1224.363574][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1224.371094][ T5846] usb 3-1: media controller created [ 1224.498164][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1225.442250][ T5846] az6027: usb out operation failed. (-71) [ 1225.456397][ T5846] az6027: usb out operation failed. (-71) [ 1225.462376][ T5846] stb0899_attach: Driver disabled by Kconfig [ 1225.468647][ T5846] az6027: no front-end attached [ 1225.468647][ T5846] [ 1225.876080][ T5846] az6027: usb out operation failed. (-71) [ 1225.882101][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1225.901343][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 1226.207941][ T5846] dvb-usb: schedule remote query interval to 400 msecs. [ 1226.215855][ T5846] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1226.367759][ T5846] usb 3-1: USB disconnect, device number 13 [ 1226.598199][T12590] netlink: 'syz.6.1668': attribute type 4 has an invalid length. [ 1226.882991][T12590] netlink: 'syz.6.1668': attribute type 4 has an invalid length. [ 1227.131516][ T5846] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1228.734151][T12599] bio_check_eod: 2 callbacks suppressed [ 1228.734206][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.734206][T12599] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1228.754819][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.754819][T12599] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1228.773779][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1228.786039][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.786039][T12599] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1228.799411][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1228.814377][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.814377][T12599] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1228.828198][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.828198][T12599] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1228.842153][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1228.852169][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.852169][T12599] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1228.871558][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1228.885200][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.885200][T12599] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1228.899165][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.899165][T12599] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1228.912685][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1228.923028][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.923028][T12599] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1228.936581][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1228.947745][T12599] syz.6.1671: attempt to access beyond end of device [ 1228.947745][T12599] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1228.962245][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1228.977603][T12599] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1228.989094][T12599] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1230.128628][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1230.183236][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1230.196603][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1230.212258][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1230.224263][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1232.306251][ T5790] Bluetooth: hci4: command tx timeout [ 1232.716739][T12609] chnl_net:caif_netlink_parms(): no params data found [ 1233.646341][ T5846] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1233.886390][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1233.987078][ T5846] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1233.997385][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.058826][ T5846] usb 3-1: config 0 descriptor?? [ 1234.388302][ T5790] Bluetooth: hci4: command tx timeout [ 1234.510988][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1234.570640][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1234.668819][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1234.676462][ T5846] usb 3-1: media controller created [ 1234.866661][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1235.606047][ T5846] az6027: usb out operation failed. (-71) [ 1235.784274][ T5846] az6027: usb out operation failed. (-71) [ 1235.790442][ T5846] stb0899_attach: Driver disabled by Kconfig [ 1235.796840][ T5846] az6027: no front-end attached [ 1235.796840][ T5846] [ 1236.016289][ T5846] az6027: usb out operation failed. (-71) [ 1236.022416][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1236.040193][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 1236.392019][ T5846] dvb-usb: schedule remote query interval to 400 msecs. [ 1236.399434][ T5846] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1236.476474][ T5790] Bluetooth: hci4: command tx timeout [ 1236.628968][ T5846] usb 3-1: USB disconnect, device number 14 [ 1236.714006][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.722281][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.730366][T12609] bridge_slave_0: entered allmulticast mode [ 1236.739115][T12609] bridge_slave_0: entered promiscuous mode [ 1237.139272][ T8415] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.424973][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.432918][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.440984][T12609] bridge_slave_1: entered allmulticast mode [ 1237.449828][T12609] bridge_slave_1: entered promiscuous mode [ 1237.631715][ T5846] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1237.750300][ T8415] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.261200][ T8415] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.546187][ T5790] Bluetooth: hci4: command tx timeout [ 1238.652833][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.771126][ T8415] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.902847][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.666420][ T5846] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1239.707191][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1239.725260][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1239.735722][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1239.759926][T12609] team0: Port device team_slave_0 added [ 1239.841039][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1239.851702][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1239.911034][ T8415] bridge_slave_1: left allmulticast mode [ 1239.917836][ T8415] bridge_slave_1: left promiscuous mode [ 1239.931354][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.007861][ T5846] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1240.020781][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.033676][ T8415] bridge_slave_0: left allmulticast mode [ 1240.033800][ T8415] bridge_slave_0: left promiscuous mode [ 1240.034836][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.058300][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.069556][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1240.083064][ T5846] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1240.093234][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.542204][ T5846] usb 3-1: config 0 descriptor?? [ 1241.270601][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 1241.453345][ T8415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.539613][ T8415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.588127][ T8415] bond0 (unregistering): Released all slaves [ 1241.703273][T12609] team0: Port device team_slave_1 added [ 1242.006963][ T5794] Bluetooth: hci3: command tx timeout [ 1242.770694][ T5846] usbhid 3-1:0.0: can't add hid device: -71 [ 1242.773337][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.780043][ T5846] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1242.784322][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.807166][ T5846] usb 3-1: USB disconnect, device number 15 [ 1242.825801][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.147766][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.155822][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.184482][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.297386][ T8415] hsr_slave_0: left promiscuous mode [ 1243.353617][ T8415] hsr_slave_1: left promiscuous mode [ 1243.362608][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.370619][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.524219][ T8415] veth1_macvtap: left promiscuous mode [ 1243.530313][ T8415] veth0_macvtap: left promiscuous mode [ 1243.537152][ T8415] veth1_vlan: left promiscuous mode [ 1243.542761][ T8415] veth0_vlan: left promiscuous mode [ 1244.135984][ T5794] Bluetooth: hci3: command tx timeout [ 1245.108216][ T8415] team0 (unregistering): Port device team_slave_1 removed [ 1245.217793][ T8415] team0 (unregistering): Port device team_slave_0 removed [ 1246.174125][ T5794] Bluetooth: hci3: command tx timeout [ 1246.524041][T12609] hsr_slave_0: entered promiscuous mode [ 1246.533022][T12609] hsr_slave_1: entered promiscuous mode [ 1246.541890][T12609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1246.549829][T12609] Cannot create hsr debugfs directory [ 1246.706454][ T5846] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1247.104157][ T5846] usb 3-1: config 0 has no interfaces? [ 1247.210110][ T5846] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1247.219589][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.228091][ T5846] usb 3-1: Product: syz [ 1247.232510][ T5846] usb 3-1: Manufacturer: syz [ 1247.237451][ T5846] usb 3-1: SerialNumber: syz [ 1247.289176][ T5846] usb 3-1: config 0 descriptor?? [ 1247.420948][ T8415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.555315][T12686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.566445][T12686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.636333][T12665] chnl_net:caif_netlink_parms(): no params data found [ 1247.773506][ T8415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.032521][ T8415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.237418][ T5794] Bluetooth: hci3: command tx timeout [ 1248.263814][ T8415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.086490][ T8415] bridge_slave_1: left allmulticast mode [ 1249.092550][ T8415] bridge_slave_1: left promiscuous mode [ 1249.099652][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.146913][ T8415] bridge_slave_0: left allmulticast mode [ 1249.152842][ T8415] bridge_slave_0: left promiscuous mode [ 1249.159710][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.400681][ T8415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.497349][ T8415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.541706][ T8415] bond0 (unregistering): Released all slaves [ 1251.033152][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1251.048719][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1251.060237][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1251.103424][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1251.117414][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1252.022236][ T5794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1252.034149][ T5794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1252.051567][ T5794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1252.148966][ T5794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1252.188836][ T5794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1252.309342][ T8415] hsr_slave_0: left promiscuous mode [ 1252.321713][ T8415] hsr_slave_1: left promiscuous mode [ 1252.330265][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.338322][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.359458][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.367348][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.418213][ T8415] veth1_macvtap: left promiscuous mode [ 1252.424180][ T8415] veth0_macvtap: left promiscuous mode [ 1252.430779][ T8415] veth1_vlan: left promiscuous mode [ 1252.436421][ T8415] veth0_vlan: left promiscuous mode [ 1253.186233][ T5794] Bluetooth: hci5: command tx timeout [ 1253.599552][ T8415] team0 (unregistering): Port device team_slave_1 removed [ 1253.750424][ T8415] team0 (unregistering): Port device team_slave_0 removed [ 1254.425111][ T5794] Bluetooth: hci6: command tx timeout [ 1254.998717][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.007012][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.016120][T12665] bridge_slave_0: entered allmulticast mode [ 1255.027107][T12665] bridge_slave_0: entered promiscuous mode [ 1255.228371][T12665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.236135][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.244779][T12665] bridge_slave_1: entered allmulticast mode [ 1255.255940][T12665] bridge_slave_1: entered promiscuous mode [ 1255.266593][ T5794] Bluetooth: hci5: command tx timeout [ 1255.414645][T12609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1255.832893][T12609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1255.874158][T12609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1256.051449][ T4248] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.357569][T12609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1256.472873][ T5794] Bluetooth: hci6: command tx timeout [ 1256.523879][ T4248] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.637973][T12665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.682562][T12703] chnl_net:caif_netlink_parms(): no params data found [ 1256.769815][ T4248] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.837269][T12665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.951450][ T4248] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.374078][ T5794] Bluetooth: hci5: command tx timeout [ 1257.414220][T12665] team0: Port device team_slave_0 added [ 1257.753560][T12665] team0: Port device team_slave_1 added [ 1258.278364][T12665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.285798][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.313572][T12665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.383547][ T4248] bridge_slave_1: left allmulticast mode [ 1258.393143][ T4248] bridge_slave_1: left promiscuous mode [ 1258.400641][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.524247][ T4248] bridge_slave_0: left allmulticast mode [ 1258.531256][ T4248] bridge_slave_0: left promiscuous mode [ 1258.537904][ T5849] usb 3-1: USB disconnect, device number 16 [ 1258.538576][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.571299][ T5794] Bluetooth: hci6: command tx timeout [ 1259.184880][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.228399][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.253936][ T4248] bond0 (unregistering): Released all slaves [ 1259.270162][ T5849] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1259.294281][T12708] chnl_net:caif_netlink_parms(): no params data found [ 1259.368811][T12665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.379581][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.408672][T12665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.456955][ T5794] Bluetooth: hci5: command tx timeout [ 1259.457447][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 1259.490327][ T5849] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1259.501048][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.659770][ T5849] usb 3-1: config 0 descriptor?? [ 1259.937995][ T5849] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1259.960113][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1259.997166][ T5849] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1260.004786][ T5849] usb 3-1: media controller created [ 1260.113937][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1260.129550][T12665] hsr_slave_0: entered promiscuous mode [ 1260.140301][T12665] hsr_slave_1: entered promiscuous mode [ 1260.150558][T12665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.158679][T12665] Cannot create hsr debugfs directory [ 1260.368450][ T5849] az6027: usb out operation failed. (-71) [ 1260.377140][ T5849] az6027: usb out operation failed. (-71) [ 1260.383134][ T5849] stb0899_attach: Driver disabled by Kconfig [ 1260.389831][ T5849] az6027: no front-end attached [ 1260.389831][ T5849] [ 1260.399863][ T5849] az6027: usb out operation failed. (-71) [ 1260.411996][ T5849] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1260.424251][ T5849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 1260.487344][ T5849] dvb-usb: schedule remote query interval to 400 msecs. [ 1260.495047][ T5849] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1260.614455][ T5849] usb 3-1: USB disconnect, device number 17 [ 1260.626353][ T5794] Bluetooth: hci6: command tx timeout [ 1261.051492][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.059588][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.068883][T12703] bridge_slave_0: entered allmulticast mode [ 1261.133549][ T5849] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1261.187588][T12703] bridge_slave_0: entered promiscuous mode [ 1261.309538][ T4248] hsr_slave_0: left promiscuous mode [ 1261.355900][ T4248] hsr_slave_1: left promiscuous mode [ 1261.364507][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.373402][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.427504][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.436660][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.474818][ T4248] veth1_macvtap: left promiscuous mode [ 1261.481089][ T4248] veth0_macvtap: left promiscuous mode [ 1261.487873][ T4248] veth1_vlan: left promiscuous mode [ 1261.493811][ T4248] veth0_vlan: left promiscuous mode [ 1262.668653][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 1262.733534][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 1263.403481][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.414770][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.422985][T12703] bridge_slave_1: entered allmulticast mode [ 1263.433222][T12703] bridge_slave_1: entered promiscuous mode [ 1263.805262][T12703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.839293][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.028304][T12703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.054204][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.062963][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.072145][T12708] bridge_slave_0: entered allmulticast mode [ 1264.082196][T12708] bridge_slave_0: entered promiscuous mode [ 1264.209453][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.217279][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.225235][T12708] bridge_slave_1: entered allmulticast mode [ 1264.235127][T12708] bridge_slave_1: entered promiscuous mode [ 1264.402447][T12703] team0: Port device team_slave_0 added [ 1264.548003][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.710413][T12703] team0: Port device team_slave_1 added [ 1264.761297][ T4248] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.811552][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.890039][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.897747][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.172066][ T4248] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.224707][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.382476][T12703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.390129][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.422253][T12703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.456798][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.464819][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.545767][ T4248] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.573160][ T5849] IPVS: starting estimator thread 0... [ 1265.681541][T12780] IPVS: using max 192 ests per chain, 9600 per kthread [ 1265.719584][T12703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.729881][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.758363][T12703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.802268][ T4248] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.903563][T12708] team0: Port device team_slave_0 added [ 1266.127311][T12708] team0: Port device team_slave_1 added [ 1266.513094][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.521859][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.551307][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.883690][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.892074][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.920323][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.985972][ T4248] bridge_slave_1: left allmulticast mode [ 1266.992067][ T4248] bridge_slave_1: left promiscuous mode [ 1266.999599][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.070284][ T4248] bridge_slave_0: left allmulticast mode [ 1267.076425][ T4248] bridge_slave_0: left promiscuous mode [ 1267.083126][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.797949][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.858743][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.889318][ T4248] bond0 (unregistering): Released all slaves [ 1267.928080][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1267.938329][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1267.948273][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1267.958241][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1267.968710][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1267.978753][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1267.990827][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.001334][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.011178][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.020874][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.030860][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.041035][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.050609][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.060522][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.071118][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.080781][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.092755][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.103000][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.113017][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.124823][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.135224][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.144691][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.153048][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.161428][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.169809][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.178206][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.189139][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.199165][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.207975][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.216469][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.224576][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.233713][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.242426][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.250827][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.259967][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.268762][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.277434][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.288235][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.297654][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.306390][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.314677][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.323044][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.331805][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 1268.364314][T12703] hsr_slave_0: entered promiscuous mode [ 1268.374950][T12703] hsr_slave_1: entered promiscuous mode [ 1268.384150][T12703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1268.394367][T12703] Cannot create hsr debugfs directory [ 1268.408910][ T5841] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1268.664006][T12798] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1268.671670][T12798] syzkaller0: linktype set to 774 [ 1269.102437][T12802] fido_id[12802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1269.465172][T12665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1269.728015][T12708] hsr_slave_0: entered promiscuous mode [ 1269.739905][T12708] hsr_slave_1: entered promiscuous mode [ 1269.749662][T12708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1269.758236][T12708] Cannot create hsr debugfs directory [ 1269.818907][T12665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1269.835807][ T5846] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1269.958421][ T4248] hsr_slave_0: left promiscuous mode [ 1269.975703][ T4248] hsr_slave_1: left promiscuous mode [ 1269.984052][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.994304][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.028663][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1270.042642][ T5846] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1270.053294][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.080137][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.088351][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.108847][ T5846] usb 3-1: config 0 descriptor?? [ 1270.197597][ T4248] veth1_macvtap: left promiscuous mode [ 1270.203449][ T4248] veth0_macvtap: left promiscuous mode [ 1270.211148][ T4248] veth1_vlan: left promiscuous mode [ 1270.217130][ T4248] veth0_vlan: left promiscuous mode [ 1270.378411][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1270.472172][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1270.513014][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1270.520948][ T5846] usb 3-1: media controller created [ 1270.684398][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.818985][ T5846] az6027: usb out operation failed. (-71) [ 1270.834720][ T5846] az6027: usb out operation failed. (-71) [ 1270.841307][ T5846] stb0899_attach: Driver disabled by Kconfig [ 1270.850954][ T5846] az6027: no front-end attached [ 1270.850954][ T5846] [ 1270.885188][ T5846] az6027: usb out operation failed. (-71) [ 1270.891776][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1270.903557][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 1270.953806][ T5846] dvb-usb: schedule remote query interval to 400 msecs. [ 1270.961520][ T5846] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1271.003855][ T5846] usb 3-1: USB disconnect, device number 18 [ 1271.431876][ T5846] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1271.503657][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 1271.616435][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 1272.239921][T12665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1272.357562][T12665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1272.914488][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.026265][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.033487][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.411813][T12609] veth0_vlan: entered promiscuous mode [ 1274.575518][T12609] veth1_vlan: entered promiscuous mode [ 1274.898703][T12703] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1275.045204][T12703] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1275.166013][T12703] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1275.307213][T12703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1275.411045][T12665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.497312][T12609] veth0_macvtap: entered promiscuous mode [ 1275.723646][T12609] veth1_macvtap: entered promiscuous mode [ 1275.799973][T12665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.931805][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.939856][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.993507][T12708] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1276.107266][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.114965][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.126314][T12708] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1276.198406][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.300239][T12708] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1276.360565][T12708] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1276.429493][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.544735][T12609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.556822][T12609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.566819][T12609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.576148][T12609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.490675][T12703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.788247][T12703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.923484][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.931279][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.070376][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.091030][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.099472][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.522810][T12703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1278.624130][T12708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.782993][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.791057][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.957842][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.965856][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.242002][T12665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.336413][T12703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.993445][T12708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.476818][T12665] veth0_vlan: entered promiscuous mode [ 1283.595267][T12665] veth1_vlan: entered promiscuous mode [ 1283.956293][T12665] veth0_macvtap: entered promiscuous mode [ 1284.037947][T12665] veth1_macvtap: entered promiscuous mode [ 1284.324917][T12665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.444525][T12665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.569974][T12665] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.580791][T12665] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.591523][T12665] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.601760][T12665] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.648252][T12703] veth0_vlan: entered promiscuous mode [ 1284.825876][T12703] veth1_vlan: entered promiscuous mode [ 1285.350540][T12708] veth0_vlan: entered promiscuous mode [ 1285.421709][T12703] veth0_macvtap: entered promiscuous mode [ 1285.486525][T12708] veth1_vlan: entered promiscuous mode [ 1285.550976][T12703] veth1_macvtap: entered promiscuous mode [ 1285.789408][T12703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.958587][T12708] veth0_macvtap: entered promiscuous mode [ 1285.979721][T12703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.047974][T12708] veth1_macvtap: entered promiscuous mode [ 1286.083446][T12703] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.092675][T12703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.101962][T12703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.114909][T12703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.318794][T12708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1286.532124][T12708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.615950][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.624163][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.683552][T12708] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.693078][T12708] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.703796][T12708] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.713566][T12708] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.889275][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.897832][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.406725][T11397] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1290.606135][T11397] usb 3-1: Using ep0 maxpacket: 32 [ 1290.637743][T12968] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1290.644200][T12968] syzkaller0: linktype set to 774 [ 1290.699340][T11397] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1290.708998][T11397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.787996][T11397] usb 3-1: config 0 descriptor?? [ 1291.086281][T11397] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1291.131125][T11397] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1291.208674][T11397] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1291.216304][T11397] usb 3-1: media controller created [ 1291.401854][T11397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1291.776351][T11397] az6027: usb out operation failed. (-71) [ 1291.794065][T11397] az6027: usb out operation failed. (-71) [ 1291.802119][T11397] stb0899_attach: Driver disabled by Kconfig [ 1291.811194][T11397] az6027: no front-end attached [ 1291.811194][T11397] [ 1291.924272][T11397] az6027: usb out operation failed. (-71) [ 1291.930732][T11397] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1291.944440][T11397] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 1292.100607][T11397] dvb-usb: schedule remote query interval to 400 msecs. [ 1292.115253][T11397] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1292.156180][ T2230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1292.242193][T11397] usb 3-1: USB disconnect, device number 19 [ 1292.403077][ T2230] usb 4-1: Using ep0 maxpacket: 8 [ 1292.438323][ T2230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1292.484576][ T2230] usb 4-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.498295][ T2230] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1292.582682][ T2230] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1292.592317][ T2230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.602381][ T2230] usb 4-1: Product: syz [ 1292.607460][ T2230] usb 4-1: Manufacturer: syz [ 1292.612338][ T2230] usb 4-1: SerialNumber: syz [ 1292.832243][T11397] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1293.022153][T12983] netlink: 'syz.3.1707': attribute type 39 has an invalid length. [ 1293.467851][ T2230] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input33 [ 1293.496712][ T5128] bcm5974 4-1:1.0: could not read from device [ 1293.511654][ T5128] bcm5974 4-1:1.0: could not read from device [ 1293.596950][ T5128] bcm5974 4-1:1.0: could not read from device [ 1293.657875][ T5128] bcm5974 4-1:1.0: could not read from device [ 1293.677090][ T2230] usb 4-1: USB disconnect, device number 5 [ 1294.729241][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.737904][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.992853][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.001875][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.595891][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.604153][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.314783][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.323491][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.337423][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.347638][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.606890][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.614975][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.764280][T13026] bio_check_eod: 2 callbacks suppressed [ 1296.764336][T13026] syz.5.1683: attempt to access beyond end of device [ 1296.764336][T13026] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1296.784005][T13026] syz.5.1683: attempt to access beyond end of device [ 1296.784005][T13026] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1296.798740][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1296.809259][T13026] syz.5.1683: attempt to access beyond end of device [ 1296.809259][T13026] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1296.822694][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1296.956681][T13026] syz.5.1683: attempt to access beyond end of device [ 1296.956681][T13026] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1296.976774][T13026] syz.5.1683: attempt to access beyond end of device [ 1296.976774][T13026] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1296.992787][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1297.002750][T13026] syz.5.1683: attempt to access beyond end of device [ 1297.002750][T13026] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1297.016073][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1297.031034][T13026] syz.5.1683: attempt to access beyond end of device [ 1297.031034][T13026] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1297.045854][T13026] syz.5.1683: attempt to access beyond end of device [ 1297.045854][T13026] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1297.059612][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1297.072482][T13026] syz.5.1683: attempt to access beyond end of device [ 1297.072482][T13026] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1297.086764][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1297.099181][T13026] syz.5.1683: attempt to access beyond end of device [ 1297.099181][T13026] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1297.114058][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1297.124455][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1297.134444][T13026] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1298.349726][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.358027][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.366685][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.374785][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.383016][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.395745][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.403884][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.413387][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.421608][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.429985][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.438318][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.446652][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.454762][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.462960][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.471197][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.479479][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.488459][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.501055][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.510605][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.519169][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.527422][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.535670][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.543796][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.552381][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.560690][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.568913][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.577355][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.585574][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.593670][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.606158][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.614260][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.623904][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.632196][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.640413][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.648677][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.657048][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.665121][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.673336][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.681681][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.689900][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.703065][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.708253][T12281] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1298.712632][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.727022][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 1298.765992][T13047] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1298.772449][T13047] syzkaller0: linktype set to 774 [ 1298.909544][T12281] usb 5-1: Using ep0 maxpacket: 32 [ 1299.094588][T12281] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1299.104864][T12281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.183513][T12281] usb 5-1: config 0 descriptor?? [ 1299.481372][T12281] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1299.506901][T12281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1299.569811][T12281] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1299.578577][T12281] usb 5-1: media controller created [ 1299.707910][T12281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1299.758995][ T2230] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1300.040599][T12281] az6027: usb out operation failed. (-71) [ 1300.062383][T12281] az6027: usb out operation failed. (-71) [ 1300.068708][T12281] stb0899_attach: Driver disabled by Kconfig [ 1300.075155][T12281] az6027: no front-end attached [ 1300.075155][T12281] [ 1300.173659][T12281] az6027: usb out operation failed. (-71) [ 1300.179930][T12281] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1300.191203][T12281] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 1300.304830][T12281] dvb-usb: schedule remote query interval to 400 msecs. [ 1300.312384][T12281] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1300.328885][T12281] usb 5-1: USB disconnect, device number 3 [ 1300.416113][ T2230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1300.486768][T11397] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1300.662056][ T2230] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1300.673561][ T2230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.685010][ T2230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.695245][ T2230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1300.709031][ T2230] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1300.718843][ T2230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.736205][T11397] usb 3-1: Using ep0 maxpacket: 8 [ 1300.797019][T11397] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1300.802301][T12281] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1300.836787][T11397] usb 3-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1300.853795][T11397] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1300.957186][T11397] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1300.966977][T11397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.975275][T11397] usb 3-1: Product: syz [ 1300.979956][T11397] usb 3-1: Manufacturer: syz [ 1300.984912][T11397] usb 3-1: SerialNumber: syz [ 1301.107324][ T2230] usb 4-1: config 0 descriptor?? [ 1301.423140][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 1301.540152][T13063] netlink: 'syz.2.1718': attribute type 39 has an invalid length. [ 1302.170002][ T2230] usbhid 4-1:0.0: can't add hid device: -71 [ 1302.177403][ T2230] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1302.682591][T11397] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input35 [ 1302.704954][ T5128] bcm5974 3-1:1.0: could not read from device [ 1302.781703][T13076] fido_id[13076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1302.785742][ T5128] bcm5974 3-1:1.0: could not read from device [ 1302.845846][ T2230] usb 4-1: USB disconnect, device number 6 [ 1302.885517][T11397] usb 3-1: USB disconnect, device number 20 [ 1302.987656][T13083] bio_check_eod: 2 callbacks suppressed [ 1302.987708][T13083] syz.7.1724: attempt to access beyond end of device [ 1302.987708][T13083] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1303.013478][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.013478][T13083] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1303.030359][T13083] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1303.040787][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.040787][T13083] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1303.054258][T13083] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1303.083121][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.083121][T13083] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1303.098244][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.098244][T13083] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1303.117249][T13083] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1303.129318][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.129318][T13083] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1303.143399][T13083] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1303.154936][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.154936][T13083] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1303.168651][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.168651][T13083] nbd7: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1303.182236][T13083] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1303.192752][T13083] syz.7.1724: attempt to access beyond end of device [ 1303.192752][T13083] nbd7: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1303.210805][T13083] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1303.221992][T13083] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1303.329490][T12452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.583963][T12452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.911353][T12452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.137462][T12452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.139247][T12452] bridge_slave_1: left allmulticast mode [ 1305.145216][T12452] bridge_slave_1: left promiscuous mode [ 1305.159623][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.274988][T12452] bridge_slave_0: left allmulticast mode [ 1305.281267][T12452] bridge_slave_0: left promiscuous mode [ 1305.288289][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.157275][T12452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.245597][T12452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.287124][T12452] bond0 (unregistering): Released all slaves [ 1307.022760][T12452] hsr_slave_0: left promiscuous mode [ 1307.044308][T12452] hsr_slave_1: left promiscuous mode [ 1307.052903][T12452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.060900][T12452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.107292][T12452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.115095][T12452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.258085][T12452] veth1_macvtap: left promiscuous mode [ 1307.264055][T12452] veth0_macvtap: left promiscuous mode [ 1307.273535][T12452] veth1_vlan: left promiscuous mode [ 1307.279498][T12452] veth0_vlan: left promiscuous mode [ 1307.656076][ T8912] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1307.918553][ T8912] usb 6-1: Using ep0 maxpacket: 32 [ 1307.937540][ T8912] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1307.947223][ T8912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.088359][ T8912] usb 6-1: config 0 descriptor?? [ 1308.394263][ T8912] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1308.569945][ T8912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1308.704862][ T8912] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1308.712827][ T8912] usb 6-1: media controller created [ 1308.818276][ T8912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1308.912460][T12452] team0 (unregistering): Port device team_slave_1 removed [ 1309.118708][T12452] team0 (unregistering): Port device team_slave_0 removed [ 1309.166835][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1309.167113][ T8912] az6027: usb out operation failed. (-71) [ 1309.252200][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1309.286675][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1309.308032][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1309.322336][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1309.401343][ T8912] az6027: usb out operation failed. (-71) [ 1309.407875][ T8912] stb0899_attach: Driver disabled by Kconfig [ 1309.414771][ T8912] az6027: no front-end attached [ 1309.414771][ T8912] [ 1309.506948][ T8912] az6027: usb out operation failed. (-71) [ 1309.513002][ T8912] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1309.527097][ T8912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 1309.634832][ T8912] dvb-usb: schedule remote query interval to 400 msecs. [ 1309.643590][ T8912] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1309.681538][ T8912] usb 6-1: USB disconnect, device number 3 [ 1310.237534][T11397] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1310.471866][ T8912] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1310.504901][T11397] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1310.517076][T11397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.528904][T11397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.539468][T11397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1310.553228][T11397] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1310.563080][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.747192][T11397] usb 4-1: config 0 descriptor?? [ 1311.198703][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 1311.563013][T12452] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.681723][ T5790] Bluetooth: hci0: command tx timeout [ 1311.847748][T12452] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.108788][T12452] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.290025][T12452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.512651][T11397] usbhid 4-1:0.0: can't add hid device: -71 [ 1312.521382][T11397] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1312.566949][T11397] usb 4-1: USB disconnect, device number 7 [ 1313.044796][T12452] bridge_slave_1: left allmulticast mode [ 1313.051405][T12452] bridge_slave_1: left promiscuous mode [ 1313.058601][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.108455][T12452] bridge_slave_0: left allmulticast mode [ 1313.115014][T12452] bridge_slave_0: left promiscuous mode [ 1313.123465][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.775939][ T5790] Bluetooth: hci0: command tx timeout [ 1313.850276][T12452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.886362][T12452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.923677][T12452] bond0 (unregistering): Released all slaves [ 1313.954506][T13129] chnl_net:caif_netlink_parms(): no params data found [ 1314.568035][T13163] netlink: 'syz.3.1742': attribute type 24 has an invalid length. [ 1315.016931][T12452] hsr_slave_0: left promiscuous mode [ 1315.046565][T12452] hsr_slave_1: left promiscuous mode [ 1315.054737][T12452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1315.062897][T12452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.159860][T12452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1315.167931][T12452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.262276][T12452] veth1_macvtap: left promiscuous mode [ 1315.268865][T12452] veth0_macvtap: left promiscuous mode [ 1315.274857][T12452] veth1_vlan: left promiscuous mode [ 1315.280776][T12452] veth0_vlan: left promiscuous mode [ 1315.362887][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1315.373981][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.387009][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.410813][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.430833][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1315.827149][ T5794] Bluetooth: hci0: command tx timeout [ 1316.669374][ T8912] IPVS: starting estimator thread 0... [ 1316.814469][T12452] team0 (unregistering): Port device team_slave_1 removed [ 1316.875923][T13184] IPVS: using max 192 ests per chain, 9600 per kthread [ 1316.876868][T11397] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1316.892577][T12452] team0 (unregistering): Port device team_slave_0 removed [ 1317.086617][T11397] usb 8-1: Using ep0 maxpacket: 32 [ 1317.133363][T11397] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1317.143862][T11397] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.222247][T11397] usb 8-1: config 0 descriptor?? [ 1317.526508][T11397] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1317.578071][T11397] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1317.597134][ T5794] Bluetooth: hci1: command tx timeout [ 1317.638565][T11397] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1317.651158][T11397] usb 8-1: media controller created [ 1317.731572][T11397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.917595][ T5794] Bluetooth: hci0: command tx timeout [ 1318.086486][T11397] az6027: usb out operation failed. (-71) [ 1318.097253][T11397] az6027: usb out operation failed. (-71) [ 1318.104351][T11397] stb0899_attach: Driver disabled by Kconfig [ 1318.113916][T11397] az6027: no front-end attached [ 1318.113916][T11397] [ 1318.205750][T13129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.213120][T11397] az6027: usb out operation failed. (-71) [ 1318.213644][T13129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.219651][T11397] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1318.224215][T11397] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input37 [ 1318.228057][T13129] bridge_slave_0: entered allmulticast mode [ 1318.242226][T11397] dvb-usb: schedule remote query interval to 400 msecs. [ 1318.249678][T13129] bridge_slave_0: entered promiscuous mode [ 1318.251938][T11397] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1318.261119][T11397] usb 8-1: USB disconnect, device number 28 [ 1318.502997][T13129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.510826][T13129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.519496][T13129] bridge_slave_1: entered allmulticast mode [ 1318.571294][T13129] bridge_slave_1: entered promiscuous mode [ 1318.718686][T12452] IPVS: stop unused estimator thread 0... [ 1318.986177][T13129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.084139][T13129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.100950][T11397] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1319.399710][ T8415] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.569824][ T8415] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.632560][T13129] team0: Port device team_slave_0 added [ 1319.641503][T13176] chnl_net:caif_netlink_parms(): no params data found [ 1319.666221][ T5794] Bluetooth: hci1: command tx timeout [ 1319.713322][ T8415] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.804114][T13129] team0: Port device team_slave_1 added [ 1319.979834][ T8415] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.194828][T13129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.204561][T13129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.232241][T13129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.404990][T13129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.414566][T13129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.443070][T13129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.757486][ T8415] bridge_slave_1: left allmulticast mode [ 1320.763446][ T8415] bridge_slave_1: left promiscuous mode [ 1320.770479][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.806138][ T8415] bridge_slave_0: left allmulticast mode [ 1320.812093][ T8415] bridge_slave_0: left promiscuous mode [ 1320.824630][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.333944][T13207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1321.376548][ T8415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.437242][ T8415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.471606][ T8415] bond0 (unregistering): Released all slaves [ 1321.756710][ T5794] Bluetooth: hci1: command tx timeout [ 1322.093561][T13129] hsr_slave_0: entered promiscuous mode [ 1322.144865][T13129] hsr_slave_1: entered promiscuous mode [ 1322.360743][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1322.377276][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1322.387640][T13216] netlink: 'syz.3.1755': attribute type 24 has an invalid length. [ 1322.406859][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1322.421647][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1322.433599][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1322.563119][T13176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.573250][T13176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.581312][T13176] bridge_slave_0: entered allmulticast mode [ 1322.591063][T13176] bridge_slave_0: entered promiscuous mode [ 1322.715915][T13176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.723700][T13176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.731734][T13176] bridge_slave_1: entered allmulticast mode [ 1322.741541][T13176] bridge_slave_1: entered promiscuous mode [ 1323.310037][T13176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.350387][ T8415] hsr_slave_0: left promiscuous mode [ 1323.389556][ T8415] hsr_slave_1: left promiscuous mode [ 1323.400098][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.408092][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.463927][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.471932][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.576498][ T8415] veth1_macvtap: left promiscuous mode [ 1323.584570][ T8415] veth0_macvtap: left promiscuous mode [ 1323.592400][ T8415] veth1_vlan: left promiscuous mode [ 1323.598195][ T8415] veth0_vlan: left promiscuous mode [ 1323.826302][ T5790] Bluetooth: hci1: command tx timeout [ 1324.567447][ T5790] Bluetooth: hci2: command tx timeout [ 1324.774389][ T8912] IPVS: starting estimator thread 0... [ 1324.881704][T13243] IPVS: using max 240 ests per chain, 12000 per kthread [ 1325.027267][T13246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.089005][ T8415] team0 (unregistering): Port device team_slave_1 removed [ 1325.151404][ T8415] team0 (unregistering): Port device team_slave_0 removed [ 1325.789158][T13176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.246291][T13176] team0: Port device team_slave_0 added [ 1326.373383][T13176] team0: Port device team_slave_1 added [ 1326.625776][ T5790] Bluetooth: hci2: command tx timeout [ 1326.657762][T13253] netlink: 'syz.3.1764': attribute type 24 has an invalid length. [ 1326.822989][T13176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.831385][T13176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.860288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.870045][T13176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.040494][T13176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.047928][T13176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.074253][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.082890][T13176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.511571][T13217] chnl_net:caif_netlink_parms(): no params data found [ 1328.020833][T13176] hsr_slave_0: entered promiscuous mode [ 1328.031612][T13176] hsr_slave_1: entered promiscuous mode [ 1328.040963][T13176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.049347][T13176] Cannot create hsr debugfs directory [ 1328.262516][T13129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1328.499481][T13129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1328.528987][T13129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1328.677835][T13129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1328.712103][ T5790] Bluetooth: hci2: command tx timeout [ 1329.833316][T13286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.206478][T13217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.214324][T13217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.222417][T13217] bridge_slave_0: entered allmulticast mode [ 1330.232320][T13217] bridge_slave_0: entered promiscuous mode [ 1330.401287][T13217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.409156][T13217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.424646][T13217] bridge_slave_1: entered allmulticast mode [ 1330.438919][T13217] bridge_slave_1: entered promiscuous mode [ 1330.882139][ T5790] Bluetooth: hci2: command tx timeout [ 1331.144994][T13217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.196312][T13217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.307316][T13293] netlink: 'syz.3.1773': attribute type 24 has an invalid length. [ 1331.321082][T13176] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1331.460073][T13176] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1331.578211][T13217] team0: Port device team_slave_0 added [ 1331.593562][T13176] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1331.651768][T13217] team0: Port device team_slave_1 added [ 1331.702339][T13176] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1332.022354][T13129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.037725][T13217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.046028][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.073577][T13217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.232174][T13129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.323771][T13217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.331254][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.357744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.364770][T13217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.429228][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.437093][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.589514][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.597600][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.179938][T13217] hsr_slave_0: entered promiscuous mode [ 1333.190622][T13217] hsr_slave_1: entered promiscuous mode [ 1333.203082][T13217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1333.213184][T13217] Cannot create hsr debugfs directory [ 1333.872777][T13176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.150053][T13176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.372546][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.380406][T12452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.692734][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.700318][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.449734][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.457714][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.574822][T13330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1335.631401][T13129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.915723][ T5849] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1336.281931][ T5849] usb 8-1: config 0 has no interfaces? [ 1336.524053][ T5849] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1336.533750][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.542391][ T5849] usb 8-1: Product: syz [ 1336.546993][ T5849] usb 8-1: Manufacturer: syz [ 1336.551843][ T5849] usb 8-1: SerialNumber: syz [ 1336.701767][T13129] veth0_vlan: entered promiscuous mode [ 1336.728780][ T5849] usb 8-1: config 0 descriptor?? [ 1336.933298][T13129] veth1_vlan: entered promiscuous mode [ 1336.980351][T13217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1337.141803][T13217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1337.266332][T13217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1337.358598][T13217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1337.686238][T13129] veth0_macvtap: entered promiscuous mode [ 1337.838457][T13129] veth1_macvtap: entered promiscuous mode [ 1338.240451][T13129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.359787][T13129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.517670][T13129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.529154][T13129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.542431][T13129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.552652][T13129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.727751][T13176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.301417][T13217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.579965][T13217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.726769][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.735190][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.849908][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.858203][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.095504][T13176] veth0_vlan: entered promiscuous mode [ 1343.294143][T13217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.396406][T13176] veth1_vlan: entered promiscuous mode [ 1344.031512][T13176] veth0_macvtap: entered promiscuous mode [ 1344.167993][T13176] veth1_macvtap: entered promiscuous mode [ 1344.323512][T13217] veth0_vlan: entered promiscuous mode [ 1344.489931][T13217] veth1_vlan: entered promiscuous mode [ 1344.568016][T13176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.713306][T13176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.832639][T13176] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.841754][T13176] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.851099][T13176] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.860327][T13176] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.943413][T13217] veth0_macvtap: entered promiscuous mode [ 1345.014541][T13217] veth1_macvtap: entered promiscuous mode [ 1345.273757][T13217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.404446][T13217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.588726][T13217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.600581][T13217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.610545][T13217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.619880][T13217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.182868][ T5849] usb 8-1: USB disconnect, device number 29 [ 1349.183668][T13432] netlink: 'syz.3.1789': attribute type 24 has an invalid length. [ 1349.308798][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.317277][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.461912][T13437] loop4: detected capacity change from 0 to 7 [ 1349.531164][T13437] Dev loop4: unable to read RDB block 7 [ 1349.539457][T13437] loop4: AHDI p3 p4 [ 1349.543636][T13437] loop4: partition table partially beyond EOD, truncated [ 1349.552913][T13437] loop4: p3 start 4294967295 is beyond EOD, truncated [ 1349.610076][ T8415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.618505][ T8415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.346612][T13442] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1350.353210][T13442] syzkaller0: linktype set to 774 [ 1350.365710][T13447] 9pnet_fd: Insufficient options for proto=fd [ 1352.877290][ T5794] Bluetooth: hci4: command 0x0406 tx timeout [ 1355.463156][T13503] netlink: 'syz.7.1799': attribute type 24 has an invalid length. [ 1355.576856][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.585840][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.867676][T13509] 9pnet_fd: Insufficient options for proto=fd [ 1355.875043][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.883553][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.119159][ T8415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.127616][ T8415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.276210][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.284603][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.627026][T13514] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1356.633594][T13514] syzkaller0: linktype set to 774 [ 1359.983005][T13551] netlink: 'syz.3.1810': attribute type 24 has an invalid length. [ 1360.028766][T13553] 9pnet_fd: Insufficient options for proto=fd [ 1361.393220][ T8912] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1361.545833][ T8912] usb 10-1: device descriptor read/64, error -71 [ 1361.788309][T13573] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1361.800439][T13573] syzkaller0: linktype set to 774 [ 1361.845843][ T8912] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1362.045087][ T8912] usb 10-1: device descriptor read/64, error -71 [ 1362.177411][ T8912] usb usb10-port1: attempt power cycle [ 1362.565922][ T8912] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1362.636976][ T8912] usb 10-1: device descriptor read/8, error -71 [ 1362.987719][ T8912] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1363.062530][ T8912] usb 10-1: device descriptor read/8, error -71 [ 1363.177351][ T8912] usb usb10-port1: unable to enumerate USB device [ 1364.507408][T13600] 9pnet_fd: Insufficient options for proto=fd [ 1364.584078][T13598] netlink: 'syz.7.1823': attribute type 24 has an invalid length. [ 1365.381365][ T8912] IPVS: starting estimator thread 0... [ 1365.549737][T13616] IPVS: using max 240 ests per chain, 12000 per kthread [ 1368.611779][T13660] 9pnet_fd: Insufficient options for proto=fd [ 1369.171761][T13663] netlink: 'syz.9.1839': attribute type 24 has an invalid length. [ 1371.977844][T12281] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1372.268477][T12281] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1372.276824][T12281] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1372.287479][T12281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.408995][T12281] usb 4-1: config 0 descriptor?? [ 1373.167397][T12281] usbhid 4-1:0.0: can't add hid device: -71 [ 1373.176078][T12281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1373.257629][T12281] usb 4-1: USB disconnect, device number 8 [ 1376.389006][ T9146] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1376.601388][ T9146] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1376.612774][ T9146] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1376.630429][ T9146] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1376.773953][ T9146] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1376.784110][ T9146] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.792688][ T9146] usb 8-1: Product: syz [ 1376.797371][ T9146] usb 8-1: Manufacturer: syz [ 1376.802235][ T9146] usb 8-1: SerialNumber: syz [ 1376.985469][ T9146] usb 8-1: config 0 descriptor?? [ 1376.993551][T13745] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1377.028447][T13745] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1377.118655][ T9146] usb 8-1: ucan: probing device on interface #0 [ 1377.417105][ T9146] usb 8-1: ucan: could not read protocol version, ret=0 [ 1377.424393][ T9146] usb 8-1: ucan: probe failed; try to update the device firmware [ 1378.475949][ T5794] Bluetooth: hci6: command 0x0406 tx timeout [ 1379.490991][T12281] usb 8-1: USB disconnect, device number 30 [ 1385.325691][T12281] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1385.585819][T12281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.598284][T12281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.608587][T12281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1385.622576][T12281] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1385.632160][T12281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.779874][T12281] usb 4-1: config 0 descriptor?? [ 1386.344754][T12281] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1386.478271][T12281] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1386.638551][T12281] usb 4-1: USB disconnect, device number 9 [ 1388.226056][T12281] IPVS: starting estimator thread 0... [ 1388.356403][T13840] IPVS: using max 240 ests per chain, 12000 per kthread [ 1388.693007][T13833] fido_id[13833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1394.091284][T13884] loop4: detected capacity change from 0 to 7 [ 1394.163598][T13884] Dev loop4: unable to read RDB block 7 [ 1394.170556][T13884] loop4: unable to read partition table [ 1394.227118][T13884] loop4: partition table beyond EOD, truncated [ 1394.237440][T13884] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1394.539245][T13887] vlan2: entered allmulticast mode [ 1394.548887][T13887] bond0: entered allmulticast mode [ 1394.556531][T13887] bond_slave_0: entered allmulticast mode [ 1394.562741][T13887] bond_slave_1: entered allmulticast mode [ 1395.562822][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1395.583518][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1395.598364][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1395.689397][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1395.703680][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1396.860667][T13895] chnl_net:caif_netlink_parms(): no params data found [ 1396.960632][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1396.971873][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.807072][ T5794] Bluetooth: hci3: command tx timeout [ 1399.655787][ T9146] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1399.826209][ T5794] Bluetooth: hci3: command tx timeout [ 1399.908734][ T9146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.921241][ T9146] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1399.930599][ T9146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.048183][T13933] loop4: detected capacity change from 0 to 7 [ 1400.058964][ T9146] usb 4-1: config 0 descriptor?? [ 1400.184068][T13933] Dev loop4: unable to read RDB block 7 [ 1400.190536][T13933] loop4: unable to read partition table [ 1400.361393][T13933] loop4: partition table beyond EOD, truncated [ 1400.369495][T13933] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1400.416263][ T9146] usbhid 4-1:0.0: can't add hid device: -71 [ 1400.422910][ T9146] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1400.533214][ T9146] usb 4-1: USB disconnect, device number 10 [ 1401.017815][T13895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.025753][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.033422][T13895] bridge_slave_0: entered allmulticast mode [ 1401.042092][T13895] bridge_slave_0: entered promiscuous mode [ 1401.053709][ T9146] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1401.178370][T13895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.187828][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.195967][T13895] bridge_slave_1: entered allmulticast mode [ 1401.211248][T13895] bridge_slave_1: entered promiscuous mode [ 1401.279413][ T9146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.291301][ T9146] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1401.301201][ T9146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.496281][ T9146] usb 4-1: config 0 descriptor?? [ 1401.738258][ T74] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.907212][ T5794] Bluetooth: hci3: command tx timeout [ 1402.114214][T13895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.275851][ T9146] usbhid 4-1:0.0: can't add hid device: -71 [ 1402.282995][ T9146] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1402.301268][ T74] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.375165][ T9146] usb 4-1: USB disconnect, device number 11 [ 1402.490953][T13895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.656034][ T74] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.173939][ T74] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.325027][T13895] team0: Port device team_slave_0 added [ 1403.429006][T13895] team0: Port device team_slave_1 added [ 1403.986118][ T5794] Bluetooth: hci3: command tx timeout [ 1404.144610][T13895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.152366][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.186500][T13895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.201938][T13963] sch_tbf: burst 11 is lower than device wlan1 mtu (1514) ! [ 1404.488242][ T74] bridge_slave_1: left allmulticast mode [ 1404.494197][ T74] bridge_slave_1: left promiscuous mode [ 1404.501874][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.705000][ T74] bridge_slave_0: left allmulticast mode [ 1404.712226][ T74] bridge_slave_0: left promiscuous mode [ 1404.727118][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.871334][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 1405.160066][T13976] loop4: detected capacity change from 0 to 7 [ 1405.462384][T13976] Dev loop4: unable to read RDB block 7 [ 1405.469028][T13976] loop4: unable to read partition table [ 1405.526777][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1405.527041][T13976] loop4: partition table beyond EOD, truncated [ 1405.542718][T13976] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1405.666630][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.704118][ T74] bond0 (unregistering): Released all slaves [ 1405.850072][T13895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.858399][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.886220][T13895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.946015][T13971] veth0_macvtap: left promiscuous mode [ 1407.162135][T13895] hsr_slave_0: entered promiscuous mode [ 1407.175683][T13895] hsr_slave_1: entered promiscuous mode [ 1407.185112][T13895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1407.193554][T13895] Cannot create hsr debugfs directory [ 1407.299685][ T74] hsr_slave_0: left promiscuous mode [ 1407.366363][ T74] hsr_slave_1: left promiscuous mode [ 1407.375857][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.383800][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.500372][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.508615][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.705053][T13994] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1407.777011][ T74] veth1_macvtap: left promiscuous mode [ 1407.783088][ T74] veth0_macvtap: left promiscuous mode [ 1407.789546][ T74] veth1_vlan: left promiscuous mode [ 1407.795251][ T74] veth0_vlan: left promiscuous mode [ 1409.471004][ T74] team0 (unregistering): Port device team_slave_1 removed [ 1409.636971][ T74] team0 (unregistering): Port device team_slave_0 removed [ 1409.779336][T14019] 9pnet_fd: Insufficient options for proto=fd [ 1410.394998][T14011] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1410.403628][T14011] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1410.424076][T14011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1410.867401][T14024] veth1_to_team: entered promiscuous mode [ 1411.591617][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1937'. [ 1411.660147][T14028] veth0_macvtap: left promiscuous mode [ 1412.797576][T14040] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1413.380972][T13895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1413.547103][T13895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1413.700774][T13895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1413.742601][T14057] 9pnet_fd: Insufficient options for proto=fd [ 1413.848242][T13895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1414.316275][T12281] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1414.525938][T12281] usb 4-1: Using ep0 maxpacket: 32 [ 1414.593722][T12281] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1414.604297][T12281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.683483][T12281] usb 4-1: config 0 descriptor?? [ 1414.989393][T12281] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1415.040543][T12281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1415.124607][T12281] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1415.139262][T12281] usb 4-1: media controller created [ 1415.387883][T12281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1415.459032][T13895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.703201][T14073] ===================================================== [ 1415.710936][T14073] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1415.718636][T14073] _copy_to_user+0xcc/0x120 [ 1415.723550][T14073] i2cdev_ioctl_smbus+0x586/0x660 [ 1415.729072][T14073] i2cdev_ioctl+0xa14/0xf40 [ 1415.733923][T14073] __se_sys_ioctl+0x239/0x400 [ 1415.739087][T14073] __x64_sys_ioctl+0x97/0xe0 [ 1415.747960][T14073] x64_sys_call+0x1ebe/0x3db0 [ 1415.752924][T14073] do_syscall_64+0xd9/0x1b0 [ 1415.759125][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.765875][T14073] [ 1415.768347][T14073] Uninit was stored to memory at: [ 1415.773682][T14073] __i2c_smbus_xfer+0x2561/0x2f60 [ 1415.779151][T14073] i2c_smbus_xfer+0x31d/0x4d0 [ 1415.784075][T14073] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1415.789449][T14073] i2cdev_ioctl+0xa14/0xf40 [ 1415.794166][T14073] __se_sys_ioctl+0x239/0x400 [ 1415.799230][T14073] __x64_sys_ioctl+0x97/0xe0 [ 1415.804042][T14073] x64_sys_call+0x1ebe/0x3db0 [ 1415.809284][T14073] do_syscall_64+0xd9/0x1b0 [ 1415.814090][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.822987][T14073] [ 1415.827025][T14073] Local variable msgbuf1.i created at: [ 1415.832659][T14073] __i2c_smbus_xfer+0x86a/0x2f60 [ 1415.838242][T14073] i2c_smbus_xfer+0x31d/0x4d0 [ 1415.843217][T14073] [ 1415.850447][T14073] Byte 0 of 1 is uninitialized [ 1415.857601][T14073] Memory access of size 1 starts at ffff8880364dfd06 [ 1415.864507][T14073] Data copied to user address 0000200000000500 [ 1415.870988][T14073] [ 1415.873455][T14073] CPU: 0 UID: 0 PID: 14073 Comm: syz.3.1947 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 1415.886012][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1415.896453][T14073] ===================================================== [ 1415.903541][T14073] Disabling lock debugging due to kernel taint [ 1415.910057][T14073] Kernel panic - not syncing: kmsan.panic set ... [ 1415.916677][T14073] CPU: 0 UID: 0 PID: 14073 Comm: syz.3.1947 Tainted: G B 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 1415.930681][T14073] Tainted: [B]=BAD_PAGE [ 1415.934974][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1415.945217][T14073] Call Trace: [ 1415.948652][T14073] [ 1415.951728][T14073] __dump_stack+0x26/0x30 [ 1415.956314][T14073] dump_stack_lvl+0x53/0x270 [ 1415.961173][T14073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1415.967301][T14073] dump_stack+0x1e/0x25 [ 1415.971706][T14073] panic+0x4bd/0xd50 [ 1415.975904][T14073] kmsan_report+0x29d/0x2a0 [ 1415.980702][T14073] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1415.987304][T14073] ? kmsan_internal_check_memory+0x496/0x570 [ 1415.993559][T14073] ? kmsan_copy_to_user+0xca/0xe0 [ 1415.998861][T14073] ? _copy_to_user+0xcc/0x120 [ 1416.003749][T14073] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1416.009141][T14073] ? i2cdev_ioctl+0xa14/0xf40 [ 1416.013995][T14073] ? __se_sys_ioctl+0x239/0x400 [ 1416.019038][T14073] ? __x64_sys_ioctl+0x97/0xe0 [ 1416.023990][T14073] ? x64_sys_call+0x1ebe/0x3db0 [ 1416.029054][T14073] ? do_syscall_64+0xd9/0x1b0 [ 1416.034033][T14073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.040303][T14073] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1416.045865][T14073] ? __i2c_transfer+0x11ca/0x30e0 [ 1416.051203][T14073] ? kmsan_get_metadata+0x105/0x1b0 [ 1416.056686][T14073] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1416.063354][T14073] ? kmsan_get_metadata+0x105/0x1b0 [ 1416.068793][T14073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1416.074864][T14073] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1416.080294][T14073] ? kmsan_get_metadata+0x105/0x1b0 [ 1416.085726][T14073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1416.091793][T14073] kmsan_internal_check_memory+0x496/0x570 [ 1416.097845][T14073] kmsan_copy_to_user+0xca/0xe0 [ 1416.102915][T14073] ? should_fail_usercopy+0x2e/0x40 [ 1416.108402][T14073] _copy_to_user+0xcc/0x120 [ 1416.113098][T14073] i2cdev_ioctl_smbus+0x586/0x660 [ 1416.118350][T14073] i2cdev_ioctl+0xa14/0xf40 [ 1416.123045][T14073] ? kmsan_report+0x298/0x2a0 [ 1416.127952][T14073] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1416.133165][T14073] __se_sys_ioctl+0x239/0x400 [ 1416.138054][T14073] __x64_sys_ioctl+0x97/0xe0 [ 1416.142849][T14073] x64_sys_call+0x1ebe/0x3db0 [ 1416.147761][T14073] do_syscall_64+0xd9/0x1b0 [ 1416.152507][T14073] ? irqentry_exit+0x16/0x60 [ 1416.157339][T14073] ? clear_bhb_loop+0x40/0x90 [ 1416.162308][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.168496][T14073] RIP: 0033:0x7fdde118e969 [ 1416.173499][T14073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.193411][T14073] RSP: 002b:00007fdde2055038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.202048][T14073] RAX: ffffffffffffffda RBX: 00007fdde13b6080 RCX: 00007fdde118e969 [ 1416.210184][T14073] RDX: 0000200000000540 RSI: 0000000000000720 RDI: 0000000000000004 [ 1416.218306][T14073] RBP: 00007fdde1210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1416.226428][T14073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.235243][T14073] R13: 0000000000000001 R14: 00007fdde13b6080 R15: 00007ffc7ce3a538 [ 1416.243418][T14073] [ 1416.246915][T14073] Kernel Offset: disabled [ 1416.251332][T14073] Rebooting in 86400 seconds..