last executing test programs: 34m22.493096314s ago: executing program 32 (id=93): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, 0x0, &(0x7f0000000280)) io_uring_enter(r5, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xaa, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xf, 0x3, 0x1, {0x22, 0x4ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x6, 0xf}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x1, 0x1, 0x81, 0x10, 0xb}, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x3, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x412}}, {0x70, &(0x7f00000004c0)=@string={0x70, 0x3, "ca1fe2796cb10c4af6cf5a252dfcc5b91491b3f6b2c4fbe5fd467ca119fc9d7fdeef48b775a85d1d1eb933bd10c3a0ceec0e467ef74d4ef320e4b23b797bc6303928aff1345cdb294e626795b13cd003f72f6642c90bd691d87e976f37460776aac4494106ed99c009a88e1e42e7"}}, {0xbb, &(0x7f00000006c0)=@string={0xbb, 0x3, "82b2805c565a25cc9b44e1e6b858d95b26eafc7ba5d4696162c03dacf092d8129e1ace6c084fde0028da2cea64e5fe939fd30ae5a1a160ec949719a1c9091a3817095aa7d6f9fae0b2f8770a48d86e705525d583df557ad7873a0d8e769675cf6b9a350670cd0f949fc995715fd813b711e19e12c146d80b3fa6335cc38be28071bb259ab546afea9aebef0fe11754bd251e9fd4998ca7bbaa300ec4ee44bacba1b8d8495fe3d9cdfe15e249c7bd768b93ca7e6edccc92ec57"}}, {0x38, &(0x7f0000000780)=@string={0x38, 0x3, "94418163456513dbc5cd4e08540008c0c09b00c3e04ec4b0be40827124883f7ec785200d7e0a37f1bcc4a9ba043e983ccd337274197d"}}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00'}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f0000000080)=0x5, 0x87) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000000)={0x1}) 33m43.887328317s ago: executing program 33 (id=140): bpf$MAP_CREATE(0x0, 0x0, 0x48) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB=',rootmode=00000000010', @ANYRES64=r0]) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) 29m51.304287493s ago: executing program 34 (id=536): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, 0x0, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) close(r0) 17m13.554279002s ago: executing program 0 (id=2089): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) 17m13.381522931s ago: executing program 0 (id=2090): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17m13.141429934s ago: executing program 0 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17m11.245017066s ago: executing program 0 (id=2096): socket$caif_stream(0x25, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00"/11], 0x48) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 17m10.968599147s ago: executing program 0 (id=2098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x409) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 17m9.890984145s ago: executing program 0 (id=2101): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16m54.444877439s ago: executing program 35 (id=2101): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010101000000000000000000f700007f000001000400000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m21.433344035s ago: executing program 8 (id=2880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x145, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e657400000000050004"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c001680"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 13m21.122419093s ago: executing program 8 (id=2882): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x88a8) 13m20.897794528s ago: executing program 8 (id=2883): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 13m19.907461565s ago: executing program 8 (id=2884): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 13m18.368804586s ago: executing program 8 (id=2889): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x400, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000000)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0xe70265ef78de5a29) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r3, &(0x7f0000000280)=""/149, 0x95) syz_open_dev$swradio(0x0, 0x0, 0x2) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13m17.771605745s ago: executing program 8 (id=2893): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 13m2.680681392s ago: executing program 36 (id=2893): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 12m42.462453204s ago: executing program 2 (id=3005): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100040000000000040005"], 0x24, 0x0) 12m42.297388122s ago: executing program 2 (id=3006): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socket$nl_rdma(0x10, 0x3, 0x14) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 12m40.783762563s ago: executing program 2 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) 12m40.631011247s ago: executing program 2 (id=3009): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 12m40.461059941s ago: executing program 2 (id=3010): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 12m38.270429929s ago: executing program 2 (id=3014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 12m23.224582336s ago: executing program 37 (id=3014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 8m37.551002597s ago: executing program 5 (id=3743): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x3, 0x0) 8m37.133816122s ago: executing program 5 (id=3746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000df250c"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 8m34.584534802s ago: executing program 5 (id=3751): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705000700880000000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8m34.4947592s ago: executing program 5 (id=3752): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0xe0801) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x26004090) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x164) 8m32.67873197s ago: executing program 5 (id=3755): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x3, 0x0) 8m32.417738969s ago: executing program 5 (id=3756): unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047457, 0x0) 8m17.286530946s ago: executing program 38 (id=3756): unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047457, 0x0) 4m18.529770111s ago: executing program 9 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x449d7}, 0x0) recvmsg(r0, 0x0, 0x40000040) 4m18.222053644s ago: executing program 9 (id=4324): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x4000000000000004}, 0x18) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r7, 0x40046104, 0x0) r8 = dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000014c0)={'syztnl2\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m16.648412152s ago: executing program 9 (id=4328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_usbip_server_init(0x4) prctl$PR_SET_NAME(0xf, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff5c) 4m14.905594294s ago: executing program 9 (id=4332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_usbip_server_init(0x4) prctl$PR_SET_NAME(0xf, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff5c) 4m11.381274504s ago: executing program 9 (id=4338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$hidraw(r3, 0x0, 0x0) 4m10.757572274s ago: executing program 9 (id=4340): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0), 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x44000084, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x15, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x5}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0x8, "52a7"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x1, 0x5, [0x1, 0x3, 0x1, 0x0, 0x0], 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x8, 0x9, {0x7, 0x25, 0x1, 0x1, 0x3, 0x5660}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0xb, {0x7, 0x25, 0x1, 0x0, 0x0, 0x27}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0xb9, 0x81, 0x9, 0xe}, @ptm_cap={0x3}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r4, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x68376000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xc800, &(0x7f00000002c0)={0xa, 0x4000, 0x0, @mcast2, 0x7f07}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0xf, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'oX'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x9506c56c30e36a6}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20481, 0x0) write$vga_arbiter(r6, &(0x7f0000000240)=@other={'decodes', ' ', 'io'}, 0xb) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0xa5745c085c67f827, 0x0) 3m55.444344577s ago: executing program 39 (id=4340): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0), 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x44000084, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x15, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x5}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0x8, "52a7"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x1, 0x5, [0x1, 0x3, 0x1, 0x0, 0x0], 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x8, 0x9, {0x7, 0x25, 0x1, 0x1, 0x3, 0x5660}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0xb, {0x7, 0x25, 0x1, 0x0, 0x0, 0x27}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0xb9, 0x81, 0x9, 0xe}, @ptm_cap={0x3}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r4, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x68376000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xc800, &(0x7f00000002c0)={0xa, 0x4000, 0x0, @mcast2, 0x7f07}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0xf, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'oX'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x9506c56c30e36a6}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20481, 0x0) write$vga_arbiter(r6, &(0x7f0000000240)=@other={'decodes', ' ', 'io'}, 0xb) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0xa5745c085c67f827, 0x0) 21.649328567s ago: executing program 3 (id=4969): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_pidfd_open(0x0, 0x0) process_madvise(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000500)="ad", 0x1}], 0x2, 0xd, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 17.017251771s ago: executing program 6 (id=4976): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000440)={{r0}, r3, 0x8, @inherit={0x60, &(0x7f00000003c0)={0x1, 0x3, 0x3, 0x9, {0xc, 0x0, 0xffff}, [0x6, 0x4da, 0x400]}}, @subvolid=0xa8f0}) r4 = syz_io_uring_setup(0x74d5, &(0x7f0000001440)={0x0, 0x9ccb, 0x4000, 0x0, 0x249}, &(0x7f00000014c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000001540)=[r0], 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r5, &(0x7f0000001580)={0xa, 0x0, 0x0, @private0}, &(0x7f00000015c0)=0x1c) syz_usb_connect(0x5, 0x668, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0xaa, 0x1d, 0x45, 0x40, 0x5c6, 0x9002, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x656, 0x4, 0x9, 0x1, 0x10, 0x9, [{{0x9, 0x4, 0x3, 0x1, 0x2, 0x2c, 0xb8, 0x4a, 0x2, [@generic={0x99, 0xa, "652a7e994738fc114c38ab94f84ce7de2c9cafce03c0528b5035f89c51ae39c4d2021d3dfda111bf763fc95b395ada99c9132c634df628a3fd8215150260e2fa40ff84a9a484064d2473eab0eaae0251407cadc5a40ac1656f876fdb1f20c1de48c6f5d80258b16132c3578fd0126eebe6436dd276ee7ac0b663f0b73ad410459148560d30edc0da508a3bcb56fdbc8ccc2448c5e9dfd1"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '#'}, {0x5, 0x24, 0x0, 0x71}, {0xd, 0x24, 0xf, 0x1, 0x8822, 0x9, 0x9, 0xa6}, {0x6, 0x24, 0x1a, 0x1}}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x0, 0x3, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xfe, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x7}]}}]}}, {{0x9, 0x4, 0xdc, 0x1, 0x2, 0x2, 0x6, 0x0, 0x7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "65e389fe2ab8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x2e, 0x29b, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x16}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x673, 0x3, 0x9, 0x6, 0x8c}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0x3, 0xb, 0x9, 0xec5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xd, 0x9, 0xed}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x1d, 0x4, 0x4}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xeb, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xb31}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x4, 0x80, 0xda}}]}}, {{0x9, 0x4, 0x83, 0x1, 0x7, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x5, 0x1, 0x20, 0x1, 0xb, 0xd, [@generic={0xc0, 0x3, "e0133cc1f4795b83107be13cfac4a1b1da7d13fbe0ce48cd753247086263157d6edf27457d855c27e363d7bfe86eec1b8f4c0e91d1f924f579d64a0322dae78020fc95a1806d78e066edd8ae99bb3a687fb66a26ab465f6df6b90d0097fa03fad6673e1299045aa518ae73fbc0070a4ba0fda8451726803f275a0d924e767d64c83857248a01cb85609e765fdb14d403672a948cedc9a5e704c15a792efe952fedc3c09cc5c5cd04fe2a91289c39656ba376b17795760082e5ad4b30ecd9"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x60, 0xc1}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7f, 0x18, 0x2, [@generic={0x80, 0x5, "df9a6a2c58d26cfc796f088e2ddb6cd231c16699790bf4415984d173df0d4ee17f1cfda9f370fd4dcd4a28c3d97310a5b67bf6b84b1ee6a6c77e8ce979d69048820c7916b2097a6082feab94b863680c300be3764bed8047d564f02a6240d2270d58f02b1852d917c7d161a5a6fa13878ce3e30d82b6858e9f2eb7344c8d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x8, 0x81, 0xba}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x8, 0xf8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}, @generic={0x3e, 0x23, "c418a93c4f409537d887349d745e328467f96b6a5ecd7b764c53dbceb2d34a12a46536208384d30231812e5c84f026943a36d91419e4f19aefe5206b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xa, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x4, 0xa5, 0x7}}]}}, {{0x9, 0x4, 0x2a, 0x4, 0xc, 0xff, 0x1, 0x4b, 0xf1, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xe39}}], [{{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x8, 0x5, [@generic={0xb2, 0x21, "aecb73f461712ab90730249a807477e4046beb39b5b61b16adb6f98556e7dfcd5e485d3231273425ebe18a503e74574084c94221b8152e8149a5f1ac14b97c40ff447092371b7fbc0065a1a5abbd0b8ccd6a065152d71a46c380ae2aeeaf9ad7a4913b6abb4a76569506a18858214104c485b5c0faeef140c2c37f0d85f7daffd0a7870ca6cb24c11075248e36f22c7ea831c88339bdfa8afdfbc936eba62892dab312ebef3718f49c556609857ad0fe"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xfff7}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x67, 0x9, 0x9}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x5, 0xa1, 0x0, [@generic={0x5a, 0x23, "93f82c4153f1ef406e3fc3266fcbefa70d881f0f64dcd62109e946fdee51c2cfa0cd9238ff6911ecb98e2edafede5e9f76e17666f84271e6d1be6ad18a3a28849cee1ab45d77f5f93086ea1bcde018f2ff99da3fa1b419f6"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xa}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xc0, 0xfb, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x0, 0x5, 0x59}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x5, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}, @generic={0x16, 0x22, "afa5ce90f6f838cab70d4ddbb7b6579cfb1043f4"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xa7, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x8000}]}}, {{0x9, 0x5, 0xd8e2f01dff0502a8, 0x3, 0x20, 0x0, 0x7, 0x2, [@generic={0x28, 0xc, "3d3c3fb9c7e9f7da170e6cfbca37b1cf7fc775e39bb0874788c35a262dd6d8a61be97153d8f0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0xd, 0x5}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x8, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x24}, @generic={0x5c, 0xf, "a60f4b2e4d99be75923c4fff11ae95d52fc3a0c62c7f14670e1f398f2ed65be7978d96b58fc210ad1e51175393b60274ee963856500d665043bb13973cf9a2f44b5d4abfefd6179247a6e611fee52f0f6e1589f2022200fc73b9"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x1, 0x7, 0xf, [@generic={0x5e, 0x9, "954eb172c6c0d047e949d121dfd06304bcf9f5acaa1487b7b2e8bc71eeb85a7882200ecb96355fb2f31b9706b116af86955946ab820cd6aa67df03f54eca3f81a274b97544bfd81ea9fbf9509962566cd29c7d2351019bec8fbd1109"}, @generic={0x7b, 0x1, "88408c41c8ffdcdd50b0841beed538fc34c3375224a9df816b0cfe970e363243af6e64cc9a3550779e5d966a3f70ccd57604365bd37117a09d21cdc5731703c00f8049a23220157b48a38aa174246369dc5659b0909a38ad90fb1755701a92b0611538c9ffb334e039b34b62f407f0d00213a15beae75b8600"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xe, 0xa2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x27, 0x7}]}}]}}]}}]}}, &(0x7f0000001e00)={0xa, &(0x7f0000001d00)={0xa, 0x6, 0x201, 0x1, 0x8, 0x0, 0xff}, 0x5, &(0x7f0000001d40)={0x5, 0xf, 0x5}, 0x1, [{0x78, &(0x7f0000001d80)=@string={0x78, 0x3, "6ab2499e8f9a332de542a70adf7da57bd633dc8e681b5d4da1e95b1697316432a33c117ef48b6bed5426a891c439865e235e5f983c8ead2ee0b9a77939a8ef2ce90b93076a55a60115c0c0269a3ec9f1056a27f92f841e7d41bb3fec3dea05871c6b47c726d6a7f5eacebdc1b8dda890d65222533652"}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000001e80)={{0x1, 0x6, 0x6, 0x8000, 'syz1\x00', 0x456e}, 0x1, [0x515b07e000, 0x1, 0xd74, 0x3, 0x4, 0xa143, 0x98, 0x0, 0xffffffffffffff84, 0x0, 0x5, 0x6, 0x9, 0x9, 0xd9, 0x8000, 0x8, 0x5, 0xe1, 0x10, 0x6, 0x8, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x1, 0x4, 0x53121b8b, 0x3, 0x5, 0x8, 0x6, 0x202, 0x0, 0x4, 0x0, 0xe, 0x2, 0x0, 0x99, 0x5, 0x5, 0x0, 0x1, 0x11, 0x6, 0x9, 0x4, 0x7, 0x7fff, 0xffffffff, 0x400, 0xfffffffffffffffa, 0x5, 0x7f, 0x5, 0x2, 0x8, 0x0, 0x5, 0x7, 0x5, 0x1, 0x4, 0x2, 0x6, 0x8000, 0x3, 0x2, 0xaf5c, 0x8000, 0x5, 0x400, 0x7, 0x5, 0x5, 0x2, 0x7, 0x40, 0x4, 0x6, 0x3d3, 0x100000000, 0x3, 0xf485, 0x12, 0xffffffffffffffff, 0x9, 0x9, 0x5, 0xfffffffffffffff7, 0x5f, 0xd5c, 0x5, 0x401, 0x1b60, 0x2, 0x1, 0x6, 0x1, 0xffffffffffff8001, 0x80000001, 0x800, 0x100, 0x186d, 0x5, 0x7, 0x3800, 0x101, 0x8, 0xfffffffffffffffe, 0x80000001, 0x9, 0xfffffffffffffffa, 0x3, 0x0, 0x100000000, 0x7fff, 0x3, 0x5, 0xac8e, 0x9, 0x5278, 0x8, 0x9, 0x6, 0x9]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8011) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), r6) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0xe0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000025c0)=0x0) prlimit64(r9, 0xa, &(0x7f0000002600)={0x101, 0x9}, &(0x7f0000002640)) socket$nl_xfrm(0x10, 0x3, 0x6) map_shadow_stack(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet6(r5, &(0x7f0000005880)=[{{&(0x7f0000002680)={0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x902493e}, 0x1c, &(0x7f0000004a80)=[{&(0x7f00000026c0)="9c9ced8fd24fe6a770077dd70d29a032595688924f817b9db47d92ede0f0c6765cb03527390294202d0c2ef18457f3f4b677e5564aa927680d16bf7f61e8ed4648589f258e6483333860bd7ce7ed90aa9931d6e6787c0612b2", 0x59}, {&(0x7f0000002740)="b81a010c33dd9a19b2bfaff40721fbbca589db77fb8d93b64911dbb0f5be36f95fe3ff9c7de029022aa82d65cbb1d2c259c00429d24a90c29e5ce58cecf889604e7cc3c120e350793147c475596a6cd6c59557bb0e57f24ed8925765ac0f89273d1a8ca0c196c7f0af775517e20c87667fda36fc8ca3ffdab3ef52394098b60b05cec8e8a531813524ac32e58b08d23f9b8d9e4ec3b0327534f4f3ead5dc56e57db2fc55cae5e2", 0xa7}, {&(0x7f0000002800)="a4809475d2024d02cd724428ae93e29f16161e05d5c5abd23a9e51e5087bd81a0bc6e9510b16191ac7458216757c65ad5cc2561dfa11a7eb15f816ab7f053e901edf35130726169add5b88b363c17fc64e58eb7bb0a2ddc5a8c509c5d3a49bdb39fe40cb92d9", 0x66}, {&(0x7f0000002880)="ef78556c0cbbe0d88be661dc9e14438298a4cbcb7601ae23ba0e26ec73576bfab6323c71c4b0c7f6e904308537507a6c97530460c0f7c56af6da51fcd809d7da120051b31a528682607aef7116adb386f10dbd012191863cf310a41868930b83970babd0087d788aff47f0f9e1803e6010e8332a49485a68d8ec1a8ec74a3eb949b51c902882507ad30df692811abcb4e7d4a2c92279ea6017cea5dc12f2b96d073b06c004049a4c2c611ff4e29a937ea2a1a4ea70417b9dc06b57ef55f70b1b2c80a10dc2845d9499c775893a0e7e9ba0a0ab5abbed9259e92c3a9cec3a08891194eb187d96688ee7eda45790205bf37af776423510656ebf606952becc7ef7021c925722251778ee7bd3b872ca547c34a0ae7ca60f4f000698145361f6073739108a211520281631d0cea64e5c45b1420ed261ff2834fa2f4ac2ac6d24e12505c82aead83cfdd81d3267f8b5f30be30eef9a6b66da027a8a8276ac16a0892b817ea0744a326c3632b1479d774b92a7007734adfab1abde56b11ab353a18567335a78f6c9a52de654d0767bdd430d00d92c0595c26f47c5d43e79cd57167177c33fc7f1a1b4d1500c2757cd192d7f5a2e9d03f6707c5ab12f39e98673bcd08f0b45a17f9d6093b5dd582263f424c0f4c05d01d6316eb7431fa19ab524c8accd5e50d3208eafe17c2ec5831f1a9f365d53f677784ee33ae8235dbfa6a493edcd37a3a50a25d5267b8cc4352ffe90061d48e8240e2f3c30dd613f86ead28d9199ff4a152ae1546b1156239225fa4c0bff4ee5908f60a63e074c44d8f4bce83aa03af57293e1c6778ce6aafa648a32cda62fcb9cce86b376fb19e8c54187bccbfb5c635ca72646b38d60ec5f15c1592222cf4d4a1775f8562744599ebbf5e34549da3de9f95ec1a795e286375104cd0d1cbb37ba38ee8f1023c0a6cd4e85b51e1f002be020e848f1a840c3b0907b0b9d62848041e88227f1c461b13fc06124b01665da6d0b74e90659f82033ca07b21de1783f70eac7f8c86ca1f7e7e9ad32dd09aaddee2a5882e98b5116341bcfe17c94a1011af59a790ff84bd4a29612d40c3d995ab77b7de930674a4252a2413711906fdc8d164ba172e7e7e3b48a270aac339eeaf5e6938dd1c9a5d7c9c1f85128323aaaa5d01773ad553e91c07e5f03d61d9439fd0d25c83526f4f09b681417dbb598b038a8a4463536ec50fdb8310929cfc3c222bef39d2c6477eca1370bdc38009c0adf02b67547b925753fc00bc8915b33596e60379e0f88f712ffec173a958858ad9ee92193bcd6dfa433a476e5f313e5e5219375ec672d56289e834291992c0f9b9646fbebc27c2ab670c73004361fe125f58b1bef5e2476a84eb70bf4ccb18e998868bc20c75c0b12d3866b8c1a503bf0353a90f5df1d3d1773c42cba33b736b073b0999f47bdc9cbe38b3241583fd469f3bba96bc91b20a3a2bbc3912e3bdb9c5128f8d79a60a134c9c65f12c71cd5115c2b76df564f400947a8aee7fe6d90a0c027554ad1f06b3f8ced89a51e87830dcb3380f9f0dc1ac1b0da1d96602a140bb24cf160b15884b4973ffc02e513583dba5d7dcac2c1fb217ffc49382672b8e7d052fb247b8ea4fed773c49d75384bb135c15722879dddb79a3a0d17c8df40c3e9ce0676a55bcccf07bbd452dbd07ecb417fb0981fa381da09bed7438c23de82b3a747ebe880161b6a263f0e8cf5906b43bc8dae7823688acb31215326066c2c3d6b847216a27d1463449b513da7ee7892e72964b5a9e34364d75479a9d587f62924c9a019a0c30b66f87a4bda33e217d05cf88b4788817a5b5e97cfa3ddc0155175e39a302acd5f6303e074a8931649a7c611fe319380d4fed0787df33f5b46fc23233e4bf84727f3f4da8cf1a84a7fca19a93fd622069f5b5bce0639c0899d0265ad8ff13bb1bc57c2af2ad4f984cb87303522c8fb9bd657d9770e9255efe65406fff0b2aaa5afaca606f56bc55cadcd63e0cced20656dc0cfc5edd0b0e2f0824d350577c52f9d36fa3de4345d193ed10e963b9d9a4c67381bd3b0077381b674e5c6e6cf0cf37f923ac701134fe50141a745734f5f6db7537602780e28006f6efa32d4679e98a84bd7fab2af5960db8c740993fa0eb57c017b7f30d996548d62b47ae63b944e17e8dabd478d8fbba98a9e1030ce70c8618ea9891377eacf795dcb47bb08723ff2418b63ceef8503b6a16d6541bfa6d31c176ff7ad26372d9eb164e6d85b3da6545a6a5d93cd2f3091808c19025b8810baec20af0d432759be2f64b8f1fd9fedea2b8d9c27460e297c59acd176ab12df53781a54dd66b096d6f47f07d0826930649cb6eb3e2b68664b11cbe5563ff2b4ec575b8e0563fb651dd523aeb1bd5960f15b4974e37554bdad24034625e19287df7854919e0e4968cc8bc36f4894214ee4a7351eb9c360b13c14f2b089a7ca2e737cdc73ee73cb36b6543ccbc001f45e442b181478b059da3630c61db972445633e258eec391f01d4aa993eaafefc6ddbc38d6ce5a015762950d134d9a89bd6f58d5bf1d496a6c116f51d18af8b1e48c3387cdb7160907561235eb7abfdf70fc0a2462df8ad55bb1402125e07ce43cbb3760b2c0355415b0c086dbc89b823f800a2bafe4066955265ab5492d32a21f9376b3666b8a41263f291a28ef007a7e1a4849c35d400506237bf23d4701a178714256598ffc717cf93e9c057e3964023e2e351533de7d87ae626f350a304e871aa7e132e87faeae7a2f367f6284d4c4f9bb4d2950aea3fef1c013d1933861924fdfa2277f65979314f0fcc1e537432ff8a5bd1e43b10eb346054213e262334d79da1a83d2deb3d079041a3509b9e166611e13f006e42893495d8366cb947fa1e28c2e203c2320aa2fef5840ce88493b2e16d80c86d5ce820ed67ad4f91ca67d3c01939dc03098506d52169644d9581e9cdfa98a46c53e0977c50d68bfe15e771847e21f148ee436363eb52bb9da8a9ab9bcb3e0e39acca9a2127400c10330d05668e4e8f7719524feb0f8c67afba26b80221f3c79e374119f9df561e3f773b9715bd4ac914cc608bdc4e8587f06a7759489b14e06b5349e1baaa282ddda760b56999992a9010dae182eef883866b95e4207c790402ba7076caa93ef715f24c1ae2549ea5196bccc7b4b6ce4483e4a40e5c8faf605e5152e690970039267a17394955ca85c6e1975fe57d1276a2255e73ad136a88935da18ed4e28c8e6c7134158bc6888d37b38e5416e60ca8bac2706815ae1bfbe4b6c8976bab2c88862aa971fd64bf6c54a367fbf22c82b5da1e7d4f0b9de068c34fbcf06c28fe25746cdb663c7f8bd02f61f1940a88b2a213126b4abfba0d0e2a67e0180e0d1a0daa8a16856f292813be5f12e3fb025c19b4ac09f292c27023262dda7934f8182be2be02f9e08f0d75382eacb24d5887021c2686fc496beb43667a77849dfeac8d4644262acf53c72835bcae45ea2856a1e6019f61582487d9912563308ce771cbbdb854dd5f56d321b8252e63187d283f0ebde3e0af7e8a62b569de0476e89b3e5eab7bc833c2189f376620f6c060eef3cf66adfa2c9ab9087daf5c7d86e8ddb58b8a9708e1b031e2837e3544824ce8a4dbb8b0cfda5e6b936777a2aa6543ff302ed3f76e62382602555de8179737b97ffcc92a23dddf48fa7d4fd7c850136ab8d91ee60af0a3cb0e4400475d320f7999c38ac2fd576b7fea22a896977c30e56bfa1d30841d91bdcf30251adf0d921a02823e3cf7e2ffe195709680005ba841fde42c8fda1bccae833cab24bf9aae6c65c164a7c0e4892369c928c6290313d4751803a81b7a6b5d3421a9ddeb6ff0ba3a35efefc1f5fd6200c4f056df6d3a2476e4e30705efa6b3fee2f3655e40195f1185e46066ff532e7158f93f28327e8b67a63a4509adfa37af2f15f5aa530c608ba8d5f4c45348a273e27147eb90e88ecc9b301c0783b5c549195890ef6c7f6c5411117eb7756ac444acf3f50ffdb133fea717d39314690374ff344f576123987324c2e253ee01a87463a83488ae9770efea0402638998551fdc149fbd45629a0cde3792932e5b3c5e5be59f2c3fbe8de60af7a05eb3eff8b79db10cad7d88d9a03e6a854622299d9285f8bc868a3a1aa02d2bb03a5ca25c4638d882722cde5e2c0c516b8b67fc2571c2e9ab80d898d3d0c2acdad440706952cbcabcc0b1b5b5f797734e67c57769779c11c1dbf879fe54c44c655eeb2e11105fe7e441d1c943e922fee599d85fc9da1ccd6caa56584531df98de50f5fcc856a005ab7c70c970a79e3d368e65893dae19a69a93a8ff99a6cfcf00c4282a70e83090b73203f79a64ce3a91743c1b8f666e8c991dd6ee4b2a0c75eece1e488c7c69cb671d7d15e032ac9af88311aecbb8dedd38b63ffc61f72ea09b16260690efda94aef4e98d9b4056880e3f0e3290d2cf389226961328159775308443604dcfdc913a11692863599ecbc77aad2f73603f306b61f16cc9087435d8e77e583be2f06e0053be43aa1779575f8e09a5acd98600a0d2959797374ae26c6c3f330a79720a46ed905222975b959a224fb05a8bfb62523901a721a004c8076bf98346a99cb6f0df6e027c7092f134584eccb381a6dfe83ffa23b73805a2c8f16686d30685417cf758b2ce06967759c2ea2956918f663ebe90553e98ab4648a0e9b2bd6f57e7920a845339cf86bf90f6c18a2b35d88760246c387e8f57d540712ae00a7259d3ead93725ffc10e7cdcde114cb9e57598f3a98c088d966cf194967d594dfaced4879bc290780acd1364fe6ec87a835122704fed785a2670729f81f4c38bba2b6017fe9602674937063cb5ef17a4eab3c19127d29d171a71725eebd3a09472947e97cc9599efeddb5699c6e926cc9f9b34f6aeeb2f23941b8bbad9266ec578fe25cde6452f94656edd858ac77b81665f1126769c2e383d9f0be45e123877f84cf81fcfb1eb47601a8a1e39958725dc92593d8b0988a2a9ac533b910aab12ec6a2952151e485fb389712e30fd8bf8a5f020c255802c9390b3715b9a33437c225c3c36e064464cd61bf9ae1e28532a598119c38a7472b7fe0bfc0e7c14d29a8b2dbcd941edb011917e3d6f18d0f4ca273fb68e31317c57df59ecddc2dad9a359fb211564630ca01bc3a3700a2fbaf757a16968209b5c4747d9ddd79d18dfa0bb141854843777ed186101e6db9d7439ea36b47dfedcd13c73bf25d44afe7b840eb62adf1e4dc2cfc3a579f5708aaf69734fdd34d7c907811e9e667cbfcd7a0697243a39d03c867f8a1c19bab91bb73194b1804c54096d452bdaaf61d8fb053b5df799228faf0f87d6f95676917d85a8a738a86a113c7af3cba5e3619c81c17a263aa2acfbcea3901bf0fbe13546a78498fd0b0be7aca58faaa5e5dd6d63f7f57aa0370e62a7b2b3ef365d939b5a9dcf6794be75488795f651ae1365a7a17efcc70081f9318cf0f34aff40444d48d854315b15fcc375a4e82734473ec59fb3fb5f68bcbdd6f40f82fe46b3afb7ec316b22c029dfa5c9a1955b521c5469bcdd2a4f3f3373ec73d52bcdf76ac4a91744058942844cb0bcb5f744eda18301cba7f683ce119db514dca24ae09c03e587b86109a7a9c46b16cb593cb54a1072c9c89a3847c768f77831025e220354db7847fd67b9a47a175886aceffcbbabaf8c97716cf4c97ee26670b68c32075550e09fffff2f98b1051cb619f94958325a4211f83d25c0650fab2c68cf223faa4ab34e61055b3151982af237bba7bbd507941c1072cebaf14", 0x1000}, {&(0x7f0000003880)="afe882b70a4d8e55e548bd6bdaa80dfe", 0x10}, {&(0x7f00000038c0)="aaba5d3d2860c6fa47e2723df0600dbbc4cfb2ec75b8f104e1cf2ba3f9aafae2ae14ee85bb4ce6aad2b0b1bd558619862782c519859eb703b023e038790366f925de2fb5863c75f071a43fc0677a144f03a8cbce726bb6902cde86f2bc327ca05d6e97ba1cf33462bd63a60de4775725cba540685cf263a5c52cf217cac0c27ce5edecf2b125c2abd1e3767c6d72cd03544303db1104ba1bfe80453bf88ec2c09907dab28f311701e28b19f45af0de1d3974923b681a82172b85bc392f475a2065253cc74aea619feb6fec7ec79cf633ec8ccf9bb85381a5aa82e072c3b07359eef67c4b9e5954f95119e1e9a7c53c55274f0ced5a0d1f31b1f0abe6c6ce59de9f46baa044355edbe565cba08a6d9a961bc293b7c89ceb4d9c5baa2179aabe44d48cecca8fd8631cd49dba65a5b9bab8f6037e66cf4a1c96694c7a09b700e5775dfec1457130a128e9db9f0c776c684033da880cacff875d44f91d9e25815c4ba97dbfba9be374d52344ae95276c2780e432fb1dfe31a4932ff4bdf49058bbca1225a07f1d537e2e83346cea46af2bfd7764b003a4de275fa62d7d90d222949249f011d58005f8f159c6bd97f8d8046f0a2a7b1b0a24595cccee567968a9caf64e552e12a3a5fc9bf27dd2865ddd501a5ebea1c2d7e465fee69ddca11292f0983a1828593e3dd0f8352106f097a6d0a8a6a67bfb221af49b9bc6a24cb8a691f7101f188303295ab720d757b74e89efcf33ae4fbaa0362feaeb37302d3f1e021ebcc0e3b33b9af9f29d960e71ae6bcdb9e97fc1d3dae48b7835564ddee05f3477087044406efb36ccaa7ac08bb89f839c81aa8d172ab9ed0c0291e99d11a61e13fb9118b16d73facf40b7360efe333c201a5c6a35738ce755a54fe8a83f224fd595d3b7b769e4dc7643e0b1137baadfe34cd83f261dd5562e52636de6eeada950dca71a363f1ace9903e5eee50be772973a15be8341379624d0dfb97aca747862dea2e5970e3e8616bf73fc3bf1c0ce969c8ebe8b05074ac1c8e4949d46205936084bb152e8999036e15c194914df9645db3df43a5ef858ce787a5dff7f5a6769b080580a2d391bd626b5bafc3c97c4ca6ba35b819d8540853ddc1187fea9a954f470759aa501d61a5ad7b6f8c93652eeaa8b5b9b07bc3fa3747d08d22121c4bbb065cb602c2ededd911640f5a41db55bc6145d9e4d8d2de7bc5660875a127e22e23c4bd14c8995d371ce31730bac3d3ad58f48e04d58c0962bebd9b0b8bd7811ad0726f90dd6a8bcf360b48d61f9da45d9143a8702867a46c3bdea691360213ce10e1db056befd3f0af16fe45357eedc2b64b3c736c77812922184146667321c15fad05967b50cb9697e75e1e6f1f55d94d9bfe3c9b2d2b50b7c688c93ac8ae1bc3d0ddcde8336cdf634cfdb4c721dd19ab94e563010f837645fedeb6ca872df35ec13744056e9b295351255d883c972932b9c632e8695e8c57d2e23a6078d132099b5ff26992132030f636f644ec4081395324c7f0a00bdb73679c98bbace8c07d3e599d9d7b575c57b6ea078f1ca6a612b61ed7a21ca79a33362f89b3614c57bdf9861c8a7454dbf140daf1149e1b1d132f7eb087b73800ba2fb71920dcaf9fbb842847a464a5e2c395c871b857761916fdb01de994fde12403e94ec9671e2b51d54a883385225c08449a30996fca3e76e25486a44cb00d1f38f818b716aea6d4315213a3096b8cac92f8347a3884d78802f43e64f0ab2085126b50336c78b304c9128c7a6291595bd90e336738fd7b9fb632bb135b28830631bbe89f6c2f978b4f08e70ffa9fc1d5244f8d2df40adf4f47054acd67ab9924eb0dcca50e6a71478c3aaa2b59d555bc2b81fe3749e2aa2de25ba06705be91797ada98fbe84cc53c4e81ae61041e11ad1808da92100aacafb0d439231a62def227bedfae05b7aebba368e2795f7f12f5e309f8f60018069d66035e7092d8229d09b0b58bb9ed62146cc9ceddf96cd58c19ac5a7e5fc758556544940baeabfdb350b7ea8e04127c65dcf0730bd76e1f45335e3b1a2f238f713bca236b0200f7c210ca3b687b9dfe0324072d2ff173cce03669a2dc8ac4079b6236279fbc7c1a3a379e740bfb536549f793d1a8f0bfd12bdde87aedd7ba09f6ad394af42ecedd38026a34358af71e6d7acbaeaaf75bc7aa0486e1577d2ee5d2c7c2655e8123b1da166ab6005fb55a7c44ed70ab98fe337073097cec0ad7b81d35c8c5d746aa8d2c34f4ccc6e565b67b0bb033d3d3d511ee672fa1cad901e85a21a192bde47a64107bdec361b003696dd704d9a7be33b6302775371c452eea5871d6515bd7dbd6e5d81d6a71d73211a1ed687cf083b30928d40005a1cc3b16b54934ba7ed9c4d03d18b257f767104486af02d20f62faf3b4ad58470734aa253284a4928fb361a14574cd119c6676d188f74854a7bfddf2489d01ded97388a11d71e48ee458022dec974f9a8f8c1a7f9bb3a9ea9c459f3fbff2b956db82146a62fa158d7696d1e3e5151cb1e20c031bef41256cc0167ac711c242f3a3ffc97df0c2016feb5b046af0a21d3e080614031734db657eca1dc054c24ae4ee95273d6d7083527146b98355ebc33cd954bdec713fc24328689006662a685c05c451057cbdb6d38f0c66eb539a4fbf0dfa609d375308b18d4db64f8850090cc77c8f52a07321c241435758a13de42a4576b67676832bf1ab312d87f277d654b464716003fd9ddf72bf152c84037cfbfdfe81776536f795be9cfb61e845f344780203cff56ae825ec7231fd1b638d064cbed365c89b772df20ec667945f7dc321a46d14478c55b8e77fe27b0bf9528d88b6e5ad1de730b288413d8e4798f1cdea46e46fe4d057b5893843529077ed475aedfe8a37537d1154e4b62717434036e1058b8447a964907ec11e4ce7ec0dab6f41fdcc9207ef21615f17e4916a44f9c8cc0dbf655d6c7b21ead44807e33656e0420a7134f1523c532127e5514e66b114935ea489ba7ab661f745c808d05e9de6fcd2ce70385c51dadac400efda7ba73c3cd04354f9c86742a10f8055f306095c7cd70ba79df3cd5b3f86d7dbaaaad0251d3ed3ac3f58f33845be49cce744ad3a2a1afc6bc42171a347c0f393b3a537c4ffd6eb9906c9a58a38f10bddc70964f48b6b71a70a448fe42028721490aa994b7ba93be7aefcc305dde5ac3fb1b9ffaa63c60f01bff9563c9a890b4f0c0f0449c3dd9ae642a1bf9c4d217aa6f9f0e9250a8b6b1ee7b26718843bf80fe8bee47c0503310eebf60cc4c685fbabe464ecad57e7048b9ffe0c404cc356e9e9bad72ef7f30b4e8696d389638d048be104c485d34b99731f37f8c0c12a944ab14a01d8f4ac6d6b4a8ec8d325051cfa7e0048bd17af4de5bf274adcecce579a5bc4029da06ad38071a837acdf45b4b30d1873ad503ff778306f472150715452a0e7f4ae73ba348c3af0651414c2ecb39ee78424d2f9b0037e72816bd84c247425434a719b2f87aa1297b07e0a23248de372a322358d1e4ea1b856e33078795be6c3d0d183de1be4d8dc85d33b88d9b008bae01ff1e21fcf039097f43365e82416067e542bc3da0c9f8f7c1551c71d0ecbf80cf2db3b32d1edd8604c87bf19b09a3e68fb38da80d6070daed95a71576b8cef0ba35f6adbdc7609e81b9b2e2a5b19a786811a7c3e90e148e58c32c7cf503c67439e04a500f28f391f24b6f1c4ad7daeff1b6a432079cac4c1310423cb0c280894ffd78ed3b0e86be3ad895c1c504ab4e15e48abf6e75a4f960beb29a633a7f733449b6d0cdb7fa30996c4c3d72ef7f6d14fbb1fa544e4bb91320598794788f7c836a8e4ff35de6743864bfa242b1a5ffc178377836a8e24e478a1a054f4c2c33a474459afb00674629b421b12fef98abedff278e2181718fb07e2c0de7c61f0104da89f85b9d89637c56a0354846ad8dffd4ed59e5f1806d8edb27d22df68c330987f182f9e3e0122c3d6456ad0b3f3ccfcd9c6d439ab8352993d939cd0ca0f32e456aa719b1a86f1cf01cc95e806163a874c8b527ac9490fc601476ddc151951fa57297dee9a378570154e16cb5f40b1077baf9b43943ec56c462198ce9e66d40996d562182c31ed457d0c23a3bb1c749a03088dbfb6f530ba3384f800c5276249455d2786e5669fe2cf42038ffe8f263b47a6ab8362432c7d13d95fc823cc7cb48b4482b48cdd7c526c99d33a819ad0ccd3065039b4973a788b68f4a22b631d13c6c16d4281c901c137094aa0c8d560daa227da21584e2131d0f6ce10077d380f1fe9f122875e3a5b7937137f54569e9407ed1bc0aa3dba4c8856c6f36bef0db2f6fee90cd1a972a139e6e15822a334dbb7f6c24225ee8f2ce6fad34e4367160289f80575f1f2769311b6ef73949ad0b6c2629f4a67906a2d47eb7c9ea2e6363c696c4a661b514d332be96b83d2836d7dbe21260d7e164cd747324cd2c36c339c32ae71792c047b5d1b5fe2330cf7521cd427ab6925cb0b37c6c467a092c6bfc3f4dee503c9af00cbe86dd011b85bb87cb583fe08dfcaf2c2aa9e924ff7321d2ad048992acc8167d36ee876dd6712d7e6f7bbce5d894e1e808627a60b33169aa84bb6c74895a844c3c4a7b93f671cc155bfcdb8c78217c4eceaed4ce2a7fc29fc47bf0359c461d4f605b825b616e8bce31eb53ed5de18904fe3f28eac672c9d3788f712ea27edc40646ac71e1436806813a8a696731c61224518edbb41b5cea892567b6c8b69879c13809f9dcd8f237187b7c102c9efd0a5953e0235163b4e88956481c67e09f55d430ac6fe77782e37501f7cb626cf44f0fb04ec8d457132bdc95edbf541e90da231ca20300c690591d5316e82d0c7eadb8e0a830ac323fdbb8b755b2c5f0179a1d045cac7dc6cd4e0c5f5759ae4cd96502035639e52b0a460f9623729840554b0800c159f180b83988da6b8c3d6991edbe0507b715344b1c6ebc69c3ea8f66938b8ca9db6127b7a09db0d9768e3dd6528848cca88e66c95606b2d754ae2e21fa942efe6d3b61ce3761a2f342759ce0def8df55704972939d4837a179bbb35a7afce9c73d004737f9604dd930d78162564f6f3b5ead44507bdd5297cceb203387592d9c3f94998c379cb10f891f06e7da5ac7f61a014a110156f27c9e977ac9487390676f87b7f248f0666208c6a5aaebee2b079fdbc67535ea73eb04ad0befa578e6a196eb778bfee3d3582fe542adbdb12dfff04667ec92e305689cea2f7311bf6fd01bc54712f69e2b56a01a566a44e1f870eb4f53fcf9a77899bd750f9a1c80fb6eda1c789877f420bc30e0ae9d2c923a5da41d5dc4547c374be4b831d4eef91df73ab40c9657f09667c2f9a59aae5a5ff45a6e27e78ba56c95dd402d4e923ae628ee60da1f360b9aa0e0247910e4a532c13e647d8ef907aa3c2e0ef704c43de15622d76c4a7a9503f5ff0309d1daf1148fd27026d1e045270521d67fc6262af7287ab5ca15b63b9b0b5f5f02f52072366a7ed790b3887f5bb4594d70ebddd002edbc20ea0704200c31526cb01b193c762f03d6a44539c1e7894c30a479b1229aace8d343dcf66064dd4236632e03f6f7b265b2386215144b8a20e67dcc6ef5cb27ccd948aef51e6f15952bd729dc65af93218f8a3fac4ce647ce80b9bc3e858e586852d247720baf340c2a694e99dcdfb433313f94751de1e0105f7178c049443d5e7abdb6d1b7832f78e136df8dcf914ea37cf3e85f1f46492db3014fa7a2a6fc62213b75e3dafcc6342a1982409581101e196b102edc3f0d3", 0x1000}, {&(0x7f00000048c0)="428f5768cc2bf1ca717c37336798790d4c2d945986b672278b926fed7d08e69ad6d67aaeff0fa27d76fa11e9d835facd25e6ee7afa6d17f101c6912efb98d710d995f60a3a5d0a5c8252b629e29f63e5fd4ad2573372eb4875f3bc185ed15c73b0802f3a33f4b0eada587ab2850cda30ab9106de95a3d33cfaa590831c86279ea87218327470f4e6ffec613c4a927ce481736ebd53916ea59f5f78af", 0x9c}, {&(0x7f0000004980)="52fad7ccd0f1ad981c32012beff0e743ba59a698d1e342ed80821f5e6b3d1180a0eb7708e669fbacd2e78486611c552fd3f39fe393483c65740a9e71020099864489efd9fbd13ea9ffa867a65e663741d4621a023924bc62e352d5c74ba3b43b436134c046b3c86a1e3145f887fedd7cda65653431aaa108361234f1f57eeab5c7fddd0d0705c77fd7a795f9ec1c1862917f7bd5c055e18d1a38cdc36fbddb09e3f1d3497d60080f0a52ba719f304229e55b2cc209f08136f9edfcf67809d10faf28dc5f3585a93792f2c6331c088f6e7923c2c92c623561cfee2dc8cccfed093c925b048e89f1442f9fb35646780db67aa6cbd9c020ed7b2c6ef4a8a7d021", 0xff}], 0x8, &(0x7f0000004b00)=[@rthdr={{0x78, 0x29, 0x39, {0x2, 0xc, 0x1, 0x2, 0x0, [@mcast1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x78}}, {{&(0x7f0000004b80)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7e}, 0x1c, &(0x7f0000005300)=[{&(0x7f0000004bc0)="8fca54be0b240ae3e80c14c9e1a3c476cb234772d305bcba0088bf51e0da030cc9070d4a4824e02e2f0479c6c2b26f0f64f98cf5f408dff9a90a18557d75518b67e8849158aea4f7f1f73fd50504c99bf98bc74d2c5d0baaea9ce36998ec58e79927b25f742eed4ae54a5ef6b912f815ab443238de6c75b2958e35e24ca77624305d1183df5bddbc36e6ebf8d1c32561b3b124ef2a444f9d71c83c04b2d7c90017a102c9bb2e2381d5fffca0e246f530e251de4f1d8f109cd6131e2a4afd7f251e8a4633069e8594dad5bc6baaa7d2a3b8815f321a823015fc6db1be46cc443403ffcd8d2bda70d360e50a33537a6278", 0xf0}, {&(0x7f0000004cc0)="b642ecd2f88e679f367481ba856887bbec68b269310ca4f1cf8265b53da06a9b531106fcd7b4d9b9ace614a4ef66bb0a8b2c2cab558ce3cbacd262f9627806198dea349ce81598ff2598aa37f570804ebbc9e7a7c28df2467dc98713c38d68820bd6e29d7ef2c236e8d4ad6c70fa60c309228f770ee30f58454ceac11f333ddbeea2d663ad909812c915eb58f09ca922ae1344d2a9e33f2f3e195fdc681aaf48c74adc39eac43bad6bd078581e4dd0ca8680a9bf255ec6a9ca1f", 0xba}, {&(0x7f0000004d80)="70d57d0cadac026cfe36070bab340166d01394083578bbd2a6c795542437fa769d275c56e32f7be5c95f7ef4fe9c6d05bfc011cdac3d44fa425ea3138e35f90d00d3edd6c9bd357461e9d64f62f32eb8be84967031e9b8acb8ae551b63e276622d38a95c272a340b7b8c0622ae6905d8cc76116d04f6c73694c136ab989f651eaf19b63869faaffcbcebfb4b69", 0x8d}, {&(0x7f0000004e40)="9507aa5dedca908e17572681f3bcd6741ee0047fb28b37f922eecf0cd38f77a38ee2278e2fe0c6868a068c178c9824379341d2960fdf497796a361381f4ff78b2740872413820492b10a5fd57b84fabcea299f16b6f23d7bb4fb95acb36bea43509f40a175ef", 0x66}, {&(0x7f0000004ec0)="0411b270991352aa151ef6e38c54aac1412f42b678d23eb52234f13b9af6e7b65c2dc01ea34aacab024c7374aa2b5060dcaae2fb9a5b2ad3afaa3cb2c1ecb1cbb5584fb724fe21b6e4b03b12fcdbb5c27e6356eb573511ae039ca805ed3e0b735d8ab9965824100a9dd3b4ff41858ec0d6d99f18e20794ed736cb0fbacbf0ee037f8b1ca800dbd5a2ba92bf0350bc4a346807d77dcd3681e7ca6e112dace10e1c61f4fc5cb32f7f050beed49c0c31ef6b68d9a03ae423efcdacd6c321cbc439d14be527288cc170e2a3538942bb87a6044b3722c30888af29dccffc3ba34d55b61", 0xe1}, {&(0x7f0000004fc0)="19b26f9240ce7259af6b192bb130f880b27a6b3d39e568fe5eb5cb6efb795f34c72e78acd3aa1683136ec6ed17ece560dc0a0db26d1f40865b9a38ba19877c2d7897067c9111d7c79e478780c92642ab7694e756cdb15fb746540f90901ac341d80276d91c76f518ebacb1ed782028c810434bf1806b30e5d121397c6c48834090e5a5e62c0f4a54075a3d417a6935ee97bef4239ea6092dba132c", 0x9b}, {&(0x7f0000005080)="fed61359a5bc4ac950e07691896e5f2cf64d3785cd7e6bf85568352f4e2346590eb271e9d43c0b53709e47", 0x2b}, {&(0x7f00000050c0)="b8168142f384f07c86c0efd6016d7ccd4bd1f07d7a106f77a636f497672838d0a4376cbc7761998e1f98392f5c614d3c96f04b12914f37a4a8d636f972b7f1c156adb8ee868048773c9dbc3de93e8371513324b45627994c41b997f33557d8b93e084deeab6bbd5ad361d9f74999f9cc7a2f787e84139d4f85042e20cfd231db1c52a7cc2503bf4604b52459cc30f991df9fa2c7a6337f11f5e46851f5c2090b253dce2e2c1b53151abdebe5ec168eb5fe2b90c2db62ed610f774fbd397ce37bacaefffb13cf9ac81a1d4be44bee119a6f3b88d939446af770111bb3580b740800382799323e2c5467867b12cd285d3ec6afe31a4b593cb12e", 0xf9}, {&(0x7f00000051c0)="44eaf1cc869c4466e88298d7d8b3585edd53c28e8471acd966048e8e4f3ac0315c902d53a7ebead3840ffee2e35632a15676096fc85501ecc934bbc4374b886f3a200593bd146827e5fa6db44a8ae810c7", 0x51}, {&(0x7f0000005240)="e1a57284207e7098352ae77c00073439feec37d2f795247319aeebb4b079f5ec77907ad6bbc379e8900bf605b0c4fa3d7fec5ba9060f063b1c84c7e954a52e932a50edc07e95950015760fd4c5e65cabc2d81f55411270b8f65de2c607c03104848571965da4c727bf3141ff53b204a5a2e48c6ccce9155b8050fdaa577237fd0228dc77931a4b2bd9f1e5e92cd26fdac0b1e7ff6d209b37a8cfc96208679b0423c479ff9ca81848ca5c9f66be7e15d65eef77f45d974a", 0xb7}], 0xa, &(0x7f00000053c0)=[@hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0xb}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x78}}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005440)="89e6837ea5c1fe2c2acc48ac3436a933dfe4689cbfa3397296b227bc8db3bd9e89434cedcbc7d911ba367808bb28305ff77c51ce62e8660911faf6592501e9ea7dd5800bef", 0x45}], 0x1, &(0x7f0000005500)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0xb, 0x0, [@private0, @private2, @private1]}}}], 0x48}}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005580)="c70cd29ed1b4f8124857aedee68c757cda5eb1718e51181edf7a6f0cd2731c011bff9b8999298a994c7f7ed51a62108069399a5faf70cd7d884d534fa9f5027b52", 0x41}, {&(0x7f0000005600)}, {&(0x7f0000005640)="1a26634f7962798d32ec32901c1121be241172c142f1f3a51af0bd3306b6418b7d4c341402efb153564bf95a346b1bc75956f9140c1405f1a4e75783e23207534ec9b50478809398890252983e4f0cc086b992e7bba53ef33d597f33ce274604d1901dab177fd9ef92ae48e0cfc7dff7a89055cae83232b05caa920f2c60190683218501c27a3c4e6a979f4a311a565e7917d07c6bf6c3eec1e04af020dcaf9cc9e55812ef24d01726f2188ae409397573", 0xb1}, {&(0x7f0000005700)="a596f3e4e765f2fe39fa6346bd39fd472ab2685ff3b15f42fd854eb5004782569a16b8840aa04e78605d42029213cbf10086a82fe07b038fa77f9ed94e938aff6a31c4682087a5551e2698c572ab1b77a33d6a7397105376c6f1d2119876d1252799b8ba9fa2a528eefed7287f5515f746b388514ae2177d6547b6953e81f2d6f88e5c7d3c6ba679aa321673399054fb3ce98c990bef133075c81c3426bea475b65f7f01b9243afb6708b1142822beb5ab35a4da9c55a2498f6d8e0582", 0xbd}], 0x4, &(0x7f0000005800)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}], 0x58}}], 0x4, 0x20000004) mkdirat(r6, &(0x7f0000005980)='./file0\x00', 0x40) write$cgroup_int(r0, &(0x7f00000059c0)=0x1, 0x12) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000005a00)=@assoc_value={0x0, 0x8}, 0x8) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000005b40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005b00)={&(0x7f0000005a80)={0x7c, 0x464, 0x200, 0x70bd2c, 0x25dfdbfc, "497ea0168ed24fe1bdffc8f15b9fdce7750605281bff93fc86e3a3a532eb07ec6c3ff42fc07a365a890d1ed82fedb2eeebb4560c88c6d6259be300a79edabfca5a88a800d1f90b51b6fb686b4ce2cb828037a0d05b23fdaa6e24fa80dab8ac66954951ad3a880f9cd61ed6fe", [""]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4048000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x28, r8, 0x20, 0x70bd2b, 0x8, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48084) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000005cc0)={0x7, 0x7, 0x4}, &(0x7f0000005d00)=0x28) 16.77615445s ago: executing program 3 (id=4977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x85c, 0x8, 0x7fff}}]}}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.033246407s ago: executing program 3 (id=4984): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 14.828728374s ago: executing program 6 (id=4986): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.827048049s ago: executing program 3 (id=4987): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 14.802012768s ago: executing program 4 (id=4988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) 14.681828046s ago: executing program 6 (id=4989): socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x15, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x5}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0x8, "52a7"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x1, 0x5, [0x1, 0x3, 0x1, 0x0, 0x0], 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x8, 0x9, {0x7, 0x25, 0x1, 0x1, 0x3, 0x5660}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0xb, {0x7, 0x25, 0x1, 0x0, 0x0, 0x27}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0xb9, 0x81, 0x9, 0xe}, @ptm_cap={0x3}]}}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, 0x0, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x68376000) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0xf, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'oX'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x9506c56c30e36a6}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 13.230112063s ago: executing program 1 (id=4992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000000280)='1', 0x1) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r11, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 10.618023852s ago: executing program 4 (id=4997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x2, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB="00012abd7000fddbdf25160000004800018008000100", @ANYRES32=r4, @ANYBLOB="1400020067656e657665310000000000000000001400020076657468305f6d6163767461700000001400020062"], 0x5c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x20000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r7, 0x0, 0x0, 0x2, 0x80000400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x3, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 8.355636245s ago: executing program 3 (id=5003): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f000090c000/0x2000)=nil, 0x2000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a000000000000000000000001071300e000000200000000ffffffffac14140c00"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.789925277s ago: executing program 4 (id=5006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56f5d, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.971394596s ago: executing program 6 (id=5007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) 6.92465268s ago: executing program 1 (id=5008): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 6.71647431s ago: executing program 1 (id=5009): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, 0xffffffffffffffff, 0x852ac000) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setfsgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.299286466s ago: executing program 4 (id=5011): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f000090c000/0x2000)=nil, 0x2000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a000000000000000000000001071300e000000200000000ffffffffac14140c00"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.097811519s ago: executing program 1 (id=5013): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40a00, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r3, &(0x7f0000000100)=ANY=[], 0xb0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r4, r3, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000880), 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.479673431s ago: executing program 6 (id=5017): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000100)=""/100, 0x64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x3, 0xfa11, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e1c, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xff}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) 2.80653456s ago: executing program 7 (id=5019): socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)}], 0x1}}], 0x1, 0x4000841) 2.775233366s ago: executing program 1 (id=5020): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f000090c000/0x2000)=nil, 0x2000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a000000000000000000000001071300e000000200000000ffffffffac14140c00"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 2.347038096s ago: executing program 7 (id=5021): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x6, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007baa00fe000000"], 0x0, 0x9}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x7fff}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.271290586s ago: executing program 7 (id=5022): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) 2.221452946s ago: executing program 4 (id=5023): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.117210192s ago: executing program 4 (id=5024): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x40afc, 0x0, 0x40010}, 0x11) syz_open_dev$usbfs(0x0, 0x4, 0x4000) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2002) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x0, 0x3f7, 0x18036, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000480)={0x1, 0x4f565559, 0x5, @stepwise={0xe, 0x9, 0x2, 0x7fffffff, 0x7f, 0xa}}) 2.081934976s ago: executing program 3 (id=5025): socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1}, 0x18) sendmmsg(r2, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can={0x1d, 0x0, 0xc7}, 0x80, &(0x7f0000001200)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x4008880) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x4) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) memfd_create(0x0, 0x6) set_mempolicy(0x3, &(0x7f0000000100)=0x4000000004, 0x3) memfd_create(&(0x7f0000000800)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0\x00\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvF\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\x1c!\xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xcdx\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xb6\xd8uet\x8djO\aI\xef\xc7XR\xec\x9f\x86`\xd4\a\xbd\x9d\xfeC\xa2\r\x9f\v\x8b\xf4\xbd\xfe\xc049p\xef\xcfI\xed\x10\xf3\xf1i\t\x9bZ]\xbe\x99^\xae\b\xcc\xbb\xfd\x8294\xfd3\xaa\x1c\xfa\x8d\xfaU7u\xdd\xff\x18\xdb\x02\xba\x8b\xe2N\xb7\xe9\x1e\xd4\x98\xb9\xc6\xa1\x80\xcdq\x841\xaek\x86\xb1\x8d\xd8\xf6\xad\xd6\xaf-\xdd\x83\xbf\x004y\xc0\xd0v\xbf\xb7\xe4\x10\f\xd7U\xa4\x99F\xdf\x03E\xa7\x12\x02\x1a\xf4,\xb3p\x90YD\xa8\xd1\t\x19L\xadqUB\x1ee\xa8\xad\xa9\xb8\x9cqK\x04\x8d\xd1\xc6p\xd8\xb1\x98G\x0e\xf0\xbc\xa9j\x87\xbf\xf2J%\x0eV\xa5\xfa\xc9\x11\xb8\xe7<\xff\xc7`\xf4\xb0\xa7\xf6c\x8bY:\x94\xa4\xf1\x05z\xf1\xe8gl6\xff\xc5\x9c\xe2\xb4\xb9A\xb6I \xaa\xca', 0x5) 1.161432845s ago: executing program 7 (id=5026): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 882.262283ms ago: executing program 6 (id=5027): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r7 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 549.839312ms ago: executing program 7 (id=5028): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000100)=""/100, 0x64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x3, 0xfa11, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e1c, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xff}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) 152.396638ms ago: executing program 7 (id=5029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=5030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x85c, 0x8, 0x7fff}}]}}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1911.654919][ T37] audit: type=1326 audit(1759685288.821:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1911.654942][ T37] audit: type=1326 audit(1759685288.821:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1911.654965][ T37] audit: type=1326 audit(1759685288.821:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1911.654988][ T37] audit: type=1326 audit(1759685288.821:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1912.509313][T20707] veth0_vlan: entered promiscuous mode [ 1912.530989][T20707] veth1_vlan: entered promiscuous mode [ 1912.568440][T20707] veth0_macvtap: entered promiscuous mode [ 1912.574519][T20707] veth1_macvtap: entered promiscuous mode [ 1912.607385][T20707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.633641][T20707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.657589][T14575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.657742][T14575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.657773][T14575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.657792][T14575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.624274][T20986] netlink: 'syz.6.4152': attribute type 4 has an invalid length. [ 1913.641393][T20985] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1913.641426][T20985] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1913.641438][T20985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1914.314260][T20997] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1915.062387][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.143081][ T6128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1915.143102][ T6128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1915.275914][T14251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1915.275937][T14251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.649010][T21037] netlink: 'syz.9.4164': attribute type 4 has an invalid length. [ 1918.778737][ T37] kauditd_printk_skb: 47 callbacks suppressed [ 1918.778755][ T37] audit: type=1326 audit(1759685295.941:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778801][ T37] audit: type=1326 audit(1759685295.941:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778843][ T37] audit: type=1326 audit(1759685295.941:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778866][ T37] audit: type=1326 audit(1759685295.941:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778889][ T37] audit: type=1326 audit(1759685295.941:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778912][ T37] audit: type=1326 audit(1759685295.941:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778936][ T37] audit: type=1326 audit(1759685295.941:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778959][ T37] audit: type=1326 audit(1759685295.941:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.778982][ T37] audit: type=1326 audit(1759685295.951:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1918.779007][ T37] audit: type=1326 audit(1759685295.951:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21043 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98eec9 code=0x7ffc0000 [ 1920.042687][T14967] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1920.284701][T14967] usb 5-1: Using ep0 maxpacket: 32 [ 1920.376684][T14967] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1920.377300][T14967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1920.377350][T14967] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1920.395212][T14967] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1920.395241][T14967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.395261][T14967] usb 5-1: Product: syz [ 1920.395275][T14967] usb 5-1: Manufacturer: syz [ 1920.395288][T14967] usb 5-1: SerialNumber: syz [ 1920.830911][T21062] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1921.238690][T21079] netlink: 'syz.6.4176': attribute type 4 has an invalid length. [ 1923.404349][T21098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1925.476146][T14967] usb 5-1: 0:2 : does not exist [ 1925.996015][ T44] usb 5-1: USB disconnect, device number 5 [ 1926.743760][ T5911] wlan0 speed is unknown, defaulting to 1000 [ 1926.743781][ T5911] syz2: Port: 1 Link DOWN [ 1926.748410][ T5911] wlan0 speed is unknown, defaulting to 1000 [ 1926.748435][ T5911] syz2: Port: 1 Link ACTIVE [ 1926.771363][T21138] blktrace: Concurrent blktraces are not allowed on loop3 [ 1936.359991][T21244] serio: Serial port ptm0 [ 1937.998259][T21272] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1939.596982][T21284] netlink: 'syz.4.4239': attribute type 4 has an invalid length. [ 1939.626173][T21284] netlink: 'syz.4.4239': attribute type 4 has an invalid length. [ 1940.315349][T21300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4245'. [ 1940.874615][ T44] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1941.100671][ T44] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1941.100701][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.100721][ T44] usb 8-1: Product: syz [ 1941.100735][ T44] usb 8-1: Manufacturer: syz [ 1941.100748][ T44] usb 8-1: SerialNumber: syz [ 1941.103724][ T44] usb 8-1: config 0 descriptor?? [ 1941.226566][T21313] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1941.409702][ T44] usb 8-1: USB disconnect, device number 17 [ 1942.764444][T21325] @: renamed from vlan0 (while UP) [ 1942.814222][T21327] netlink: 'syz.1.4254': attribute type 4 has an invalid length. [ 1942.824829][T21327] netlink: 'syz.1.4254': attribute type 4 has an invalid length. [ 1943.102734][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1943.787791][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'. [ 1943.819775][T14576] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1943.820061][T14576] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1943.820118][T14576] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1943.820153][T14576] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1944.330307][T21350] netlink: 3672 bytes leftover after parsing attributes in process `syz.7.4262'. [ 1944.525625][T21357] netlink: 'syz.9.4265': attribute type 4 has an invalid length. [ 1944.577255][T21358] netlink: 'syz.9.4265': attribute type 4 has an invalid length. [ 1944.593224][T21353] @: renamed from vlan0 (while UP) [ 1945.072393][T21366] ALSA: mixer_oss: invalid OSS volume '' [ 1945.588560][T21368] bridge_slave_0: left allmulticast mode [ 1945.588593][T21368] bridge_slave_0: left promiscuous mode [ 1945.588846][T21368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.712424][T21368] bridge_slave_1: left allmulticast mode [ 1945.712454][T21368] bridge_slave_1: left promiscuous mode [ 1945.712668][T21368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.935871][T21368] bond0: (slave bond_slave_0): Releasing backup interface [ 1946.024017][T21368] bond0: (slave bond_slave_1): Releasing backup interface [ 1946.104177][T21368] team0: Port device team_slave_0 removed [ 1946.224918][T21368] team0: Port device team_slave_1 removed [ 1946.226051][T21368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1946.226079][T21368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1946.319149][T21368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1946.319167][T21368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1946.416547][T21368] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1946.918466][T21394] netlink: 3672 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1947.086571][T21400] netlink: 'syz.1.4276': attribute type 4 has an invalid length. [ 1947.225809][T21401] netlink: 'syz.1.4276': attribute type 4 has an invalid length. [ 1949.701498][T21416] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1950.303561][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1951.668167][T21434] siw: device registration error -23 [ 1953.368731][T21440] netlink: 'syz.6.4288': attribute type 4 has an invalid length. [ 1953.369115][T21440] netlink: 'syz.6.4288': attribute type 4 has an invalid length. [ 1955.959615][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1955.971904][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1955.974849][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1955.976553][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1955.980946][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1956.035846][T21460] wlan0 speed is unknown, defaulting to 1000 [ 1958.060198][T21476] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1958.060306][T21476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1958.060327][T21476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1958.493814][T14882] Bluetooth: hci4: command tx timeout [ 1958.631289][T21460] chnl_net:caif_netlink_parms(): no params data found [ 1958.733443][T21485] ALSA: mixer_oss: invalid OSS volume '' [ 1959.096964][T21487] netlink: 3672 bytes leftover after parsing attributes in process `syz.4.4298'. [ 1959.911689][T14241] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1959.918360][T14241] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.513773][T14882] Bluetooth: hci4: command tx timeout [ 1961.509824][T14241] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1961.509860][T14241] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.866435][T21520] serio: Serial port ptm0 [ 1962.584757][T14882] Bluetooth: hci4: command tx timeout [ 1962.897429][T14241] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1962.897465][T14241] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.946943][T21539] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4311'. [ 1964.314379][T21557] input: syz0 as /devices/virtual/input/input25 [ 1964.428461][T14241] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1964.428497][T14241] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.505668][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1964.505692][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1964.508977][T21460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.509122][T21460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.509363][T21460] bridge_slave_0: entered allmulticast mode [ 1964.522348][T21460] bridge_slave_0: entered promiscuous mode [ 1964.625527][T21460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.625661][T21460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.625903][T21460] bridge_slave_1: entered allmulticast mode [ 1964.649545][T21460] bridge_slave_1: entered promiscuous mode [ 1964.657080][T14882] Bluetooth: hci4: command tx timeout [ 1965.247887][T21460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1965.251252][T21460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.408223][T21460] team0: Port device team_slave_0 added [ 1968.546485][T21460] team0: Port device team_slave_1 added [ 1968.716501][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4329'. [ 1968.716524][T21599] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4329'. [ 1968.921774][T21460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1968.921791][T21460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1968.921817][T21460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.029974][T21460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1969.029993][T21460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1969.030021][T21460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.569378][T21626] ALSA: mixer_oss: invalid OSS volume '' [ 1972.628937][T21627] netlink: 'syz.4.4336': attribute type 4 has an invalid length. [ 1972.680827][T21628] netlink: 'syz.4.4336': attribute type 4 has an invalid length. [ 1974.659844][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 1974.834752][ T6505] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1975.021719][ T6505] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.021747][ T6505] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1975.021784][ T6505] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1975.021807][ T6505] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.069071][T14241] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1975.071887][ T6505] usb 8-1: config 0 descriptor?? [ 1975.391075][ T44] usb 8-1: USB disconnect, device number 18 [ 1976.561010][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1978.006714][T14241] bond0 (unregistering): Released all slaves [ 1978.643647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.684845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.745836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.790997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.844029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.885913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.935338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.954311][T14241] bond1 (unregistering): Released all slaves [ 1978.963902][T14241] bond2 (unregistering): Released all slaves [ 1979.005813][T21658] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1979.005839][T21658] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1979.005851][T21658] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1979.365613][T14241] tipc: Left network mode [ 1979.449083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1979.462790][T21460] hsr_slave_0: entered promiscuous mode [ 1979.483442][T21460] hsr_slave_1: entered promiscuous mode [ 1979.484396][T21460] debugfs: 'hsr0' already exists in 'hsr' [ 1979.484417][T21460] Cannot create hsr debugfs directory [ 1979.601478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1979.660360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1979.841319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1979.907100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.500450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.739751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1981.688857][T21685] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1984.340707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.424909][T14241] hsr_slave_0: left promiscuous mode [ 1984.446236][T14241] hsr_slave_1: left promiscuous mode [ 1984.446802][T14241] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1984.446820][T14241] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1984.636447][T14241] pimreg (unregistering): left allmulticast mode [ 1985.417961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.642987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.721698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.829051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.886308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.062380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.179376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.241350][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.296405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.520529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1988.942092][T21727] netlink: 'syz.7.4359': attribute type 1 has an invalid length. [ 1989.230195][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1989.264049][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1989.309700][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1989.361698][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1989.363486][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1991.101256][T21703] wlan0 speed is unknown, defaulting to 1000 [ 1991.175591][T21727] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1991.456907][T14882] Bluetooth: hci1: command tx timeout [ 1991.926482][T21738] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1992.150805][T21729] wlan0 speed is unknown, defaulting to 1000 [ 1993.206983][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1993.207001][ T37] audit: type=1326 audit(1759685370.381:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.207446][ T37] audit: type=1326 audit(1759685370.381:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.207492][ T37] audit: type=1326 audit(1759685370.381:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.208549][ T37] audit: type=1326 audit(1759685370.381:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.208781][ T37] audit: type=1326 audit(1759685370.381:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.210174][ T37] audit: type=1326 audit(1759685370.381:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.210234][ T37] audit: type=1326 audit(1759685370.381:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.210276][ T37] audit: type=1326 audit(1759685370.381:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.210326][ T37] audit: type=1326 audit(1759685370.381:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.210882][ T37] audit: type=1326 audit(1759685370.381:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21744 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 1993.547890][T14882] Bluetooth: hci1: command tx timeout [ 1993.776048][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4366'. [ 1993.776071][T21758] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4366'. [ 1995.379121][T21763] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1995.379165][T21763] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1995.379184][T21763] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1995.647120][T14882] Bluetooth: hci1: command tx timeout [ 1995.687827][T21769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1996.443930][T21729] chnl_net:caif_netlink_parms(): no params data found [ 1996.784507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1996.902573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1997.063781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1997.603552][T21790] ALSA: mixer_oss: invalid OSS volume '' [ 1997.697027][T14882] Bluetooth: hci1: command tx timeout [ 1998.709777][T21729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.709853][T21729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.709977][T21729] bridge_slave_0: entered allmulticast mode [ 1998.712812][T21729] bridge_slave_0: entered promiscuous mode [ 1999.129300][T14257] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.129324][T14257] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.242964][T21729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.243133][T21729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.243485][T21729] bridge_slave_1: entered allmulticast mode [ 1999.266562][T21729] bridge_slave_1: entered promiscuous mode [ 1999.271230][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'. [ 1999.271244][T21797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4375'. [ 1999.419043][T21801] netlink: 'syz.7.4376': attribute type 1 has an invalid length. [ 1999.692880][T21802] bond1: entered promiscuous mode [ 1999.692909][T21802] bond1: entered allmulticast mode [ 1999.693402][T21809] netlink: 'syz.1.4378': attribute type 3 has an invalid length. [ 1999.715080][T21802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1999.961933][T14257] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.961969][T14257] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.283873][T21805] bridge1: entered promiscuous mode [ 2000.284054][T21805] bridge1: entered allmulticast mode [ 2000.354245][T21805] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 2000.372462][T21729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2000.375919][T14271] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2000.484922][T14576] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2000.568964][T21729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2001.064476][T14257] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2001.064499][T14257] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2001.416745][T21460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2001.608159][T21460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2002.107622][T14257] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2002.107645][T14257] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2003.136854][T21826] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2003.136881][T21826] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2003.136963][T21826] vhci_hcd vhci_hcd.0: Device attached [ 2003.137200][T21827] vhci_hcd: connection closed [ 2003.148871][T21504] vhci_hcd: stop threads [ 2003.148893][T21504] vhci_hcd: release socket [ 2003.148926][T21504] vhci_hcd: disconnect device [ 2003.189836][T21729] team0: Port device team_slave_0 added [ 2003.222947][T21460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2003.298896][T21729] team0: Port device team_slave_1 added [ 2003.301493][T21460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2004.142614][T21729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2004.142627][T21729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2004.142641][T21729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2004.202472][T21729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2004.202486][T21729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2004.202501][T21729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2004.341810][T21854] netlink: 'syz.1.4388': attribute type 3 has an invalid length. [ 2005.096429][T21729] hsr_slave_0: entered promiscuous mode [ 2005.104345][T21729] hsr_slave_1: entered promiscuous mode [ 2005.105540][T21729] debugfs: 'hsr0' already exists in 'hsr' [ 2005.105566][T21729] Cannot create hsr debugfs directory [ 2007.308415][T21873] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2007.308492][T21873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2007.308898][T21873] vhci_hcd vhci_hcd.0: Device attached [ 2007.555509][T20562] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2008.129091][T21874] vhci_hcd: connection closed [ 2008.130287][T14248] vhci_hcd: stop threads [ 2008.130304][T14248] vhci_hcd: release socket [ 2008.130331][T14248] vhci_hcd: disconnect device [ 2008.152780][T20562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.152800][T20562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.152812][T20562] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2008.152837][T20562] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2008.152849][T20562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.221255][T20562] usb 5-1: config 0 descriptor?? [ 2008.816605][T20562] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2008.962505][T20562] usb 5-1: USB disconnect, device number 6 [ 2009.285205][T14257] bond1 (unregistering): (slave gre1): Releasing backup interface [ 2009.285226][T14257] gre1 (unregistering): left promiscuous mode [ 2009.305303][T14882] Bluetooth: hci2: command 0x0406 tx timeout [ 2010.954931][T21897] input: syz0 as /devices/virtual/input/input26 [ 2011.138180][T14257] bond0 (unregistering): Released all slaves [ 2011.896406][T21897] syz.4.4400: vmalloc error: size 141557760, failed to allocated page array size 276480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2011.896838][T21897] CPU: 1 UID: 0 PID: 21897 Comm: syz.4.4400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2011.896852][T21897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2011.896864][T21897] Call Trace: [ 2011.896870][T21897] [ 2011.896878][T21897] dump_stack_lvl+0x189/0x250 [ 2011.896966][T21897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2011.896982][T21897] ? __pfx__printk+0x10/0x10 [ 2011.896995][T21897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2011.897022][T21897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2011.897036][T21897] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2011.897050][T21897] warn_alloc+0x22e/0x3b0 [ 2011.897090][T21897] ? __pfx_warn_alloc+0x10/0x10 [ 2011.897118][T21897] ? __get_vm_area_node+0x2bc/0x350 [ 2011.897141][T21897] ? vb2_vmalloc_alloc+0xef/0x340 [ 2011.897230][T21897] __vmalloc_node_range_noprof+0x690/0x12d0 [ 2011.897261][T21897] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2011.897278][T21897] ? __kasan_kmalloc+0x93/0xb0 [ 2011.897295][T21897] vmalloc_user_noprof+0xad/0xf0 [ 2011.897310][T21897] ? vb2_vmalloc_alloc+0xef/0x340 [ 2011.897321][T21897] vb2_vmalloc_alloc+0xef/0x340 [ 2011.897330][T21897] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2011.897347][T21897] __vb2_queue_alloc+0x9bf/0x15a0 [ 2011.897417][T21897] vb2_core_reqbufs+0xc31/0x1420 [ 2011.897443][T21897] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2011.897465][T21897] ? vb2_verify_memory_type+0x1fc/0x570 [ 2011.897481][T21897] vb2_ioctl_reqbufs+0x4c3/0x840 [ 2011.897504][T21897] __video_do_ioctl+0xa5c/0xc10 [ 2011.897548][T21897] ? __pfx___video_do_ioctl+0x10/0x10 [ 2011.897566][T21897] video_usercopy+0x82a/0x1450 [ 2011.897582][T21897] ? __pfx___video_do_ioctl+0x10/0x10 [ 2011.897592][T21897] ? __pfx_video_usercopy+0x10/0x10 [ 2011.897601][T21897] ? smack_file_ioctl+0x2ac/0x340 [ 2011.897647][T21897] ? __fget_files+0x2a/0x420 [ 2011.897672][T21897] ? __fget_files+0x3a6/0x420 [ 2011.897689][T21897] v4l2_ioctl+0x18d/0x1e0 [ 2011.897725][T21897] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2011.897741][T21897] __se_sys_ioctl+0xff/0x170 [ 2011.897762][T21897] do_syscall_64+0xfa/0x3b0 [ 2011.897841][T21897] ? lockdep_hardirqs_on+0x9c/0x150 [ 2011.897875][T21897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.897896][T21897] ? clear_bhb_loop+0x60/0xb0 [ 2011.897909][T21897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.897924][T21897] RIP: 0033:0x7f9d453beec9 [ 2011.897940][T21897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2011.897949][T21897] RSP: 002b:00007f9d4361e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2011.897961][T21897] RAX: ffffffffffffffda RBX: 00007f9d45615fa0 RCX: 00007f9d453beec9 [ 2011.897969][T21897] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 2011.897977][T21897] RBP: 00007f9d45441f91 R08: 0000000000000000 R09: 0000000000000000 [ 2011.897983][T21897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2011.897989][T21897] R13: 00007f9d45616038 R14: 00007f9d45615fa0 R15: 00007ffc0d90f948 [ 2011.898006][T21897] [ 2011.898014][T21897] Mem-Info: [ 2011.898020][T21897] active_anon:289 inactive_anon:20055 isolated_anon:0 [ 2011.898020][T21897] active_file:21611 inactive_file:38842 isolated_file:0 [ 2011.898020][T21897] unevictable:5458 dirty:143 writeback:3 [ 2011.898020][T21897] slab_reclaimable:12786 slab_unreclaimable:106712 [ 2011.898020][T21897] mapped:29305 shmem:17779 pagetables:1031 [ 2011.898020][T21897] sec_pagetables:0 bounce:0 [ 2011.898020][T21897] kernel_misc_reclaimable:0 [ 2011.898020][T21897] free:1238099 free_pcp:5269 free_cma:0 [ 2011.898048][T21897] Node 0 active_anon:1156kB inactive_anon:80220kB active_file:86244kB inactive_file:155368kB unevictable:20296kB isolated(anon):0kB isolated(file):0kB mapped:117220kB dirty:572kB writeback:12kB shmem:69580kB kernel_stack:12284kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2011.898072][T21897] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2011.898106][T21897] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.898140][T21897] lowmem_reserve[]: 0 2516 2518 2518 2518 [ 2011.898158][T21897] Node 0 DMA32 free:1039340kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1156kB inactive_anon:80220kB active_file:86244kB inactive_file:155368kB unevictable:20296kB writepending:584kB zspages:0kB present:3129332kB managed:2576612kB mlocked:0kB bounce:0kB free_pcp:14320kB local_pcp:8992kB free_cma:0kB [ 2011.898189][T21897] lowmem_reserve[]: 0 0 1 1 1 [ 2011.898205][T21897] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.898233][T21897] lowmem_reserve[]: 0 0 0 0 0 [ 2011.898249][T21897] Node 1 Normal free:3897696kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6756kB local_pcp:3124kB free_cma:0kB [ 2011.898279][T21897] lowmem_reserve[]: 0 0 0 0 0 [ 2011.898295][T21897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2011.898355][T21897] Node 0 DMA32: 1111*4kB (UME) 966*8kB (ME) 503*16kB (UME) 344*32kB (ME) 251*64kB (ME) 156*128kB (UME) 63*256kB (UME) 35*512kB (ME) 10*1024kB (UM) 5*2048kB (M) 224*4096kB (UM) = 1039292kB [ 2011.898433][T21897] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2011.898481][T21897] Node 1 Normal: 114*4kB (UME) 9*8kB (UME) 37*16kB (UME) 216*32kB (UME) 100*64kB (UME) 32*128kB (UME) 13*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 944*4096kB (M) = 3897696kB [ 2011.898563][T21897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2011.898572][T21897] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2011.898584][T21897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2011.898592][T21897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2011.898601][T21897] 82919 total pagecache pages [ 2011.898607][T21897] 0 pages in swap cache [ 2011.898612][T21897] Free swap = 124996kB [ 2011.898616][T21897] Total swap = 124996kB [ 2011.898620][T21897] 2097051 pages RAM [ 2011.898624][T21897] 0 pages HighMem/MovableOnly [ 2011.898628][T21897] 420808 pages reserved [ 2011.898632][T21897] 0 pages cma reserved [ 2013.096748][T14257] bond1 (unregistering): Released all slaves [ 2013.107259][T14257] bond2 (unregistering): Released all slaves [ 2014.077791][T14257] bond3 (unregistering): Released all slaves [ 2014.587144][T14882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2014.616945][T14882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2014.618396][T14882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2014.619688][T14882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2014.657436][T14882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2017.214702][T14882] Bluetooth: hci0: command tx timeout [ 2017.456931][T10884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2017.617628][T10884] usb 5-1: Using ep0 maxpacket: 32 [ 2017.632249][T10884] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2017.632266][T10884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2017.632289][T10884] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2017.670651][T10884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2017.670669][T10884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.670680][T10884] usb 5-1: Product: syz [ 2017.670687][T10884] usb 5-1: Manufacturer: syz [ 2017.670694][T10884] usb 5-1: SerialNumber: syz [ 2018.042776][T21947] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2018.756051][T14257] hsr_slave_0: left promiscuous mode [ 2018.845135][T14257] hsr_slave_1: left promiscuous mode [ 2018.845966][T14257] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2018.845985][T14257] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2019.364077][T14882] Bluetooth: hci0: command tx timeout [ 2019.531530][T14257] veth1_macvtap: left promiscuous mode [ 2019.535061][T14257] veth0_macvtap: left promiscuous mode [ 2019.535430][T14257] veth1_vlan: left promiscuous mode [ 2019.535604][T14257] veth0_vlan: left promiscuous mode [ 2021.375850][T14882] Bluetooth: hci0: command tx timeout [ 2022.748123][T10884] usb 5-1: 0:2 : does not exist [ 2023.455074][T14882] Bluetooth: hci0: command tx timeout [ 2026.901604][T21913] wlan0 speed is unknown, defaulting to 1000 [ 2026.906925][T21968] wlan0 speed is unknown, defaulting to 1000 [ 2027.265445][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4419'. [ 2027.477029][T14967] usb 5-1: USB disconnect, device number 7 [ 2028.727038][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4430'. [ 2028.832849][T21729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2028.911552][T21913] chnl_net:caif_netlink_parms(): no params data found [ 2028.974741][T21729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2029.159311][T21729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2029.254758][T21729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2029.940595][T22030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4438'. [ 2029.966913][T21913] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.970498][T21913] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.991526][T21913] bridge_slave_0: entered allmulticast mode [ 2030.005342][T21913] bridge_slave_0: entered promiscuous mode [ 2030.011931][T21913] bridge0: port 2(bridge_slave_1) entered blocking state [ 2030.012015][T21913] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.012154][T21913] bridge_slave_1: entered allmulticast mode [ 2030.044897][T21913] bridge_slave_1: entered promiscuous mode [ 2031.177466][T21913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.624163][T21913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2032.866477][T21913] team0: Port device team_slave_0 added [ 2032.983790][T21913] team0: Port device team_slave_1 added [ 2034.089266][T21913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2034.089283][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.089310][T21913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2034.635351][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2034.698349][T21913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2034.698367][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.698392][T21913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2034.789226][ T44] usb 5-1: config 9 has an invalid interface number: 220 but max is 3 [ 2034.789244][ T44] usb 5-1: config 9 has an invalid interface number: 131 but max is 3 [ 2034.789255][ T44] usb 5-1: config 9 has an invalid interface number: 42 but max is 3 [ 2034.789266][ T44] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 2034.789276][ T44] usb 5-1: config 9 has no interface number 0 [ 2034.789285][ T44] usb 5-1: config 9 has no interface number 1 [ 2034.789293][ T44] usb 5-1: config 9 has no interface number 2 [ 2034.789348][ T44] usb 5-1: config 9 interface 220 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2034.789361][ T44] usb 5-1: config 9 interface 220 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 2034.789382][ T44] usb 5-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 2034.789393][ T44] usb 5-1: config 9 interface 131 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2034.789405][ T44] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0x8F has invalid maxpacket 11370, setting to 1024 [ 2034.789419][ T44] usb 5-1: config 9 interface 131 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 2034.789430][ T44] usb 5-1: config 9 interface 131 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2034.789441][ T44] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2034.789455][ T44] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2034.789468][ T44] usb 5-1: config 9 interface 131 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 2034.789489][ T44] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2034.789500][ T44] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2034.789511][ T44] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2034.789523][ T44] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2034.789534][ T44] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2034.789544][ T44] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 2034.789554][ T44] usb 5-1: config 9 interface 42 altsetting 4 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 2034.789566][ T44] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x88, skipping [ 2034.789577][ T44] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 2034.789588][ T44] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2034.789635][ T44] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2034.789646][ T44] usb 5-1: config 9 interface 3 has no altsetting 0 [ 2034.789655][ T44] usb 5-1: config 9 interface 220 has no altsetting 0 [ 2034.789664][ T44] usb 5-1: config 9 interface 131 has no altsetting 0 [ 2034.789674][ T44] usb 5-1: config 9 interface 42 has no altsetting 0 [ 2034.792264][ T44] usb 5-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=6b.09 [ 2034.792281][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.792291][ T44] usb 5-1: Product: syz [ 2034.792299][ T44] usb 5-1: Manufacturer: syz [ 2034.792307][ T44] usb 5-1: SerialNumber: syz [ 2035.392460][ T44] usb 5-1: bad CDC descriptors [ 2035.398929][T21913] hsr_slave_0: entered promiscuous mode [ 2035.404891][T21913] hsr_slave_1: entered promiscuous mode [ 2035.405862][T21913] debugfs: 'hsr0' already exists in 'hsr' [ 2035.405886][T21913] Cannot create hsr debugfs directory [ 2035.655557][ T44] usb 5-1: USB disconnect, device number 8 [ 2037.190258][T14257] bridge_slave_1: left allmulticast mode [ 2037.190286][T14257] bridge_slave_1: left promiscuous mode [ 2037.190582][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.281097][T14257] bridge_slave_0: left allmulticast mode [ 2037.281128][T14257] bridge_slave_0: left promiscuous mode [ 2037.281393][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.682638][T22138] netlink: 'syz.7.4473': attribute type 3 has an invalid length. [ 2037.946551][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.427606][T22155] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 2038.937895][T14257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2039.175532][T14257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2039.496651][T14257] bond0 (unregistering): Released all slaves [ 2039.794009][T21729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.984497][T21729] 8021q: adding VLAN 0 to HW filter on device team0 [ 2040.007398][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.007544][T14241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2040.012124][T21877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.012205][T21877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.775557][T14257] hsr_slave_0: left promiscuous mode [ 2040.821884][T14257] hsr_slave_1: left promiscuous mode [ 2040.822800][T14257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2040.884967][T14257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2041.081110][T22177] netlink: 'syz.1.4483': attribute type 1 has an invalid length. [ 2041.835265][T14257] team0 (unregistering): Port device team_slave_1 removed [ 2041.996108][T14257] team0 (unregistering): Port device team_slave_0 removed [ 2042.666860][T22181] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2042.666906][T22181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2042.666926][T22181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2043.362280][T22201] tty tty3: ldisc open failed (-12), clearing slot 2 [ 2043.754804][T10884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2043.818961][T22183] bond7: entered promiscuous mode [ 2043.819032][T22183] bond7: entered allmulticast mode [ 2043.822606][T22183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2043.887365][T22186] bridge3: entered promiscuous mode [ 2043.887459][T22186] bridge3: entered allmulticast mode [ 2043.887859][T22186] bond7: (slave bridge3): Enslaving as a backup interface with an up link [ 2043.934254][T14241] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2043.945561][T10884] usb 5-1: Using ep0 maxpacket: 8 [ 2043.962896][T10884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.962931][T10884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2043.962945][T10884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2043.962958][T10884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2043.967709][T10884] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2043.967727][T10884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.967737][T10884] usb 5-1: Product: syz [ 2043.967745][T10884] usb 5-1: Manufacturer: syz [ 2043.967752][T10884] usb 5-1: SerialNumber: syz [ 2043.970818][T10884] usb 5-1: config 0 descriptor?? [ 2043.973446][T22202] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2043.991691][T10884] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 2044.104767][T14271] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2044.579214][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 2045.847408][T22230] input: syz0 as /devices/virtual/input/input28 [ 2046.234267][T21913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2046.316977][T21913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2046.347102][T22230] syz.7.4497: vmalloc error: size 141557760, failed to allocated page array size 276480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2046.347152][T22230] CPU: 1 UID: 0 PID: 22230 Comm: syz.7.4497 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2046.347165][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2046.347172][T22230] Call Trace: [ 2046.347177][T22230] [ 2046.347183][T22230] dump_stack_lvl+0x189/0x250 [ 2046.347205][T22230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2046.347221][T22230] ? __pfx__printk+0x10/0x10 [ 2046.347234][T22230] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2046.347248][T22230] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2046.347261][T22230] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2046.347275][T22230] warn_alloc+0x22e/0x3b0 [ 2046.347296][T22230] ? __pfx_warn_alloc+0x10/0x10 [ 2046.347316][T22230] ? __get_vm_area_node+0x2bc/0x350 [ 2046.347330][T22230] ? vb2_vmalloc_alloc+0xef/0x340 [ 2046.347343][T22230] __vmalloc_node_range_noprof+0x690/0x12d0 [ 2046.347374][T22230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2046.347390][T22230] ? __kasan_kmalloc+0x93/0xb0 [ 2046.347407][T22230] vmalloc_user_noprof+0xad/0xf0 [ 2046.347421][T22230] ? vb2_vmalloc_alloc+0xef/0x340 [ 2046.347431][T22230] vb2_vmalloc_alloc+0xef/0x340 [ 2046.347440][T22230] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2046.347451][T22230] __vb2_queue_alloc+0x9bf/0x15a0 [ 2046.347480][T22230] vb2_core_reqbufs+0xc31/0x1420 [ 2046.347504][T22230] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2046.347531][T22230] ? vb2_verify_memory_type+0x1fc/0x570 [ 2046.347547][T22230] vb2_ioctl_reqbufs+0x4c3/0x840 [ 2046.347570][T22230] __video_do_ioctl+0xa5c/0xc10 [ 2046.347586][T22230] ? __pfx___video_do_ioctl+0x10/0x10 [ 2046.347604][T22230] video_usercopy+0x82a/0x1450 [ 2046.347620][T22230] ? __pfx___video_do_ioctl+0x10/0x10 [ 2046.347630][T22230] ? __pfx_video_usercopy+0x10/0x10 [ 2046.347638][T22230] ? smack_file_ioctl+0x2ac/0x340 [ 2046.347662][T22230] ? __fget_files+0x2a/0x420 [ 2046.347676][T22230] ? __fget_files+0x3a6/0x420 [ 2046.347692][T22230] v4l2_ioctl+0x18d/0x1e0 [ 2046.347709][T22230] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2046.347724][T22230] __se_sys_ioctl+0xff/0x170 [ 2046.347738][T22230] do_syscall_64+0xfa/0x3b0 [ 2046.347753][T22230] ? lockdep_hardirqs_on+0x9c/0x150 [ 2046.347766][T22230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.347784][T22230] ? clear_bhb_loop+0x60/0xb0 [ 2046.347797][T22230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.347808][T22230] RIP: 0033:0x7f31acd3eec9 [ 2046.347819][T22230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2046.347829][T22230] RSP: 002b:00007f31aaf9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2046.347840][T22230] RAX: ffffffffffffffda RBX: 00007f31acf95fa0 RCX: 00007f31acd3eec9 [ 2046.347848][T22230] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 2046.347855][T22230] RBP: 00007f31acdc1f91 R08: 0000000000000000 R09: 0000000000000000 [ 2046.347862][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2046.347868][T22230] R13: 00007f31acf96038 R14: 00007f31acf95fa0 R15: 00007ffeec39a628 [ 2046.347886][T22230] [ 2046.347891][T22230] Mem-Info: [ 2046.347896][T22230] active_anon:289 inactive_anon:20789 isolated_anon:0 [ 2046.347896][T22230] active_file:21626 inactive_file:38842 isolated_file:0 [ 2046.347896][T22230] unevictable:5458 dirty:205 writeback:0 [ 2046.347896][T22230] slab_reclaimable:13144 slab_unreclaimable:102934 [ 2046.347896][T22230] mapped:31341 shmem:17779 pagetables:1047 [ 2046.347896][T22230] sec_pagetables:0 bounce:0 [ 2046.347896][T22230] kernel_misc_reclaimable:0 [ 2046.347896][T22230] free:1281693 free_pcp:6589 free_cma:0 [ 2046.347923][T22230] Node 0 active_anon:1156kB inactive_anon:83156kB active_file:86304kB inactive_file:155368kB unevictable:20296kB isolated(anon):0kB isolated(file):0kB mapped:125364kB dirty:820kB writeback:0kB shmem:69580kB kernel_stack:11820kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2046.347948][T22230] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2046.347971][T22230] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2046.348002][T22230] lowmem_reserve[]: 0 2516 2518 2518 2518 [ 2046.348020][T22230] Node 0 DMA32 free:1212084kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1156kB inactive_anon:83156kB active_file:86304kB inactive_file:155368kB unevictable:20296kB writepending:820kB zspages:0kB present:3129332kB managed:2576612kB mlocked:0kB bounce:0kB free_pcp:21280kB local_pcp:19316kB free_cma:0kB [ 2046.348052][T22230] lowmem_reserve[]: 0 0 1 1 1 [ 2046.348068][T22230] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2046.348096][T22230] lowmem_reserve[]: 0 0 0 0 0 [ 2046.348112][T22230] Node 1 Normal free:3899328kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5076kB local_pcp:96kB free_cma:0kB [ 2046.348142][T22230] lowmem_reserve[]: 0 0 0 0 0 [ 2046.348158][T22230] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2046.348217][T22230] Node 0 DMA32: 7*4kB (UME) 181*8kB (UE) 845*16kB (UME) 1477*32kB (UME) 614*64kB (UME) 290*128kB (UME) 109*256kB (UME) 78*512kB (UME) 50*1024kB (UM) 14*2048kB (UM) 226*4096kB (UM) = 1212084kB [ 2046.348295][T22230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2046.348344][T22230] Node 1 Normal: 177*4kB (UME) 60*8kB (UME) 45*16kB (UME) 230*32kB (UME) 97*64kB (UME) 31*128kB (UME) 14*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (ME) 944*4096kB (M) = 3899380kB [ 2046.348425][T22230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2046.348434][T22230] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2046.348443][T22230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2046.348451][T22230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2046.348460][T22230] 82934 total pagecache pages [ 2046.348464][T22230] 0 pages in swap cache [ 2046.348468][T22230] Free swap = 124996kB [ 2046.348473][T22230] Total swap = 124996kB [ 2046.348477][T22230] 2097051 pages RAM [ 2046.348481][T22230] 0 pages HighMem/MovableOnly [ 2046.348485][T22230] 420808 pages reserved [ 2046.348488][T22230] 0 pages cma reserved [ 2047.736716][ T5931] usb 5-1: USB disconnect, device number 9 [ 2047.889478][T22238] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2047.889522][T22238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2047.889543][T22238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2048.444221][T22248] netlink: 'syz.1.4501': attribute type 1 has an invalid length. [ 2048.485231][T21913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2048.587246][T22252] bond8: entered promiscuous mode [ 2048.587265][T22252] bond8: entered allmulticast mode [ 2048.587555][T22252] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2048.618548][T21913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2048.689887][T22256] bridge4: entered promiscuous mode [ 2048.690077][T22256] bridge4: entered allmulticast mode [ 2048.690831][T22256] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 2048.735068][T21504] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2048.873324][T14251] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2048.897896][T22262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2050.130402][T21913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2050.140166][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 2050.140184][ T37] audit: type=1326 audit(1759685427.311:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22271 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31acd3eec9 code=0x7ffc0000 [ 2050.140600][ T37] audit: type=1326 audit(1759685427.311:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22271 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31acd3eec9 code=0x7ffc0000 [ 2050.225031][T21913] 8021q: adding VLAN 0 to HW filter on device team0 [ 2050.237349][ T37] audit: type=1326 audit(1759685427.411:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22271 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31acd3eec9 code=0x7ffc0000 [ 2050.237399][ T37] audit: type=1326 audit(1759685427.411:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22271 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31acd3eec9 code=0x7ffc0000 [ 2050.398920][T21877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.399002][T21877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.522058][T21877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.522616][T21877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2051.269191][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4510'. [ 2051.534856][ C0] vkms_vblank_simulate: vblank timer overrun [ 2051.567623][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2051.589407][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2051.608385][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2051.613332][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2051.614481][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2052.010618][T22282] wlan0 speed is unknown, defaulting to 1000 [ 2052.590285][ C0] vkms_vblank_simulate: vblank timer overrun [ 2052.826297][ C0] vkms_vblank_simulate: vblank timer overrun [ 2053.219902][T22300] wlan0 speed is unknown, defaulting to 1000 [ 2053.282908][ C0] vkms_vblank_simulate: vblank timer overrun [ 2053.695293][ T5819] Bluetooth: hci1: command tx timeout [ 2054.000217][ C0] vkms_vblank_simulate: vblank timer overrun [ 2054.326233][T21913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2055.180212][T22331] kvm: emulating exchange as write [ 2055.775120][ T5819] Bluetooth: hci1: command tx timeout [ 2055.879822][T22282] chnl_net:caif_netlink_parms(): no params data found [ 2056.696800][T21913] veth0_vlan: entered promiscuous mode [ 2057.164728][T14967] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2057.190074][T21877] bridge_slave_1: left allmulticast mode [ 2057.190100][T21877] bridge_slave_1: left promiscuous mode [ 2057.190329][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.328171][T21877] bridge_slave_0: left allmulticast mode [ 2057.328192][T21877] bridge_slave_0: left promiscuous mode [ 2057.328365][T21877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.400936][T14967] usb 5-1: config 9 has an invalid interface number: 220 but max is 3 [ 2057.400976][T14967] usb 5-1: config 9 has an invalid interface number: 131 but max is 3 [ 2057.400996][T14967] usb 5-1: config 9 has an invalid interface number: 42 but max is 3 [ 2057.401016][T14967] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 2057.401033][T14967] usb 5-1: config 9 has no interface number 0 [ 2057.401048][T14967] usb 5-1: config 9 has no interface number 1 [ 2057.401063][T14967] usb 5-1: config 9 has no interface number 2 [ 2057.401155][T14967] usb 5-1: config 9 interface 220 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2057.401182][T14967] usb 5-1: config 9 interface 220 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 2057.401220][T14967] usb 5-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 2057.401243][T14967] usb 5-1: config 9 interface 131 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2057.401268][T14967] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0x8F has invalid maxpacket 11370, setting to 1024 [ 2057.401294][T14967] usb 5-1: config 9 interface 131 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 2057.401317][T14967] usb 5-1: config 9 interface 131 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2057.401338][T14967] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2057.401365][T14967] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2057.401391][T14967] usb 5-1: config 9 interface 131 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 2057.401441][T14967] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2057.401463][T14967] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2057.401485][T14967] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2057.401507][T14967] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2057.401529][T14967] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2057.401550][T14967] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 2057.401571][T14967] usb 5-1: config 9 interface 42 altsetting 4 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 2057.401595][T14967] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x88, skipping [ 2057.401616][T14967] usb 5-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 2057.401639][T14967] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2057.401659][T14967] usb 5-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2057.401678][T14967] usb 5-1: config 9 interface 3 has no altsetting 0 [ 2057.401694][T14967] usb 5-1: config 9 interface 220 has no altsetting 0 [ 2057.401709][T14967] usb 5-1: config 9 interface 131 has no altsetting 0 [ 2057.401727][T14967] usb 5-1: config 9 interface 42 has no altsetting 0 [ 2057.404133][T14967] usb 5-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=6b.09 [ 2057.404161][T14967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.404181][T14967] usb 5-1: Product: syz [ 2057.404195][T14967] usb 5-1: Manufacturer: syz [ 2057.404210][T14967] usb 5-1: SerialNumber: syz [ 2057.854953][ T5819] Bluetooth: hci1: command tx timeout [ 2057.927042][T14967] usb 5-1: bad CDC descriptors [ 2057.961544][T14967] usb 5-1: USB disconnect, device number 10 [ 2058.357026][T22386] netlink: 'syz.1.4534': attribute type 1 has an invalid length. [ 2058.715539][T22395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4538'. [ 2059.935012][ T5819] Bluetooth: hci1: command tx timeout [ 2062.085372][T21877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2062.145396][T21877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2062.167931][T21877] bond0 (unregistering): Released all slaves [ 2062.205307][T22282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.205394][T22282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.205561][T22282] bridge_slave_0: entered allmulticast mode [ 2062.207292][T22282] bridge_slave_0: entered promiscuous mode [ 2062.212914][T22386] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 2062.465466][T22282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.465666][T22282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.465904][T22282] bridge_slave_1: entered allmulticast mode [ 2062.468612][T22282] bridge_slave_1: entered promiscuous mode [ 2062.477453][T21913] veth1_vlan: entered promiscuous mode [ 2062.879908][T22426] input: syz0 as /devices/virtual/input/input29 [ 2063.922893][T21877] hsr_slave_0: left promiscuous mode [ 2064.147884][T21877] hsr_slave_1: left promiscuous mode [ 2064.152157][T21877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2064.214174][T21877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2065.874826][ T6505] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2066.054702][ T6505] usb 5-1: Using ep0 maxpacket: 16 [ 2066.058497][ T6505] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.058515][ T6505] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.058527][ T6505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2066.058556][ T6505] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 2066.058568][ T6505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.061938][ T6505] usb 5-1: config 0 descriptor?? [ 2066.385327][T21877] team0 (unregistering): Port device team_slave_1 removed [ 2066.686462][T21877] team0 (unregistering): Port device team_slave_0 removed [ 2068.503514][ T5931] usb 5-1: USB disconnect, device number 11 [ 2068.743558][T22462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2069.783362][T22282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2069.836057][T22282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2070.174086][ C0] vkms_vblank_simulate: vblank timer overrun [ 2070.312871][T22476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2070.970230][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.028034][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.113362][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.167897][T22282] team0: Port device team_slave_0 added [ 2071.212658][T22282] team0: Port device team_slave_1 added [ 2071.381018][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.413955][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 2071.533996][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.543411][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 2071.687012][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.831760][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.906337][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.977261][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.978876][T22282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2071.978890][T22282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.978926][T22282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2072.052016][T22282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2072.052032][T22282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2072.052060][T22282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.107979][T22508] netlink: 'syz.1.4574': attribute type 1 has an invalid length. [ 2072.292019][T22507] bond9: entered promiscuous mode [ 2072.292049][T22507] bond9: entered allmulticast mode [ 2072.307018][T22507] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2072.468052][ C0] vkms_vblank_simulate: vblank timer overrun [ 2072.503049][T22510] bridge6: entered promiscuous mode [ 2072.503226][T22510] bridge6: entered allmulticast mode [ 2072.507723][T14575] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2072.515218][T22510] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 2072.666490][T14575] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2073.122574][T22282] hsr_slave_0: entered promiscuous mode [ 2073.123975][T22282] hsr_slave_1: entered promiscuous mode [ 2073.125266][T22282] debugfs: 'hsr0' already exists in 'hsr' [ 2073.125292][T22282] Cannot create hsr debugfs directory [ 2073.128728][T21913] veth0_macvtap: entered promiscuous mode [ 2073.317468][T22515] wlan0 speed is unknown, defaulting to 1000 [ 2073.319158][T21913] veth1_macvtap: entered promiscuous mode [ 2074.045219][ C0] vkms_vblank_simulate: vblank timer overrun [ 2074.275045][ C0] vkms_vblank_simulate: vblank timer overrun [ 2074.403409][ C0] vkms_vblank_simulate: vblank timer overrun [ 2074.911597][T14882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2074.933913][T14882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2074.943567][T14882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2074.953669][T14882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2074.962956][T14882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2075.719782][T22525] wlan0 speed is unknown, defaulting to 1000 [ 2077.055547][ T5819] Bluetooth: hci4: command tx timeout [ 2077.364774][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2077.798193][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 2077.803229][ T44] usb 5-1: device descriptor read/all, error -61 [ 2077.934716][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2078.076444][ T44] usb 5-1: device descriptor read/64, error -71 [ 2078.321778][ T44] usb usb5-port1: attempt power cycle [ 2078.915758][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2079.211701][ T5819] Bluetooth: hci4: command tx timeout [ 2079.288995][T22559] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2079.289022][T22559] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2079.289032][T22559] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2079.380597][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4587'. [ 2079.439805][ T44] usb 5-1: device descriptor read/8, error -71 [ 2079.704676][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2080.666089][T22571] bridge_slave_0: left allmulticast mode [ 2080.666118][T22571] bridge_slave_0: left promiscuous mode [ 2080.666304][T22571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.777329][T22571] bridge_slave_1: left allmulticast mode [ 2080.777359][T22571] bridge_slave_1: left promiscuous mode [ 2080.777571][T22571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.917779][T22571] bond0: (slave bond_slave_0): Releasing backup interface [ 2081.005933][T22571] bond0: (slave bond_slave_1): Releasing backup interface [ 2081.117760][ T44] usb 5-1: device descriptor read/8, error -71 [ 2081.136982][T22571] team0: Port device team_slave_0 removed [ 2081.214726][ T5819] Bluetooth: hci4: command tx timeout [ 2081.225708][ T44] usb usb5-port1: unable to enumerate USB device [ 2081.228748][T22571] team0: Port device team_slave_1 removed [ 2081.229787][T22571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2081.229811][T22571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2081.266179][T22571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2081.266199][T22571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2081.306336][T22571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2082.447552][T22525] chnl_net:caif_netlink_parms(): no params data found [ 2083.174310][T22282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2084.055963][ C0] vkms_vblank_simulate: vblank timer overrun [ 2084.060995][ T5819] Bluetooth: hci4: command tx timeout [ 2084.110969][T22282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2084.145227][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4600'. [ 2084.224853][T21877] bridge_slave_1: left allmulticast mode [ 2084.224883][T21877] bridge_slave_1: left promiscuous mode [ 2084.225118][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.251972][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4600'. [ 2084.296451][T21877] bridge_slave_0: left allmulticast mode [ 2084.296481][T21877] bridge_slave_0: left promiscuous mode [ 2084.296715][T21877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.508816][ C0] vkms_vblank_simulate: vblank timer overrun [ 2084.564511][ C0] vkms_vblank_simulate: vblank timer overrun [ 2084.631666][ C0] vkms_vblank_simulate: vblank timer overrun [ 2084.700638][ C0] vkms_vblank_simulate: vblank timer overrun [ 2084.950113][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.019828][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.214765][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.477833][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.525582][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.635103][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.693264][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.794148][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.839738][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.997341][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.086812][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.205586][T21877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2086.267853][T21877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2086.287284][T21877] bond0 (unregistering): Released all slaves [ 2086.325003][T22282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2086.491912][T22603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2086.512818][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.602247][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.664406][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.739242][T22282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2087.025829][T22619] input: syz0 as /devices/virtual/input/input30 [ 2087.305625][T22525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2087.305772][T22525] bridge0: port 1(bridge_slave_0) entered disabled state [ 2087.306009][T22525] bridge_slave_0: entered allmulticast mode [ 2087.309278][T22525] bridge_slave_0: entered promiscuous mode [ 2088.249185][T21877] hsr_slave_0: left promiscuous mode [ 2088.284777][T21877] hsr_slave_1: left promiscuous mode [ 2088.285412][T21877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2088.475236][T21877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2088.603837][T21877] veth1_macvtap: left promiscuous mode [ 2088.610563][T21877] veth0_macvtap: left promiscuous mode [ 2088.610726][T21877] veth1_vlan: left promiscuous mode [ 2088.610833][T21877] veth0_vlan: left promiscuous mode [ 2088.691841][T22635] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 2091.335680][T21877] team0 (unregistering): Port device team_slave_1 removed [ 2091.605737][T21877] team0 (unregistering): Port device team_slave_0 removed [ 2094.436278][T22525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.436418][T22525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.436593][T22525] bridge_slave_1: entered allmulticast mode [ 2094.438165][T22525] bridge_slave_1: entered promiscuous mode [ 2094.485825][T22635] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2095.077751][T22525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2095.138417][T22525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2095.873437][T22525] team0: Port device team_slave_0 added [ 2095.892629][T22525] team0: Port device team_slave_1 added [ 2096.861217][T22525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.861230][T22525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.861244][T22525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.940977][T22525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.940994][T22525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.941020][T22525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2097.439952][T22525] hsr_slave_0: entered promiscuous mode [ 2097.440711][T22525] hsr_slave_1: entered promiscuous mode [ 2097.441230][T22525] debugfs: 'hsr0' already exists in 'hsr' [ 2097.441244][T22525] Cannot create hsr debugfs directory [ 2098.322728][T22695] netlink: 'syz.1.4623': attribute type 10 has an invalid length. [ 2098.322751][T22695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4623'. [ 2098.533756][T22282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2098.534117][T22695] team0: entered promiscuous mode [ 2098.534137][T22695] team0: entered allmulticast mode [ 2098.553636][T22695] bridge0: port 1(team0) entered blocking state [ 2098.553769][T22695] bridge0: port 1(team0) entered disabled state [ 2098.602778][T22282] 8021q: adding VLAN 0 to HW filter on device team0 [ 2098.749273][T14576] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.749357][T14576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2098.760216][T14576] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.760297][T14576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2099.438934][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2100.534516][T22282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2100.997635][T22282] veth0_vlan: entered promiscuous mode [ 2101.007875][T22525] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2101.053932][T22525] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2101.092962][T22525] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2101.128782][T22525] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2101.171352][T22282] veth1_vlan: entered promiscuous mode [ 2101.384325][T22282] veth0_macvtap: entered promiscuous mode [ 2101.407000][T22282] veth1_macvtap: entered promiscuous mode [ 2101.577910][T22746] input: syz0 as /devices/virtual/input/input31 [ 2101.692958][T22282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2101.715130][T22282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2101.748594][T14241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.748626][T14241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.748646][T14241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.748665][T14241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.972802][T22525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2102.027018][T22746] syz.7.4638: vmalloc error: size 141557760, failed to allocated page array size 276480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2102.027096][T22746] CPU: 1 UID: 0 PID: 22746 Comm: syz.7.4638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2102.027118][T22746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2102.027129][T22746] Call Trace: [ 2102.027137][T22746] [ 2102.027146][T22746] dump_stack_lvl+0x189/0x250 [ 2102.027183][T22746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2102.027222][T22746] ? __pfx__printk+0x10/0x10 [ 2102.027247][T22746] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2102.027274][T22746] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2102.027301][T22746] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2102.027329][T22746] warn_alloc+0x22e/0x3b0 [ 2102.027369][T22746] ? __pfx_warn_alloc+0x10/0x10 [ 2102.027407][T22746] ? __get_vm_area_node+0x2bc/0x350 [ 2102.027435][T22746] ? vb2_vmalloc_alloc+0xef/0x340 [ 2102.027461][T22746] __vmalloc_node_range_noprof+0x690/0x12d0 [ 2102.027518][T22746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2102.027548][T22746] ? __kasan_kmalloc+0x93/0xb0 [ 2102.027579][T22746] vmalloc_user_noprof+0xad/0xf0 [ 2102.027608][T22746] ? vb2_vmalloc_alloc+0xef/0x340 [ 2102.027628][T22746] vb2_vmalloc_alloc+0xef/0x340 [ 2102.027648][T22746] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2102.027669][T22746] __vb2_queue_alloc+0x9bf/0x15a0 [ 2102.027721][T22746] vb2_core_reqbufs+0xc31/0x1420 [ 2102.027770][T22746] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2102.027808][T22746] ? vb2_verify_memory_type+0x1fc/0x570 [ 2102.027838][T22746] vb2_ioctl_reqbufs+0x4c3/0x840 [ 2102.027880][T22746] __video_do_ioctl+0xa5c/0xc10 [ 2102.027909][T22746] ? __pfx___video_do_ioctl+0x10/0x10 [ 2102.027944][T22746] video_usercopy+0x82a/0x1450 [ 2102.027973][T22746] ? __pfx___video_do_ioctl+0x10/0x10 [ 2102.027992][T22746] ? __pfx_video_usercopy+0x10/0x10 [ 2102.028007][T22746] ? smack_file_ioctl+0x2ac/0x340 [ 2102.028041][T22746] ? __fget_files+0x2a/0x420 [ 2102.028065][T22746] ? __fget_files+0x3a6/0x420 [ 2102.028093][T22746] v4l2_ioctl+0x18d/0x1e0 [ 2102.028120][T22746] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2102.028145][T22746] __se_sys_ioctl+0xff/0x170 [ 2102.028165][T22746] do_syscall_64+0xfa/0x3b0 [ 2102.028191][T22746] ? lockdep_hardirqs_on+0x9c/0x150 [ 2102.028221][T22746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2102.028241][T22746] ? clear_bhb_loop+0x60/0xb0 [ 2102.028263][T22746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2102.028281][T22746] RIP: 0033:0x7f31acd3eec9 [ 2102.028299][T22746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2102.028316][T22746] RSP: 002b:00007f31aaf9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2102.028335][T22746] RAX: ffffffffffffffda RBX: 00007f31acf95fa0 RCX: 00007f31acd3eec9 [ 2102.028350][T22746] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 2102.028362][T22746] RBP: 00007f31acdc1f91 R08: 0000000000000000 R09: 0000000000000000 [ 2102.028376][T22746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2102.028390][T22746] R13: 00007f31acf96038 R14: 00007f31acf95fa0 R15: 00007ffeec39a628 [ 2102.028422][T22746] [ 2102.031688][T22746] Mem-Info: [ 2102.031702][T22746] active_anon:289 inactive_anon:22991 isolated_anon:0 [ 2102.031702][T22746] active_file:21657 inactive_file:38834 isolated_file:0 [ 2102.031702][T22746] unevictable:5458 dirty:160 writeback:0 [ 2102.031702][T22746] slab_reclaimable:12860 slab_unreclaimable:103741 [ 2102.031702][T22746] mapped:30304 shmem:17779 pagetables:1135 [ 2102.031702][T22746] sec_pagetables:0 bounce:0 [ 2102.031702][T22746] kernel_misc_reclaimable:0 [ 2102.031702][T22746] free:1276581 free_pcp:3243 free_cma:0 [ 2102.031752][T22746] Node 0 active_anon:1156kB inactive_anon:91964kB active_file:86428kB inactive_file:155336kB unevictable:20296kB isolated(anon):0kB isolated(file):0kB mapped:121216kB dirty:636kB writeback:0kB shmem:69580kB kernel_stack:12336kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2102.031793][T22746] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2102.031831][T22746] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2102.031886][T22746] lowmem_reserve[]: 0 2516 2518 2518 2518 [ 2102.031920][T22746] Node 0 DMA32 free:1187456kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1156kB inactive_anon:91964kB active_file:86428kB inactive_file:155336kB unevictable:20296kB writepending:636kB zspages:0kB present:3129332kB managed:2576612kB mlocked:0kB bounce:0kB free_pcp:12024kB local_pcp:8100kB free_cma:0kB [ 2102.031981][T22746] lowmem_reserve[]: 0 0 1 1 1 [ 2102.032011][T22746] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2102.032065][T22746] lowmem_reserve[]: 0 0 0 0 0 [ 2102.032096][T22746] Node 1 Normal free:3903508kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:948kB local_pcp:0kB free_cma:0kB [ 2102.032151][T22746] lowmem_reserve[]: 0 0 0 0 0 [ 2102.032181][T22746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2102.032304][T22746] Node 0 DMA32: 6*4kB (UE) 852*8kB (UME) 564*16kB (UME) 663*32kB (UME) 692*64kB (UME) 296*128kB (UME) 122*256kB (UME) 65*512kB (UM) 54*1024kB (UM) 11*2048kB (UM) 226*4096kB (UM) = 1187288kB [ 2102.032446][T22746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2102.032538][T22746] Node 1 Normal: 193*4kB (UME) 56*8kB (UME) 39*16kB (UME) 233*32kB (UME) 97*64kB (UME) 33*128kB (UME) 19*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 2*2048kB (ME) 944*4096kB (M) = 3903508kB [ 2102.032685][T22746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2102.032702][T22746] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2102.032717][T22746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2102.032732][T22746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2102.032746][T22746] 82957 total pagecache pages [ 2102.032754][T22746] 0 pages in swap cache [ 2102.032760][T22746] Free swap = 124996kB [ 2102.032768][T22746] Total swap = 124996kB [ 2102.032775][T22746] 2097051 pages RAM [ 2102.032783][T22746] 0 pages HighMem/MovableOnly [ 2102.032790][T22746] 420808 pages reserved [ 2102.032797][T22746] 0 pages cma reserved [ 2103.071990][T22525] 8021q: adding VLAN 0 to HW filter on device team0 [ 2103.174462][T14251] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.178990][T14251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2103.224781][T22749] wlan0 speed is unknown, defaulting to 1000 [ 2103.277929][T14251] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.278061][T14251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2103.284873][T14251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2103.284891][T14251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2103.526260][T14271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2103.526281][T14271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2105.359018][ C0] vkms_vblank_simulate: vblank timer overrun [ 2106.096448][ C0] vkms_vblank_simulate: vblank timer overrun [ 2106.535456][T22525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2107.067085][T22805] wlan0 speed is unknown, defaulting to 1000 [ 2107.758403][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4658'. [ 2108.166612][T22821] netlink: 'syz.4.4654': attribute type 10 has an invalid length. [ 2108.166667][T22821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4654'. [ 2108.284316][ C0] vkms_vblank_simulate: vblank timer overrun [ 2108.446628][T22821] team0: entered promiscuous mode [ 2108.446658][T22821] team_slave_0: entered promiscuous mode [ 2108.553297][T22821] team_slave_1: entered promiscuous mode [ 2108.553913][T22821] team0: entered allmulticast mode [ 2108.553931][T22821] team_slave_0: entered allmulticast mode [ 2108.553950][T22821] team_slave_1: entered allmulticast mode [ 2108.555028][T22821] bridge0: port 3(team0) entered blocking state [ 2108.556921][T22821] bridge0: port 3(team0) entered disabled state [ 2108.663360][T22821] bridge0: port 3(team0) entered blocking state [ 2108.663676][T22821] bridge0: port 3(team0) entered forwarding state [ 2108.751669][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.001047][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.273062][T22525] veth0_vlan: entered promiscuous mode [ 2109.370755][T22525] veth1_vlan: entered promiscuous mode [ 2109.627410][T22849] input: syz0 as /devices/virtual/input/input32 [ 2109.656968][T22525] veth0_macvtap: entered promiscuous mode [ 2109.671907][T22525] veth1_macvtap: entered promiscuous mode [ 2109.692918][T22525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2109.712873][T22525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2110.076607][T14271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.085091][T14271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.085912][T14271] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.087512][T14271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.737755][T14575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2110.737777][T14575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.799505][T22855] netlink: 'syz.4.4664': attribute type 4 has an invalid length. [ 2110.879102][T22857] input: syz0 as /devices/virtual/input/input33 [ 2111.024855][T14576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2111.024876][T14576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.636622][ C0] vkms_vblank_simulate: vblank timer overrun [ 2114.705608][T22937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2117.266929][T22959] netlink: 'syz.4.4689': attribute type 10 has an invalid length. [ 2117.266954][T22959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4689'. [ 2119.531492][ C0] vkms_vblank_simulate: vblank timer overrun [ 2119.650875][T22979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2120.370881][ C0] vkms_vblank_simulate: vblank timer overrun [ 2120.864679][T14967] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2121.077379][T14967] usb 7-1: Using ep0 maxpacket: 8 [ 2121.122119][T14967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.122289][T14967] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2121.122315][T14967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2121.122347][T14967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2121.132353][T14967] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2121.132382][T14967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.132401][T14967] usb 7-1: Product: syz [ 2121.132414][T14967] usb 7-1: Manufacturer: syz [ 2121.132428][T14967] usb 7-1: SerialNumber: syz [ 2121.138736][T14967] usb 7-1: config 0 descriptor?? [ 2121.143943][T22987] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2121.152519][T14967] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input34 [ 2124.344079][T23019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2125.424158][ T5931] usb 7-1: USB disconnect, device number 9 [ 2125.749997][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2126.304820][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 2126.322902][ T10] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 2126.322927][ T10] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 2126.322946][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2126.368229][ T10] usb 4-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 2126.368260][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.368279][ T10] usb 4-1: Product: syz [ 2126.368292][ T10] usb 4-1: Manufacturer: syz [ 2126.368306][ T10] usb 4-1: SerialNumber: syz [ 2126.531754][ T10] usb 4-1: config 0 descriptor?? [ 2126.923722][T23043] netlink: 'syz.7.4713': attribute type 4 has an invalid length. [ 2127.109393][T23046] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4715'. [ 2127.842606][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 2128.265431][ T5931] usb 4-1: USB disconnect, device number 13 [ 2129.086080][ C1] vkms_vblank_simulate: vblank timer overrun [ 2129.594682][ C1] vkms_vblank_simulate: vblank timer overrun [ 2129.612587][ C1] vkms_vblank_simulate: vblank timer overrun [ 2129.985998][ C1] vkms_vblank_simulate: vblank timer overrun [ 2130.074802][ C1] vkms_vblank_simulate: vblank timer overrun [ 2130.498891][ C1] vkms_vblank_simulate: vblank timer overrun [ 2130.631564][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4727'. [ 2130.785864][T23086] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2130.787119][T23086] batadv1: entered promiscuous mode [ 2130.787328][T23086] batadv1: entered allmulticast mode [ 2130.789057][T23086] team0: Port device batadv1 added [ 2131.204885][T14575] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 2131.204903][T14575] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 2132.515374][ C1] vkms_vblank_simulate: vblank timer overrun [ 2137.356934][T23178] netlink: 3672 bytes leftover after parsing attributes in process `syz.7.4754'. [ 2138.871596][T23200] netlink: 3672 bytes leftover after parsing attributes in process `syz.3.4761'. [ 2139.654980][T23212] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2139.656385][T23212] batadv2: entered promiscuous mode [ 2139.656631][T23212] batadv2: entered allmulticast mode [ 2139.657668][T23212] team0: Port device batadv2 added [ 2140.200454][T14271] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 2140.200477][T14271] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 2144.226686][ T37] audit: type=1326 audit(1759685521.401:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.229553][ T37] audit: type=1326 audit(1759685521.401:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.230124][ T37] audit: type=1326 audit(1759685521.401:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.230681][ T37] audit: type=1326 audit(1759685521.401:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.230949][ T37] audit: type=1326 audit(1759685521.401:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.231961][ T37] audit: type=1326 audit(1759685521.401:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.388630][ T37] audit: type=1326 audit(1759685521.401:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.389007][ T37] audit: type=1326 audit(1759685521.561:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.389268][ T37] audit: type=1326 audit(1759685521.561:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2144.389560][ T37] audit: type=1326 audit(1759685521.561:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23273 comm="syz.4.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d453beec9 code=0x7ffc0000 [ 2146.549779][T23321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2148.410661][T23336] netlink: 3672 bytes leftover after parsing attributes in process `syz.1.4798'. [ 2148.980164][T23339] wlan0 speed is unknown, defaulting to 1000 [ 2150.315671][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.563690][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.862085][T23367] wlan0 speed is unknown, defaulting to 1000 [ 2151.706424][ C0] vkms_vblank_simulate: vblank timer overrun [ 2151.837225][ C0] vkms_vblank_simulate: vblank timer overrun [ 2152.036519][ C0] vkms_vblank_simulate: vblank timer overrun [ 2153.983851][T23404] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 2153.985112][T23404] batadv3: entered promiscuous mode [ 2153.985225][T23404] batadv3: entered allmulticast mode [ 2153.985676][T23404] team0: Port device batadv3 added [ 2154.732778][T21504] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 2154.732794][T21504] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 2155.620987][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 2155.900414][T23428] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 2156.070419][T23431] bond10: entered promiscuous mode [ 2156.070439][T23431] bond10: entered allmulticast mode [ 2156.070714][T23431] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2156.236375][T23428] bridge8: entered promiscuous mode [ 2156.236552][T23428] bridge8: entered allmulticast mode [ 2156.237280][T23428] bond10: (slave bridge8): Enslaving as a backup interface with an up link [ 2156.442404][T14257] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2156.695929][T14267] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2157.670480][T23440] wlan0 speed is unknown, defaulting to 1000 [ 2160.807684][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4833'. [ 2160.876838][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2162.264043][T23481] trusted_key: syz.1.4837 sent an empty control message without MSG_MORE. [ 2162.741872][T23500] netlink: 'syz.7.4842': attribute type 4 has an invalid length. [ 2164.097858][T23517] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2164.106154][T23517] team0: Port device batadv1 added [ 2164.207925][T23519] netlink: 3672 bytes leftover after parsing attributes in process `syz.7.4846'. [ 2165.647637][ C0] vkms_vblank_simulate: vblank timer overrun [ 2167.444690][T14967] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2167.637769][T14967] usb 4-1: config 9 has an invalid interface number: 220 but max is 3 [ 2167.637787][T14967] usb 4-1: config 9 has an invalid interface number: 131 but max is 3 [ 2167.637798][T14967] usb 4-1: config 9 has an invalid interface number: 42 but max is 3 [ 2167.637809][T14967] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 2167.637818][T14967] usb 4-1: config 9 has no interface number 0 [ 2167.637826][T14967] usb 4-1: config 9 has no interface number 1 [ 2167.637834][T14967] usb 4-1: config 9 has no interface number 2 [ 2167.637903][T14967] usb 4-1: config 9 interface 220 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2167.637916][T14967] usb 4-1: config 9 interface 220 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 2167.637937][T14967] usb 4-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 2167.637948][T14967] usb 4-1: config 9 interface 131 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2167.637960][T14967] usb 4-1: config 9 interface 131 altsetting 1 endpoint 0x8F has invalid maxpacket 11370, setting to 1024 [ 2167.637974][T14967] usb 4-1: config 9 interface 131 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 2167.637985][T14967] usb 4-1: config 9 interface 131 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2167.637996][T14967] usb 4-1: config 9 interface 131 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2167.638009][T14967] usb 4-1: config 9 interface 131 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 2167.638032][T14967] usb 4-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2167.638042][T14967] usb 4-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2167.638053][T14967] usb 4-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2167.638065][T14967] usb 4-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2167.638080][T14967] usb 4-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2167.638090][T14967] usb 4-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 2167.638100][T14967] usb 4-1: config 9 interface 42 altsetting 4 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 2167.638112][T14967] usb 4-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x88, skipping [ 2167.638123][T14967] usb 4-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 2167.638134][T14967] usb 4-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2167.638144][T14967] usb 4-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2167.638154][T14967] usb 4-1: config 9 interface 3 has no altsetting 0 [ 2167.638163][T14967] usb 4-1: config 9 interface 220 has no altsetting 0 [ 2167.638171][T14967] usb 4-1: config 9 interface 131 has no altsetting 0 [ 2167.638180][T14967] usb 4-1: config 9 interface 42 has no altsetting 0 [ 2167.640009][T14967] usb 4-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=6b.09 [ 2167.640025][T14967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.640036][T14967] usb 4-1: Product: syz [ 2167.640044][T14967] usb 4-1: Manufacturer: syz [ 2167.640051][T14967] usb 4-1: SerialNumber: syz [ 2168.080845][T14967] usb 4-1: bad CDC descriptors [ 2168.321582][T14967] usb 4-1: USB disconnect, device number 14 [ 2168.807818][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4856'. [ 2168.879696][T14967] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2168.945556][T23553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4856'. [ 2169.082426][T14967] usb 7-1: Using ep0 maxpacket: 8 [ 2169.092389][T14967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2169.092443][T14967] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2169.092460][T14967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2169.092473][T14967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2169.099033][T14967] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2169.099060][T14967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.099071][T14967] usb 7-1: Product: syz [ 2169.099079][T14967] usb 7-1: Manufacturer: syz [ 2169.099086][T14967] usb 7-1: SerialNumber: syz [ 2169.102599][T14967] usb 7-1: config 0 descriptor?? [ 2169.107863][T23551] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2169.147864][T14967] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35 [ 2169.550323][ T5931] usb 7-1: USB disconnect, device number 10 [ 2169.550489][ C0] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 2171.058690][ C0] vkms_vblank_simulate: vblank timer overrun [ 2171.165636][T23591] tipc: Started in network mode [ 2171.165667][T23591] tipc: Node identity 32d2e52de4a2, cluster identity 4711 [ 2171.174026][T23591] tipc: Enabled bearer , priority 0 [ 2171.177074][T23591] syzkaller0: entered promiscuous mode [ 2171.177099][T23591] syzkaller0: entered allmulticast mode [ 2171.410563][T23591] tipc: Resetting bearer [ 2171.507375][T23590] tipc: Resetting bearer [ 2171.714475][ C0] vkms_vblank_simulate: vblank timer overrun [ 2171.832872][T23603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2172.518381][ C0] vkms_vblank_simulate: vblank timer overrun [ 2172.537542][T14967] tipc: Node number set to 3597722925 [ 2172.566327][T23590] tipc: Disabling bearer [ 2172.989644][T23612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2178.113317][T23672] wlan0 speed is unknown, defaulting to 1000 [ 2178.318388][T23653] Bluetooth: hci1: command 0x0406 tx timeout [ 2180.094818][T23696] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 2182.156294][T23715] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 2186.209574][ C0] vkms_vblank_simulate: vblank timer overrun [ 2186.326702][T23764] wlan0 speed is unknown, defaulting to 1000 [ 2186.368765][ C0] vkms_vblank_simulate: vblank timer overrun [ 2186.445893][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4914'. [ 2186.540015][ C0] vkms_vblank_simulate: vblank timer overrun [ 2186.611256][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4914'. [ 2188.587719][T23808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2188.604935][T20562] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2188.774861][T20562] usb 5-1: Using ep0 maxpacket: 16 [ 2188.802468][T20562] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2188.802501][T20562] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2188.802524][T20562] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2188.802557][T20562] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 2188.802581][T20562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.867201][T20562] usb 5-1: config 0 descriptor?? [ 2189.692474][T23819] netlink: 'syz.7.4930': attribute type 4 has an invalid length. [ 2189.760467][T23822] @: renamed from vlan0 (while UP) [ 2191.227963][ T5897] usb 5-1: USB disconnect, device number 16 [ 2192.536129][T23848] @: renamed from vlan0 (while UP) [ 2193.335439][T23857] netlink: 'syz.6.4938': attribute type 1 has an invalid length. [ 2193.627317][T23857] bond1: entered promiscuous mode [ 2193.627337][T23857] bond1: entered allmulticast mode [ 2193.627615][T23857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2193.728039][T23857] bridge2: entered promiscuous mode [ 2193.728211][T23857] bridge2: entered allmulticast mode [ 2193.735215][T14267] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2193.834409][T23857] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 2193.879779][T14267] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2195.605060][T23868] netlink: 'syz.7.4941': attribute type 4 has an invalid length. [ 2197.492984][T23900] netlink: 'syz.3.4951': attribute type 1 has an invalid length. [ 2197.545856][T23900] bond1: entered promiscuous mode [ 2197.545892][T23900] bond1: entered allmulticast mode [ 2197.546961][T23900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2197.576175][T23900] bridge1: entered promiscuous mode [ 2197.576345][T23900] bridge1: entered allmulticast mode [ 2197.582478][T23900] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 2197.646532][T14251] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2197.827369][T14251] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2198.752559][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 2199.823265][T23916] netlink: 'syz.1.4957': attribute type 4 has an invalid length. [ 2200.250929][ C0] vkms_vblank_simulate: vblank timer overrun [ 2201.544738][ T6061] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2201.937836][ T6061] usb 5-1: Using ep0 maxpacket: 32 [ 2201.970509][ T6061] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2201.970528][ T6061] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2201.970549][ T6061] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2202.052024][ T6061] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2202.052066][ T6061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.052076][ T6061] usb 5-1: Product: syz [ 2202.052084][ T6061] usb 5-1: Manufacturer: syz [ 2202.052091][ T6061] usb 5-1: SerialNumber: syz [ 2202.395601][T23944] netlink: 'syz.4.4965': attribute type 9 has an invalid length. [ 2202.395624][T23944] netlink: 'syz.4.4965': attribute type 7 has an invalid length. [ 2202.395637][T23944] netlink: 'syz.4.4965': attribute type 8 has an invalid length. [ 2204.645386][ C0] vkms_vblank_simulate: vblank timer overrun [ 2207.175513][ T6061] usb 5-1: 0:2 : does not exist [ 2207.288657][ T6061] usb 5-1: USB disconnect, device number 17 [ 2207.360531][T23983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4978'. [ 2207.444926][ T44] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2207.461664][T23986] tipc: Enabled bearer , priority 0 [ 2207.462680][T23986] syzkaller0: entered promiscuous mode [ 2207.462701][T23986] syzkaller0: entered allmulticast mode [ 2207.488907][T23986] tipc: Resetting bearer [ 2207.708564][ T44] usb 7-1: config 9 has an invalid interface number: 220 but max is 3 [ 2207.708592][ T44] usb 7-1: config 9 has an invalid interface number: 131 but max is 3 [ 2207.708613][ T44] usb 7-1: config 9 has an invalid interface number: 42 but max is 3 [ 2207.708634][ T44] usb 7-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 2207.708653][ T44] usb 7-1: config 9 has no interface number 0 [ 2207.708669][ T44] usb 7-1: config 9 has no interface number 1 [ 2207.708685][ T44] usb 7-1: config 9 has no interface number 2 [ 2207.708785][ T44] usb 7-1: config 9 interface 220 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2207.708812][ T44] usb 7-1: config 9 interface 220 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 2207.708851][ T44] usb 7-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 2207.708873][ T44] usb 7-1: config 9 interface 131 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2207.708906][ T44] usb 7-1: config 9 interface 131 altsetting 1 endpoint 0x8F has invalid maxpacket 11370, setting to 1024 [ 2207.708932][ T44] usb 7-1: config 9 interface 131 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 2207.708956][ T44] usb 7-1: config 9 interface 131 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2207.708977][ T44] usb 7-1: config 9 interface 131 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2207.709004][ T44] usb 7-1: config 9 interface 131 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2207.709030][ T44] usb 7-1: config 9 interface 131 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 2207.709071][ T44] usb 7-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2207.709091][ T44] usb 7-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2207.709113][ T44] usb 7-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2207.709135][ T44] usb 7-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 2207.709158][ T44] usb 7-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2207.709184][ T44] usb 7-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 2207.709205][ T44] usb 7-1: config 9 interface 42 altsetting 4 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 2207.709228][ T44] usb 7-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0x88, skipping [ 2207.709251][ T44] usb 7-1: config 9 interface 42 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 2207.709273][ T44] usb 7-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2207.709292][ T44] usb 7-1: config 9 interface 42 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2207.709312][ T44] usb 7-1: config 9 interface 3 has no altsetting 0 [ 2207.709329][ T44] usb 7-1: config 9 interface 220 has no altsetting 0 [ 2207.709347][ T44] usb 7-1: config 9 interface 131 has no altsetting 0 [ 2207.709365][ T44] usb 7-1: config 9 interface 42 has no altsetting 0 [ 2207.804817][ C0] vkms_vblank_simulate: vblank timer overrun [ 2207.806261][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 2207.806277][ T37] audit: type=1326 audit(1759685584.871:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806324][ T37] audit: type=1326 audit(1759685584.871:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806365][ T37] audit: type=1326 audit(1759685584.871:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806413][ T37] audit: type=1326 audit(1759685584.871:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806452][ T37] audit: type=1326 audit(1759685584.871:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806491][ T37] audit: type=1326 audit(1759685584.871:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806531][ T37] audit: type=1326 audit(1759685584.871:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806571][ T37] audit: type=1326 audit(1759685584.871:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806612][ T37] audit: type=1326 audit(1759685584.871:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.806651][ T37] audit: type=1326 audit(1759685584.871:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23988 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51014aeec9 code=0x7ffc0000 [ 2207.813493][T23993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2207.930490][T23985] tipc: Resetting bearer [ 2208.018814][ T44] usb 7-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=6b.09 [ 2208.018834][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.018845][ T44] usb 7-1: Product: syz [ 2208.018852][ T44] usb 7-1: Manufacturer: syz [ 2208.018860][ T44] usb 7-1: SerialNumber: syz [ 2208.557255][ T44] usb 7-1: bad CDC descriptors [ 2208.614041][ C0] vkms_vblank_simulate: vblank timer overrun [ 2208.662261][ T44] usb 7-1: USB disconnect, device number 11 [ 2208.675742][T23985] tipc: Disabling bearer [ 2209.247767][T24011] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4986'. [ 2209.386230][T24019] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4990'. [ 2211.165402][T24036] netlink: 'syz.1.4992': attribute type 1 has an invalid length. [ 2211.254695][T14967] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2211.429128][T24039] bond11: entered promiscuous mode [ 2211.429157][T24039] bond11: entered allmulticast mode [ 2211.431850][T24039] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2211.534745][T14967] usb 7-1: Using ep0 maxpacket: 32 [ 2211.547884][T14967] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2211.547907][T14967] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2211.547929][T14967] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2211.559918][T14967] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2211.559935][T14967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.559946][T14967] usb 7-1: Product: syz [ 2211.559954][T14967] usb 7-1: Manufacturer: syz [ 2211.559962][T14967] usb 7-1: SerialNumber: syz [ 2211.691866][T24036] bridge9: entered promiscuous mode [ 2211.692152][T24036] bridge9: entered allmulticast mode [ 2211.692916][T24036] bond11: (slave bridge9): Enslaving as a backup interface with an up link [ 2211.769235][T14271] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2212.037125][T24047] netlink: 'syz.6.4989': attribute type 9 has an invalid length. [ 2212.037148][T24047] netlink: 'syz.6.4989': attribute type 7 has an invalid length. [ 2212.037162][T24047] netlink: 'syz.6.4989': attribute type 8 has an invalid length. [ 2212.068230][T21877] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2214.353967][T24061] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4999'. [ 2215.586945][T24070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5002'. [ 2216.856408][T14967] usb 7-1: 0:2 : does not exist [ 2216.971738][ T44] usb 7-1: USB disconnect, device number 12 [ 2217.514874][T24081] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2217.516678][T24081] team0: Port device batadv2 added [ 2217.655822][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5009'. [ 2217.799160][T24098] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5010'. [ 2219.051029][T24115] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 2219.052264][T24115] batadv4: entered promiscuous mode [ 2219.052466][T24115] batadv4: entered allmulticast mode [ 2219.053291][T24115] team0: Port device batadv4 added [ 2219.646756][T14241] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 2219.646776][T14241] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 2220.877723][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2220.877742][ T37] audit: type=1326 audit(1759685598.031:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877789][ T37] audit: type=1326 audit(1759685598.031:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877815][ T37] audit: type=1326 audit(1759685598.031:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877845][ T37] audit: type=1326 audit(1759685598.031:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877869][ T37] audit: type=1326 audit(1759685598.031:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877892][ T37] audit: type=1326 audit(1759685598.031:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877915][ T37] audit: type=1326 audit(1759685598.031:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877938][ T37] audit: type=1326 audit(1759685598.031:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877961][ T37] audit: type=1326 audit(1759685598.031:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2220.877983][ T37] audit: type=1326 audit(1759685598.041:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24123 comm="syz.6.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7746eec9 code=0x7ffc0000 [ 2221.847943][T24143] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5023'. [ 2222.262394][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2223.988046][T14241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.192918][ T5819] BUG: unable to handle page fault for address: ffffc900161df010 [ 2224.192938][ T5819] #PF: supervisor read access in kernel mode [ 2224.192948][ T5819] #PF: error_code(0x0000) - not-present page [ 2224.192959][ T5819] PGD 13ffda067 P4D 13ffda067 PUD 19a8b067 PMD 5303a067 PTE 0 [ 2224.192992][ T5819] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 2224.193008][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2224.193020][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2224.193027][ T5819] Workqueue: hci0 hci_rx_work [ 2224.193139][ T5819] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 2224.193159][ T5819] Code: da 8c 4c 8b b8 b0 8b 80 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 80 cd 3f 8d 4d 8b 3f 49 81 ff 80 cd 3f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 20 1e c3 02 84 c0 74 0e 49 8b 07 49 [ 2224.193168][ T5819] RSP: 0018:ffffc90004d1f9a8 EFLAGS: 00010283 [ 2224.193177][ T5819] RAX: 0000000000000000 RBX: ffff88802521bc00 RCX: 0000000000000000 [ 2224.193184][ T5819] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b1dd000 [ 2224.193190][ T5819] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ab837a1 [ 2224.193197][ T5819] R10: dffffc0000000000 R11: fffffbfff1d6bbc7 R12: 0000000000000002 [ 2224.193204][ T5819] R13: 0000000000000001 R14: ffff8880370ca700 R15: ffffc900161df000 [ 2224.193211][ T5819] FS: 0000000000000000(0000) GS:ffff888127020000(0000) knlGS:0000000000000000 [ 2224.193220][ T5819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2224.193227][ T5819] CR2: ffffc900161df010 CR3: 000000004ecfa000 CR4: 00000000003526f0 [ 2224.193236][ T5819] Call Trace: [ 2224.193241][ T5819] [ 2224.193248][ T5819] hci_rx_work+0x130/0xe80 [ 2224.193271][ T5819] ? process_scheduled_works+0x9ef/0x17b0 [ 2224.193311][ T5819] process_scheduled_works+0xae1/0x17b0 [ 2224.193345][ T5819] ? __pfx_process_scheduled_works+0x10/0x10 [ 2224.193362][ T5819] worker_thread+0x8a0/0xda0 [ 2224.193381][ T5819] kthread+0x711/0x8a0 [ 2224.193391][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 2224.193404][ T5819] ? __pfx_kthread+0x10/0x10 [ 2224.193413][ T5819] ? rt_spin_unlock+0x150/0x200 [ 2224.193453][ T5819] ? rt_spin_unlock+0x161/0x200 [ 2224.193462][ T5819] ? __pfx_kthread+0x10/0x10 [ 2224.193471][ T5819] ret_from_fork+0x436/0x7d0 [ 2224.193502][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 2224.193515][ T5819] ? __switch_to_asm+0x39/0x70 [ 2224.193527][ T5819] ? __switch_to_asm+0x33/0x70 [ 2224.193535][ T5819] ? __pfx_kthread+0x10/0x10 [ 2224.193545][ T5819] ret_from_fork_asm+0x1a/0x30 [ 2224.193557][ T5819] [ 2224.193564][ T5819] Modules linked in: [ 2224.193577][ T5819] CR2: ffffc900161df010 [ 2224.193589][ T5819] ---[ end trace 0000000000000000 ]--- [ 2224.193597][ T5819] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 2224.193613][ T5819] Code: da 8c 4c 8b b8 b0 8b 80 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 80 cd 3f 8d 4d 8b 3f 49 81 ff 80 cd 3f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 20 1e c3 02 84 c0 74 0e 49 8b 07 49 [ 2224.193622][ T5819] RSP: 0018:ffffc90004d1f9a8 EFLAGS: 00010283 [ 2224.193630][ T5819] RAX: 0000000000000000 RBX: ffff88802521bc00 RCX: 0000000000000000 [ 2224.193637][ T5819] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b1dd000 [ 2224.193644][ T5819] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ab837a1 [ 2224.193651][ T5819] R10: dffffc0000000000 R11: fffffbfff1d6bbc7 R12: 0000000000000002 [ 2224.193658][ T5819] R13: 0000000000000001 R14: ffff8880370ca700 R15: ffffc900161df000 [ 2224.193665][ T5819] FS: 0000000000000000(0000) GS:ffff888127020000(0000) knlGS:0000000000000000 [ 2224.193673][ T5819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2224.193680][ T5819] CR2: ffffc900161df010 CR3: 000000004ecfa000 CR4: 00000000003526f0 [ 2224.193690][ T5819] Kernel panic - not syncing: Fatal exception [ 2224.193948][ T5819] Kernel Offset: disabled