last executing test programs: 17m12.620029542s ago: executing program 32 (id=1268): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x1000000) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 16m37.420979952s ago: executing program 33 (id=1385): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x575, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ba23610030478faffc501020301"], 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000b40)=""/4096) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 16m35.163835434s ago: executing program 34 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x2e06, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) ioctl$KDGKBDIACR(r3, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 15m24.421731082s ago: executing program 35 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0xee01, 0x2000) 15m21.776322557s ago: executing program 36 (id=1616): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 14m24.199487849s ago: executing program 37 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'}) 13m48.006402295s ago: executing program 38 (id=1871): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x300, 0x0, 0x0, 0x2}]) 12m31.270631105s ago: executing program 39 (id=2082): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000050) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 12m25.629243016s ago: executing program 40 (id=2096): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000a80)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "fa441c9b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "2b1febd5"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xe, 0x1, {0x22, 0x51b}}}}, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m46.155387377s ago: executing program 41 (id=2539): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x3) mq_unlink(&(0x7f00000000c0)='nat\x00') 8m53.101828172s ago: executing program 42 (id=2706): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r2}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r0, 0x0, 0x40890) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 8m17.201891985s ago: executing program 43 (id=2819): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0xd0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x3, 0x0, 0xfffff03c}, {0x6, 0x80, 0xff}]}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1039, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m2.369917805s ago: executing program 44 (id=3056): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701dd"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m33.215858152s ago: executing program 45 (id=3902): socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 2m19.340705402s ago: executing program 46 (id=3927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x61, 0x0, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x20, 0xe7}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = userfaultfd(0x1) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x2237, &(0x7f0000000600)={0x0, 0x800006, 0x0, 0x0, 0x28d}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000304feff1f000000000000000000", @ANYRES32=0x0, @ANYBLOB="80200113420000001801128008000100677470000c00028008180200", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0xba01}, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 2m14.962566784s ago: executing program 47 (id=3938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m7.171428153s ago: executing program 7 (id=3952): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x4ea8c1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) read$alg(r6, &(0x7f0000000000)=""/35, 0x1cc) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x27) 2m6.577987042s ago: executing program 7 (id=3953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x2) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(0xffffffffffffffff, 0x24020000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) write(r4, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 2m5.492445291s ago: executing program 7 (id=3957): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201000348d96508fa998889bc4d01020301090212000102028007ba0000000000000004"], &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}], 0x20}) syz_open_dev$usbfs(&(0x7f00000001c0), 0x4, 0x4c4002) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x190003, 0x0, {[0x0, 0x6, 0x0, 0x0, 0x80, 0x6, 0x8000]}}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0xfffffe0c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r8, &(0x7f0000000040)=""/236, 0xec) read$sequencer(r8, &(0x7f0000000340)=""/169, 0xa9) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='smb3\x00', 0x43864, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) landlock_restrict_self(r5, 0xd) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r9, 0x4) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000500)=@buf={0xb0, &(0x7f0000000440)="1bd096afd67051fd260d261be7ad3d675825fffaeb40ea6e643e75c3efcea05c42a669a48a346f4f254ba1d63036fafe19d430ba04bec2745b37e6e119dc93a14358577e7a72f7d6f15678455459b344e3afc484e2be6629ed0e448eed3c9663359b37a74f0d4db5dd0faff8f2dd38fa3278c7e826bb929905686c662469afe8bc710a6ff3588389817ae958407079d98b4b402ce071d2287a355c61388930bc48b083eb8870383fde5ed18d9a57635a"}) 2m4.777126997s ago: executing program 48 (id=3957): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201000348d96508fa998889bc4d01020301090212000102028007ba0000000000000004"], &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}], 0x20}) syz_open_dev$usbfs(&(0x7f00000001c0), 0x4, 0x4c4002) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x190003, 0x0, {[0x0, 0x6, 0x0, 0x0, 0x80, 0x6, 0x8000]}}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0xfffffe0c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r8, &(0x7f0000000040)=""/236, 0xec) read$sequencer(r8, &(0x7f0000000340)=""/169, 0xa9) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='smb3\x00', 0x43864, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) landlock_restrict_self(r5, 0xd) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r9, 0x4) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000500)=@buf={0xb0, &(0x7f0000000440)="1bd096afd67051fd260d261be7ad3d675825fffaeb40ea6e643e75c3efcea05c42a669a48a346f4f254ba1d63036fafe19d430ba04bec2745b37e6e119dc93a14358577e7a72f7d6f15678455459b344e3afc484e2be6629ed0e448eed3c9663359b37a74f0d4db5dd0faff8f2dd38fa3278c7e826bb929905686c662469afe8bc710a6ff3588389817ae958407079d98b4b402ce071d2287a355c61388930bc48b083eb8870383fde5ed18d9a57635a"}) 2m4.029791692s ago: executing program 49 (id=3960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x20, 0x1, 0xe, "9314e08f0734949aa39e59df63fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$sierra_net(0x7, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41b}}, {0x3, &(0x7f0000000640)=@string={0x3, 0x3, '{'}}, {0x5c, &(0x7f0000002280)=@string={0x5c, 0x3, "17466333741aaf0c712bfcb3125aee0aa85825da8f1fa38bb0469414c1f3b745312dd465e15452f921c35e7dd6a68fb133e7d094a3bf451ce597cd9f46aa58fa4e88dd83bf09a15ffe5de47a122f741cba1ff82559f49a57eba0"}}, {0x0, 0x0}, {0x2, &(0x7f0000002340)=@string={0x2}}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x3, 0x4000, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1600}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000240)={0x40, 0x15, 0xf1, "031cec878a42056b1ee7e489c979a43a9621b5c112d71f3465baff3207e98c4d6a8bd13ef785fdc426feaa94ca03e5255d70af1629595b2472fa1bb274b26b072c2870155daae11d05dd9c5a1a2b69bd31b6fe78d13af325ec5d5182ca0f42c39b9c2de36fd0f66ec3d0baf6562d4f9a506d1dc162034bf3a074769ad55006ac32272afbf9688ab5bd929a65394296064efbd976ab796fc4491732b5bbbb80250c1215fc9a6379b3b44d8c387581dca17c349405822e25db29929b4724ab3ce359790bd34225bf6bb24623dc3285c3d39d129975c71ad9dfb5373a401be2cb669e1837795abcbd7fdc6b1d657aaa66a15e"}, &(0x7f0000000900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d40)={0x21, 0x0, 0x1, "eb"}}) syz_usb_ep_write(r0, 0x8, 0x4a, &(0x7f0000002440)="0ad19a01deca2907f062ba73420c331f8f02bd9ef85384a196260893647a1d0ad57b74530dd58e2c167d85a7bd9aebcf3ea5419b3e48cfdbd53f90f8cf617cf19e368a83ce3569dfebd0") r2 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 1m51.664433578s ago: executing program 50 (id=3975): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1m49.262517867s ago: executing program 51 (id=3981): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 1m40.544723286s ago: executing program 9 (id=3991): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioprio_get$uid(0x3, r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x7f, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2e}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x890) 1m38.425944284s ago: executing program 9 (id=3993): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) 1m37.619153344s ago: executing program 9 (id=3995): socket$kcm(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c808) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) fallocate(0xffffffffffffffff, 0x2c, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x3, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$nl_route(r1, 0x0, 0x800) sendmsg$kcm(r1, 0x0, 0x2004d8b0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b00)=""/258, 0x102}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x1, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xe}}}, 0x24}}, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0x1}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmmsg$inet6(r3, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000840)}}], 0x1, 0x20000840) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd26, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 1m35.808713894s ago: executing program 9 (id=3999): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x4ea8c1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) read$alg(r5, &(0x7f0000000000)=""/35, 0x1cc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x27) 1m35.179867468s ago: executing program 9 (id=4001): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) 1m33.443220662s ago: executing program 9 (id=4003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) 1m32.824627979s ago: executing program 52 (id=4003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) 1m4.319790491s ago: executing program 4 (id=4056): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 1m2.576026969s ago: executing program 4 (id=4060): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) getpgid(0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x201001, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@default, @default}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) 1m1.704140656s ago: executing program 1 (id=4064): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xa1b) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r0, 0x5608) socket$pppoe(0x18, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) 1m0.324986388s ago: executing program 1 (id=4066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'}) 59.241881765s ago: executing program 1 (id=4070): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44090) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 59.237312715s ago: executing program 4 (id=4071): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 58.980868363s ago: executing program 1 (id=4072): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) read$alg(r6, &(0x7f0000000000)=""/35, 0x1cc) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x27) 57.117088137s ago: executing program 4 (id=4073): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x4ea8c1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) read$alg(r5, &(0x7f0000000000)=""/35, 0x1cc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x27) 56.58597032s ago: executing program 1 (id=4074): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r1, &(0x7f0000001c80), 0x0) 56.080574403s ago: executing program 1 (id=4076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x4, 0x100, &(0x7f0000000440)="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"}) 56.073190342s ago: executing program 4 (id=4077): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) fcntl$setsig(r0, 0xa, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 55.443532179s ago: executing program 53 (id=4076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x4, 0x100, &(0x7f0000000440)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) 54.716460955s ago: executing program 4 (id=4081): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) getpgid(0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x201001, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@default, @default}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) 54.183979351s ago: executing program 54 (id=4081): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) getpgid(0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x201001, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@default, @default}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) 38.580648203s ago: executing program 2 (id=4106): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x4, 0x100, &(0x7f0000000440)="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"}) 37.998637659s ago: executing program 2 (id=4107): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x3) 36.994151654s ago: executing program 2 (id=4109): socket$inet6(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getrandom(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$tun(0xffffffffffffffff, 0x0, 0x46) add_key$fscrypt_provisioning(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x1}, &(0x7f0000001480)=ANY=[@ANYBLOB="01"], 0x48, 0xfffffffffffffffe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) 34.413093862s ago: executing program 7 (id=4078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x4ea8c1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) read$alg(r5, &(0x7f0000000000)=""/35, 0x1cc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x27) 34.398680958s ago: executing program 2 (id=4115): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) socket$inet6(0xa, 0x80002, 0x88) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) read$alg(r6, &(0x7f0000000000)=""/35, 0x1cc) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x27) 33.431421595s ago: executing program 2 (id=4116): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000005000500f0ffffff04000600010000"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioprio_get$uid(0x3, r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x7f, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2e}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x890) 33.346820419s ago: executing program 7 (id=4117): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x3) 32.908191227s ago: executing program 2 (id=4118): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000005000500f0ffffff040006000100000008000300"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioprio_get$uid(0x3, r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x7f, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2e}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x890) 32.860796413s ago: executing program 7 (id=4119): mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x0, 0x84, 0x140000}, 0x20) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f02b, 0x1}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000140)={0x1, "487505ea66b2244a07328f163ffc00900974e4fa359b4fafa6e36c1d857dc9de", 0x4}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x40008) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x4008011}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x19, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r5 = syz_open_dev$sg(&(0x7f0000000880), 0x80000000, 0x500) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000300)=0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002bbd70000008e2020010000000000000baaefb5cfe5598402626a1f4d5d9f218abc81986c84b238c4b359b95", @ANYRES32, @ANYBLOB="0a000600080211000000000014003300f4000200ffffffffffff0802110000000a000600ffffffffffff00000a0006000802110000000000"], 0x54}}, 0xc000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x4, 0x0, 0x0, 0x3}, 0x8, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000500)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r9 = socket(0xa, 0x1, 0x0) getsockopt$inet_int(r9, 0x0, 0x22, 0x0, &(0x7f0000000040)) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000980)={@local, @private=0xa010102, @local}, 0xc) 32.293697554s ago: executing program 55 (id=4118): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000005000500f0ffffff040006000100000008000300"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioprio_get$uid(0x3, r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x7f, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2e}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x890) 32.255671095s ago: executing program 56 (id=4119): mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x0, 0x84, 0x140000}, 0x20) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f02b, 0x1}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000140)={0x1, "487505ea66b2244a07328f163ffc00900974e4fa359b4fafa6e36c1d857dc9de", 0x4}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x40008) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x4008011}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x19, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r5 = syz_open_dev$sg(&(0x7f0000000880), 0x80000000, 0x500) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000300)=0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002bbd70000008e2020010000000000000baaefb5cfe5598402626a1f4d5d9f218abc81986c84b238c4b359b95", @ANYRES32, @ANYBLOB="0a000600080211000000000014003300f4000200ffffffffffff0802110000000a000600ffffffffffff00000a0006000802110000000000"], 0x54}}, 0xc000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x4, 0x0, 0x0, 0x3}, 0x8, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000500)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r9 = socket(0xa, 0x1, 0x0) getsockopt$inet_int(r9, 0x0, 0x22, 0x0, &(0x7f0000000040)) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000980)={@local, @private=0xa010102, @local}, 0xc) 11.403841415s ago: executing program 3 (id=4154): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) getpgid(0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000000)={@default, @default}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x200000, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) 8.01569762s ago: executing program 3 (id=4157): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 7.844685637s ago: executing program 0 (id=4158): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x85c, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x85c}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 6.613193479s ago: executing program 3 (id=4160): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}}}, 0x30) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2a, 0xf, 0xb3, 0x20, 0x830, 0x80, 0xaee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x20, 0xf2, "", [{{0x9, 0x4, 0x2c, 0x61, 0x0, 0x2a, 0xc6, 0x56, 0xff}}]}}]}}, 0x0) 6.164941319s ago: executing program 0 (id=4161): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.940091824s ago: executing program 0 (id=4162): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200100004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r7, &(0x7f00000000c0)='2\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWSET={0x7c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x78}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1b0, 0x16, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'nr0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x288}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x40, 0x0, 0x1, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x40}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000400000001000000090000003c00038008000300000000001400020076000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r9, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x30}}, 0x4810) 5.766283678s ago: executing program 8 (id=4163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x35, 0x81, 0x4, 0xb7, 0x2, 0x3, 0x7, 0xb, 0x7, 0xc, 0x8, 0x80, 0xa}, 0xe) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000023, 0x0) 5.353952401s ago: executing program 6 (id=4120): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xa1b) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r0, 0x5608) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) 5.180206644s ago: executing program 5 (id=4122): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.428023371s ago: executing program 8 (id=4164): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x11, 0x0, 0x70bd2d, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@private=0xa010100}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xff, 0x0}}}, @sadb_x_sec_ctx={0x1}]}, 0x88}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f00000a9000/0x3000)=nil, 0x3000, 0x300000b, 0x13, r5, 0x53d27000) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.328672666s ago: executing program 6 (id=4165): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000010c0)) 4.017123672s ago: executing program 6 (id=4166): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 3.056386581s ago: executing program 0 (id=4167): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x100000002) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) 3.000894889s ago: executing program 8 (id=4168): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r2, &(0x7f0000001f80)=""/4095, 0xfff) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 2.898597317s ago: executing program 3 (id=4169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000004900)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x4800) 2.76474164s ago: executing program 5 (id=4170): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.669428285s ago: executing program 6 (id=4171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="8c600c5772fd", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x1, 0x1c, 0x65, 0x0, 0x3, 0x2, 0x0, @remote, @loopback}, {0x16, 0x6, 0x0, @multicast2}}}}}, 0x0) 2.552910921s ago: executing program 3 (id=4172): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xf6, 0x11, 0xfffe, 0x98, "4d512c91002a0400000000000000dcd3f82add5a895bd90f0bb4fbf29c00"}) 2.448130997s ago: executing program 8 (id=4173): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) 2.447774232s ago: executing program 0 (id=4174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.387152119s ago: executing program 0 (id=4175): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x800}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x100) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) accept4(r0, &(0x7f0000000240)=@nl, &(0x7f00000002c0)=0x80, 0x80000) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000014001105f4590000000000002b00000100"/31], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 2.370972994s ago: executing program 5 (id=4176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) 2.231342744s ago: executing program 8 (id=4177): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8300, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x7, 0xc9}}}, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) 2.195093709s ago: executing program 5 (id=4178): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000300), 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 2.097042096s ago: executing program 6 (id=4179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r2, 0x400}, 0x8) 1.680147999s ago: executing program 8 (id=4180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) 1.304870688s ago: executing program 57 (id=4180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b5f090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f310068090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1.296712599s ago: executing program 5 (id=4182): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) file_getattr(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x18, 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) 1.16841617s ago: executing program 6 (id=4183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x801) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 842.363894ms ago: executing program 3 (id=4184): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa", 0xad}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="3256610ce79d5ba6661e963ebdd4a13f920a4a5faf894f3e6c96258f3f94db4db53f98f3966993682b841fce7fe6e2491c8302e50b454e", 0x37}, {&(0x7f0000000940)="69e26b52f958da9560a9325768b9086c07e012d05af61edd263a90d717884485c60277dfe5aba057a8f24e179b4786202b1a8c8679fd147c992507d582dca9bccf7dd02e0da4307b", 0x48}, {0x0}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 5 (id=4185): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): T10] kovaplus 0003:1E7D:2D50.002C: couldn't init struct kovaplus_device [ 1196.865807][ T10] kovaplus 0003:1E7D:2D50.002C: couldn't install mouse [ 1196.873741][T19603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.909891][ T10] kovaplus 0003:1E7D:2D50.002C: probe with driver kovaplus failed with error -5 [ 1197.068853][ T636] hsr_slave_0: left promiscuous mode [ 1197.075848][ T636] hsr_slave_1: left promiscuous mode [ 1197.083419][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.090885][ T636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.100678][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.108802][ T636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.122014][ T636] hsr_slave_0: left promiscuous mode [ 1197.131919][ T636] hsr_slave_1: left promiscuous mode [ 1197.141735][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.150210][ T636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.158675][T21469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.161452][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.167767][T21469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.177211][ T636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.197160][T21469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.208417][T21469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.209537][ T636] vlan0: left allmulticast mode [ 1197.221451][ T636] veth0_vlan: left allmulticast mode [ 1197.226763][ T636] vlan0: left promiscuous mode [ 1197.232359][ T636] veth1_macvtap: left promiscuous mode [ 1197.237917][ T636] veth0_macvtap: left promiscuous mode [ 1197.243530][ T636] veth1_vlan: left promiscuous mode [ 1197.248776][ T636] veth0_vlan: left promiscuous mode [ 1197.254111][ T5135] Bluetooth: hci4: command tx timeout [ 1197.260291][ T636] vlan0: left allmulticast mode [ 1197.265410][ T636] veth0_vlan: left allmulticast mode [ 1197.270704][ T636] vlan0: left promiscuous mode [ 1197.276107][ T636] veth1_macvtap: left promiscuous mode [ 1197.282108][ T636] veth0_macvtap: left promiscuous mode [ 1197.287640][ T636] veth1_vlan: left promiscuous mode [ 1197.292990][ T636] veth0_vlan: left promiscuous mode [ 1197.389021][ T636] pim6reg (unregistering): left allmulticast mode [ 1197.428367][ T5825] usb 7-1: USB disconnect, device number 17 [ 1197.543916][ T636] team0 (unregistering): Port device team_slave_1 removed [ 1197.556745][ T636] team0 (unregistering): Port device team_slave_0 removed [ 1197.759558][ T636] team0 (unregistering): Port device team_slave_1 removed [ 1197.776279][ T636] team0 (unregistering): Port device team_slave_0 removed [ 1198.177941][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.215533][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.260812][T21168] veth0_vlan: entered promiscuous mode [ 1198.348333][T21168] veth1_vlan: entered promiscuous mode [ 1198.364188][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.373603][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.411291][T21168] veth0_macvtap: entered promiscuous mode [ 1198.433303][T21168] veth1_macvtap: entered promiscuous mode [ 1198.500546][T21486] netlink: 'syz.5.3928': attribute type 1 has an invalid length. [ 1198.508475][T21486] netlink: 924 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1198.512676][T21168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.541602][ T5930] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1198.581860][T21168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.618208][T19009] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.635064][T19009] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.657820][T19009] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.691892][ T5135] Bluetooth: hci3: command tx timeout [ 1198.696900][T19009] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.701663][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 1198.713031][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.724659][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.740656][ T5930] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1198.751160][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.770854][ T5930] usb 7-1: config 0 descriptor?? [ 1198.868763][ T636] IPVS: stop unused estimator thread 0... [ 1198.926123][T21370] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1198.938824][T21370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1198.948041][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.961130][T13337] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1198.967050][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.985445][T21370] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1198.999681][T21370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1199.021819][T21370] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1199.032706][T21370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1199.065841][T21370] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1199.077431][T21370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1199.104097][ T636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.115347][ T636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.146349][T13337] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.158002][T13337] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1199.182988][T13337] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1199.200470][T13337] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1199.209910][T13337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.218693][T13337] usb 6-1: Product: syz [ 1199.224894][ T5930] ntrig 0003:1B96:0008.002D: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.6-1/input0 [ 1199.236794][T13337] usb 6-1: Manufacturer: syz [ 1199.236823][T13337] usb 6-1: SerialNumber: syz [ 1199.266403][T13337] usb 6-1: config 0 descriptor?? [ 1199.290104][T13337] uvcvideo 6-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1199.290158][T21350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1199.306363][T13337] uvcvideo 6-1:0.0: No valid video chain found. [ 1199.326384][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1199.331430][ T5135] Bluetooth: hci4: command tx timeout [ 1199.355375][T21350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1199.410163][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1199.502059][T21350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1199.969344][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1200.048728][T21350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1200.158082][ T3094] IPVS: starting estimator thread 0... [ 1200.181132][ T5896] usb 7-1: USB disconnect, device number 18 [ 1200.271623][T21507] IPVS: using max 35 ests per chain, 84000 per kthread [ 1200.395683][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1200.566254][ T5825] usb 6-1: USB disconnect, device number 21 [ 1200.741099][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3968'. [ 1200.869679][T21370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.073024][T21370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.104184][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.111353][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.139017][T21350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.155564][ T636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.162789][ T636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.245353][T21525] binder: 21520:21525 ioctl c0306201 0 returned -14 [ 1201.549293][T21350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.584875][T19009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.592018][T19009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.622144][T19009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.629260][T19009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.666386][T21370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1202.658132][T21350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.681187][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1202.758952][T21370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.852386][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1202.881904][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1202.902409][ T10] usb 6-1: config 0 has no interface number 0 [ 1202.914119][ T10] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1202.944460][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1202.974900][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.019466][ T10] usb 6-1: Product: syz [ 1203.034938][ T10] usb 6-1: Manufacturer: syz [ 1203.035581][T19603] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.069384][ T10] usb 6-1: SerialNumber: syz [ 1203.122508][ T10] usb 6-1: config 0 descriptor?? [ 1203.145034][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1203.216904][T21350] veth0_vlan: entered promiscuous mode [ 1203.337196][T19603] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.378532][ T10] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1203.405991][ T10] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1203.450068][ T10] usb 6-1: USB disconnect, device number 22 [ 1203.450107][T19208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1203.470530][T19208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1203.480647][T19208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1203.495370][T19208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1203.505517][T19208] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1203.619150][T19603] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.675940][T21350] veth1_vlan: entered promiscuous mode [ 1203.742188][T19603] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.953929][T21370] veth0_vlan: entered promiscuous mode [ 1204.197524][T21563] binder: 21559:21563 ioctl c0306201 0 returned -14 [ 1204.292654][T21350] veth0_macvtap: entered promiscuous mode [ 1204.302243][T21350] veth1_macvtap: entered promiscuous mode [ 1204.494664][T21370] veth1_vlan: entered promiscuous mode [ 1204.534407][T21350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.578176][T19603] bridge_slave_1: left allmulticast mode [ 1204.587020][T19603] bridge_slave_1: left promiscuous mode [ 1204.593175][T19603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.613944][T19603] bridge_slave_0: left allmulticast mode [ 1204.630069][T19603] bridge_slave_0: left promiscuous mode [ 1204.643528][T19603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.976076][T19603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.994698][T19603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.013945][T19603] bond0 (unregistering): Released all slaves [ 1205.149564][T21554] chnl_net:caif_netlink_parms(): no params data found [ 1205.170960][T21350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.188146][T21370] veth0_macvtap: entered promiscuous mode [ 1205.329625][T13154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.344088][T13154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.355262][T21370] veth1_macvtap: entered promiscuous mode [ 1205.437218][T13154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.452355][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1205.469475][T13154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.562610][T19603] hsr_slave_0: left promiscuous mode [ 1205.571294][ T5135] Bluetooth: hci0: command tx timeout [ 1205.577888][T19603] hsr_slave_1: left promiscuous mode [ 1205.592592][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.612231][T19603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.631192][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1205.637663][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.647542][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.660964][T19603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.669760][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1205.680136][ T24] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1205.697105][T19603] veth1_macvtap: left promiscuous mode [ 1205.717203][T19208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1205.724034][T19603] veth0_macvtap: left promiscuous mode [ 1205.726050][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.738163][T19603] veth1_vlan: left promiscuous mode [ 1205.744671][ T24] usb 10-1: config 0 descriptor?? [ 1205.750258][T19208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1205.752918][T19603] veth0_vlan: left promiscuous mode [ 1205.763783][T19208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1205.782915][T19208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1205.790761][T19208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1206.069318][T19603] team0 (unregistering): Port device team_slave_1 removed [ 1206.086314][T19603] team0 (unregistering): Port device team_slave_0 removed [ 1206.305124][T21370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.325152][T21554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.348010][T21554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.357028][T21554] bridge_slave_0: entered allmulticast mode [ 1206.367133][T21554] bridge_slave_0: entered promiscuous mode [ 1206.375608][T21554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.382968][T21554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.392082][T21554] bridge_slave_1: entered allmulticast mode [ 1206.400068][T21554] bridge_slave_1: entered promiscuous mode [ 1206.487357][T21370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.624769][ T6744] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.644536][T21554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.683850][ T6744] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.699082][ T6744] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.712663][T21554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.754292][ T6744] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.819422][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.825468][T21554] team0: Port device team_slave_0 added [ 1206.847868][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.858033][T21554] team0: Port device team_slave_1 added [ 1207.002755][T19603] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.117778][T19603] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.136167][T21554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.145957][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.180437][T21554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.198849][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.207683][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.231826][T21554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.238905][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.270386][T21554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.329954][T19603] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.358714][ T6744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.389666][ T6744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.490113][T19603] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.618043][T21554] hsr_slave_0: entered promiscuous mode [ 1207.633049][T21554] hsr_slave_1: entered promiscuous mode [ 1207.645826][ T636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.657270][T19208] Bluetooth: hci0: command tx timeout [ 1207.719167][ T636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.974334][T19208] Bluetooth: hci2: command tx timeout [ 1208.241703][ T24] usb 10-1: USB disconnect, device number 24 [ 1208.392237][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1209.383858][T21590] chnl_net:caif_netlink_parms(): no params data found [ 1209.731125][T19208] Bluetooth: hci0: command tx timeout [ 1210.135994][T19208] Bluetooth: hci2: command tx timeout [ 1210.385381][T21672] NILFS (nullb0): couldn't find nilfs on the device [ 1210.464647][T21673] netlink: 'syz.8.3984': attribute type 8 has an invalid length. [ 1210.785742][T21665] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3983'. [ 1210.827423][T21658] macvtap1: entered promiscuous mode [ 1210.834866][T21658] vlan0: entered promiscuous mode [ 1210.845642][T21658] macvtap1: entered allmulticast mode [ 1211.439433][T21658] vlan0: entered allmulticast mode [ 1211.455510][T21658] veth0_vlan: entered allmulticast mode [ 1211.636281][T19603] bridge_slave_1: left allmulticast mode [ 1211.678149][T19603] bridge_slave_1: left promiscuous mode [ 1211.708689][T19603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.811432][T19208] Bluetooth: hci0: command tx timeout [ 1211.858611][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3986'. [ 1211.912484][T19208] Bluetooth: Frame is too long (len 16, expected len 4) [ 1211.995559][T19603] bridge_slave_0: left allmulticast mode [ 1212.017421][T19603] bridge_slave_0: left promiscuous mode [ 1212.102403][T19603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.213455][T19208] Bluetooth: hci2: command tx timeout [ 1212.268593][T21698] input: syz1 as /devices/virtual/input/input117 [ 1212.723088][T19603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.740166][T19603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.757370][T19603] bond0 (unregistering): Released all slaves [ 1213.979609][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3990'. [ 1214.193938][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1214.277068][T21590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.291505][T19208] Bluetooth: hci2: command tx timeout [ 1214.335654][T21590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.348187][T21590] bridge_slave_0: entered allmulticast mode [ 1214.375580][T21590] bridge_slave_0: entered promiscuous mode [ 1214.401422][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1214.462078][T21733] netlink: 'syz.9.3991': attribute type 4 has an invalid length. [ 1214.470151][T21733] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3991'. [ 1214.630264][ T24] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1214.794218][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.807436][T21733] .`: renamed from bond0 (while UP) [ 1214.813334][ T24] usb 9-1: config 0 has no interface number 0 [ 1214.848780][ T24] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1214.871247][T21590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.877463][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1214.894450][ T24] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1214.992341][ T24] usb 9-1: Product: syz [ 1214.999430][ T24] usb 9-1: SerialNumber: syz [ 1215.001911][T21590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.030837][ T24] usb 9-1: config 0 descriptor?? [ 1215.031278][T21590] bridge_slave_1: entered allmulticast mode [ 1215.043199][ T24] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1216.072252][T21716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.073930][T21590] bridge_slave_1: entered promiscuous mode [ 1216.088254][T21716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.151001][T21590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.451126][ T3094] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1217.548355][T19603] hsr_slave_0: left promiscuous mode [ 1217.556105][T19603] hsr_slave_1: left promiscuous mode [ 1217.569713][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.585506][T19603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.602180][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.609816][T19603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.631399][ T3094] usb 4-1: Using ep0 maxpacket: 32 [ 1217.644697][ T3094] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 1217.655875][T19603] veth1_macvtap: left promiscuous mode [ 1217.663632][ T3094] usb 4-1: config 4 has no interface number 0 [ 1217.674349][T19603] veth0_macvtap: left promiscuous mode [ 1217.682142][ T3094] usb 4-1: config 4 interface 44 has no altsetting 0 [ 1217.690191][T19603] veth1_vlan: left promiscuous mode [ 1217.700938][ T3094] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1217.714973][T19603] veth0_vlan: left promiscuous mode [ 1217.723613][ T3094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.751165][ T3094] usb 4-1: Product: syz [ 1217.772524][ T3094] usb 4-1: Manufacturer: syz [ 1217.785093][ T3094] usb 4-1: SerialNumber: syz [ 1218.212948][ T10] usb 9-1: USB disconnect, device number 12 [ 1218.626785][ T3094] kl5kusb105 4-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 1218.664777][ T3094] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1218.701272][T19603] team0 (unregistering): Port device team_slave_1 removed [ 1218.724183][ T3094] usb 4-1: USB disconnect, device number 58 [ 1218.762766][T19603] team0 (unregistering): Port device team_slave_0 removed [ 1218.763237][ T3094] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1218.793096][ T3094] kl5kusb105 4-1:4.44: device disconnected [ 1218.927506][T21590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.220347][T21590] team0: Port device team_slave_0 added [ 1219.239828][T21590] team0: Port device team_slave_1 added [ 1219.726292][T21590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.742582][T21590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.817488][T21590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.868177][T21590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.915746][T21590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.961100][T21590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.218050][T19603] IPVS: stop unused estimator thread 0... [ 1220.226822][T21810] serio: Serial port ttyS3 [ 1221.224844][T21590] hsr_slave_0: entered promiscuous mode [ 1221.261555][T21590] hsr_slave_1: entered promiscuous mode [ 1221.278144][T21590] debugfs: 'hsr0' already exists in 'hsr' [ 1221.296324][T21590] Cannot create hsr debugfs directory [ 1221.940010][T19603] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.310241][ T5135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1222.327110][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1222.341167][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1222.370029][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1222.378770][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1222.512341][T19603] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.607217][T21838] libceph: secret too big 289 [ 1222.747558][T19603] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.830724][T21554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1222.865017][T21554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.909614][T19603] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.994522][T21852] netlink: 'syz.8.4008': attribute type 4 has an invalid length. [ 1223.002584][T21852] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4008'. [ 1223.302565][T21554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1223.313939][T21554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.345647][T21554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1223.392339][T21554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.446059][T21852] .`: renamed from bond0 (while UP) [ 1223.499524][T21554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1223.531383][T21554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1223.921266][T13337] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1224.073537][T13337] usb 9-1: Using ep0 maxpacket: 8 [ 1224.089840][T13337] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1224.102156][T13337] usb 9-1: config 179 has no interface number 0 [ 1224.114488][T13337] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1224.128627][T13337] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1224.140961][T13337] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1224.153111][T13337] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1224.153299][T19603] bridge_slave_1: left allmulticast mode [ 1224.165003][T13337] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1224.185209][T13337] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1224.195109][T19603] bridge_slave_1: left promiscuous mode [ 1224.201518][T13337] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.205472][T19603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.226337][T21867] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1224.236064][T19603] bridge_slave_0: left allmulticast mode [ 1224.243704][T19603] bridge_slave_0: left promiscuous mode [ 1224.249503][T19603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.472916][T19208] Bluetooth: hci1: command tx timeout [ 1224.574686][T19603] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.587535][T19603] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.598674][T19603] .` (unregistering): Released all slaves [ 1224.957372][T21830] chnl_net:caif_netlink_parms(): no params data found [ 1225.251585][ T10] usb 9-1: USB disconnect, device number 13 [ 1225.251594][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1225.266139][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1225.368969][T19603] hsr_slave_0: left promiscuous mode [ 1225.377949][T19603] hsr_slave_1: left promiscuous mode [ 1225.385459][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.394330][T19603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.404437][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.413451][T19603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.459571][T19603] vlan0: left allmulticast mode [ 1225.464957][T19603] veth0_vlan: left allmulticast mode [ 1225.470561][T19603] vlan0: left promiscuous mode [ 1225.476552][T19603] veth1_macvtap: left promiscuous mode [ 1225.484615][T19603] veth0_macvtap: left promiscuous mode [ 1225.490610][T19603] veth1_vlan: left promiscuous mode [ 1225.497318][T19603] veth0_vlan: left promiscuous mode [ 1226.531453][T19208] Bluetooth: hci1: command tx timeout [ 1227.589701][T19603] team0 (unregistering): Port device team_slave_1 removed [ 1227.632674][T19603] team0 (unregistering): Port device team_slave_0 removed [ 1227.924847][T21830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.958452][T21830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.967008][T21830] bridge_slave_0: entered allmulticast mode [ 1227.990055][T21830] bridge_slave_0: entered promiscuous mode [ 1227.998818][T21933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1228.036686][T21554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.056768][T21830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.091212][T21830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.111280][T21830] bridge_slave_1: entered allmulticast mode [ 1228.133931][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1228.151721][T21830] bridge_slave_1: entered promiscuous mode [ 1228.228525][T21554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.267924][T21554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1228.284751][T21554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1228.313278][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1228.321455][T19009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.328658][T19009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.343531][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1228.378445][ T10] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1228.389275][T19009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.396479][T19009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.408111][ T10] usb 9-1: Product: syz [ 1228.413894][ T10] usb 9-1: SerialNumber: syz [ 1228.439581][T21951] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1228.448534][T21951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1228.460675][ T10] usb 9-1: config 0 descriptor?? [ 1228.500936][ T10] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1228.510056][ T10] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1228.542374][ T10] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1228.549018][ T10] dvb_usb_af9035 9-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1228.576121][T21830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.606206][T21830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.616614][T19208] Bluetooth: hci1: command tx timeout [ 1228.628663][T21590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1228.647710][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1228.723052][T21590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1228.739832][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1228.747916][T21590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1228.759974][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1228.772031][T21830] team0: Port device team_slave_0 added [ 1228.784968][T21830] team0: Port device team_slave_1 added [ 1228.818751][T21590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1228.849080][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1228.887918][T21966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.920979][T21830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.936211][T21830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.964754][T21966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.983001][T21830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.997528][T21830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.009841][T21830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.142160][T21830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.402914][T21830] hsr_slave_0: entered promiscuous mode [ 1230.691097][T19208] Bluetooth: hci1: command tx timeout [ 1231.016786][T21830] hsr_slave_1: entered promiscuous mode [ 1231.023201][T21830] debugfs: 'hsr0' already exists in 'hsr' [ 1231.028979][T21830] Cannot create hsr debugfs directory [ 1231.049150][T21554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.104549][T13337] usb 9-1: USB disconnect, device number 14 [ 1231.227344][T22002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1231.236127][T22002] overlayfs: missing 'lowerdir' [ 1231.526453][T22008] netlink: 'syz.8.4020': attribute type 4 has an invalid length. [ 1231.534371][T22008] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4020'. [ 1231.689681][T21590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.023051][T21590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.163885][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.171098][ T6644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.220485][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.227694][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.246713][T21554] veth0_vlan: entered promiscuous mode [ 1232.252407][T13337] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1232.355943][T21554] veth1_vlan: entered promiscuous mode [ 1232.424196][T13337] usb 9-1: Using ep0 maxpacket: 16 [ 1232.433989][T13337] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1232.459590][T13337] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.502459][T13337] usb 9-1: config 0 descriptor?? [ 1232.518258][T13337] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1232.577298][T21554] veth0_macvtap: entered promiscuous mode [ 1232.604675][T21554] veth1_macvtap: entered promiscuous mode [ 1232.640423][T21554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.683410][T21554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.706770][ T6644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.722753][ T6644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.759056][T19603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.778769][T19603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.831180][ T5930] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1232.935030][T13337] gspca_sonixj: reg_r err -71 [ 1232.940920][T13337] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1232.964305][T13337] usb 9-1: USB disconnect, device number 15 [ 1232.981573][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 1232.998229][ T5930] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1233.009559][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.033190][T21590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.060713][ T5930] usb 4-1: config 0 has no interface number 0 [ 1233.073031][T21830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1233.088768][ T5930] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1233.107180][T21830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1233.116002][ T5930] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1233.131927][T21830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1233.140239][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1233.160355][ T5930] usb 4-1: Product: syz [ 1233.165445][T21830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1233.170497][ T5930] usb 4-1: SerialNumber: syz [ 1233.181285][T21830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1233.193075][T21830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1233.201584][ T5930] usb 4-1: config 0 descriptor?? [ 1233.207314][T21830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1233.218262][ T5930] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1233.236316][T21830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.325394][T13154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.355385][T13154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.409980][T19009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.431711][T19009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.490415][T22028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.512352][T22028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.547390][T21830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.600675][T21830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.639493][T19603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.646734][T19603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.677785][T19603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.685076][T19603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.318003][T21590] veth0_vlan: entered promiscuous mode [ 1234.377673][T21590] veth1_vlan: entered promiscuous mode [ 1234.413264][T22072] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=22072 comm=syz.1.3976 [ 1234.496056][T21590] veth0_macvtap: entered promiscuous mode [ 1234.522883][T21590] veth1_macvtap: entered promiscuous mode [ 1234.552136][T21590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.569623][T21590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.585606][T19603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.656990][ T5903] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1234.670991][T13154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.673129][T13154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.673246][T13154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.841096][ T5903] usb 9-1: Using ep0 maxpacket: 8 [ 1234.916410][ T5903] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1235.040978][ T5903] usb 9-1: config 179 has no interface number 0 [ 1235.103890][ T5903] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1235.166692][ T5903] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1235.229465][ T5903] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1235.246450][ T5903] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1235.325271][ T5903] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1235.360365][ T5903] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1235.363245][T21830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.396540][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.420852][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.433247][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.444192][T22076] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1235.558288][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.567804][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.715570][ T5896] usb 4-1: USB disconnect, device number 59 [ 1235.836503][T21830] veth0_vlan: entered promiscuous mode [ 1235.877462][T21830] veth1_vlan: entered promiscuous mode [ 1236.035483][T21830] veth0_macvtap: entered promiscuous mode [ 1236.067462][T21830] veth1_macvtap: entered promiscuous mode [ 1236.127565][T21830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.165772][T21830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.204109][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.204274][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.204311][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.204345][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.292297][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1237.798516][T19208] Bluetooth: Frame is too long (len 16, expected len 4) [ 1238.457850][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.457906][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.575460][ T6744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.575483][ T6744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.720854][T19603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.764368][T13337] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1238.766927][T19603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.792806][T22122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4031'. [ 1238.815848][T22122] netlink: 'syz.1.4031': attribute type 4 has an invalid length. [ 1238.823947][T22122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4031'. [ 1238.864092][T22122] .`: renamed from bond0 (while UP) [ 1239.070309][T13337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.149154][T13337] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1239.218043][T13337] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1239.306711][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1239.306717][ T5825] usb 9-1: USB disconnect, device number 16 [ 1239.306855][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1239.348136][T13337] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1239.357772][T13337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.486029][T13337] usb 5-1: Product: syz [ 1239.503830][T13337] usb 5-1: Manufacturer: syz [ 1239.527113][T13337] usb 5-1: SerialNumber: syz [ 1240.497251][T13337] usb 5-1: config 0 descriptor?? [ 1240.515889][T13337] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1240.531197][T13337] uvcvideo 5-1:0.0: No valid video chain found. [ 1241.024653][T22134] netlink: 'syz.8.4033': attribute type 4 has an invalid length. [ 1241.032586][T22134] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4033'. [ 1241.456641][ T5825] IPVS: starting estimator thread 0... [ 1241.571728][T22138] IPVS: using max 41 ests per chain, 98400 per kthread [ 1242.083462][ T5825] usb 5-1: USB disconnect, device number 79 [ 1242.321450][T13337] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1242.451851][ T5881] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1242.464655][T22154] NILFS (nullb0): couldn't find nilfs on the device [ 1242.479339][T22154] netlink: 'syz.3.4034': attribute type 8 has an invalid length. [ 1242.487444][T13337] usb 2-1: Using ep0 maxpacket: 32 [ 1242.500041][T13337] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.526676][T13337] usb 2-1: config 0 has no interfaces? [ 1242.539764][T13337] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1242.551911][T13337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.669048][ T5881] usb 9-1: Using ep0 maxpacket: 16 [ 1242.681588][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'. [ 1242.730646][T19208] Bluetooth: Frame is too long (len 16, expected len 4) [ 1242.746549][ T5881] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1242.772567][T13337] usb 2-1: config 0 descriptor?? [ 1242.943691][ T5881] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.004381][ T5881] usb 9-1: config 0 has no interface number 0 [ 1243.035783][ T5881] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1243.072409][ T5881] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1243.085572][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1243.109445][ T5881] usb 9-1: Product: syz [ 1243.128223][ T5881] usb 9-1: SerialNumber: syz [ 1243.159067][ T5881] usb 9-1: config 0 descriptor?? [ 1243.185439][ T5881] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1243.395061][T22150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.408003][T22150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.491389][ T5881] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1244.577366][ T5896] usb 2-1: USB disconnect, device number 56 [ 1244.584422][T13337] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1244.641955][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 1244.663811][ T5881] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1244.689514][ T5881] usb 4-1: config 0 has no interface number 0 [ 1244.716699][ T5881] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1244.724139][T22198] macvtap1: entered promiscuous mode [ 1244.747404][T22198] vlan0: entered promiscuous mode [ 1244.755290][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1244.771794][T22198] macvtap1: entered allmulticast mode [ 1244.778699][T22198] vlan0: entered allmulticast mode [ 1244.785516][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.811108][ T5881] usb 4-1: Product: syz [ 1244.826940][T13337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.843429][T13337] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1244.864667][T13337] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1244.892344][ T5881] usb 4-1: Manufacturer: syz [ 1244.903293][T13337] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1244.913176][T13337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.929160][T22198] veth0_vlan: entered allmulticast mode [ 1244.942295][ T5881] usb 4-1: SerialNumber: syz [ 1245.293124][ T5881] usb 4-1: config 0 descriptor?? [ 1245.298549][ T5896] usb 9-1: USB disconnect, device number 17 [ 1245.446799][T13337] usb 5-1: Product: syz [ 1245.483159][T22204] serio: Serial port ttyS3 [ 1245.498184][T13337] usb 5-1: Manufacturer: syz [ 1245.545549][T13337] usb 5-1: SerialNumber: syz [ 1245.562629][T13337] usb 5-1: config 0 descriptor?? [ 1245.574824][T13337] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1245.584729][T13337] uvcvideo 5-1:0.0: No valid video chain found. [ 1245.684279][T22198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1245.920840][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1246.193171][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1246.279885][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1246.310415][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1246.465458][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1246.564254][T22216] NILFS (nullb0): couldn't find nilfs on the device [ 1246.930173][ T5825] usb 5-1: USB disconnect, device number 80 [ 1246.939046][ T5881] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 1247.495413][ T5881] usb 4-1: USB disconnect, device number 60 [ 1247.731319][T13337] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1247.931164][T10361] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1247.951091][T13337] usb 3-1: Using ep0 maxpacket: 8 [ 1247.958275][T13337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1247.968588][T13337] usb 3-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 1247.981124][T13337] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1247.997699][T13337] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 1248.010977][T13337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.020393][T13337] usb 3-1: Product: syz [ 1248.026820][T13337] usb 3-1: Manufacturer: syz [ 1248.037285][T13337] usb 3-1: SerialNumber: syz [ 1248.091099][T10361] usb 2-1: Using ep0 maxpacket: 16 [ 1248.102104][T10361] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1248.110628][T10361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.122572][T10361] usb 2-1: config 0 has no interface number 0 [ 1248.130952][T10361] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1248.154285][T10361] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1248.164885][T10361] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1248.175992][T10361] usb 2-1: Product: syz [ 1248.201120][T10361] usb 2-1: SerialNumber: syz [ 1248.224808][T10361] usb 2-1: config 0 descriptor?? [ 1248.246644][T10361] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1248.498744][T22234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.519266][T22234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.746192][T22227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1249.372214][T13337] usb 3-1: USB disconnect, device number 65 [ 1249.715388][T22268] serio: Serial port ttyS3 [ 1250.607968][ T5881] usb 2-1: USB disconnect, device number 57 [ 1252.249050][T22303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.384438][T22303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1252.414799][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1252.455515][T22303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1252.471500][T10361] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1252.484668][T22303] netlink: 'syz.2.4058': attribute type 2 has an invalid length. [ 1252.495596][T22303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1252.541334][T13337] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1252.661208][T10361] usb 4-1: Using ep0 maxpacket: 16 [ 1252.693621][T10361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.703922][T13337] usb 5-1: Using ep0 maxpacket: 16 [ 1252.712681][T13337] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1252.723880][T10361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.738688][T13337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.768715][T13337] usb 5-1: config 0 has no interface number 0 [ 1252.776267][T10361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1252.789088][T13337] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1252.810176][T10361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1252.833376][T10361] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.855535][T13337] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1252.873640][T13337] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1252.892371][T10361] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1252.909851][T10361] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1252.919530][T13337] usb 5-1: Product: syz [ 1252.928806][T13337] usb 5-1: SerialNumber: syz [ 1252.936312][T10361] usb 4-1: Manufacturer: syz [ 1252.943344][T13337] usb 5-1: config 0 descriptor?? [ 1252.951793][T13337] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1252.960302][T10361] usb 4-1: config 0 descriptor?? [ 1253.159870][T22305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.741764][T22305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.541923][T10361] rc_core: IR keymap rc-hauppauge not found [ 1254.576363][T10361] Registered IR keymap rc-empty [ 1254.591249][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.731128][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.846633][T22358] NILFS (nullb0): couldn't find nilfs on the device [ 1255.198659][T10361] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1255.214641][T10361] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input119 [ 1255.289984][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.331719][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.371320][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.402958][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.443518][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.554914][ T5881] usb 5-1: USB disconnect, device number 81 [ 1255.622486][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.691826][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.751141][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.821134][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1255.941129][ T5825] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1256.011143][T10361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1257.670622][T10361] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1257.671152][ T5825] usb 9-1: Using ep0 maxpacket: 32 [ 1257.735082][T10361] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1257.776651][ T5825] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1257.808162][T10361] usb 4-1: USB disconnect, device number 61 [ 1257.855381][ T5825] usb 9-1: config 0 has no interface number 0 [ 1258.206246][ T5825] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1258.240763][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.293588][ T5825] usb 9-1: Product: syz [ 1258.315494][ T5825] usb 9-1: Manufacturer: syz [ 1258.327248][ T5825] usb 9-1: SerialNumber: syz [ 1258.354002][ T5825] usb 9-1: config 0 descriptor?? [ 1258.371591][ T5825] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1258.596690][ T5825] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1258.621700][ T5825] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1258.782267][T10361] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1258.785997][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1258.822945][ T5903] usb 9-1: USB disconnect, device number 18 [ 1258.889848][ T5903] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1258.967003][ T5903] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1258.999636][ T5903] quatech2 9-1:0.51: device disconnected [ 1259.327404][ T636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.725560][T22411] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4080'. [ 1259.913252][T22408] macvtap1: entered promiscuous mode [ 1259.918701][T22408] vlan0: entered promiscuous mode [ 1259.925426][T22408] macvtap1: entered allmulticast mode [ 1259.930892][T22408] vlan0: entered allmulticast mode [ 1259.936183][T22408] veth0_vlan: entered allmulticast mode [ 1260.019533][ T5881] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1260.067886][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1260.092644][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1260.110247][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1260.118605][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1260.127319][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1260.168841][ T636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.342452][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 1260.374029][ T5881] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 1260.408701][ T5881] usb 3-1: config 4 has no interface number 0 [ 1260.445749][ T5881] usb 3-1: config 4 interface 44 has no altsetting 0 [ 1260.480299][ T5881] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1260.547660][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.596321][ T5881] usb 3-1: Product: syz [ 1260.613525][ T5881] usb 3-1: Manufacturer: syz [ 1260.622979][ T5881] usb 3-1: SerialNumber: syz [ 1260.690383][ T636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.016388][ T636] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.728264][T19208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1261.742074][T19208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1261.757189][T19208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1261.769097][T19208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1261.783683][T19208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1262.101935][T22412] chnl_net:caif_netlink_parms(): no params data found [ 1262.130827][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1262.184736][ T5881] kl5kusb105 3-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 1262.199851][ T636] bridge_slave_1: left allmulticast mode [ 1262.207627][ T636] bridge_slave_1: left promiscuous mode [ 1262.212063][T19208] Bluetooth: hci0: command tx timeout [ 1262.223962][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.254742][ T5881] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1262.278040][ T636] bridge_slave_0: left allmulticast mode [ 1262.287025][ T636] bridge_slave_0: left promiscuous mode [ 1262.298475][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.306613][ T5881] usb 3-1: USB disconnect, device number 66 [ 1262.323958][ T5881] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1262.350673][ T5881] kl5kusb105 3-1:4.44: device disconnected [ 1262.448992][T22443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.505040][T22443] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4084'. [ 1262.514559][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4084'. [ 1262.524066][T22443] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4084'. [ 1262.729885][T22443] netlink: 'syz.8.4084': attribute type 2 has an invalid length. [ 1262.755931][T22443] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4084'. [ 1262.852395][ T636] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.882742][ T636] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.902925][ T636] .` (unregistering): Released all slaves [ 1263.014738][ T5479] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1263.171164][ T798] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1263.361379][ T798] usb 3-1: Using ep0 maxpacket: 16 [ 1263.374211][ T798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.388624][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1263.408820][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1263.425124][ T798] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1263.435880][ T798] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.450605][ T798] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1263.459953][ T798] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1263.469960][ T798] usb 3-1: Manufacturer: syz [ 1263.486806][ T798] usb 3-1: config 0 descriptor?? [ 1263.591908][T22412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.606092][T22412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.614299][T22412] bridge_slave_0: entered allmulticast mode [ 1263.629674][T22412] bridge_slave_0: entered promiscuous mode [ 1263.657856][T22412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.681223][T22412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.722738][T22412] bridge_slave_1: entered allmulticast mode [ 1263.757646][T22412] bridge_slave_1: entered promiscuous mode [ 1263.789468][ T636] hsr_slave_0: left promiscuous mode [ 1263.808187][ T636] hsr_slave_1: left promiscuous mode [ 1263.821134][T19208] Bluetooth: hci2: command tx timeout [ 1263.834653][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.841882][ T798] rc_core: IR keymap rc-hauppauge not found [ 1263.851094][ T636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.862509][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.863145][ T798] Registered IR keymap rc-empty [ 1263.870055][ T636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.895900][ T636] vlan0: left allmulticast mode [ 1263.903847][ T636] veth0_vlan: left allmulticast mode [ 1263.903922][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.909206][ T636] vlan0: left promiscuous mode [ 1263.930546][ T636] veth1_macvtap: left promiscuous mode [ 1263.941128][ T636] veth0_macvtap: left promiscuous mode [ 1263.947813][ T636] veth1_vlan: left promiscuous mode [ 1263.961391][ T636] veth0_vlan: left promiscuous mode [ 1263.967008][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.005558][ T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1264.007846][T22464] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 1264.007846][T22464] program syz.3.4086 not setting count and/or reply_len properly [ 1264.135471][T22465] blktrace: Concurrent blktraces are not allowed on loop4 [ 1264.142985][ T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input120 [ 1264.173047][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.211358][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.261186][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.291257][T19208] Bluetooth: hci0: command tx timeout [ 1264.306321][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.361179][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.414247][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.463266][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.479018][ T636] team0 (unregistering): Port device team_slave_1 removed [ 1264.491673][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.509166][ T636] team0 (unregistering): Port device team_slave_0 removed [ 1264.605041][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.631156][ T798] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.662942][ T798] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1264.673345][ T798] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1265.686144][ T798] usb 3-1: USB disconnect, device number 67 [ 1265.891132][T19208] Bluetooth: hci2: command tx timeout [ 1266.220680][T22473] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=22473 comm=syz.2.4088 [ 1266.277702][T22412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.291837][T22412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.346329][T22412] team0: Port device team_slave_0 added [ 1266.359949][T22412] team0: Port device team_slave_1 added [ 1266.377104][T19208] Bluetooth: hci0: command tx timeout [ 1266.569903][T22412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.586813][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.690347][T22412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.749334][T22412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.772083][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.825251][T22412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.870350][T22436] chnl_net:caif_netlink_parms(): no params data found [ 1266.962996][T11242] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1267.136193][T22412] hsr_slave_0: entered promiscuous mode [ 1267.142957][T11242] usb 3-1: Using ep0 maxpacket: 16 [ 1267.149016][T22412] hsr_slave_1: entered promiscuous mode [ 1267.153370][T11242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.156900][T22436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.173607][T11242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.185061][T11242] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1267.196059][T22436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.206376][T22436] bridge_slave_0: entered allmulticast mode [ 1267.211166][T11242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.214639][T22436] bridge_slave_0: entered promiscuous mode [ 1267.243154][T11242] usb 3-1: config 0 descriptor?? [ 1267.267652][T22436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.276057][T22436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.284681][T22436] bridge_slave_1: entered allmulticast mode [ 1267.292445][T22436] bridge_slave_1: entered promiscuous mode [ 1267.441646][ T5930] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1267.481344][ T636] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.613857][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 1267.618899][ T5930] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1267.618942][ T5930] usb 4-1: config 179 has no interface number 0 [ 1267.619083][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1267.619150][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1267.619193][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1267.619237][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1267.619321][ T5930] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1267.619400][ T5930] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1267.619499][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.634962][T22491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1267.754998][T11242] hid_parser_main: 229 callbacks suppressed [ 1267.755055][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.755247][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.755403][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.755455][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.755627][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.755702][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.755867][T11242] ntrig 0003:1B96:0008.002E: unknown main item tag 0x0 [ 1267.806035][T11242] ntrig 0003:1B96:0008.002E: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 1267.905332][T11242] ntrig 0003:1B96:0008.002E: Firmware version: 2.15.6.34.3 (3ca5 4bc4) [ 1267.916984][ T636] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.970426][T11242] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input121 [ 1267.971160][T19208] Bluetooth: hci2: command tx timeout [ 1268.039276][T22436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.110305][T22436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.222909][T11242] usb 3-1: USB disconnect, device number 68 [ 1268.341933][ T636] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.451152][T19208] Bluetooth: hci0: command tx timeout [ 1268.487910][T22436] team0: Port device team_slave_0 added [ 1268.573479][ T636] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.634098][T22436] team0: Port device team_slave_1 added [ 1268.711844][T22518] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.4093'. [ 1268.806447][ T5896] usb 4-1: USB disconnect, device number 63 [ 1268.806463][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1268.821077][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1268.873467][T22436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.890374][T22436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.939592][T22436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.995683][T22436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.011778][T22436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.038925][T22436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.078008][ T5479] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1269.172087][T11242] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1269.336264][T11242] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1269.367564][T11242] usb 3-1: config 0 has no interface number 0 [ 1269.390870][T11242] usb 3-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1269.416868][T11242] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1269.443857][T11242] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1269.477758][T11242] usb 3-1: Manufacturer: syz [ 1269.486561][T22436] hsr_slave_0: entered promiscuous mode [ 1269.492258][T11242] usb 3-1: SerialNumber: syz [ 1269.498082][T22436] hsr_slave_1: entered promiscuous mode [ 1269.509562][T11242] usb 3-1: config 0 descriptor?? [ 1269.518175][T22436] debugfs: 'hsr0' already exists in 'hsr' [ 1269.538372][T22436] Cannot create hsr debugfs directory [ 1269.657321][ T636] bridge_slave_1: left allmulticast mode [ 1269.671073][ T636] bridge_slave_1: left promiscuous mode [ 1269.683476][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.710094][ T636] bridge_slave_0: left allmulticast mode [ 1269.715936][ T636] bridge_slave_0: left promiscuous mode [ 1269.721541][ T5896] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1269.743514][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.753089][T10361] usb 3-1: USB disconnect, device number 69 [ 1269.871306][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 1269.881307][ T5896] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1269.890761][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.902051][ T5896] usb 4-1: config 0 has no interface number 0 [ 1269.916878][ T5896] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1269.934324][ T5896] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1269.947000][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1269.955803][ T5896] usb 4-1: Product: syz [ 1269.960112][ T5896] usb 4-1: SerialNumber: syz [ 1269.982543][ T5896] usb 4-1: config 0 descriptor?? [ 1270.003356][ T636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.008481][ T5896] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1270.029841][ T636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.051141][T19208] Bluetooth: hci2: command tx timeout [ 1270.057821][ T636] bond0 (unregistering): Released all slaves [ 1270.080205][ T5479] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1270.290405][T22536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.319778][T22536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.476881][T22553] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4097'. [ 1270.509669][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4097'. [ 1271.026823][T22547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.061331][T22553] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4097'. [ 1271.061450][T22560] input: syz1 as /devices/virtual/input/input122 [ 1271.081561][T22553] netlink: 'syz.8.4097': attribute type 2 has an invalid length. [ 1271.089616][T22553] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4097'. [ 1271.625752][ T636] hsr_slave_0: left promiscuous mode [ 1271.660701][ T636] hsr_slave_1: left promiscuous mode [ 1271.682072][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.705415][ T636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.735940][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.763840][ T636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.862445][ T636] veth1_macvtap: left promiscuous mode [ 1271.876403][ T636] veth0_macvtap: left promiscuous mode [ 1271.894378][ T636] veth1_vlan: left promiscuous mode [ 1271.905936][ T636] veth0_vlan: left promiscuous mode [ 1272.528814][ T5825] usb 4-1: USB disconnect, device number 64 [ 1272.565692][ T636] team0 (unregistering): Port device team_slave_1 removed [ 1272.616969][ T636] team0 (unregistering): Port device team_slave_0 removed [ 1273.426134][T22412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1273.547091][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.555520][T22412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1273.565342][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1273.577269][T22412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1273.600023][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1274.101934][T22412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1274.172186][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1274.434882][ T5825] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1274.516724][T10361] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1274.676610][ T636] IPVS: stop unused estimator thread 0... [ 1274.692458][T10361] usb 3-1: Using ep0 maxpacket: 32 [ 1274.718792][T10361] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1274.740170][T22623] NILFS (nullb0): couldn't find nilfs on the device [ 1274.805754][T10361] usb 3-1: config 0 has no interface number 0 [ 1274.889637][T10361] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1274.972988][T10361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.063572][T10361] usb 3-1: Product: syz [ 1275.101620][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 1275.115662][T10361] usb 3-1: Manufacturer: syz [ 1275.120509][T10361] usb 3-1: SerialNumber: syz [ 1275.121983][ T5825] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1275.148079][T10361] usb 3-1: config 0 descriptor?? [ 1275.158218][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1275.166449][T10361] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1275.178572][ T5825] usb 4-1: Product: syz [ 1275.197166][ T5825] usb 4-1: SerialNumber: syz [ 1275.225142][ T5825] usb 4-1: config 0 descriptor?? [ 1275.249526][ T5825] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1275.267000][ T5825] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1275.288734][ T5825] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1275.378690][ T5825] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1275.395560][T22412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.400716][T10361] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1275.458031][T10361] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1275.543729][T22412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.587073][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1275.597197][T22603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.605780][T10361] usb 3-1: USB disconnect, device number 70 [ 1275.613965][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.621128][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.649095][T10361] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1275.653338][T22603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.675882][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.683104][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.706778][T10361] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1275.724940][T10361] quatech2 3-1:0.51: device disconnected [ 1276.058913][T22436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1276.091677][T22436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1276.108573][T22436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1276.134477][T22436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1276.156511][T22436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1276.174201][T22436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1276.194507][T22436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1276.217097][T22436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1276.294334][T22412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.653152][ T5930] usb 4-1: USB disconnect, device number 65 [ 1276.866880][T22436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.936491][T22436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.000501][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.007693][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.058888][T19480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.066088][T19480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.707923][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1277.802739][T19208] Bluetooth: Unexpected start frame (len 16) [ 1277.814356][T19208] Bluetooth: Frame is too long (len 16, expected len 4) [ 1278.375264][T22412] veth0_vlan: entered promiscuous mode [ 1278.403543][T22412] veth1_vlan: entered promiscuous mode [ 1278.456713][T22689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1278.540311][T22412] veth0_macvtap: entered promiscuous mode [ 1278.568765][T22412] veth1_macvtap: entered promiscuous mode [ 1278.647977][T22412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.696989][T22412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.745618][ T6744] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.780675][ T6744] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.842224][T22436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.868759][T19480] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.899394][T19480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.951409][T22707] macvtap2: entered promiscuous mode [ 1278.961670][T22707] macvtap2: entered allmulticast mode [ 1279.437094][T22715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.487138][T22707] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4112'. [ 1279.543068][T22720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1279.573235][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1279.625918][T22720] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1279.675548][T22720] netlink: 'syz.3.4113': attribute type 2 has an invalid length. [ 1279.757053][T22720] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1279.838433][T22436] veth0_vlan: entered promiscuous mode [ 1279.898839][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.922782][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.955618][T22436] veth1_vlan: entered promiscuous mode [ 1280.167673][T19480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.219785][T19480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.281466][T22436] veth0_macvtap: entered promiscuous mode [ 1280.362075][T22436] veth1_macvtap: entered promiscuous mode [ 1280.463593][T22436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.856240][T22740] binder: 22732:22740 ioctl c0306201 0 returned -14 [ 1281.176776][T22436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.234196][T19009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.258968][T19009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.309296][T19009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.386837][T19009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.879768][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.902581][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.158251][T19480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.435084][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.469249][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.573562][T19480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.169747][T19480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.282853][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1283.296241][ T5135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1283.310585][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1283.328148][T19167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1283.335320][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1283.345988][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1283.357631][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1283.384788][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1283.397147][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1283.408031][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1283.548168][T19480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.313207][T22793] netlink: 'syz.0.4125': attribute type 4 has an invalid length. [ 1285.326484][T22793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4125'. [ 1285.417703][ T5135] Bluetooth: hci0: command tx timeout [ 1285.558533][ T5135] Bluetooth: hci1: command tx timeout [ 1285.740037][T22793] .`: renamed from bond0 (while UP) [ 1285.948283][ T5903] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1286.051125][ T3094] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1286.216201][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 1286.308020][ T5903] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1286.402794][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.510245][ T5903] usb 4-1: config 0 has no interface number 0 [ 1286.557336][ T5903] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1286.627311][T19480] bridge_slave_1: left allmulticast mode [ 1286.628764][ T5903] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1286.634228][ T3094] usb 9-1: Using ep0 maxpacket: 8 [ 1286.647164][T19480] bridge_slave_1: left promiscuous mode [ 1286.653056][T19480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.660737][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1286.662233][ T3094] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1286.679987][ T5903] usb 4-1: Product: syz [ 1286.685887][ T3094] usb 9-1: config 179 has no interface number 0 [ 1286.689608][T19480] bridge_slave_0: left allmulticast mode [ 1286.698876][ T3094] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1286.703032][ T5903] usb 4-1: SerialNumber: syz [ 1286.714855][T19480] bridge_slave_0: left promiscuous mode [ 1286.720680][T19480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.730297][ T3094] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1286.742498][ T3094] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1286.743317][ T5903] usb 4-1: config 0 descriptor?? [ 1286.759188][ T3094] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1286.770908][ T3094] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1286.784700][ T5903] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1286.810750][ T3094] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1286.822250][ T3094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.861678][T22801] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1287.103172][T22826] netlink: 'syz.0.4129': attribute type 4 has an invalid length. [ 1287.111897][T22826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1287.491647][ T5135] Bluetooth: hci0: command tx timeout [ 1287.547838][T22798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.566521][T22798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.574453][ T5135] Bluetooth: hci1: command tx timeout [ 1287.620988][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input124 [ 1288.267135][T19480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.289793][T19480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.298177][T19480] bond0 (unregistering): Released all slaves [ 1288.355190][T22768] chnl_net:caif_netlink_parms(): no params data found [ 1288.498749][T22767] chnl_net:caif_netlink_parms(): no params data found [ 1289.313986][ T10] usb 4-1: USB disconnect, device number 66 [ 1289.579368][ T5135] Bluetooth: hci0: command tx timeout [ 1289.652169][ T5135] Bluetooth: hci1: command tx timeout [ 1289.703285][T22853] NILFS (nullb0): couldn't find nilfs on the device [ 1290.023673][ T5903] usb 9-1: USB disconnect, device number 19 [ 1290.023723][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1290.038270][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1290.110475][T19480] hsr_slave_0: left promiscuous mode [ 1290.130259][T19480] hsr_slave_1: left promiscuous mode [ 1290.144355][T19480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.154618][T19480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.164688][T19480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.184073][T19480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.205901][T19480] veth1_macvtap: left promiscuous mode [ 1290.213527][T19480] veth0_macvtap: left promiscuous mode [ 1290.219093][T19480] veth1_vlan: left promiscuous mode [ 1290.224859][T19480] veth0_vlan: left promiscuous mode [ 1290.471074][ T5930] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1290.563677][T22870] netlink: 'syz.3.4134': attribute type 4 has an invalid length. [ 1290.572637][T22870] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1290.826251][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.854508][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1290.891773][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1290.923812][ T5930] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1290.950249][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.968567][ T5930] usb 1-1: Product: syz [ 1290.984846][ T5930] usb 1-1: Manufacturer: syz [ 1290.999695][ T5930] usb 1-1: SerialNumber: syz [ 1291.026870][T19480] team0 (unregistering): Port device team_slave_1 removed [ 1291.035419][ T5930] usb 1-1: config 0 descriptor?? [ 1291.057309][ T5930] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1291.074129][ T5930] uvcvideo 1-1:0.0: No valid video chain found. [ 1291.083280][T19480] team0 (unregistering): Port device team_slave_0 removed [ 1291.211249][ T5903] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1291.286124][T22768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.371220][T22768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.371491][ T5903] usb 9-1: Using ep0 maxpacket: 32 [ 1291.409568][ T5825] IPVS: starting estimator thread 0... [ 1291.455991][ T5903] usb 9-1: config 4 has an invalid interface number: 44 but max is 0 [ 1291.457111][T22768] bridge_slave_0: entered allmulticast mode [ 1291.471724][ T5903] usb 9-1: config 4 has no interface number 0 [ 1291.512072][T22768] bridge_slave_0: entered promiscuous mode [ 1291.513044][ T5903] usb 9-1: config 4 interface 44 has no altsetting 0 [ 1291.590338][ T5903] usb 9-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1291.593480][T22886] IPVS: using max 39 ests per chain, 93600 per kthread [ 1291.629481][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.629943][T22768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.661186][ T5135] Bluetooth: hci0: command tx timeout [ 1291.678850][T22768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.682894][ T5903] usb 9-1: Product: syz [ 1291.690642][ T5903] usb 9-1: Manufacturer: syz [ 1291.714828][T22768] bridge_slave_1: entered allmulticast mode [ 1291.715163][ T5903] usb 9-1: SerialNumber: syz [ 1291.732291][ T5135] Bluetooth: hci1: command tx timeout [ 1291.787478][T22768] bridge_slave_1: entered promiscuous mode [ 1291.845641][T22870] .`: renamed from bond0 (while UP) [ 1291.862454][ T10] usb 1-1: USB disconnect, device number 94 [ 1291.994346][ T5903] kl5kusb105 9-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 1291.998715][T22768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.036606][ T5903] usb 9-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1292.065676][ T5903] usb 9-1: USB disconnect, device number 20 [ 1292.111645][T22768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.124974][ T5903] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1292.160964][ T5903] kl5kusb105 9-1:4.44: device disconnected [ 1292.172457][T22767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.189291][T22767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.262568][T22767] bridge_slave_0: entered allmulticast mode [ 1292.270363][T22767] bridge_slave_0: entered promiscuous mode [ 1292.282887][T22767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.290181][T22767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.299458][T22767] bridge_slave_1: entered allmulticast mode [ 1292.323719][T22767] bridge_slave_1: entered promiscuous mode [ 1292.384941][T22768] team0: Port device team_slave_0 added [ 1292.399940][T22768] team0: Port device team_slave_1 added [ 1292.518778][T22767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.634016][T22767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.644969][T22768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.653264][T22768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.688727][T22768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.235059][T22768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.253618][T22768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.281341][T22768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.360796][T22767] team0: Port device team_slave_0 added [ 1293.364510][T22909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.478555][T22767] team0: Port device team_slave_1 added [ 1293.826577][T22909] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1295.376812][T22909] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1295.460681][T22909] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1295.485965][T19480] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.700629][T22909] netlink: 'syz.8.4138': attribute type 2 has an invalid length. [ 1295.726911][T22909] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1295.741480][ T3094] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1295.753292][T22768] hsr_slave_0: entered promiscuous mode [ 1295.867436][T22768] hsr_slave_1: entered promiscuous mode [ 1295.889884][T22768] debugfs: 'hsr0' already exists in 'hsr' [ 1296.358977][T22768] Cannot create hsr debugfs directory [ 1296.386149][T22767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.413037][T22767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.441298][ T3094] usb 4-1: Using ep0 maxpacket: 32 [ 1296.447219][T22767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.469069][ T3094] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1296.490733][ T3094] usb 4-1: config 0 has no interface number 0 [ 1296.513606][ T3094] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1296.532911][T22767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.541764][ T3094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.554592][T22767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.589011][ T3094] usb 4-1: Product: syz [ 1296.600503][ T3094] usb 4-1: Manufacturer: syz [ 1296.651085][ T3094] usb 4-1: SerialNumber: syz [ 1296.667118][ T3094] usb 4-1: config 0 descriptor?? [ 1296.677456][T22767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.695258][ T3094] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1296.768966][T22945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.786721][T19480] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.905459][ T3094] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1296.948291][ T3094] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1296.989845][T19480] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.075271][T22767] hsr_slave_0: entered promiscuous mode [ 1297.096027][T22767] hsr_slave_1: entered promiscuous mode [ 1297.103605][T22767] debugfs: 'hsr0' already exists in 'hsr' [ 1297.117873][T22767] Cannot create hsr debugfs directory [ 1297.182751][T19480] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.395782][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1297.396455][ T24] usb 4-1: USB disconnect, device number 67 [ 1297.441783][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1297.490897][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1297.518033][ T24] quatech2 4-1:0.51: device disconnected [ 1297.732025][ T5825] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1298.164793][ T5825] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.216898][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1298.228832][ T5825] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1298.241978][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1298.265781][ T5825] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1298.279021][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.289145][ T5825] usb 9-1: Product: syz [ 1298.293825][ T5825] usb 9-1: Manufacturer: syz [ 1298.301437][ T5825] usb 9-1: SerialNumber: syz [ 1298.314207][ T5825] usb 9-1: config 0 descriptor?? [ 1298.333527][ T5825] uvcvideo 9-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1298.340877][ T5825] uvcvideo 9-1:0.0: No valid video chain found. [ 1298.380008][T19480] bridge_slave_1: left allmulticast mode [ 1298.390595][T19480] bridge_slave_1: left promiscuous mode [ 1298.396841][T19480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.417362][T19480] bridge_slave_0: left allmulticast mode [ 1298.423957][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1298.430542][T19480] bridge_slave_0: left promiscuous mode [ 1298.437008][ T10] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 1298.448314][T19480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.462900][ T10] usb 1-1: config 4 has no interface number 0 [ 1298.472602][ T10] usb 1-1: config 4 interface 44 has no altsetting 0 [ 1298.495163][ T10] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1298.504486][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.531045][ T10] usb 1-1: Product: syz [ 1298.543557][ T10] usb 1-1: Manufacturer: syz [ 1298.569756][ T10] usb 1-1: SerialNumber: syz [ 1298.939258][T11242] IPVS: starting estimator thread 0... [ 1299.028192][ T10] kl5kusb105 1-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 1299.032039][T22978] IPVS: using max 66 ests per chain, 158400 per kthread [ 1299.082122][T10290] usb 9-1: USB disconnect, device number 21 [ 1299.087044][ T10] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1299.146570][ T10] usb 1-1: USB disconnect, device number 95 [ 1299.165215][ T10] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1299.210277][ T10] kl5kusb105 1-1:4.44: device disconnected [ 1299.325478][T19480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.345919][T19480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.365419][T19480] bond0 (unregistering): Released all slaves [ 1299.808481][T19480] hsr_slave_0: left promiscuous mode [ 1299.828859][T19480] hsr_slave_1: left promiscuous mode [ 1299.836355][T19480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.843957][T19480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.852608][T19480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.860086][T19480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.876852][T19480] veth1_macvtap: left promiscuous mode [ 1299.883897][T19480] veth0_macvtap: left promiscuous mode [ 1299.892119][T19480] veth1_vlan: left promiscuous mode [ 1299.896745][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.897611][T19480] veth0_vlan: left promiscuous mode [ 1299.903712][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.953500][T22994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.042899][T10290] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1300.131284][T22994] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1300.140799][T22994] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1300.152844][T22994] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1300.211087][T10290] usb 1-1: Using ep0 maxpacket: 8 [ 1300.224940][T10290] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1300.244726][T10290] usb 1-1: config 179 has no interface number 0 [ 1300.264270][T10290] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1300.278882][T22994] netlink: 'syz.8.4148': attribute type 2 has an invalid length. [ 1300.298673][T10290] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1300.314699][T10290] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1300.326262][T22994] netlink: 31 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1300.335326][T10290] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1300.352178][T10290] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1300.383714][T10290] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1300.403889][T10290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.988361][T22991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1301.149270][T19480] team0 (unregistering): Port device team_slave_1 removed [ 1301.280640][T19480] team0 (unregistering): Port device team_slave_0 removed [ 1301.426966][T10290] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input125 [ 1301.477781][T23020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.676275][T23020] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1301.685708][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1301.718559][T23020] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1301.761129][T23020] netlink: 'syz.3.4150': attribute type 2 has an invalid length. [ 1301.787605][T23020] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1302.202661][ T5825] usb 1-1: USB disconnect, device number 96 [ 1302.202774][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1302.217168][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1303.151406][T23043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.188916][T22768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1303.221192][T10361] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1303.234064][T22768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1303.260355][T22768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1303.294179][T22768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1303.317355][T22768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1303.350326][T22768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1303.367177][T22768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1303.404849][T10361] usb 9-1: Using ep0 maxpacket: 16 [ 1303.413051][T22768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1303.421746][T10361] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1303.434322][T10361] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.446730][T10361] usb 9-1: config 0 has no interface number 0 [ 1303.454402][T10361] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1303.471294][T10361] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1303.473763][ T5479] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1303.481281][T10361] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1303.504534][T10361] usb 9-1: Product: syz [ 1303.508843][T10361] usb 9-1: SerialNumber: syz [ 1303.520083][T10361] usb 9-1: config 0 descriptor?? [ 1303.535656][T10361] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1303.631711][T22767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1303.641906][T22767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1303.657907][T22767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1303.669697][T22767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1303.689728][T22767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1303.700208][T22767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1303.716285][T22767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1303.728370][T22767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1303.745031][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1303.747491][T22768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.796629][T23041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.799557][T22768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.806438][T23041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.830852][T19480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.838012][T19480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.848615][T19480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.855769][T19480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.894447][T22768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1303.905061][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1303.910300][T22768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.922951][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1303.932294][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.943165][ T24] usb 4-1: config 0 has no interface number 0 [ 1303.973047][ T24] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1304.051885][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1304.081919][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1304.600318][ T24] usb 4-1: Product: syz [ 1304.613069][ T24] usb 4-1: SerialNumber: syz [ 1304.626518][ T24] usb 4-1: config 0 descriptor?? [ 1304.655004][ T24] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1304.716717][T22767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.749430][T22767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.764529][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.771768][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.810849][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.818023][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.843005][ T5479] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1304.861346][ T5825] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1304.892752][T23057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.902824][T23057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.918492][T22768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.021788][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 1305.029424][ T5825] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1305.050531][ T5825] usb 1-1: config 0 has no interface number 0 [ 1305.072163][ T5825] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1305.139142][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.641188][ T5825] usb 1-1: Product: syz [ 1305.645547][ T5825] usb 1-1: Manufacturer: syz [ 1305.650253][ T5825] usb 1-1: SerialNumber: syz [ 1305.667126][ T5825] usb 1-1: config 0 descriptor?? [ 1305.678484][ T5825] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1305.912226][ T5825] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1305.959615][ T5825] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1306.065579][T13337] usb 9-1: USB disconnect, device number 22 [ 1306.207807][T22767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.278988][T22768] veth0_vlan: entered promiscuous mode [ 1306.315862][T22768] veth1_vlan: entered promiscuous mode [ 1306.322222][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1306.334880][ T5825] usb 1-1: USB disconnect, device number 97 [ 1306.377472][ T5825] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1306.445128][T22768] veth0_macvtap: entered promiscuous mode [ 1306.491803][ T5825] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1306.492576][T22768] veth1_macvtap: entered promiscuous mode [ 1306.519787][ T5825] quatech2 1-1:0.51: device disconnected [ 1306.560940][T22768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.588256][T22768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.621519][T19603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.633672][T19603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.643998][T19603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.663266][T19603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.775338][T23119] usb 4-1: USB disconnect, device number 68 [ 1306.885142][T22767] veth0_vlan: entered promiscuous mode [ 1306.904737][T22767] veth1_vlan: entered promiscuous mode [ 1306.979614][T22767] veth0_macvtap: entered promiscuous mode [ 1307.192791][T22767] veth1_macvtap: entered promiscuous mode [ 1308.386644][T22767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.666106][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.687837][T22767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.710459][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.792051][ T6644] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.814393][ T6644] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.861225][ T6644] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.876253][ T6644] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.913597][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.952755][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.962404][ T5903] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1308.975099][T23153] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1309.055534][T23153] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1309.135069][ T29] audit: type=1400 audit(1776555446.402:405): avc: denied { listen } for pid=23156 comm="syz.8.4163" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1309.161560][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.169565][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 1309.233277][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.242593][ T5903] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 1309.277004][ T5903] usb 4-1: config 4 has no interface number 0 [ 1309.309173][ T5903] usb 4-1: config 4 interface 44 has no altsetting 0 [ 1309.327188][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.346019][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.358031][ T5903] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1309.421336][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.462815][ T5903] usb 4-1: Product: syz [ 1309.516176][ T5903] usb 4-1: Manufacturer: syz [ 1309.536057][ T5903] usb 4-1: SerialNumber: syz [ 1310.712449][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1310.911538][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1310.934931][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.972264][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1311.004875][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1311.032329][ T10] usb 6-1: Product: syz [ 1311.045617][ T10] usb 6-1: SerialNumber: syz [ 1311.083946][ T10] usb 6-1: config 0 descriptor?? [ 1311.404488][ T10] usb 6-1: USB disconnect, device number 23 [ 1311.873824][ T5903] kl5kusb105 4-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 1311.941130][ T5903] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1311.949982][T13154] Bluetooth: (null): Too short H5 packet [ 1311.962402][T23180] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1311.985151][T13154] Bluetooth: (null): Invalid header checksum [ 1311.992158][ T5903] usb 4-1: USB disconnect, device number 69 [ 1312.053185][ T29] audit: type=1400 audit(1776555449.272:406): avc: denied { ioctl } for pid=23192 comm="syz.3.4169" path="socket:[90047]" dev="sockfs" ino=90047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1312.075257][ T5903] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1312.093018][ T5903] kl5kusb105 4-1:4.44: device disconnected [ 1312.148559][ T29] audit: type=1400 audit(1776555449.402:407): avc: denied { bind } for pid=23190 comm="syz.8.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1312.532900][ T29] audit: type=1400 audit(1776555449.792:408): avc: denied { write } for pid=23212 comm="syz.5.4176" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1312.604756][ T5903] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1312.635954][ T29] audit: type=1400 audit(1776555449.822:409): avc: denied { ioctl } for pid=23212 comm="syz.5.4176" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1312.783453][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1312.800920][ T5903] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1312.819766][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.856231][ T5903] usb 4-1: Product: syz [ 1312.865457][ T5903] usb 4-1: Manufacturer: syz [ 1312.872964][ T5903] usb 4-1: SerialNumber: syz [ 1312.903795][ T5903] usb 4-1: config 0 descriptor?? [ 1312.926137][ T5903] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1312.935591][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 1312.958598][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1312.968680][ T5903] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1312.982778][ T5903] usb 4-1: media controller created [ 1313.018843][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1313.137580][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 1313.310376][ T5903] DVB: Unable to find symbol mt352_attach() [ 1313.337906][ T5903] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1313.467278][ T5903] rc_core: IR keymap rc-dvico-portable not found [ 1313.493864][ T5903] Registered IR keymap rc-empty [ 1313.500046][ T6644] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.529231][ T5903] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1313.562676][ T5903] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input126 [ 1313.613300][ T5903] dvb-usb: schedule remote query interval to 100 msecs. [ 1313.638707][ T5903] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1313.683335][ T5903] usb 4-1: USB disconnect, device number 70 [ 1313.854112][ T29] audit: type=1400 audit(1776555451.092:410): avc: denied { mounton } for pid=23232 comm="syz.5.4182" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1313.912635][ T5903] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1313.969395][ T29] audit: type=1400 audit(1776555451.192:411): avc: denied { accept } for pid=23234 comm="syz.6.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1314.020282][ T6644] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.103987][T23242] ubi: mtd0 is already attached to ubi16 [ 1314.411128][ T5135] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1314.421491][ T5135] CPU: 1 UID: 0 PID: 5135 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1314.421529][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1314.421552][ T5135] Workqueue: hci1 hci_rx_work [ 1314.421608][ T5135] Call Trace: [ 1314.421617][ T5135] [ 1314.421628][ T5135] dump_stack_lvl+0x100/0x190 [ 1314.421660][ T5135] sysfs_warn_dup.cold+0x1c/0x28 [ 1314.421692][ T5135] sysfs_create_dir_ns+0x24b/0x2b0 [ 1314.421719][ T5135] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1314.421745][ T5135] ? preempt_schedule_common+0x42/0xc0 [ 1314.421788][ T5135] ? preempt_schedule_thunk+0x16/0x30 [ 1314.421843][ T5135] kobject_add_internal+0x2c8/0x930 [ 1314.421876][ T5135] kobject_add+0x16a/0x1e0 [ 1314.421904][ T5135] ? __pfx_kobject_add+0x10/0x10 [ 1314.421950][ T5135] device_add+0x294/0x1920 [ 1314.421989][ T5135] ? __pfx_dev_set_name+0x10/0x10 [ 1314.422033][ T5135] ? __pfx_device_add+0x10/0x10 [ 1314.422081][ T5135] hci_conn_add_sysfs+0x1a3/0x260 [ 1314.422132][ T5135] le_conn_complete_evt+0x11eb/0x1f60 [ 1314.422177][ T5135] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1314.422205][ T5135] ? irqentry_exit+0x246/0x790 [ 1314.422232][ T5135] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1314.422258][ T5135] ? skb_pull_data+0x15f/0x1e0 [ 1314.422295][ T5135] hci_le_meta_evt+0x34a/0x5f0 [ 1314.422334][ T5135] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1314.422370][ T5135] hci_event_packet+0x51c/0xcd0 [ 1314.422399][ T5135] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1314.422444][ T5135] ? __pfx_hci_event_packet+0x10/0x10 [ 1314.422490][ T5135] ? kcov_remote_start+0x384/0x660 [ 1314.422531][ T5135] hci_rx_work+0x451/0xfc0 [ 1314.422579][ T5135] process_one_work+0xa0e/0x1980 [ 1314.422631][ T5135] ? __pfx_process_one_work+0x10/0x10 [ 1314.422669][ T5135] ? __pfx_hci_rx_work+0x10/0x10 [ 1314.422699][ T5135] worker_thread+0x5ef/0xe50 [ 1314.422730][ T5135] ? __pfx_worker_thread+0x10/0x10 [ 1314.422754][ T5135] ? kthread+0x13a/0x450 [ 1314.422772][ T5135] ? __pfx_worker_thread+0x10/0x10 [ 1314.422793][ T5135] kthread+0x370/0x450 [ 1314.422824][ T5135] ? __pfx_kthread+0x10/0x10 [ 1314.422858][ T5135] ret_from_fork+0x72b/0xd50 [ 1314.422898][ T5135] ? __pfx_ret_from_fork+0x10/0x10 [ 1314.422936][ T5135] ? __switch_to+0x800/0x1100 [ 1314.422981][ T5135] ? __pfx_kthread+0x10/0x10 [ 1314.423015][ T5135] ret_from_fork_asm+0x1a/0x30 [ 1314.423076][ T5135] [ 1314.423193][ T5135] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1314.429383][T19208] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.436888][ T5135] Bluetooth: hci1: failed to register connection device [ 1314.492496][T19208] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.705797][T19208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.713642][T19208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.723513][T19208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.813480][ T5831] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 1314.825594][ T5831] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 1314.834015][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 1314.843453][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1314.853492][ T5831] Workqueue: hci4 hci_rx_work [ 1314.858153][ T5831] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1314.864022][ T5831] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 4e d0 24 09 66 66 2e 0f 1f 84 00 00 00 [ 1314.883614][ T5831] RSP: 0018:ffffc90003f0f740 EFLAGS: 00010282 [ 1314.889678][ T5831] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1314.897652][ T5831] RDX: 0000000000000000 RSI: ffffffff895b94d1 RDI: dffffc000000004c [ 1314.905624][ T5831] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 1314.913593][ T5831] R10: ffffc90003f0f830 R11: 0000000000000000 R12: ffffffff895b94d1 [ 1314.921555][ T5831] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1314.929515][ T5831] FS: 0000000000000000(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000 [ 1314.938430][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.944998][ T5831] CR2: 00007ffaef001ff8 CR3: 000000007c692000 CR4: 00000000003526f0 [ 1314.952960][ T5831] Call Trace: [ 1314.956218][ T5831] [ 1314.959128][ T5831] __kasan_check_byte+0x13/0x50 [ 1314.963968][ T5831] lock_acquire+0x12a/0x370 [ 1314.968457][ T5831] ? do_raw_read_unlock+0x3f/0x70 [ 1314.973500][ T5831] lock_sock_nested+0x41/0xf0 [ 1314.978170][ T5831] ? l2cap_sock_new_connection_cb+0x4c/0x260 [ 1314.984149][ T5831] l2cap_sock_new_connection_cb+0x4c/0x260 [ 1314.989950][ T5831] l2cap_connect_cfm+0x4e2/0xf80 [ 1314.994880][ T5831] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1315.000346][ T5831] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1315.005810][ T5831] le_conn_complete_evt+0x197c/0x1f60 [ 1315.011185][ T5831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1315.016909][ T5831] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1315.022452][ T5831] ? skb_pull_data+0x15f/0x1e0 [ 1315.027207][ T5831] hci_le_meta_evt+0x34a/0x5f0 [ 1315.031962][ T5831] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1315.038023][ T5831] hci_event_packet+0x51c/0xcd0 [ 1315.042863][ T5831] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1315.048143][ T5831] ? __pfx_hci_event_packet+0x10/0x10 [ 1315.053511][ T5831] ? kcov_remote_start+0x374/0x660 [ 1315.058631][ T5831] ? lockdep_hardirqs_on+0x78/0x100 [ 1315.063828][ T5831] hci_rx_work+0x451/0xfc0 [ 1315.068238][ T5831] process_one_work+0xa0e/0x1980 [ 1315.073171][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 1315.078541][ T5831] ? __pfx_hci_rx_work+0x10/0x10 [ 1315.083476][ T5831] worker_thread+0x5ef/0xe50 [ 1315.088060][ T5831] ? kthread+0x13a/0x450 [ 1315.092288][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1315.097388][ T5831] kthread+0x370/0x450 [ 1315.101444][ T5831] ? __pfx_kthread+0x10/0x10 [ 1315.106019][ T5831] ret_from_fork+0x72b/0xd50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1315.110594][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1315.115691][ T5831] ? __switch_to+0x800/0x1100 [ 1315.120358][ T5831] ? __pfx_kthread+0x10/0x10 [ 1315.124935][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1315.129697][ T5831] [ 1315.132710][ T5831] Modules linked in: [ 1315.137600][ T5831] ---[ end trace 0000000000000000 ]--- [ 1315.146818][ T5831] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1315.152806][ T5831] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 4e d0 24 09 66 66 2e 0f 1f 84 00 00 00 [ 1315.174095][ T5831] RSP: 0018:ffffc90003f0f740 EFLAGS: 00010282 [ 1315.180870][ T5831] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1315.197563][ T5831] RDX: 0000000000000000 RSI: ffffffff895b94d1 RDI: dffffc000000004c [ 1315.205575][ T5831] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 1315.215503][ T29] audit: type=1400 audit(1776555452.482:412): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1315.237449][ T5831] R10: ffffc90003f0f830 R11: 0000000000000000 R12: ffffffff895b94d1 [ 1315.245489][ T5831] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1315.255839][ T5831] FS: 0000000000000000(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000 [ 1315.264822][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1315.271500][ T5831] CR2: 00007ffab6347e20 CR3: 000000003aac1000 CR4: 00000000003526f0 [ 1315.279655][ T5831] Kernel panic - not syncing: Fatal exception [ 1315.286002][ T5831] Kernel Offset: disabled [ 1315.290302][ T5831] Rebooting in 86400 seconds..