last executing test programs: 15.206303746s ago: executing program 1 (id=171): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) r1 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed00006203000000ffffff9c440000000000007a0a00fe00ffffffc3030000f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0xfed3) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd607fa72700002c00fc02000000000000000000000004fe8000000000000000000000000000aaa61b39b0438169064eb102b958499b1a2727020e5e6b11d115b8e67f7f99912e6c142bb834e3c3463a4ae6e861b601866e56d38a08d0ca839acbd8824d4a13fe78b93aa9b0efb99f2ec03b75aadbbce862595f6b"], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) unshare(0x4000400) 14.251024629s ago: executing program 2 (id=174): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0xff, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x3, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x7, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket(0x18, 0x1, 0xffffbffe) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 12.960978777s ago: executing program 4 (id=176): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_io_uring_setup(0x48a7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001240)={0x0, 0x4, 0xffffffff, 0xffffffff, 0x9, "001bf1c677b4dd6448cdc00100000000002000"}) r9 = syz_open_pts(r3, 0x101) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r11 = dup3(r9, r3, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000040)={0x5, 0x3, 0x6aeb, 0x8, 0x4, "b4f5ad7e54a179de93ec537b2ea1f63c50781d"}) write$UHID_INPUT(r11, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf250906000008000300", @ANYRES32=r12, @ANYBLOB="0800379eff0000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 12.827089872s ago: executing program 2 (id=177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0xe8, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}, [0xd9f, 0x100000000, 0x6, 0x7ff, 0x401, 0x8, 0x1, 0x8, 0x7, 0xffff, 0x7, 0x1, 0x3, 0x3, 0x1]}, &(0x7f00000001c0)=0xfc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000169e81, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000000380)={0x0, 0xb0}) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 11.34295201s ago: executing program 4 (id=180): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'ip6gretap0\x00', 0x1000}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0xd2d6f000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001013c0000000c0a01010000000000000000070000000900020073797a310000"], 0xec}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{0x0, 0x12c}], 0x1}, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_clone3(0x0, 0x0) read$midi(r0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRESOCT, @ANYBLOB="86c05872288f71581a816b1188238500f1c734cc399f2d62ebfe8d6805d9757de73bbf5b"], 0x0) mbind(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000140)=0x2, 0x6, 0x4) r6 = syz_open_procfs(0x0, 0x0) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) preadv(r6, &(0x7f0000000040), 0x0, 0xffffffff, 0xfffffff9) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) 11.271327904s ago: executing program 2 (id=181): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x8, 0x6, 0x4, 0x400, 0x1, {0x77359400}, {0x4, 0xc, 0xb, 0x4, 0x6, 0x91, "7ceff579"}, 0x3, 0x4, {}, 0x5}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) socket$unix(0x1, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 11.153988763s ago: executing program 1 (id=182): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x5400004) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x3cf, 0x900]}, 0x8) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20, 0x3}, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x21}) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x9004) syz_usb_control_io$hid(r3, 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r8, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x3) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x2b9, &(0x7f0000000800)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x18, 0x4, 0x2, 0x2, 0x2ab, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0x80, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}]}, @end, @rr={0x7, 0x7, 0xf6, [@loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x8b, [@remote, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0xd0, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x2}]}, @timestamp_prespec={0x44, 0x4, 0xf3, 0x3, 0xb}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff, 0x2, [0xea, 0xd2b3], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "a5c00b962d98b6057c66dfcf69175a694d97a47dfd5bc94b913eaa4462ccea03762293a97fb98fd67477c90e3917715425ce0e13dcfb1af96dd31526b5fad4b47e7913c041f5fb763b264eb3d773d85d35e20cc3ee5fb92c047020d451755d95589949310d28323d6715d6f4d619ce5453"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6], "6c353707d7f90e45c65efc0805b2e3ba230ee5c0686aa09331c3e2e2bc8dde857248896f407576e487388bf0f8b37aefdd8cff639d84e81636c64177bf3781f14cb30e9a66e3f6d99f3feb9721aa63facf7a9dd82b3b4e2dbf8e7c0d4834b3cd182b1b1d314b95db0b36"}, {0x8, 0x88be, 0x0, {{0xa, 0x1, 0x3, 0x2, 0x0, 0x1, 0x3, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x4, 0x0, 0x1, 0x0, 0x3, 0x8}, 0x2, {0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d8b9e450606cf0e44638b87baf836d5eb58a21af6c9f12ec0b87d332731d2a5cf2978a06d456a4"}}}}}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x14, &(0x7f0000000700)={0x20, 0x30, 0xe1, {0xe1, 0xa, "033bf21ee85add2a41d90bedabb3b8be06e81795bf8895555268e6f31c75a93023c192a170642ca44484c9dfb0586373671e87e54f5f4f6c59224a21b23ef62eafc910a2461270fb42e32ea06fe7e82e3d38d491c1654ee42fa5239d72e3403864b0c24c738badc9b0b3e42f2488ede47ce99416238182786ac9fc00bb850297d65c587d28a267ad541a6e4a5ff2a429c86e564ed2c6a9feb9a400fecd119230ccd377e629693c59a948e991eacece427b0a138c456db6ab20bf61cd13157903324e86b526a3c060ebdf318349d640f55f6b3005b01862ef5fedca6166e7bc"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2a}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0xa, 'm'}, @global=@item_4={0x3, 0x1, 0x0, "dad07bf2"}, @main=@item_4={0x3, 0x0, 0xa, "dccc84f9"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x48, 0x1, {0x22, 0xbdb}}}}, &(0x7f00000006c0)={0x18, &(0x7f0000000540)={0x20, 0x31, 0x92, "9d9575aef9387f8a80b944041c3e7a8c30b9e5dd7f4154811433197d50a9dba57c93e5651aae4b3ae59762ae4a33679b176b4a3fce33e9cdd18ed517767142f00db919de531105fd024623653f4096299a55a12b60b2a4bb075f22d6ebe6fd8f6fd63174a11a370d4687133e5b033c9471d688a88e0f3bf7d9e5909322f45a144af5095cc426b8405c232a6b1bcbdbd7ca0e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xdd}, 0x0, &(0x7f0000000600)={0x20, 0x1, 0x90, "a51585f2a2c40e2e6857cb45d7e091c9713767d492dbac4f693d8774eaad1875290ffaedd836bf9320cd295825af141d191130fdb1cefa387d8825611c552b239690a4e65761dfc5f9a02a1208e4c5d39a62d78293702c1c96c484deffd192d92cad32e7f440eaa0e493ceccc8a47d8c44b8c115dfd3212bf838b424bd537b787eefa6802559b8e25d00023e18e3b26d"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3}}) 9.43615812s ago: executing program 2 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 9.231381352s ago: executing program 0 (id=186): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d300000000000000500030001"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 7.747948077s ago: executing program 4 (id=188): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000002040), 0x0, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @sack_perm], 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r3, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 7.655325742s ago: executing program 0 (id=189): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d30000000000000050003000100000005000400"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 7.507267337s ago: executing program 4 (id=190): r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r5, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_io_uring_setup(0x48a7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001240)={0x0, 0x4, 0xffffffff, 0xffffffff, 0x9, "001bf1c677b4dd6448cdc00100000000002000"}) r9 = syz_open_pts(r3, 0x101) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0xc000) r11 = dup3(r9, r3, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000040)={0x5, 0x3, 0x6aeb, 0x8, 0x4, "b4f5ad7e54a179de93ec537b2ea1f63c50781d"}) write$UHID_INPUT(r11, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf250906000008000300", @ANYRES32=r12, @ANYBLOB="0800379eff0000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 7.13483804s ago: executing program 1 (id=192): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\x00\xda\x15YF\xcb)5\xc7\x14T\x10\f{?Nj<\x89S\x00\x00\x00\x00\x00\x00\x00'}]}, 0x2a) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc1(0xffffffffffffff9c, &(0x7f0000007200), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001b91a9fcf35e6f4600"/27], 0x48) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000005c0)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) nanosleep(&(0x7f0000000300)={0x77359400}, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001500010000000000000098be7caf2c42352c6f5db2cc0000020000007a59b7d70922a93f9cec7a627eb45e0581538eaa6f7e699f8703fcf44b9faac3bfe0a13495592aff1a9dec3f718d3679f59eda32253096fc4ee85056afeac172f526e19a3cbbcb2ca9da8de6116e793ea1877e39b04584f3c0e6c42830a0e6391a5cccca48bf1f18d4c15b1385b43c6ed526ada9fe985c4ebad1813728f96dadabc32340a92b7dcbf8e5e2f74cb11260124c555f520e338468e4cdc0370c3fe92abd25443ebbec6e9c2889bced4f52ee07f088bd3842c968685f3ad7d4f7c1201638723ec8fb8cf0110eef617bc59e8932d9cd34e93f7cb42663565a143bc3a062c84a47fba9e573276eefed9bb5194a6576b3dc7a3402fc3d932e625e8b1d20657ec7ef63cdc1e0178edd95a281b3f24720bd164ad1ac9e26bb4ea86e4f476d6343bffd59037e7cb30dafa1407eab9a0f8b00fef9f78fa8c160ee62331d0fb6612ea1aed5bdad"], 0x18}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="45207bd57d00000800010000000000140000004500801600000000000190780a010114aa0400907800000000450000000000000000210000ac1414aa7f00000115eb45224a67b055789720"], 0xfdef) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x2000094) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 6.887861946s ago: executing program 2 (id=193): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 5.472895215s ago: executing program 3 (id=194): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d30000000000000050003000100000005000400010000000500"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 5.084298156s ago: executing program 0 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000a00), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe21, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x8000000, 0xffff7fff}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="200826000000685c967f0c586c258e92d37987b7c9b081fe5dbd132ac7d056c102ff36ef4774ebfc697d209c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000002540)=""/197, 0xc5}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308dc0300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r7, 0x0, 0x0, 0xfffffcad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xd101541710d83822) 5.01892524s ago: executing program 3 (id=196): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x8, 0x6, 0x4, 0x400, 0x1, {0x77359400}, {0x4, 0xc, 0xb, 0x4, 0x6, 0x91, "7ceff579"}, 0x3, 0x4, {}, 0x5}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) socket$unix(0x1, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 4.903866484s ago: executing program 1 (id=197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) syz_clone(0xc0100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000084000040"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x80, 0xc0) write$P9_RLCREATE(r6, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0x8, 0x2, 0x6}, 0x2}}, 0x18) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006f222200000096231306e53f7b5ec0b2b12a9000070d00be0083000000000b09007a150b5d8c3d753bd29808c8da09acc23b87559dc9f2802ccc5fb128a437bd9e2cdf2863daee9650a6062b57bc586735d39f861a5d3f1007baa79266a17f82c951b0123389c559899c420b727ac001c8db5269e24299380b968b2d157ed16b2bce64e801ac1016ae52324613844609a13fd8cd2e2cc76024899b30a88aab0c93"], 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$fuse(0x0, 0x0, 0x814400, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x101}}]}}, 0xfd, 0x0, 0x0) getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0xc}, [{0x2, 0x6}], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x2c, 0x0) 3.721625583s ago: executing program 2 (id=198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) socket$kcm(0xa, 0x2, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0xffffffff]}}, 0x5c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="15906dfe941b4ac8c5bf307af3fbd6c190fe9f6f6f3403411f232ce0ac8ff0796edd86675607724c2082b961a5aaa46f62bc0a0515a4a4f71ca24b161d1ceb5b0a9a705d", 0x44) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000180), 0x4000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xcb}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) 3.360891434s ago: executing program 4 (id=199): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0405626, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r5, 0x0, r5) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x100000}, &(0x7f0000000240), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40810) 2.522149777s ago: executing program 1 (id=200): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d30000000000000050003000100000005000400"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 2.400500132s ago: executing program 3 (id=201): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 2.140209109s ago: executing program 3 (id=202): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) 1.829027648s ago: executing program 3 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1.827027895s ago: executing program 1 (id=204): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x4040) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}) syz_emit_ethernet(0x32, &(0x7f0000000200)={@empty, @random="1e2aad115817", @val={@val, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @remote, @private=0xa010101, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000001040)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x3fff}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002, 0x1000000000000000}, {}, {0x0, 0x0, 0x2}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@multicast1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = openat$mice(0xffffff9c, &(0x7f0000000240), 0x2000) dup3(r8, r4, 0x80000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = gettid() r10 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000043000/0x1000)=nil, 0x1000, 0x1, 0x2010, r10, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000006c0)={0x0, 0xffffffff, 0x0, 0x1}, &(0x7f00000002c0), &(0x7f0000000300)) setpriority(0x0, r9, 0x7) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000380), 0x208e24b) lseek(r11, 0x0, 0x5) 1.106278523s ago: executing program 4 (id=205): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_io_uring_setup(0x48a7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001240)={0x0, 0x4, 0xffffffff, 0xffffffff, 0x9, "001bf1c677b4dd6448cdc00100000000002000"}) r9 = syz_open_pts(r3, 0x101) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0xc000) r11 = dup3(r9, r3, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000040)={0x5, 0x3, 0x6aeb, 0x8, 0x4, "b4f5ad7e54a179de93ec537b2ea1f63c50781d"}) write$UHID_INPUT(r11, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf250906000008000300", @ANYRES32=r12, @ANYBLOB="0800379eff0000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 496.593186ms ago: executing program 0 (id=206): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4f], [0x0, 0x7]}}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d30000000000000050003000100000005000400010000000500"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17276ba0cb6ad3d48e43d1f754b4a487", 0x10, 0x40804, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}], 0x1}, 0x10}], 0x4, 0x160, 0x0) sendto$inet(r4, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 70.948667ms ago: executing program 0 (id=207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x9df, 0x3, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x4000) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f00000027c0)={0x0, 0x0, 0x40, 0x0, 0x3}) listen(r3, 0xf5db) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0xc0) 0s ago: executing program 3 (id=208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x9df, 0x3, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) sendmmsg$inet6(r3, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x4000) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f00000027c0)={0x0, 0x0, 0x40, 0x0, 0x3}) listen(r3, 0xf5db) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 83.363673][ T5817] cgroup: Unknown subsys name 'net' [ 83.474995][ T5817] cgroup: Unknown subsys name 'cpuset' [ 83.484032][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.187875][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.011995][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.030198][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.050146][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.063430][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.072649][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.080988][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.081116][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.089743][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.097268][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.104387][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.110434][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.124439][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.129135][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.133005][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.139732][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.146301][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.154879][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.162280][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.167496][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.181553][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.219041][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.228723][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.238040][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.246234][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.259634][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.905452][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.064428][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.097433][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.243158][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.250827][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.258994][ T5848] bridge_slave_0: entered allmulticast mode [ 89.267374][ T5848] bridge_slave_0: entered promiscuous mode [ 89.311968][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.319532][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.326768][ T5848] bridge_slave_1: entered allmulticast mode [ 89.334278][ T5848] bridge_slave_1: entered promiscuous mode [ 89.341579][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.359920][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.457256][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.470874][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.588212][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.598230][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.605779][ T5850] bridge_slave_0: entered allmulticast mode [ 89.613960][ T5850] bridge_slave_0: entered promiscuous mode [ 89.640616][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.647769][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.655270][ T5851] bridge_slave_0: entered allmulticast mode [ 89.663856][ T5851] bridge_slave_0: entered promiscuous mode [ 89.677514][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.685677][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.693013][ T5850] bridge_slave_1: entered allmulticast mode [ 89.701004][ T5850] bridge_slave_1: entered promiscuous mode [ 89.711601][ T5848] team0: Port device team_slave_0 added [ 89.722808][ T5848] team0: Port device team_slave_1 added [ 89.735442][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.742798][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.750702][ T5851] bridge_slave_1: entered allmulticast mode [ 89.758056][ T5851] bridge_slave_1: entered promiscuous mode [ 89.889854][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.896859][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.923773][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.935782][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.943424][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.950831][ T5847] bridge_slave_0: entered allmulticast mode [ 89.958111][ T5847] bridge_slave_0: entered promiscuous mode [ 89.984039][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.008539][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.015778][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.023472][ T5849] bridge_slave_0: entered allmulticast mode [ 90.031318][ T5849] bridge_slave_0: entered promiscuous mode [ 90.041911][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.052306][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.059287][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.086446][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.097947][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.105775][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.113144][ T5847] bridge_slave_1: entered allmulticast mode [ 90.121373][ T5847] bridge_slave_1: entered promiscuous mode [ 90.131414][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.154843][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.162494][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.170112][ T5849] bridge_slave_1: entered allmulticast mode [ 90.177361][ T5849] bridge_slave_1: entered promiscuous mode [ 90.186717][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.213357][ T5835] Bluetooth: hci0: command tx timeout [ 90.220486][ T55] Bluetooth: hci1: command tx timeout [ 90.289499][ T5835] Bluetooth: hci4: command tx timeout [ 90.295387][ T5835] Bluetooth: hci3: command tx timeout [ 90.301493][ T55] Bluetooth: hci2: command tx timeout [ 90.312399][ T5851] team0: Port device team_slave_0 added [ 90.352907][ T5850] team0: Port device team_slave_0 added [ 90.363022][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.375033][ T5851] team0: Port device team_slave_1 added [ 90.385849][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.411876][ T5850] team0: Port device team_slave_1 added [ 90.420720][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.447763][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.464683][ T5848] hsr_slave_0: entered promiscuous mode [ 90.471460][ T5848] hsr_slave_1: entered promiscuous mode [ 90.578446][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.585913][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.612079][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.627005][ T5847] team0: Port device team_slave_0 added [ 90.634181][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.641947][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.668172][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.681706][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.688691][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.715113][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.730350][ T5849] team0: Port device team_slave_0 added [ 90.737268][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.744350][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.770828][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.784233][ T5847] team0: Port device team_slave_1 added [ 90.833202][ T5849] team0: Port device team_slave_1 added [ 90.935983][ T5851] hsr_slave_0: entered promiscuous mode [ 90.943135][ T5851] hsr_slave_1: entered promiscuous mode [ 90.950941][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.958996][ T5851] Cannot create hsr debugfs directory [ 90.966810][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.974677][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.000793][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.013733][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.020940][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.047040][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.073054][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.080298][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.106459][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.182454][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.191923][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.219061][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.271358][ T5850] hsr_slave_0: entered promiscuous mode [ 91.277818][ T5850] hsr_slave_1: entered promiscuous mode [ 91.284793][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.292464][ T5850] Cannot create hsr debugfs directory [ 91.456554][ T5849] hsr_slave_0: entered promiscuous mode [ 91.474291][ T5849] hsr_slave_1: entered promiscuous mode [ 91.482017][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.490173][ T5849] Cannot create hsr debugfs directory [ 91.524582][ T5847] hsr_slave_0: entered promiscuous mode [ 91.531485][ T5847] hsr_slave_1: entered promiscuous mode [ 91.537651][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.545412][ T5847] Cannot create hsr debugfs directory [ 92.055576][ T977] cfg80211: failed to load regulatory.db [ 92.062596][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.076277][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.113758][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.151514][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.222924][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.238144][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.264277][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.275191][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.290809][ T55] Bluetooth: hci1: command tx timeout [ 92.296359][ T55] Bluetooth: hci0: command tx timeout [ 92.370700][ T55] Bluetooth: hci2: command tx timeout [ 92.370730][ T5843] Bluetooth: hci4: command tx timeout [ 92.377547][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.382049][ T5835] Bluetooth: hci3: command tx timeout [ 92.430646][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.442361][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.481142][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.543998][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.583657][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.591041][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.632851][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.646376][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.711453][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.753274][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.777861][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.785221][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.801269][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.808540][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.825343][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.854282][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.875216][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.927968][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.034498][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.071650][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.078821][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.105932][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.113231][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.170341][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.187205][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.233830][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.278651][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.285866][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.313775][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.324858][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.332079][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.370047][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.377270][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.406527][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.413973][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.427676][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.505216][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.555155][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.565608][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.611367][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.624939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.632257][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.688889][ T5848] veth0_vlan: entered promiscuous mode [ 93.714231][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.721476][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.748844][ T5848] veth1_vlan: entered promiscuous mode [ 93.815063][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.838446][ T5851] veth0_vlan: entered promiscuous mode [ 93.896375][ T5851] veth1_vlan: entered promiscuous mode [ 93.948767][ T5848] veth0_macvtap: entered promiscuous mode [ 93.977878][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.013950][ T5848] veth1_macvtap: entered promiscuous mode [ 94.058913][ T5849] veth0_vlan: entered promiscuous mode [ 94.086588][ T5851] veth0_macvtap: entered promiscuous mode [ 94.098763][ T5851] veth1_macvtap: entered promiscuous mode [ 94.117154][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.146587][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.161726][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.175137][ T5849] veth1_vlan: entered promiscuous mode [ 94.196195][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.205286][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.214966][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224220][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.260305][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.279860][ T5850] veth0_vlan: entered promiscuous mode [ 94.334401][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.370476][ T5835] Bluetooth: hci0: command tx timeout [ 94.376273][ T5843] Bluetooth: hci1: command tx timeout [ 94.381941][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.394847][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405800][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.414921][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.426961][ T5850] veth1_vlan: entered promiscuous mode [ 94.450106][ T5843] Bluetooth: hci2: command tx timeout [ 94.464069][ T5843] Bluetooth: hci3: command tx timeout [ 94.464082][ T5835] Bluetooth: hci4: command tx timeout [ 94.497016][ T5849] veth0_macvtap: entered promiscuous mode [ 94.516080][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.522239][ T5849] veth1_macvtap: entered promiscuous mode [ 94.535077][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.578385][ T5847] veth0_vlan: entered promiscuous mode [ 94.639781][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.648202][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.658106][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.662797][ T5847] veth1_vlan: entered promiscuous mode [ 94.694767][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.737980][ T5850] veth0_macvtap: entered promiscuous mode [ 94.755233][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.765862][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.775540][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.784844][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800078][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.800936][ T5850] veth1_macvtap: entered promiscuous mode [ 94.819600][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.840486][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.955755][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.970941][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.013766][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.042551][ T5847] veth0_macvtap: entered promiscuous mode [ 95.077739][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.101909][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.111423][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.121449][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.130491][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.160142][ T5847] veth1_macvtap: entered promiscuous mode [ 95.293548][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.306224][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.491783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.610516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.855226][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.895221][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.905104][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.016173][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.242387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.381534][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.402625][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.449639][ T5843] Bluetooth: hci1: command tx timeout [ 96.449834][ T5835] Bluetooth: hci0: command tx timeout [ 96.455194][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517699][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.530327][ T5835] Bluetooth: hci4: command tx timeout [ 96.535800][ T5835] Bluetooth: hci2: command tx timeout [ 96.542323][ T5835] Bluetooth: hci3: command tx timeout [ 96.556151][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.569365][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.185830][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.282711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.471554][ T5910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.479567][ T5910] bridge0: port 3(bond1) entered blocking state [ 97.486354][ T5910] bridge0: port 3(bond1) entered disabled state [ 97.493489][ T5910] bond1: entered allmulticast mode [ 97.504040][ T5910] bond1: entered promiscuous mode [ 97.510785][ T5910] bridge0: port 3(bond1) entered blocking state [ 97.517400][ T5910] bridge0: port 3(bond1) entered forwarding state [ 97.815136][ T12] bridge0: port 3(bond1) entered disabled state [ 97.962731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.002633][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.310077][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.412256][ T5894] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.439765][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.531376][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.593352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.603478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.701484][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 98.726528][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.737869][ T5894] usb 1-1: config 0 has no interfaces? [ 98.743474][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 98.757144][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.882640][ T5894] usb 1-1: config 0 descriptor?? [ 98.899014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.914167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.922828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.389446][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.440234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.479763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.589255][ T24] usb 3-1: config 0 has no interfaces? [ 99.604094][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 99.614960][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.645309][ T24] usb 3-1: Product: syz [ 99.681303][ T24] usb 3-1: Manufacturer: syz [ 99.708204][ T24] usb 3-1: SerialNumber: syz [ 99.782749][ T24] usb 3-1: config 0 descriptor?? [ 100.061068][ T5947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.219772][ T5948] wireguard0: entered promiscuous mode [ 100.225333][ T5948] wireguard0: entered allmulticast mode [ 101.231690][ T5834] usb 1-1: USB disconnect, device number 2 [ 101.781156][ T5960] trusted_key: syz.0.11 sent an empty control message without MSG_MORE. [ 103.257926][ T5975] overlayfs: missing 'lowerdir' [ 103.444170][ T5975] pim6reg: entered allmulticast mode [ 103.601363][ T977] usb 3-1: USB disconnect, device number 2 [ 104.339417][ T5935] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.491409][ T5986] team0: Port device bridge1 added [ 104.658332][ T5982] [U] ³•¯ [ 104.666866][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.745524][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 104.770308][ T5935] usb 1-1: can't read configurations, error -71 [ 105.390640][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.647545][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 106.007915][ T5822] usb 4-1: device descriptor read/all, error -71 [ 107.542238][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 107.632561][ T5973] pim6reg: left allmulticast mode [ 107.910566][ T6009] futex_wake_op: syz.2.16 tries to shift op by -33; fix this program [ 108.273188][ T6011] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 108.812016][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.820487][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.195426][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 109.229428][ T5834] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.629774][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 109.682617][ T5834] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 109.725756][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.821418][ T5834] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 109.830724][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.839443][ T5834] usb 1-1: Product: syz [ 109.858251][ T5834] usb 1-1: Manufacturer: syz [ 109.863292][ T5834] usb 1-1: SerialNumber: syz [ 109.879639][ T5834] usb 1-1: config 0 descriptor?? [ 109.916030][ T5834] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 109.967058][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.204166][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.362053][ T6026] qrtr: Invalid version 0 [ 110.829697][ T5834] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 110.837092][ T5834] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 111.007002][ T6006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.031948][ T6006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.053294][ T6006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.063513][ T6006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.198895][ T6009] netdevsim netdevsim2: Direct firmware load for . [ 111.198895][ T6009] failed with error -2 [ 111.221098][ T6009] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 111.221098][ T6009] [ 111.302134][ T30] audit: type=1326 audit(1747887424.396:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.499551][ T6006] syz.4.20 (6006) used greatest stack depth: 20232 bytes left [ 111.548962][ T30] audit: type=1326 audit(1747887424.416:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.739628][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 111.757030][ T30] audit: type=1326 audit(1747887424.416:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.800398][ T30] audit: type=1326 audit(1747887424.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.822406][ T30] audit: type=1326 audit(1747887424.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.844967][ T30] audit: type=1326 audit(1747887424.416:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.885244][ T30] audit: type=1326 audit(1747887424.446:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.911900][ T30] audit: type=1326 audit(1747887424.446:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 111.945700][ T30] audit: type=1326 audit(1747887424.446:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 112.025245][ T30] audit: type=1326 audit(1747887424.506:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 112.428175][ T974] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.703352][ T974] usb 3-1: config 0 has no interfaces? [ 112.760271][ T974] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.794277][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.849573][ T974] usb 3-1: Product: syz [ 112.853837][ T974] usb 3-1: Manufacturer: syz [ 112.858556][ T974] usb 3-1: SerialNumber: syz [ 112.908086][ T974] usb 3-1: config 0 descriptor?? [ 113.289821][ T5889] usb 1-1: USB disconnect, device number 5 [ 113.551864][ T974] IPVS: starting estimator thread 0... [ 113.621851][ T6052] Zero length message leads to an empty skb [ 113.701632][ T6051] IPVS: using max 27 ests per chain, 64800 per kthread [ 113.997909][ T6053] kAFS: unable to lookup cell '.,' [ 114.308863][ T6056] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use) [ 115.119549][ T974] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.409543][ T974] usb 4-1: config 0 has no interfaces? [ 115.425802][ T974] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.436435][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.509439][ T974] usb 4-1: Product: syz [ 115.513693][ T974] usb 4-1: Manufacturer: syz [ 115.518282][ T974] usb 4-1: SerialNumber: syz [ 115.660279][ T974] usb 4-1: config 0 descriptor?? [ 115.951498][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30'. [ 116.017243][ T974] usb 3-1: USB disconnect, device number 3 [ 116.759669][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.777872][ T6077] fuse: Bad value for 'fd' [ 116.823869][ T6077] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.044327][ T5834] usb 3-1: config 0 has no interfaces? [ 117.053268][ T5834] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.069563][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.077807][ T5834] usb 3-1: Product: syz [ 117.083893][ T5834] usb 3-1: Manufacturer: syz [ 117.094034][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.256625][ T5834] usb 3-1: SerialNumber: syz [ 117.269825][ T5834] usb 3-1: config 0 descriptor?? [ 117.423808][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 117.439270][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.454204][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.464751][ T5889] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 117.538259][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.582303][ T5889] usb 1-1: config 0 descriptor?? [ 117.695173][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.724872][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.988385][ T5834] usb 4-1: USB disconnect, device number 4 [ 118.007033][ T6087] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 118.018952][ T5889] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 118.108316][ T5889] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 118.128602][ T5889] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 118.149971][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.183485][ T5889] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 118.193056][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.213562][ T6076] support for cryptoloop has been removed. Use dm-crypt instead. [ 118.229400][ T5889] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 118.259808][ T5889] appleir 0003:05AC:8241.0001: No inputs registered, leaving [ 118.597719][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 118.597740][ T30] audit: type=1326 audit(1747887431.706:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.0.34" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 118.633944][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.642524][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.650950][ T5889] appleir 0003:05AC:8241.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 119.395389][ T6099] futex_wake_op: syz.4.37 tries to shift op by -33; fix this program [ 119.780717][ T5889] usb 1-1: USB disconnect, device number 6 [ 119.895818][ T6103] fuse: Bad value for 'fd' [ 120.082843][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.107646][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.184422][ T6085] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.194273][ T6085] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.204744][ T6085] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.215381][ T6085] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.333691][ T6096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.352039][ T6096] bridge0: port 3(bond1) entered blocking state [ 120.358677][ T6096] bridge0: port 3(bond1) entered disabled state [ 120.387043][ T6096] bond1: entered allmulticast mode [ 120.414556][ T6096] bond1: entered promiscuous mode [ 120.430788][ T5889] usb 3-1: USB disconnect, device number 4 [ 120.435374][ T6096] bridge0: port 3(bond1) entered blocking state [ 120.443936][ T6096] bridge0: port 3(bond1) entered forwarding state [ 120.509395][ T6099] netdevsim netdevsim4: Direct firmware load for . [ 120.509395][ T6099] failed with error -2 [ 120.528547][ T6104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'. [ 120.565297][ T6099] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 120.565297][ T6099] [ 121.342887][ T3028] bridge0: port 3(bond1) entered disabled state [ 122.360238][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.682826][ T5889] usb 1-1: config 0 has no interfaces? [ 122.694963][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.704987][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.713374][ T5889] usb 1-1: Product: syz [ 122.724472][ T5889] usb 1-1: Manufacturer: syz [ 122.743479][ T5889] usb 1-1: SerialNumber: syz [ 122.771572][ T5889] usb 1-1: config 0 descriptor?? [ 123.379372][ T5961] IPVS: starting estimator thread 0... [ 123.485956][ T6143] process 'syz.4.46' launched './file1' with NULL argv: empty string added [ 123.506419][ T6146] IPVS: using max 37 ests per chain, 88800 per kthread [ 124.376020][ T6149] kAFS: unable to lookup cell '.,' [ 124.641553][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 125.074593][ T5822] usb 1-1: USB disconnect, device number 7 [ 125.352094][ T6167] overlayfs: missing 'lowerdir' [ 125.507799][ T6167] pim6reg: entered allmulticast mode [ 126.053212][ T6183] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 126.140170][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.286796][ T5961] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.286797][ T5822] usb 5-1: device descriptor read/64, error -71 [ 126.513924][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 126.736667][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.767354][ T5961] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.805302][ T5961] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 127.059616][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.135172][ T5822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.193377][ T5961] usb 4-1: config 0 descriptor?? [ 127.289459][ T5822] usb 5-1: device descriptor read/64, error -71 [ 127.302961][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.310617][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.609918][ T5822] usb usb5-port1: attempt power cycle [ 127.989448][ T5822] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.027617][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.050223][ T5822] usb 5-1: device descriptor read/8, error -71 [ 128.075681][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.359505][ T5822] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.403353][ T5822] usb 5-1: device descriptor read/8, error -71 [ 128.435892][ T6176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.447023][ T6176] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.499441][ T6176] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.520692][ T6176] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.539477][ T5822] usb usb5-port1: unable to enumerate USB device [ 128.723795][ T6185] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.794650][ T6164] pim6reg: left allmulticast mode [ 129.360781][ T6192] tipc: Started in network mode [ 129.369723][ T6192] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 129.570672][ T6192] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 129.592190][ T6205] CIFS: VFS: Malformed UNC in devname [ 129.601313][ T6192] tipc: Enabled bearer , priority 10 [ 130.190283][ T5935] usb 4-1: USB disconnect, device number 5 [ 130.321535][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.517824][ T6209] bond0: entered promiscuous mode [ 130.522965][ T6209] bond_slave_0: entered promiscuous mode [ 130.530767][ T6209] bond_slave_1: entered promiscuous mode [ 130.538684][ T6209] batadv0: entered promiscuous mode [ 130.557656][ T6209] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 130.579025][ T6209] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 130.591229][ T5961] tipc: Node number set to 1 [ 130.600042][ T6209] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 130.646261][ T5889] usb 1-1: config 0 has no interfaces? [ 130.670493][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 130.679818][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.687810][ T5889] usb 1-1: Product: syz [ 130.695207][ T5889] usb 1-1: Manufacturer: syz [ 130.700402][ T5889] usb 1-1: SerialNumber: syz [ 130.721625][ T5889] usb 1-1: config 0 descriptor?? [ 130.733336][ T6209] bond0: left promiscuous mode [ 130.739058][ T6209] bond_slave_0: left promiscuous mode [ 130.852758][ T6209] bond_slave_1: left promiscuous mode [ 130.922479][ T6209] batadv0: left promiscuous mode [ 131.176873][ T6215] usb usb8: usbfs: process 6215 (syz.3.58) did not claim interface 0 before use [ 131.578535][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 133.049135][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.058584][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.126274][ T5889] usb 1-1: USB disconnect, device number 8 [ 134.553578][ T6243] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 134.966707][ T30] audit: type=1326 audit(1747887448.076:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.092783][ T30] audit: type=1326 audit(1747887448.076:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.118837][ T30] audit: type=1326 audit(1747887448.076:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.304401][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.312037][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.361730][ T30] audit: type=1326 audit(1747887448.196:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.772429][ T30] audit: type=1326 audit(1747887448.196:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.803656][ T30] audit: type=1326 audit(1747887448.336:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.854888][ T30] audit: type=1326 audit(1747887448.336:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.876614][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.885032][ T30] audit: type=1326 audit(1747887448.336:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 135.941965][ T5961] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.030480][ T30] audit: type=1326 audit(1747887448.336:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 136.053018][ T30] audit: type=1326 audit(1747887448.336:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 136.074700][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.239107][ T5961] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.249898][ T5961] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.279711][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.295016][ T5961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 136.366177][ T5961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 136.529275][ T5961] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.578549][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.646879][ T5961] usb 5-1: Product: syz [ 136.670234][ T5961] usb 5-1: Manufacturer: syz [ 136.694290][ T5961] cdc_wdm 5-1:1.0: skipping garbage [ 136.704515][ T5961] cdc_wdm 5-1:1.0: skipping garbage [ 136.737382][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.753161][ T5961] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 136.776705][ T5961] cdc_wdm 5-1:1.0: Unknown control protocol [ 136.822464][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.111091][ T6270] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 137.126761][ T6250] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.143329][ T6250] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.154149][ T6250] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.173730][ T6250] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.190147][ T6256] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.197551][ T5961] IPVS: starting estimator thread 0... [ 137.311384][ T6272] IPVS: using max 37 ests per chain, 88800 per kthread [ 137.328967][ T5961] usb 5-1: USB disconnect, device number 6 [ 137.726506][ T6280] tipc: Enabling of bearer rejected, already enabled [ 137.735626][ T6280] CIFS: VFS: Malformed UNC in devname [ 137.949447][ T5822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.969638][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 138.305748][ T6286] netlink: 'syz.3.72': attribute type 33 has an invalid length. [ 138.313604][ T6286] netlink: 152 bytes leftover after parsing attributes in process `syz.3.72'. [ 138.688930][ T5822] usb 2-1: config 0 has no interfaces? [ 138.887640][ T5822] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.897439][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.962345][ T5822] usb 2-1: Product: syz [ 138.976364][ T5822] usb 2-1: Manufacturer: syz [ 139.067885][ T5822] usb 2-1: SerialNumber: syz [ 139.129404][ T977] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.167393][ T5822] usb 2-1: config 0 descriptor?? [ 139.339443][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 139.515394][ T977] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 139.567397][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.771614][ T977] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 139.809216][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.838899][ T977] usb 5-1: Product: syz [ 140.052279][ T977] usb 5-1: Manufacturer: syz [ 140.063419][ T977] usb 5-1: SerialNumber: syz [ 140.136274][ T977] usb 5-1: config 0 descriptor?? [ 140.202567][ T977] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 141.031490][ T977] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 141.180796][ T977] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 141.624550][ T5961] usb 2-1: USB disconnect, device number 2 [ 142.000048][ T977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.296010][ T977] usb 4-1: config 0 has no interfaces? [ 142.307718][ T977] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 142.317791][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.327364][ T977] usb 4-1: Product: syz [ 142.340564][ T977] usb 4-1: Manufacturer: syz [ 142.359850][ T977] usb 4-1: SerialNumber: syz [ 142.390945][ T977] usb 4-1: config 0 descriptor?? [ 143.085455][ T5961] usb 5-1: USB disconnect, device number 7 [ 143.312328][ T6331] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 143.599784][ T977] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.798082][ T977] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.811863][ T977] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.823880][ T977] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.837618][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.972753][ T6332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.007540][ T977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.964518][ T5961] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.081877][ T5961] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.873035][ T6347] fido_id[6347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.108959][ T977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.329510][ T977] usb 1-1: device descriptor read/64, error -71 [ 146.676094][ T977] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.709832][ T5834] usb 2-1: USB disconnect, device number 3 [ 146.736097][ T6328] delete_channel: no stack [ 146.839361][ T5961] usb 4-1: USB disconnect, device number 6 [ 146.859423][ T977] usb 1-1: device descriptor read/64, error -71 [ 146.979775][ T977] usb usb1-port1: attempt power cycle [ 147.135469][ T6356] tipc: Started in network mode [ 147.141012][ T6356] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 147.150139][ T6356] tipc: Enabling of bearer rejected, failed to enable media [ 147.160610][ T6356] CIFS: VFS: Malformed UNC in devname [ 147.491163][ T977] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.511413][ T977] usb 1-1: device descriptor read/8, error -71 [ 147.850079][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.869544][ T977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.889944][ T6366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.88'. [ 147.921652][ T977] usb 1-1: device descriptor read/8, error -71 [ 148.011741][ T5834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.031575][ T977] usb usb1-port1: unable to enumerate USB device [ 148.039634][ T5834] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 148.122720][ T5834] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.157976][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.218939][ T5834] usb 4-1: Product: syz [ 148.222621][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 148.253125][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 148.279498][ T6370] netlink: 'syz.4.89': attribute type 12 has an invalid length. [ 148.289367][ T5834] usb 4-1: Manufacturer: syz [ 148.307820][ T5834] usb 4-1: SerialNumber: syz [ 148.325583][ T6372] Cannot find add_set index 0 as target [ 148.521383][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.530069][ T6373] batadv_slave_1: entered promiscuous mode [ 148.547276][ T6373] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6373] [ 149.148534][ T6375] netlink: 'syz.4.90': attribute type 6 has an invalid length. [ 149.202848][ T6375] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 149.231065][ T6377] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 149.240612][ T6375] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.90'. [ 149.999657][ T977] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.204197][ T6390] misc userio: Invalid payload size [ 150.273371][ T977] usb 1-1: config 0 has no interfaces? [ 150.347175][ T977] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.392233][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.415425][ T977] usb 1-1: Product: syz [ 150.426195][ T977] usb 1-1: Manufacturer: syz [ 150.559493][ T977] usb 1-1: SerialNumber: syz [ 150.575725][ T977] usb 1-1: config 0 descriptor?? [ 150.649581][ T5834] cdc_mbim 4-1:1.0: bind() failure [ 150.875905][ T5834] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 151.010035][ T5834] cdc_ncm 4-1:1.1: bind() failure [ 151.039020][ T5834] usb 4-1: USB disconnect, device number 7 [ 151.829461][ T5961] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.136799][ T5961] usb 3-1: config 0 has no interfaces? [ 152.262362][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.514664][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.570166][ T5961] usb 3-1: Product: syz [ 152.574423][ T5961] usb 3-1: Manufacturer: syz [ 152.579053][ T5961] usb 3-1: SerialNumber: syz [ 152.665952][ T5961] usb 3-1: config 0 descriptor?? [ 152.839728][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 153.429463][ T977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.820061][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 153.828108][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.871711][ T977] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.897163][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 153.922848][ T5834] usb 1-1: USB disconnect, device number 13 [ 153.929046][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.032205][ T6425] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 154.104846][ T977] usb 4-1: config 0 descriptor?? [ 154.355847][ T977] usb 3-1: USB disconnect, device number 5 [ 154.522701][ T6429] tipc: Started in network mode [ 154.527677][ T6429] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 154.587847][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.633650][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.643466][ T6429] tipc: Enabling of bearer rejected, failed to enable media [ 154.688117][ T6432] CIFS: VFS: Malformed UNC in devname [ 154.715543][ T5834] usb 4-1: USB disconnect, device number 8 [ 155.366475][ T977] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.050147][ T977] usb 3-1: config 0 has no interfaces? [ 156.097065][ T977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.108335][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.133709][ T977] usb 3-1: Product: syz [ 156.142704][ T977] usb 3-1: Manufacturer: syz [ 156.152393][ T977] usb 3-1: SerialNumber: syz [ 156.216034][ T977] usb 3-1: config 0 descriptor?? [ 156.916005][ T6446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.169618][ T5961] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.491536][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 157.525938][ T5961] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.536716][ T5961] usb 2-1: config 0 has no interface number 0 [ 157.551868][ T5961] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 157.569907][ T5961] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.592079][ T5961] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 157.624006][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.736562][ T5961] usb 2-1: config 0 descriptor?? [ 157.766542][ T5961] hso 2-1:0.1: Failed to find BULK IN ep [ 158.039413][ T5935] usb 3-1: USB disconnect, device number 6 [ 158.158997][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 158.443694][ T6468] tipc: Enabling of bearer rejected, already enabled [ 158.452951][ T6468] CIFS: VFS: Malformed UNC in devname [ 158.494107][ T6470] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 158.875002][ T6473] batadv_slave_1: entered promiscuous mode [ 158.927726][ T6474] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[6474] [ 159.071090][ T6476] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.739397][ T977] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.803994][ T5834] usb 2-1: USB disconnect, device number 4 [ 159.899441][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 159.968266][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.069821][ T977] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 160.078088][ T977] usb 1-1: config 7 has no interface number 0 [ 160.206850][ T977] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 160.638855][ T977] usb 1-1: config 7 interface 187 has no altsetting 0 [ 160.676551][ T977] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 160.964858][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.129361][ T977] usb 1-1: Product: syz [ 161.133586][ T977] usb 1-1: Manufacturer: syz [ 161.156199][ T977] usb 1-1: SerialNumber: syz [ 161.236803][ T6476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.844245][ T977] usb 1-1: Cannot retrieve CPort count: -110 [ 161.850644][ T5935] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.872218][ T977] usb 1-1: Cannot retrieve CPort count: -110 [ 161.878632][ T977] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 161.932337][ T977] usb 1-1: USB disconnect, device number 14 [ 162.129545][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 162.182311][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.203084][ T5935] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.239531][ T5935] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 162.292234][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.312646][ T5935] usb 3-1: config 0 descriptor?? [ 162.716194][ T5935] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.759979][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.771046][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.799173][ T5834] usb 3-1: USB disconnect, device number 7 [ 162.886422][ T5935] usb 5-1: config 0 has no interfaces? [ 162.912922][ T5935] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.924167][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.942851][ T5935] usb 5-1: Product: syz [ 162.952810][ T5935] usb 5-1: Manufacturer: syz [ 162.963294][ T5935] usb 5-1: SerialNumber: syz [ 162.987525][ T5935] usb 5-1: config 0 descriptor?? [ 164.549360][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 164.803265][ T6524] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 166.548568][ T5935] usb 5-1: USB disconnect, device number 8 [ 167.795819][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 167.795841][ T30] audit: type=1804 audit(1747887480.906:50): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.130" name="/newroot/24/bus" dev="tmpfs" ino=143 res=1 errno=0 [ 168.119496][ T5889] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.281326][ T5889] usb 2-1: config 0 has no interfaces? [ 168.317366][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.332536][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.463838][ T5889] usb 2-1: Product: syz [ 168.507636][ T5889] usb 2-1: Manufacturer: syz [ 168.594512][ T5889] usb 2-1: SerialNumber: syz [ 168.748203][ T5889] usb 2-1: config 0 descriptor?? [ 168.958039][ T6565] futex_wake_op: syz.3.133 tries to shift op by -33; fix this program [ 168.975228][ T6565] netdevsim netdevsim3: Direct firmware load for . [ 168.975228][ T6565] failed with error -2 [ 168.991348][ T6565] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 168.991348][ T6565] [ 169.829870][ T6569] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 170.083561][ T5961] usb 2-1: USB disconnect, device number 5 [ 170.147250][ T6572] futex_wake_op: syz.4.134 tries to shift op by -33; fix this program [ 170.178744][ T6572] netdevsim netdevsim4: Direct firmware load for . [ 170.178744][ T6572] failed with error -2 [ 170.194062][ T6572] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 170.194062][ T6572] [ 170.363155][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.137'. [ 170.979535][ T6588] macsec0: entered promiscuous mode [ 170.988853][ T6588] macsec0: left promiscuous mode [ 171.213294][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 172.349416][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.611850][ T6608] netlink: 72 bytes leftover after parsing attributes in process `syz.4.142'. [ 172.622169][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 172.898379][ T5889] usb 2-1: config 0 has no interfaces? [ 173.132418][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.144259][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.155285][ T5889] usb 2-1: Product: syz [ 173.163022][ T5889] usb 2-1: Manufacturer: syz [ 173.168838][ T5889] usb 2-1: SerialNumber: syz [ 173.193328][ T5889] usb 2-1: config 0 descriptor?? [ 173.383020][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 174.273273][ T6625] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 174.773641][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 174.782798][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 174.792057][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 175.122275][ T5961] usb 2-1: USB disconnect, device number 6 [ 176.110198][ T5892] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.283824][ T5892] usb 5-1: config 0 has no interfaces? [ 176.294874][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 176.308209][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.564115][ T5892] usb 5-1: Product: syz [ 176.669642][ T5892] usb 5-1: Manufacturer: syz [ 176.707850][ T5892] usb 5-1: SerialNumber: syz [ 176.732838][ T6644] netdevsim netdevsim0: Direct firmware load for . [ 176.732838][ T6644] failed with error -2 [ 176.754923][ T5892] usb 5-1: config 0 descriptor?? [ 176.814105][ T6644] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 176.814105][ T6644] [ 176.899404][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 178.493447][ T6660] futex_wake_op: syz.3.152 tries to shift op by -33; fix this program [ 178.510342][ T6660] netdevsim netdevsim3: Direct firmware load for . [ 178.510342][ T6660] failed with error -2 [ 178.521505][ T6660] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 178.521505][ T6660] [ 178.847283][ T5892] usb 5-1: USB disconnect, device number 9 [ 179.073733][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 179.337801][ T6670] tipc: Started in network mode [ 179.343205][ T6670] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 179.352399][ T6670] tipc: Enabling of bearer rejected, failed to enable media [ 179.363248][ T6670] CIFS: VFS: Malformed UNC in devname [ 179.614448][ T6672] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 180.712382][ T6680] netlink: 72 bytes leftover after parsing attributes in process `syz.1.160'. [ 181.019410][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 181.766408][ T5889] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.807291][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.825931][ T5889] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.849368][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.858614][ T5889] usb 1-1: Product: syz [ 181.878061][ T5889] usb 1-1: Manufacturer: syz [ 181.885314][ T5889] usb 1-1: SerialNumber: syz [ 181.922856][ T5889] usb 1-1: config 0 descriptor?? [ 181.956195][ T5889] usb 1-1: selecting invalid altsetting 0 [ 182.037083][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 183.698881][ T6673] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 183.723394][ T977] usb 1-1: USB disconnect, device number 15 [ 184.109787][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 184.216684][ T6731] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.168'. [ 184.489685][ T977] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 184.710363][ T977] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 184.761111][ T977] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.795157][ T30] audit: type=1326 audit(1747887497.906:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 184.817421][ T977] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.937143][ T977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.955076][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.968700][ T30] audit: type=1326 audit(1747887497.906:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.003907][ T977] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.011999][ T977] usb 1-1: invalid MIDI out EP 0 [ 185.017575][ T30] audit: type=1326 audit(1747887497.906:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.045575][ T6744] kernel profiling enabled (shift: 17) [ 185.115243][ T30] audit: type=1326 audit(1747887497.906:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.355031][ T30] audit: type=1326 audit(1747887497.906:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.380927][ T977] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 185.409464][ T30] audit: type=1326 audit(1747887497.946:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.514467][ T30] audit: type=1326 audit(1747887497.946:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.573243][ T30] audit: type=1326 audit(1747887497.956:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.597060][ T30] audit: type=1326 audit(1747887497.956:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.764985][ T30] audit: type=1326 audit(1747887497.956:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 185.939531][ T5889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.218590][ T5889] usb 2-1: config 0 has no interfaces? [ 186.360334][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 186.456876][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.483600][ T5889] usb 2-1: Product: syz [ 186.494300][ T5889] usb 2-1: Manufacturer: syz [ 186.498982][ T5889] usb 2-1: SerialNumber: syz [ 186.524699][ T5889] usb 2-1: config 0 descriptor?? [ 187.171754][ T6760] CIFS: VFS: Malformed UNC in devname [ 187.274789][ T6761] tipc: Enabling of bearer rejected, already enabled [ 187.398735][ T6748] @: renamed from vlan0 [ 187.475771][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 187.708422][ T5935] usb 1-1: USB disconnect, device number 16 [ 187.774939][ T6728] delete_channel: no stack [ 188.270059][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.439877][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 188.448433][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.458749][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.468962][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.479385][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.492695][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.506294][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.754419][ T6770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.770651][ T5889] usb 5-1: usb_control_msg returned -71 [ 188.770699][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 188.775086][ T5889] usb 5-1: USB disconnect, device number 10 [ 189.502326][ T5889] usb 2-1: USB disconnect, device number 7 [ 190.102941][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.390506][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.180'. [ 190.539434][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 190.575663][ T5889] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 190.599318][ T5889] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 190.624017][ T5889] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 190.667704][ T5889] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 190.704016][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.734245][ T5889] usb 2-1: config 0 has no interface number 0 [ 190.815930][ T5889] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 190.901213][ T5889] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 190.913699][ T5889] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.923869][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 190.935039][ T5889] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.954638][ T5889] usb 2-1: config 0 interface 125 has no altsetting 0 [ 190.971781][ T5889] usb 2-1: config 0 interface 125 has no altsetting 2 [ 190.982380][ T5889] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 190.993807][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.003369][ T5889] usb 2-1: Product: syz [ 191.008360][ T5889] usb 2-1: Manufacturer: syz [ 191.016776][ T5889] usb 2-1: SerialNumber: syz [ 191.057091][ T5889] usb 2-1: config 0 descriptor?? [ 191.090624][ T5889] usb 2-1: selecting invalid altsetting 2 [ 191.102089][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 191.116237][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.131822][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.208024][ T5834] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.233104][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.305007][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 191.305030][ T30] audit: type=1326 audit(1747887504.406:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.342996][ T5834] usb 5-1: config 0 descriptor?? [ 191.381861][ T5834] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.389539][ T30] audit: type=1326 audit(1747887504.406:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.411473][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.537444][ T30] audit: type=1326 audit(1747887504.406:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.559375][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.644161][ T30] audit: type=1326 audit(1747887504.406:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.816731][ T30] audit: type=1326 audit(1747887504.406:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.900525][ T30] audit: type=1326 audit(1747887504.476:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.922595][ T30] audit: type=1326 audit(1747887504.476:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.944699][ T30] audit: type=1326 audit(1747887504.536:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 191.981697][ T30] audit: type=1326 audit(1747887504.536:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 192.124783][ T30] audit: type=1326 audit(1747887504.536:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 192.211677][ T5935] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 192.321519][ T5889] get_1284_register timeout [ 192.326310][ C1] usb 2-1: async_complete: urb error -104 [ 192.331627][ T5935] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x3 [ 192.332307][ C1] usb 2-1: async_complete: urb error -104 [ 192.345599][ C1] usb 2-1: async_complete: urb error -104 [ 192.374657][ T5834] usb 5-1: USB disconnect, device number 11 [ 192.383017][ T5935] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 192.402575][ T5889] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 192.462844][ T5935] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 192.532344][ T5935] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 192.554902][ T5935] hid-generic 00A0:0008:0003.0003: collection stack underflow [ 192.563088][ T5935] hid-generic 00A0:0008:0003.0003: item 0 0 0 12 parsing failed [ 192.578416][ T5935] hid-generic 00A0:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 192.893758][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.186'. [ 193.030685][ T6821] tipc: Started in network mode [ 193.035761][ T6821] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 193.044996][ T6821] tipc: Enabling of bearer rejected, failed to enable media [ 193.057276][ T6821] CIFS: VFS: Malformed UNC in devname [ 193.132920][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 193.512163][ T5935] usb 2-1: USB disconnect, device number 8 [ 193.892033][ T5889] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 193.939416][ T5935] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.961775][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 194.079604][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 194.092155][ T5935] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 194.109399][ T5935] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.123452][ T6843] netdevsim netdevsim2: Direct firmware load for . [ 194.123452][ T6843] failed with error -2 [ 194.124460][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.155064][ T5935] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.178243][ T6840] syz.1.192 uses obsolete (PF_INET,SOCK_PACKET) [ 194.189123][ T6840] syzkaller1: entered promiscuous mode [ 194.195007][ T6840] syzkaller1: entered allmulticast mode [ 194.219404][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.231803][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.241979][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.255198][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.272570][ T5935] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.281877][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.359459][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.377232][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 194.399749][ T6843] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 194.399749][ T6843] [ 194.443471][ T5935] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.453513][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.459951][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.480641][ T5935] usb 5-1: invalid MIDI out EP 0 [ 194.652281][ T5889] usb 1-1: usb_control_msg returned -71 [ 194.657939][ T5889] usbtmc 1-1:16.0: can't read capabilities [ 194.927658][ T5889] usb 1-1: USB disconnect, device number 17 [ 195.049000][ T5935] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 196.537776][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.670433][ T5935] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 196.699580][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 196.791321][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.806708][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.824445][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.841925][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 196.863738][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.875474][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 196.888682][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.905986][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.923211][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.010985][ T5935] usb 1-1: config 0 descriptor?? [ 197.039256][ T5892] usb 2-1: config 0 descriptor?? [ 197.082621][ T5935] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 197.227113][ T5822] usb 5-1: USB disconnect, device number 12 [ 197.608743][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 197.844532][ T5935] gspca_vc032x: reg_w err -110 [ 197.856672][ T5935] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 198.079582][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 198.085997][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 198.130589][ T5892] usb 2-1: USB disconnect, device number 9 [ 198.354521][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 198.498715][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 199.464762][ T6893] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6893] [ 199.480960][ T6893] netlink: 88 bytes leftover after parsing attributes in process `syz.2.198'. [ 199.596826][ T5889] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.020332][ T5892] usb 1-1: USB disconnect, device number 18 [ 200.079396][ T5935] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.289716][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 200.308271][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 200.324323][ T5889] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 200.329703][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.333888][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.375719][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.414997][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.435809][ T5935] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.463452][ T5935] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.477721][ T5889] usb 2-1: Product: syz [ 200.478069][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.504181][ T5889] usb 2-1: Manufacturer: syz [ 200.508851][ T5889] usb 2-1: SerialNumber: syz [ 200.558515][ T5889] usb 2-1: config 0 descriptor?? [ 200.764983][ T5935] usb 5-1: usb_control_msg returned -71 [ 200.774013][ T5935] usbtmc 5-1:16.0: can't read capabilities [ 200.788066][ T5935] usb 5-1: USB disconnect, device number 13 [ 200.846247][ T5889] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 010 [ 201.100352][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 201.390756][ T6907] page: refcount:515 mapcount:0 mapping:ffff888021e8d660 index:0x0 pfn:0x53000 [ 201.400383][ T6907] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 201.408992][ T6907] aops:hugetlbfs_aops ino:2af3 dentry name(?):"anon_hugepage" [ 201.416513][ T6907] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 201.424821][ T6907] page_type: f4(hugetlb) [ 201.429098][ T6907] raw: 00fff00000000041 ffffc9001addfe10 ffffc9001addfe10 ffff888021e8d660 [ 201.438142][ T6907] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 201.446743][ T6907] head: 00fff00000000041 ffffc9001addfe10 ffffc9001addfe10 ffff888021e8d660 [ 201.455445][ T6907] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 201.464157][ T6907] head: 00fff00000000009 ffffea00014c0001 0000000000000000 0000000000000000 [ 201.472852][ T6907] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 201.481560][ T6907] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 201.488865][ T6907] page_owner tracks the page as allocated [ 201.495227][ T6907] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6902, tgid 6900 (syz.0.207), ts 201285460395, free_ts 29409849698 [ 201.515836][ T6907] post_alloc_hook+0x1d8/0x230 [ 201.520627][ T6907] get_page_from_freelist+0x21ce/0x22b0 [ 201.526181][ T6907] __alloc_frozen_pages_noprof+0x181/0x370 [ 201.531992][ T6907] __folio_alloc_noprof+0x18/0x120 [ 201.537111][ T6907] alloc_buddy_hugetlb_folio+0xe2/0x570 [ 201.542673][ T6907] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 201.548668][ T6907] alloc_surplus_hugetlb_folio+0x103/0x430 [ 201.554491][ T6907] alloc_hugetlb_folio+0xb24/0x15a0 [ 201.559702][ T6907] hugetlb_fault+0x1d11/0x2910 [ 201.564492][ T6907] handle_mm_fault+0x724/0x8c0 [ 201.569272][ T6907] do_user_addr_fault+0x764/0x1390 [ 201.574549][ T6907] exc_page_fault+0x68/0x110 [ 201.579191][ T6907] asm_exc_page_fault+0x26/0x30 [ 201.584048][ T6907] page last free pid 1 tgid 1 stack trace: [ 201.589854][ T6907] __free_frozen_pages+0xb0e/0xcd0 [ 201.594980][ T6907] free_contig_range+0x159/0x440 [ 201.599925][ T6907] destroy_args+0x86/0x460 [ 201.604352][ T6907] debug_vm_pgtable+0x3cf/0x410 [ 201.609219][ T6907] do_one_initcall+0x233/0x820 [ 201.614022][ T6907] do_initcall_level+0x137/0x1f0 [ 201.619062][ T6907] do_initcalls+0x69/0xd0 [ 201.623404][ T6907] kernel_init_freeable+0x3d9/0x570 [ 201.628646][ T6907] kernel_init+0x1d/0x1d0 [ 201.632982][ T6907] ret_from_fork+0x4b/0x80 [ 201.637407][ T6907] ret_from_fork_asm+0x1a/0x30 [ 201.642312][ T6907] ------------[ cut here ]------------ [ 201.647780][ T6907] kernel BUG at mm/filemap.c:154! [ 201.652853][ T6907] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 201.659120][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.0.207 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 201.671027][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.681096][ T6907] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 201.687355][ T6907] Code: d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 63 ec 10 00 90 0f 0b e8 7b d1 c9 ff 48 89 df 48 c7 c6 20 0f 74 8b e8 4c ec 10 00 90 <0f> 0b e8 64 d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 35 ec 10 00 [ 201.707069][ T6907] RSP: 0018:ffffc9001ba6f160 EFLAGS: 00010046 [ 201.713168][ T6907] RAX: 5a724ecce86dfe00 RBX: ffffea00014c0000 RCX: 5a724ecce86dfe00 [ 201.721147][ T6907] RDX: 0000000000000005 RSI: ffffffff8d938e3e RDI: ffff888023e80000 [ 201.729125][ T6907] RBP: 0000000000000001 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 201.737103][ T6907] R10: dffffc0000000000 R11: ffffed10171247d3 R12: 0000000000000040 [ 201.745087][ T6907] R13: 1ffffd4000298000 R14: 1ffffd4000298001 R15: ffffea00014c0008 [ 201.753073][ T6907] FS: 0000000000000000(0000) GS:ffff8881261c2000(0063) knlGS:00000000f4c99b40 [ 201.762011][ T6907] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 201.768597][ T6907] CR2: 00007f9a8e4f24b4 CR3: 000000002a37e000 CR4: 00000000003526f0 [ 201.776582][ T6907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.784648][ T6907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.792627][ T6907] Call Trace: [ 201.795915][ T6907] [ 201.798858][ T6907] __filemap_remove_folio+0xc3/0x500 [ 201.804159][ T6907] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.809545][ T6907] ? __pfx___filemap_remove_folio+0x10/0x10 [ 201.815460][ T6907] ? _raw_spin_lock_irq+0xae/0xf0 [ 201.820500][ T6907] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 201.826061][ T6907] filemap_remove_folio+0xe6/0x1f0 [ 201.831201][ T6907] remove_inode_hugepages+0x581/0x10e0 [ 201.836686][ T6907] ? preempt_schedule_common+0x83/0xd0 [ 201.842178][ T6907] ? __pfx___schedule+0x10/0x10 [ 201.847061][ T6907] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 201.852975][ T6907] ? preempt_schedule_thunk+0x16/0x30 [ 201.858355][ T6907] ? up_write+0x1f2/0x420 [ 201.862697][ T6907] hugetlbfs_fallocate+0xbc7/0x1100 [ 201.867932][ T6907] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 201.873570][ T6907] ? aa_file_perm+0x3e7/0xed0 [ 201.878259][ T6907] ? __pfx___schedule+0x10/0x10 [ 201.883135][ T6907] ? rcu_read_lock_any_held+0xb3/0x120 [ 201.888630][ T6907] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 201.894558][ T6907] vfs_fallocate+0x6a3/0x830 [ 201.899192][ T6907] ? __pfx_vfs_fallocate+0x10/0x10 [ 201.904335][ T6907] madvise_do_behavior+0x1749/0x3500 [ 201.909675][ T6907] ? __pfx_madvise_do_behavior+0x10/0x10 [ 201.915353][ T6907] ? __futex_wait+0x217/0x2a0 [ 201.920079][ T6907] ? __lock_acquire+0xaac/0xd20 [ 201.924959][ T6907] ? __pfx___futex_wait+0x10/0x10 [ 201.929998][ T6907] ? __pfx_futex_wake_mark+0x10/0x10 [ 201.935296][ T6907] ? mlock_drain_local+0x79/0x490 [ 201.940329][ T6907] ? futex_wait+0x285/0x360 [ 201.944854][ T6907] ? __lock_acquire+0xaac/0xd20 [ 201.949721][ T6907] ? madvise_lock+0xda/0x200 [ 201.954329][ T6907] __ia32_sys_madvise+0x10c/0x150 [ 201.959379][ T6907] __do_fast_syscall_32+0xb4/0x110 [ 201.964508][ T6907] do_fast_syscall_32+0x34/0x80 [ 201.969373][ T6907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.975721][ T6907] RIP: 0023:0xf710e539 [ 201.979811][ T6907] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 201.999457][ T6907] RSP: 002b:00000000f4c9955c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 202.007898][ T6907] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002 [ 202.015883][ T6907] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.023886][ T6907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.031921][ T6907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.039929][ T6907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.047928][ T6907] [ 202.050977][ T6907] Modules linked in: [ 202.054917][ T6907] ---[ end trace 0000000000000000 ]--- [ 202.060460][ T6907] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 202.066748][ T6907] Code: d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 63 ec 10 00 90 0f 0b e8 7b d1 c9 ff 48 89 df 48 c7 c6 20 0f 74 8b e8 4c ec 10 00 90 <0f> 0b e8 64 d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 35 ec 10 00 [ 202.086373][ T6907] RSP: 0018:ffffc9001ba6f160 EFLAGS: 00010046 [ 202.092478][ T6907] RAX: 5a724ecce86dfe00 RBX: ffffea00014c0000 RCX: 5a724ecce86dfe00 [ 202.100550][ T6907] RDX: 0000000000000005 RSI: ffffffff8d938e3e RDI: ffff888023e80000 [ 202.108527][ T6907] RBP: 0000000000000001 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 202.116514][ T6907] R10: dffffc0000000000 R11: ffffed10171247d3 R12: 0000000000000040 [ 202.124503][ T6907] R13: 1ffffd4000298000 R14: 1ffffd4000298001 R15: ffffea00014c0008 [ 202.132491][ T6907] FS: 0000000000000000(0000) GS:ffff8881261c2000(0063) knlGS:00000000f4c99b40 [ 202.141468][ T6907] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 202.148149][ T6907] CR2: 00007f9a8e4f24b4 CR3: 000000002a37e000 CR4: 00000000003526f0 [ 202.156131][ T6907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.164109][ T6907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.172088][ T6907] Kernel panic - not syncing: Fatal exception [ 202.178499][ T6907] Kernel Offset: disabled [ 202.182831][ T6907] Rebooting in 86400 seconds..