last executing test programs: 1m37.704175653s ago: executing program 0 (id=37): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 1m36.557879358s ago: executing program 0 (id=39): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m32.792378939s ago: executing program 1 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0}}], 0x1, 0x48c5) 1m31.540180988s ago: executing program 0 (id=47): r0 = socket(0x3, 0xf, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) socket(0x5, 0xa, 0x4) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m30.968873759s ago: executing program 3 (id=48): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000000)) 1m30.674508588s ago: executing program 1 (id=49): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x10, 0x1, 0x70bd2c, 0x3, {0x10, 0x0, 0x4c, 0x0, {0x3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="016b28bd7000ffdbdf250300"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 1m28.550442903s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff9, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 1m24.241679521s ago: executing program 2 (id=54): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x2020, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) 1m24.174481839s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685e48943f26ed6e8d84b02464cc13dd7cc64d3a5", 0x38, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1m23.969522741s ago: executing program 3 (id=56): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$loop(0x0, 0x10000, 0x100) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 1m23.621244024s ago: executing program 1 (id=57): socket$packet(0x11, 0x3, 0x300) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r11 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x3}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 1m23.394696412s ago: executing program 4 (id=58): socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000480)=""/21) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblc\x00', 0x1, 0x2, 0x6e}, 0x2c) syz_open_procfs(0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@remote, 0x4e23, 0x2000, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) 1m21.57065677s ago: executing program 4 (id=59): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @mcast2, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @private0, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x41880016}) 1m21.480543953s ago: executing program 3 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0) 1m21.309347098s ago: executing program 4 (id=61): r0 = socket(0x3, 0xf, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 1m21.233664694s ago: executing program 1 (id=62): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 1m20.168802069s ago: executing program 2 (id=63): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) gettid() r1 = syz_open_procfs(0x0, 0x0) writev(r1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000380)) read(r0, 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.960637403s ago: executing program 0 (id=64): syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x5, 0x81, "a7d53065483183f8"}}}, 0x10) 1m19.705499923s ago: executing program 2 (id=65): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1m19.547876129s ago: executing program 3 (id=66): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[0x0]) msgsnd(0x0, &(0x7f0000001300)=ANY=[], 0x8, 0x0) clock_adjtime(0xffffffd3, 0x0) unshare(0x600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, r0, 0x36, 0x8, 0x0, @void, @value=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x4000400, 0x0, 0x0, &(0x7f0000001200), &(0x7f0000001240), &(0x7f00000013c0)="4350eead43872d70b19b8790f80dc91dd5c1aa954385ee3f04b695a06370348ce7ec2d20dedf70c8cd4c0adeb3de414cdce1878730e774ab693b9db87fd9943007be402bbac549f233f21d11f62367361dfefbe052b4907567566f79f08df3893e3b573efbaf3cc2fcc18cb8cef618e6456a347de664f14b38c1e83298c4a2d8453e10637a4e32afc771da303f9f36a06afd7ea1363b9902b012107c77331ed6c24d82e36b550663777a1dced22d45767e13708349e18650bb520b5cd23a075655bef82afe996fbdfc4740c9") prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xba, 0x7}]}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaaaa0000efda81fe25061b80db44b76dfc76e4da919ae2bad3853d8916da9620653e1756e45606ad8695771a5d4a654fb36387e34da713d2219bf72fed2c887176efbb819cb2f21891c09866f0a15365876ddd5c2bcd3d426be60fbb267a395c48db10b9167b0421aa59521b6676fce7b85f0dbbbd508d7a25477b20c25b952b9acc16a1fe53135a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m19.468455889s ago: executing program 4 (id=67): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1m19.390924966s ago: executing program 2 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000340)="e8ef791d3d44d20806ac3701e5e2453a844123634f7951205c48f3524b34e7f8be04a0e628ab75d802498496a8e33612ab90745084475b2e3e07e062f3e632e85906930d9efb163d63afadf2c5f8639649c87050a0f422680ee4c23f7ea5fb61a036980dee729e0390d4828c364dbeddce93be5e43904e03d17744b327056362edccb8688468952d111adf38388ac11be411799a6b92a1a5a66be3a390479f2ae95a2bdfab2c7b95e286f8370843693e8918667be1b8ff1e22cee1", 0xbb}, {&(0x7f0000000000)="49cff71742fe333df9e5e918afa2fd89d4a68380ef25aeeb77af639face97908244baa6d9907675f087e153684b35cb440b5bb5e8997e4b10b5c71bd30e347c01a0771aa80c893a9ecae7d092d905e485517768ad1ecd5", 0x57}, {&(0x7f0000000440)="d6507e434829686aac7933b67f2df57f7be108dbc2892a10cdc9d304b5eb6b6ef07acec12d0b9e2f827f2a4dcaf13b7edc0c8ba3b755e3c3dc6e556799", 0x3d}, {&(0x7f00000004c0)="b99f482b0da5bd36a8f7f459566cf98f59c9b83dfb50ef69ce0811026505b36a91511ac625eaf0139637dad9d348ee58cc3c20e79a29b8e389ea5c1f40b6f546501c570e579ede41dd20dd062031e5af9b46b153edc30de4636862e6a963595ceb989a8528272ff75f8c1c7a7e4c877d0396e0172600a18c65bc0139b63abf0e5c3382d3f65071ffac2b7423af9ef13828d9ed6042e5a12563a54b40c8c9a99283b4fb1d3ab7b387fa67619960aba5346a05119d927244135200fa8779afc900d4d5af4460d115195b259f555362f6ba901d36aefd7888aaf097aecb8e2bc964a99fc67b090bcf75a5356d24a6c9369611ccb3568b92ac6b01896dfe16e95e62c076a4f4d87b2dbce0ec1558b45a115d2f78a4e9113551330eab4078f0ff4f30a105592d8e7f974a970c0ff16459ece652ea58aed3c3e50650fae688cc994151ee150491373a1eda4c97ce1e5fbf5bf0a7f153ef1c45107c446ef55f93577fa38d6ada70b131535ce735dfa69ad069bdbfd86452edac90c42570a6fbb3b7d64999e8a85ab2919243310b27e5dc47825f39458eaeb3a17cec948fb16c5bb7e25b77b2f153dc239da14386742c298a20f2627bcc3d1b6df5ad6de480113b5d347adbee8601c3405ebcc2b5a0a671f3b7ee4b7f43484cc7311d97705c2408af1736704c7bbf46e12a93066255dfaed5ece36b1b4a47449db5bc24223e9ab505118bad875684436186e0bed8daeb415e12c6cc6cf0d8ab58a8223b5ccd1e3377e43b6efc4277eec721bda1fe250f3a1e0aee5f2384837b5871d3c874199a951baed0aa2f58ad166cbd69c7170fea03e91e33b5bf8a3045a2faaea7b1f9ddfbd4f61590f01c6194d97cb97439c74bcc8ce6d86d46a8d6c0a19a2264f83745ac4d3afa0fda9e893cdec026fcff4a7944a10fa386b9d042836b741c2d8e2b689cd18dd37c9054e54c92e2590d7296d19e40677ea22905df16ea080109a66d1e9083e60b8afc01f5654a645439895eff5dc3da3810bc05ac0165cdc378c4ef56e130011421ce533999bdc6dd480c940bc2fae83f105dadbda5e7068d3951a21da857687098663984fff724af2485bb9e465b3a7c91be25e9f78774d8e1b960539a0b5ee79c7bb150a9c0710348dbb120802a327558a4ab3ff07671125450c9b43b0482b48d269e8e8f4bce16083598c063ccb2bf9c5d86e43fc3d8bff3341626d4614bdfaa59b463ac735edb9abd0aae380c32268e35d92e97e60c8b64b4b1b74b1cbc87dec674365557ec322e73ea9b9e98348de56788724d22e51021e288161285f3feb88b4b077ca146c1b4fbac8b28f8c234c5cf7f702b5c0f27c702d229281de4f5e87c99b7106946ef36e94c07eef940a6e3ef4feea2f50f8ac4e08511b6340d7421b816b83e94a8ffcfa0a9cb9d638f3b5ab07c07da15a95b6df978efc2a45560f202b089e143894a14ae7ecca7c94acbeb65a454f1f4a59293a596f7fb7bd5166a18bfe8295543378e815fd14652f9aa67dfc4fd18dbde0974a4ffbad09761a2c1d464f1211a0a7774aa2f788a28e7eecfd76ee22b4507f23846", 0x45a}], 0x4}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001c00)="b664", 0x2}], 0x1}}], 0x3, 0x80) 1m19.326622232s ago: executing program 4 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1m19.237855713s ago: executing program 3 (id=70): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) getpid() syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x20002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b02000000000000000000000080000000814200", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1m18.35697412s ago: executing program 2 (id=71): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) readahead(r3, 0x2a91, 0x7ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560", 0x54) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) 1m18.285389723s ago: executing program 4 (id=72): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1m12.388576914s ago: executing program 2 (id=73): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, 0x0, 0x0) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x6, 0x80]}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @local, 0x9}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000001020000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x1000, 0x0) 1m12.250415946s ago: executing program 3 (id=74): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) 1m12.134083436s ago: executing program 0 (id=75): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 1m12.055266303s ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 54.642422479s ago: executing program 32 (id=72): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 54.223546041s ago: executing program 33 (id=75): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 54.05658436s ago: executing program 34 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 53.939305969s ago: executing program 35 (id=73): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, 0x0, 0x0) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x6, 0x80]}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @local, 0x9}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000001020000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x1000, 0x0) 53.808075844s ago: executing program 36 (id=74): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) 15.521701046s ago: executing program 8 (id=96): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0xfc, 0x0, 0x0, 0x0, 0x0}) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r4 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x80, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000d40)="01", 0x1) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadfc058b86d2686dd60f900f50014060100df241313900b75fbf14f3df686ffff32cabb6251b0daff296dec62fdc44db60200000000ffff00000000000000000056303866672ba3ad597d82c43ae4c1164c25ec811745077c11f9cb243fb2ab4510ab769aa28a657d605520f1387d35c1091dec2dde21eeddb7b40a7b8abb68b0b31f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffe"], 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000080)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701fe"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = dup(r5) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r7 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) dup(r7) 14.496467413s ago: executing program 8 (id=99): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) getpid() syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x20002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b02000000000000000000000080000000814200", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 13.652203966s ago: executing program 9 (id=100): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 13.384783751s ago: executing program 8 (id=101): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000c001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 13.055776072s ago: executing program 8 (id=103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x26455f14adc0284b}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)="7bde898718a6c6c9237cb3183110240767593c40c38b46f5aaeb010661a7f3a802772dbeacbb719d97936097c7800c3d28a0234a87eba4fc532c7a3e1d96bc18a74bc61cf414ee3274f2ad278b47c77c0e45053d47029eb9ef0b3ac4a709f6dd73fdf65e6cc009bb98827b4d1716e42b0498dad14ebb339fe30c9128e7661135a70a36cc3a0198de1ee50ac13750797f4ea33fabeecb09d217918384bb28ef8d0367ab68e1ed5e3d832450b228c8c1feb0f8ec2d26694be70a3d212c9a304aa07e798a47ba95b016f13bfb0c94e2f325c1a8fc53ec4e06f0c27f07ed17b85387eb107c2ae94bc026472c78b61bc85fbb101d4c3a6e", 0xf5}, {&(0x7f00000000c0)="92309e6d23dd22b738dccfb217c3fe033ba644e321e9f54a1e7ec77550f2e0272b4806d914c9f23c3732ebae91b667771f0d5abb4436b0d81cb607cc7cfa30391ec6bbfdf6b477eeae64afd922c6b7aab589", 0x52}], 0x2}}], 0x1, 0x20048814) 13.003368426s ago: executing program 9 (id=104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x0, 0x8, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x1ff}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x2c3c0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="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", 0xb61}], 0x2) bind$netlink(r5, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 12.679255838s ago: executing program 8 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1100, 0x7, 0x6361, 0x5, 0xffffffed, 0x800006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x2, 0x5, 0x0, 0x1, 0x91a}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x12, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d052415a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d000009040101"], 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'veth0_to_bond\x00', @multicast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) 11.867100089s ago: executing program 9 (id=109): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x8010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r4 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$printer(r4, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000001c0)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x3983b96a7970cfc1) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0xfff, 0x400) r7 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r8, 0x0, 0xf8, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x4}}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x2000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0xfffffffc}, &(0x7f00000001c0)=0x9c) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x80000001) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81002000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000020800020000000000000000080000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4891}, 0x240000c0) 11.712061431s ago: executing program 7 (id=111): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x14004000}, 0x40000) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x188) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000010", 0xfdef}], 0x1}, 0x800) 11.456711375s ago: executing program 8 (id=113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 10.180339409s ago: executing program 5 (id=117): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) 10.069147554s ago: executing program 6 (id=118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x8804) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x46}}, './file0\x00'}) mount_setattr(r6, &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x83, 0x8a, 0x100000, {r6}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8}]}}}]}, 0x44}}, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e25, @broadcast}}}, 0x84) 9.867297531s ago: executing program 7 (id=119): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (fail_nth: 2) 9.828250556s ago: executing program 5 (id=120): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000004c0)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x1, 0x2, 0x1}, 0x18, 0x1) r4 = io_uring_setup(0x177f, &(0x7f00000002c0)={0x0, 0x0, 0x2000}) close_range(r4, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000340)=""/156, 0x9c) landlock_restrict_self(r3, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000006c0)={{r1}, "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"}) ioperm(0xb88f, 0x2, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 9.077420222s ago: executing program 7 (id=121): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x6, 0x1, 0x0, 0x0, 0x43) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0xf00001, 0x9, @value=0x7fffffff}) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_disconnect(r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000740)={0x400, 0x0, 'client0\x00', 0x4, "c3210168c8e2c278", "d91a305eae448287378215b7cf699cb216be93fa3647ddb9731f25bfe8a536cb", 0x1000}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x68, &(0x7f0000000080)={[{0x64, 0x4e00, "e4642b88de9302ec0ffd568d576081b228ad5e0241ee675199f6e4e1f89eeefa164c788b2661ca8f5d759341586ba8690f2f13617309039ed02d4afbc11e0e1beb6c58852c3bfed1d976fcfe558e999dc70b211d3681b5fc84ddea15a02bfe9b8368ccea"}]}) 9.076605792s ago: executing program 9 (id=122): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004ac0)={0x2020}, 0x2020) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r9}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r10 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, 0x0, &(0x7f0000000480)) ioctl$KDENABIO(r10, 0x4b36) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 8.568555242s ago: executing program 5 (id=123): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}], 0x3}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r3 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_GET_FPEXC(0x45, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"]) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 8.460906471s ago: executing program 9 (id=124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x5, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a4d515822b", 0x0, 0xfffffffb, 0x0, 0x2, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c010000100063d10000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa00"/62, @ANYRES32=r8, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 6.775795172s ago: executing program 6 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 6.58484735s ago: executing program 6 (id=126): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000000c0)=[0x2a, 0xf0]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) writev(r8, &(0x7f0000001680)=[{&(0x7f0000000080)="d8", 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4020080) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@delqdisc={0x108, 0x25, 0x8, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2, 0x10}, {0xf}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x41, 0xd4}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xde07, 0x0, 0x1, 0xffffffff, 0x8}, 0x94a, 0x1, 0x4, 0x7f, 0x6, 0x17, 0x14, 0x16, 0x1, 0x0, {0x208, 0x2, 0x7, 0xa, 0x4, 0x3}}}}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x0, 0x7, 0x1, 0x1, 0x8001, 0x6, 0x5}}, {0xe, 0x2, [0x9, 0x5, 0x0, 0x795, 0x200]}}, {{0x1c, 0x1, {0x34, 0x6, 0x1, 0xf, 0x0, 0x4, 0x2, 0x7}}, {0x12, 0x2, [0x0, 0x200, 0x8000, 0x1, 0x7, 0x200, 0x8366]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x400dc}, 0x24020080) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4d49430a494743494e202753796e74682070747572652053776374090000003030303030a42e30303030303030300a53594e540000000002f21bd95f56d1fd1e689060fa5d79b578ceb5347ccdf709d5319f714896b95ddcb29773078c53118ced5c891100a45f080000004cfaaf9cc9336b232a89f3729fd493893db67562832920f6181dfa"], 0x3c) mknod(&(0x7f0000000300)='./file0\x00', 0x40, 0x9) close(r0) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 6.583222286s ago: executing program 9 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x0, 0x8, 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 5.27506353s ago: executing program 5 (id=128): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) getpid() syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x20002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b02000000000000000000000080000000814200", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.349331434s ago: executing program 7 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 4.194841052s ago: executing program 5 (id=130): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) 4.064397108s ago: executing program 5 (id=131): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getown(r2, 0x9) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x5, "536dd8e1"}, @extension_unit={0xc, 0x24, 0x8, 0x60, 0x0, 0xfd, "7742946023"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x9, '\f'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x1, 0x3, 0x1000, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x1, 0x4e, 0x3ff}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc, 0x2, 0x3, 0x40, 0xe}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x40, 0x1, 0x2}]}}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x12) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000f80)="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", 0x801}, {0x0}], 0x2) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c021000050001072501"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x5fc}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={r9, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) socket$nl_generic(0x10, 0x3, 0x10) 3.995723931s ago: executing program 7 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x2, 0x4, 0x31, @private1, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r6, 0x0, 0x4) sendmsg$can_bcm(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/34, &(0x7f00000002c0)=0x22) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20003, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x3147504d, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000b6000040"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.773488555s ago: executing program 6 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8000000040a030000000000000000000700000208000b400000000408000b400000000208000b400000000308000a4000000000090001"], 0xc8}}, 0x810) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r1, 0xc, @inherit={0x78, &(0x7f0000000040)={0x1, 0x6, 0x9, 0x4, {0x1b, 0x4, 0x9, 0x2, 0x7}, [0x8, 0x99, 0x0, 0x2, 0x80000000, 0x8]}}, @subvolid=0x3e}) 1.610388189s ago: executing program 6 (id=134): socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000480)=""/21) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblc\x00', 0x1, 0x2, 0x6e}, 0x2c) syz_open_procfs(0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 1.563386306s ago: executing program 7 (id=135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x0, 0x8, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 0s ago: executing program 6 (id=136): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) getpid() syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x20002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$dh_compute(0x17, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b02000000000000000000000080000000814200", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 67.053371][ T5811] cgroup: Unknown subsys name 'net' [ 67.155605][ T5811] cgroup: Unknown subsys name 'cpuset' [ 67.164419][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.539676][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.817372][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.825623][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.833900][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.842089][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.850007][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.954390][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.981233][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.988812][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.997168][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.005245][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.024043][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.032122][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.042012][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.058749][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.081227][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.089055][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.097054][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.105002][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.113182][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.121114][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.128834][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.136852][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.144736][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.156955][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.165104][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.269402][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275867][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.524561][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.734771][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 71.784868][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.941702][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.949885][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.957482][ T5824] bridge_slave_0: entered allmulticast mode [ 71.965583][ T5824] bridge_slave_0: entered promiscuous mode [ 71.980132][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.987310][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.994984][ T5824] bridge_slave_1: entered allmulticast mode [ 72.002615][ T5824] bridge_slave_1: entered promiscuous mode [ 72.041371][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 72.143502][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.160714][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.203373][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 72.225568][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.233135][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.240227][ T5840] bridge_slave_0: entered allmulticast mode [ 72.247370][ T5840] bridge_slave_0: entered promiscuous mode [ 72.254898][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.262012][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.269344][ T5838] bridge_slave_0: entered allmulticast mode [ 72.276579][ T5838] bridge_slave_0: entered promiscuous mode [ 72.304961][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.312087][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.319415][ T5840] bridge_slave_1: entered allmulticast mode [ 72.326776][ T5840] bridge_slave_1: entered promiscuous mode [ 72.333632][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.340733][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.348049][ T5838] bridge_slave_1: entered allmulticast mode [ 72.354954][ T5838] bridge_slave_1: entered promiscuous mode [ 72.375093][ T5824] team0: Port device team_slave_0 added [ 72.419641][ T5824] team0: Port device team_slave_1 added [ 72.440535][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.489717][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.501741][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.514410][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.550508][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.557491][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.583633][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.617204][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.625533][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.632808][ T5842] bridge_slave_0: entered allmulticast mode [ 72.639690][ T5842] bridge_slave_0: entered promiscuous mode [ 72.652193][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.659197][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.685237][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.720724][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.727946][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.735166][ T5842] bridge_slave_1: entered allmulticast mode [ 72.742200][ T5842] bridge_slave_1: entered promiscuous mode [ 72.781661][ T5840] team0: Port device team_slave_0 added [ 72.789337][ T5838] team0: Port device team_slave_0 added [ 72.821780][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.831516][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.838879][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.846407][ T5841] bridge_slave_0: entered allmulticast mode [ 72.853644][ T5841] bridge_slave_0: entered promiscuous mode [ 72.862020][ T5840] team0: Port device team_slave_1 added [ 72.868473][ T5827] Bluetooth: hci0: command tx timeout [ 72.881841][ T5838] team0: Port device team_slave_1 added [ 72.890700][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.900829][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.908595][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.915779][ T5841] bridge_slave_1: entered allmulticast mode [ 72.922979][ T5841] bridge_slave_1: entered promiscuous mode [ 72.995661][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.002731][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.029608][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.032853][ T5827] Bluetooth: hci1: command tx timeout [ 73.042158][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.052534][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.078514][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.112139][ T5842] team0: Port device team_slave_0 added [ 73.135304][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.142247][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.168370][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.182576][ T5827] Bluetooth: hci3: command tx timeout [ 73.186835][ T5824] hsr_slave_0: entered promiscuous mode [ 73.194571][ T5824] hsr_slave_1: entered promiscuous mode [ 73.203036][ T5842] team0: Port device team_slave_1 added [ 73.211288][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.222600][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.229538][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.255915][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.272489][ T5827] Bluetooth: hci2: command tx timeout [ 73.272629][ T5834] Bluetooth: hci4: command tx timeout [ 73.308176][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.385779][ T5841] team0: Port device team_slave_0 added [ 73.403731][ T5838] hsr_slave_0: entered promiscuous mode [ 73.410049][ T5838] hsr_slave_1: entered promiscuous mode [ 73.416301][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 73.422065][ T5838] Cannot create hsr debugfs directory [ 73.428604][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.435650][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.461807][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.485398][ T5841] team0: Port device team_slave_1 added [ 73.496810][ T5840] hsr_slave_0: entered promiscuous mode [ 73.503352][ T5840] hsr_slave_1: entered promiscuous mode [ 73.509300][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 73.515233][ T5840] Cannot create hsr debugfs directory [ 73.538484][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.545500][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.571384][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.674258][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.681210][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.707539][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.762083][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.769059][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.795402][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.863333][ T5842] hsr_slave_0: entered promiscuous mode [ 73.869965][ T5842] hsr_slave_1: entered promiscuous mode [ 73.876258][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 73.881973][ T5842] Cannot create hsr debugfs directory [ 74.036386][ T5841] hsr_slave_0: entered promiscuous mode [ 74.042722][ T5841] hsr_slave_1: entered promiscuous mode [ 74.048722][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 74.054586][ T5841] Cannot create hsr debugfs directory [ 74.255567][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.301263][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.322725][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.349278][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.422656][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.444914][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.455852][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.471264][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.535580][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.547752][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.560522][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.575506][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.652735][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.696855][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.708013][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.721185][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.734587][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.753562][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.794743][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.801893][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.830165][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.837321][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.861919][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.878096][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.888802][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.899832][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.944189][ T5834] Bluetooth: hci0: command tx timeout [ 74.955907][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.028227][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.053357][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.060472][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.091483][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.098637][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.106238][ T5834] Bluetooth: hci1: command tx timeout [ 75.137319][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.166849][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.187998][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.220075][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.227184][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.236657][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.243757][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.263014][ T5834] Bluetooth: hci3: command tx timeout [ 75.300344][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.337198][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.344386][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.351874][ T5834] Bluetooth: hci2: command tx timeout [ 75.358171][ T5834] Bluetooth: hci4: command tx timeout [ 75.378290][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.405072][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.419354][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.426495][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.508398][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.541563][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.574173][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.598841][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.639133][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.646233][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.668077][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.675218][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.684808][ T5824] veth0_vlan: entered promiscuous mode [ 75.718089][ T5838] veth0_vlan: entered promiscuous mode [ 75.750287][ T5824] veth1_vlan: entered promiscuous mode [ 75.762116][ T5841] veth0_vlan: entered promiscuous mode [ 75.780245][ T5838] veth1_vlan: entered promiscuous mode [ 75.793715][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.812001][ T5841] veth1_vlan: entered promiscuous mode [ 75.854087][ T5824] veth0_macvtap: entered promiscuous mode [ 75.876153][ T5824] veth1_macvtap: entered promiscuous mode [ 75.929346][ T5838] veth0_macvtap: entered promiscuous mode [ 75.955239][ T5840] veth0_vlan: entered promiscuous mode [ 75.965827][ T5841] veth0_macvtap: entered promiscuous mode [ 75.977229][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.987309][ T5838] veth1_macvtap: entered promiscuous mode [ 76.004518][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.013630][ T5841] veth1_macvtap: entered promiscuous mode [ 76.029195][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.056708][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067087][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.077700][ T5840] veth1_vlan: entered promiscuous mode [ 76.088353][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.097665][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.110244][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.128948][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.140633][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.170379][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.204743][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.214170][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.235085][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.243929][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.270132][ T5842] veth0_vlan: entered promiscuous mode [ 76.283255][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.321693][ T5842] veth1_vlan: entered promiscuous mode [ 76.334938][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.344150][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.384249][ T5840] veth0_macvtap: entered promiscuous mode [ 76.394494][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.418517][ T5840] veth1_macvtap: entered promiscuous mode [ 76.436458][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.448802][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.503930][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.512049][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.525059][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.544285][ T5842] veth0_macvtap: entered promiscuous mode [ 76.558680][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.583154][ T1325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.592146][ T5842] veth1_macvtap: entered promiscuous mode [ 76.613356][ T1325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633119][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.640939][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.641428][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.689192][ T1325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.698294][ T1325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.720398][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.731710][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.740042][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.769880][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.786152][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.796932][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.808773][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.817710][ T3523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872861][ T3523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874410][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.881618][ T3523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.899469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.023842][ T5834] Bluetooth: hci0: command tx timeout [ 77.149508][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.162062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.166867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.177684][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.190210][ T5834] Bluetooth: hci1: command tx timeout [ 77.196021][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.258801][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.280068][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.313101][ T5920] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.346201][ T5920] random: crng reseeded on system resumption [ 77.386764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.392622][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.403858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.405244][ T5834] Bluetooth: hci3: command tx timeout [ 77.413791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.440387][ T5834] Bluetooth: hci2: command tx timeout [ 77.447010][ T5827] Bluetooth: hci4: command tx timeout [ 77.602603][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 77.616978][ T5826] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 77.641951][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.751540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.761310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.853961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.863265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.120760][ T5826] pvrusb2: Hardware description: Terratec Grabster AV400 [ 78.159224][ T5826] pvrusb2: ********** [ 78.179471][ T5826] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 78.210376][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 78.210850][ T5826] pvrusb2: Important functionality might not be entirely working. [ 78.266542][ T5826] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 78.286763][ T5826] pvrusb2: ********** [ 78.385269][ T2345] pvrusb2: Invalid write control endpoint [ 78.560993][ T2345] pvrusb2: Invalid write control endpoint [ 78.593014][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 78.635147][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 78.648012][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.659952][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 78.674360][ T2345] pvrusb2: Device being rendered inoperable [ 78.684374][ T5915] pvrusb2: Attempted to execute control transfer when device not ok [ 78.694480][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 78.701982][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 78.714387][ T5921] usb 4-1: USB disconnect, device number 2 [ 78.737165][ T2345] pvrusb2: Attached sub-driver cx25840 [ 78.743841][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 78.754240][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.773316][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 78.925078][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 78.932070][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.947398][ T43] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 78.960137][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.971980][ T43] usb 5-1: Product: syz [ 78.977637][ T43] usb 5-1: Manufacturer: syz [ 78.993606][ T43] usb 5-1: SerialNumber: syz [ 79.008944][ T43] usb 5-1: config 0 descriptor?? [ 79.031083][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 79.044972][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 79.071513][ T43] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 79.133168][ T5827] Bluetooth: hci0: command tx timeout [ 79.174310][ T5951] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 79.213476][ T5951] team0: Port device dummy0 added [ 79.263566][ T5827] Bluetooth: hci1: command tx timeout [ 79.290917][ T5951] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 79.339489][ T5951] team0: Port device dummy0 removed [ 79.371303][ T5951] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.422770][ T5827] Bluetooth: hci3: command tx timeout [ 79.453133][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.503687][ T5834] Bluetooth: hci2: command tx timeout [ 79.509719][ T5827] Bluetooth: hci4: command tx timeout [ 79.563024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.624663][ T5830] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 79.638792][ T5830] usb 2-1: config 0 has no interface number 0 [ 79.657601][ T5830] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 79.672263][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.685718][ T5830] usb 2-1: Product: syz [ 79.697215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.719047][ T5830] usb 2-1: Manufacturer: syz [ 79.733601][ T5830] usb 2-1: SerialNumber: syz [ 79.974049][ T5830] usb 2-1: config 0 descriptor?? [ 79.996784][ T5830] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 80.008459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.083296][ T5830] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 80.210290][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.218254][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.455838][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.505241][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.524849][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.201686][ T5980] process 'syz.0.20' launched './file0' with NULL argv: empty string added [ 81.233102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 81.243036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 81.400560][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.041386][ T337] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.067365][ T5830] usb 2-1: USB disconnect, device number 2 [ 83.089382][ T337] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.377735][ T337] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.405623][ T337] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.807771][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.962417][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 83.977135][ T5909] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 84.022408][ T5909] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 84.052143][ T5909] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 84.112598][ T5909] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 84.195584][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.232458][ T5909] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.243849][ T5909] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.246672][ T5826] usb 5-1: USB disconnect, device number 2 [ 84.261152][ T5909] usb 3-1: Product: syz [ 84.270455][ T5909] usb 3-1: Manufacturer: syz [ 84.284653][ T5909] usb 3-1: SerialNumber: syz [ 84.396336][ T5909] usb 3-1: config 0 descriptor?? [ 84.423280][ T5909] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.432473][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.737506][ T5909] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.796312][ T5909] usb 3-1: USB disconnect, device number 2 [ 84.803046][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 84.812758][ T43] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 84.823758][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.824118][ T5909] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 84.831750][ T43] usb 1-1: Product: syz [ 84.831767][ T43] usb 1-1: Manufacturer: syz [ 84.831780][ T43] usb 1-1: SerialNumber: syz [ 84.895245][ T43] usb 1-1: config 0 descriptor?? [ 84.913836][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 85.114281][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.126429][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.394542][ T5999] mmap: syz.0.24 (5999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.415437][ T6009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.26'. [ 85.432531][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.463525][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.472502][ T43] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 85.481925][ T43] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 85.759889][ T5999] dummy0: entered promiscuous mode [ 85.773298][ T5999] vlan2: entered promiscuous mode [ 86.076182][ T5826] usb 1-1: USB disconnect, device number 2 [ 86.692733][ T813] cfg80211: failed to load regulatory.db [ 86.757336][ T6025] Zero length message leads to an empty skb [ 87.672377][ T5826] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.833147][ T337] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 88.235259][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 88.339383][ T337] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 88.482742][ T5826] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 88.491808][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.529730][ T5826] usb 2-1: Product: syz [ 88.563136][ T5826] usb 2-1: Manufacturer: syz [ 88.567773][ T5826] usb 2-1: SerialNumber: syz [ 88.648249][ T5826] r8152-cfgselector 2-1: Unknown version 0x0000 [ 88.662378][ T5826] r8152-cfgselector 2-1: config 0 descriptor?? [ 89.094297][ T30] audit: type=1326 audit(1762138741.515:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.132462][ T30] audit: type=1326 audit(1762138741.515:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.162449][ T30] audit: type=1326 audit(1762138741.515:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.186282][ T30] audit: type=1326 audit(1762138741.515:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.301197][ T30] audit: type=1326 audit(1762138741.525:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.403968][ T5827] Bluetooth: hci0: hcon ffff88802851c000 sent 1 < count 65528 [ 89.612469][ T30] audit: type=1326 audit(1762138741.525:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.634044][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.792458][ T30] audit: type=1326 audit(1762138741.525:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.814294][ T30] audit: type=1326 audit(1762138741.525:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.897324][ T30] audit: type=1326 audit(1762138741.525:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 89.918966][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.017563][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 91.248489][ T982] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.452388][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 91.459141][ T982] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 91.467878][ T982] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.486183][ T982] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.513999][ T982] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.633236][ T982] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.711307][ T982] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.812665][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.303762][ T982] usb 4-1: usb_control_msg returned -32 [ 92.309380][ T982] usbtmc 4-1:16.0: can't read capabilities [ 92.578355][ T6017] syz.1.29 (6017): drop_caches: 2 [ 93.764999][ T5826] r8152-cfgselector 2-1: Unknown version 0x0000 [ 93.801443][ T5826] r8152-cfgselector 2-1: bad CDC descriptors [ 94.192796][ T5826] usb 4-1: USB disconnect, device number 3 [ 94.302960][ T5878] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 98.556110][ T6101] hub 9-0:1.0: USB hub found [ 98.563358][ T6101] hub 9-0:1.0: 1 port detected [ 104.827725][ T6131] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 104.848138][ T5878] IPVS: starting estimator thread 0... [ 105.004140][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.015127][ T6131] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.120775][ T6130] IPVS: using max 38 ests per chain, 91200 per kthread [ 105.653795][ T6125] delete_channel: no stack [ 107.927861][ T6161] Set syz0 is full, maxelem 0 reached [ 108.564303][ T6162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.601568][ T6162] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.721346][ T6162] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.769725][ T6162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.785025][ T6162] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.845935][ T6162] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.920486][ T6182] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 108.956810][ T6162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.992551][ T6162] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.115563][ T6162] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.173634][ T6162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.223714][ T6162] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.273654][ T6162] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.912429][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.118697][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.124809][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.130828][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.136932][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.562451][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.568510][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.574600][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.580610][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.733902][ T6162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.786408][ T6162] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.914982][ T6162] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.185715][ T6197] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.246911][ T6197] bond0: (slave lo): Error: Device type is different from other slaves [ 115.572350][ C1] sched: DL replenish lagged too much [ 116.622465][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.628531][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.634600][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.782524][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.520139][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.618464][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.861757][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882433][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.968925][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.981627][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.994043][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.028869][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.043236][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.686697][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.722956][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.751982][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.762909][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.774706][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.851184][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.872591][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.880521][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.145091][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.153411][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.172938][ T5827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.103838][ T5827] Bluetooth: hci5: command tx timeout [ 139.283555][ T5827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.332200][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.360195][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.371006][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.309259][ T52] Bluetooth: hci6: command tx timeout [ 142.393480][ T52] Bluetooth: hci5: command tx timeout [ 142.398936][ T52] Bluetooth: hci7: command tx timeout [ 142.416194][ T52] Bluetooth: hci2: command tx timeout [ 142.634866][ T5148] Bluetooth: hci6: command tx timeout [ 143.776232][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 143.784624][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 143.794565][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 143.821572][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 143.830424][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 146.199018][ T52] Bluetooth: hci2: command tx timeout [ 146.204999][ T5148] Bluetooth: hci7: command tx timeout [ 146.210412][ T5148] Bluetooth: hci5: command tx timeout [ 146.220598][ T52] Bluetooth: hci6: command tx timeout [ 146.226105][ T52] Bluetooth: hci8: command tx timeout [ 148.302516][ T5834] Bluetooth: hci5: command tx timeout [ 148.308916][ T5148] Bluetooth: hci7: command tx timeout [ 148.314366][ T52] Bluetooth: hci8: command tx timeout [ 148.319766][ T52] Bluetooth: hci6: command tx timeout [ 148.325880][ T5148] Bluetooth: hci2: command tx timeout [ 149.907685][ T6222] chnl_net:caif_netlink_parms(): no params data found [ 150.239479][ T6226] chnl_net:caif_netlink_parms(): no params data found [ 150.330055][ T6227] chnl_net:caif_netlink_parms(): no params data found [ 150.386118][ T5821] Bluetooth: hci8: command tx timeout [ 150.391547][ T5821] Bluetooth: hci2: command tx timeout [ 150.397479][ T5834] Bluetooth: hci7: command tx timeout [ 151.732118][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 152.465841][ T5821] Bluetooth: hci8: command tx timeout [ 153.269570][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 155.553036][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.560207][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.577173][ T6222] bridge_slave_0: entered allmulticast mode [ 155.591510][ T6222] bridge_slave_0: entered promiscuous mode [ 155.607244][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.618738][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.626320][ T6222] bridge_slave_1: entered allmulticast mode [ 155.634350][ T6222] bridge_slave_1: entered promiscuous mode [ 155.843284][ T6206] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.935240][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.942428][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.949587][ T6226] bridge_slave_0: entered allmulticast mode [ 155.959660][ T6226] bridge_slave_0: entered promiscuous mode [ 156.023078][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.046781][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.054820][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.061939][ T6226] bridge_slave_1: entered allmulticast mode [ 156.069644][ T6226] bridge_slave_1: entered promiscuous mode [ 156.090338][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.097554][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.104798][ T6227] bridge_slave_0: entered allmulticast mode [ 156.111701][ T6227] bridge_slave_0: entered promiscuous mode [ 156.131549][ T6206] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.146724][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.187505][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.196127][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.203596][ T6227] bridge_slave_1: entered allmulticast mode [ 156.210506][ T6227] bridge_slave_1: entered promiscuous mode [ 156.254043][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.261164][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.268431][ T6228] bridge_slave_0: entered allmulticast mode [ 156.275736][ T6228] bridge_slave_0: entered promiscuous mode [ 156.286293][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.305482][ T6206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.340670][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.348065][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.357385][ T6219] bridge_slave_0: entered allmulticast mode [ 156.365027][ T6219] bridge_slave_0: entered promiscuous mode [ 156.372267][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.379519][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.387462][ T6228] bridge_slave_1: entered allmulticast mode [ 156.396246][ T6228] bridge_slave_1: entered promiscuous mode [ 156.417637][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.429228][ T6227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.441750][ T6227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.455039][ T6222] team0: Port device team_slave_0 added [ 156.472134][ T6206] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.485713][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.493074][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.501472][ T6219] bridge_slave_1: entered allmulticast mode [ 156.508652][ T6219] bridge_slave_1: entered promiscuous mode [ 156.550898][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.584517][ T6222] team0: Port device team_slave_1 added [ 156.627108][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.673574][ T6227] team0: Port device team_slave_0 added [ 156.691329][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.715287][ T6226] team0: Port device team_slave_0 added [ 156.731969][ T6227] team0: Port device team_slave_1 added [ 156.743022][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.755326][ T6228] team0: Port device team_slave_0 added [ 156.774396][ T6226] team0: Port device team_slave_1 added [ 156.796926][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.807087][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.835893][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.872869][ T6228] team0: Port device team_slave_1 added [ 156.913136][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.920083][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.946310][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.958271][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.965279][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.991398][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.027757][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.034873][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.060863][ T6227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.127045][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.134127][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.161371][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.175490][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.182722][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.208694][ T6227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.221573][ T6219] team0: Port device team_slave_0 added [ 157.228790][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.235894][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.261835][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.274831][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.281776][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.307733][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.361681][ T6219] team0: Port device team_slave_1 added [ 157.404836][ T6222] hsr_slave_0: entered promiscuous mode [ 157.411363][ T6222] hsr_slave_1: entered promiscuous mode [ 157.419599][ T6222] debugfs: 'hsr0' already exists in 'hsr' [ 157.425749][ T6222] Cannot create hsr debugfs directory [ 157.444902][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.451947][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.478614][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.489787][ T6206] bridge_slave_1: left allmulticast mode [ 157.496743][ T6206] bridge_slave_1: left promiscuous mode [ 157.503594][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.514693][ T6206] bridge_slave_0: left allmulticast mode [ 157.521749][ T6206] bridge_slave_0: left promiscuous mode [ 157.527602][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.734501][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.747068][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.756905][ T6206] bond0 (unregistering): Released all slaves [ 157.842485][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.849441][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.875742][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.911340][ T6228] hsr_slave_0: entered promiscuous mode [ 157.917635][ T6228] hsr_slave_1: entered promiscuous mode [ 157.923834][ T6228] debugfs: 'hsr0' already exists in 'hsr' [ 157.929546][ T6228] Cannot create hsr debugfs directory [ 158.003959][ T6227] hsr_slave_0: entered promiscuous mode [ 158.010200][ T6227] hsr_slave_1: entered promiscuous mode [ 158.017161][ T6227] debugfs: 'hsr0' already exists in 'hsr' [ 158.023167][ T6227] Cannot create hsr debugfs directory [ 158.046773][ T6226] hsr_slave_0: entered promiscuous mode [ 158.053077][ T6226] hsr_slave_1: entered promiscuous mode [ 158.059107][ T6226] debugfs: 'hsr0' already exists in 'hsr' [ 158.064912][ T6226] Cannot create hsr debugfs directory [ 158.229516][ T6219] hsr_slave_0: entered promiscuous mode [ 158.236584][ T6219] hsr_slave_1: entered promiscuous mode [ 158.245138][ T6219] debugfs: 'hsr0' already exists in 'hsr' [ 158.250860][ T6219] Cannot create hsr debugfs directory [ 158.372216][ T6206] hsr_slave_0: left promiscuous mode [ 158.380815][ T6206] hsr_slave_1: left promiscuous mode [ 158.388153][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.395807][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.403921][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.411288][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.429286][ T6206] veth1_macvtap: left promiscuous mode [ 158.434979][ T6206] veth0_macvtap: left promiscuous mode [ 158.440750][ T6206] veth1_vlan: left promiscuous mode [ 158.447547][ T6206] veth0_vlan: left promiscuous mode [ 158.706763][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 158.731607][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 159.356862][ T6206] IPVS: stop unused estimator thread 0... [ 159.366536][ T6222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 159.389578][ T6222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 159.431428][ T6222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 159.457576][ T6222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.551470][ T6206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.573536][ T6228] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 159.598899][ T6228] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 159.647450][ T6228] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 159.660538][ T6228] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 159.691061][ T6206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.769582][ T6206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.844967][ T6226] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 159.860698][ T6226] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 159.884545][ T6206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.916722][ T6226] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 159.937664][ T6226] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 160.016024][ T6219] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.027687][ T6219] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.058333][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.068694][ T6219] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.078749][ T6219] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.250077][ T6222] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.280516][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.287704][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.315153][ T6206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.381563][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.388760][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.414746][ T6227] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 160.439897][ T6206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.487763][ T6227] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 160.516018][ T6227] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 160.559386][ T6206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.597780][ T6227] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 160.645172][ T6206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.687579][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.736739][ T6226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.808536][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.878946][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.886183][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.896575][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.903677][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.917886][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.927120][ T6226] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.980246][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.996253][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.003372][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.058726][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.065866][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.074521][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.081585][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.109835][ T6206] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.153012][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.160106][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.226488][ T6206] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.272943][ T6222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.329675][ T6206] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.380344][ T6227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.434807][ T6206] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.495138][ T6227] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.508547][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.549616][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.556792][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.620362][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.627521][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.759721][ T6222] veth0_vlan: entered promiscuous mode [ 161.774557][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.790231][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.831971][ T6206] bridge_slave_1: left allmulticast mode [ 161.840474][ T6206] bridge_slave_1: left promiscuous mode [ 161.848064][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.859080][ T6206] bridge_slave_0: left allmulticast mode [ 161.866353][ T6206] bridge_slave_0: left promiscuous mode [ 161.872107][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.889852][ T6206] bridge_slave_1: left allmulticast mode [ 161.895769][ T6206] bridge_slave_1: left promiscuous mode [ 161.901493][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.913624][ T6206] bridge_slave_0: left allmulticast mode [ 161.919272][ T6206] bridge_slave_0: left promiscuous mode [ 161.928061][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.944583][ T6206] bridge_slave_1: left allmulticast mode [ 161.950234][ T6206] bridge_slave_1: left promiscuous mode [ 161.957468][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.967319][ T6206] bridge_slave_0: left allmulticast mode [ 161.973376][ T6206] bridge_slave_0: left promiscuous mode [ 161.979079][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.247552][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.257853][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.268210][ T6206] bond0 (unregistering): (slave team0): Releasing backup interface [ 162.278519][ T6206] bond0 (unregistering): Released all slaves [ 162.499211][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.510175][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.521111][ T6206] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 162.530574][ T6206] bond0 (unregistering): Released all slaves [ 162.724294][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.735534][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.746209][ T6206] bond0 (unregistering): Released all slaves [ 162.776518][ T6222] veth1_vlan: entered promiscuous mode [ 162.900678][ T6228] veth0_vlan: entered promiscuous mode [ 162.981461][ T6219] veth0_vlan: entered promiscuous mode [ 163.018952][ T6222] veth0_macvtap: entered promiscuous mode [ 163.037905][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.049564][ T6228] veth1_vlan: entered promiscuous mode [ 163.065884][ T6222] veth1_macvtap: entered promiscuous mode [ 163.100320][ T6219] veth1_vlan: entered promiscuous mode [ 163.133946][ T6226] veth0_vlan: entered promiscuous mode [ 163.240986][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.271208][ T6226] veth1_vlan: entered promiscuous mode [ 163.310086][ T6228] veth0_macvtap: entered promiscuous mode [ 163.320446][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.399317][ T6228] veth1_macvtap: entered promiscuous mode [ 163.455069][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.520832][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.565621][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.578458][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.589974][ T6219] veth0_macvtap: entered promiscuous mode [ 163.614778][ T6227] veth0_vlan: entered promiscuous mode [ 163.623560][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.708116][ T6219] veth1_macvtap: entered promiscuous mode [ 163.739082][ T6226] veth0_macvtap: entered promiscuous mode [ 163.788539][ T6226] veth1_macvtap: entered promiscuous mode [ 163.799150][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.850043][ T6206] hsr_slave_0: left promiscuous mode [ 163.856177][ T6206] hsr_slave_1: left promiscuous mode [ 163.861954][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.870727][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.879760][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.887500][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.898863][ T6206] hsr_slave_0: left promiscuous mode [ 163.905423][ T6206] hsr_slave_1: left promiscuous mode [ 163.911142][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.918546][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.926713][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.934166][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.945339][ T6206] hsr_slave_0: left promiscuous mode [ 163.951147][ T6206] hsr_slave_1: left promiscuous mode [ 163.957171][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.964611][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.975279][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.984526][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.019790][ T6206] veth1_macvtap: left promiscuous mode [ 164.025460][ T6206] veth0_macvtap: left promiscuous mode [ 164.031000][ T6206] veth1_vlan: left promiscuous mode [ 164.036903][ T6206] veth0_vlan: left promiscuous mode [ 164.043920][ T6206] veth1_macvtap: left promiscuous mode [ 164.049408][ T6206] veth0_macvtap: left promiscuous mode [ 164.055196][ T6206] veth1_vlan: left promiscuous mode [ 164.060486][ T6206] veth0_vlan: left promiscuous mode [ 164.067982][ T6206] veth1_macvtap: left promiscuous mode [ 164.073580][ T6206] veth0_macvtap: left promiscuous mode [ 164.079134][ T6206] veth1_vlan: left promiscuous mode [ 164.084767][ T6206] veth0_vlan: left promiscuous mode [ 164.490358][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 164.516947][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 164.972699][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 165.000095][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 165.452791][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 165.480433][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 165.730283][ T6227] veth1_vlan: entered promiscuous mode [ 165.749783][ T60] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.759676][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.806719][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.830845][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.832678][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.844225][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.856051][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.880604][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.915441][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.954428][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.965767][ T337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.976140][ T337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.001921][ T6227] veth0_macvtap: entered promiscuous mode [ 166.009131][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.021509][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.059093][ T6227] veth1_macvtap: entered promiscuous mode [ 166.075899][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.189054][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.234432][ T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.282521][ T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.291655][ T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.316746][ T60] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.347541][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.369961][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.510445][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.532121][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.619933][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.670282][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.906633][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.942539][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.998785][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.007651][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.021324][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.040413][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.103212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.116352][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.282184][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.381732][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.522370][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.531461][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.707002][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.740610][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.031319][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.064654][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.534542][ T6389] gretap0: entered promiscuous mode [ 169.540009][ T6389] vlan2: entered promiscuous mode [ 169.601494][ T6392] netlink: 666 bytes leftover after parsing attributes in process `syz.7.79'. [ 170.073886][ T30] audit: type=1326 audit(1762138822.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 170.419205][ T30] audit: type=1326 audit(1762138822.465:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 170.606017][ T30] audit: type=1326 audit(1762138822.465:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 170.962726][ T30] audit: type=1326 audit(1762138822.465:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 171.150328][ T6420] netlink: 64 bytes leftover after parsing attributes in process `syz.6.92'. [ 171.162451][ T6420] netlink: 64 bytes leftover after parsing attributes in process `syz.6.92'. [ 171.222075][ T30] audit: type=1326 audit(1762138822.465:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 171.275712][ T30] audit: type=1326 audit(1762138822.465:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 171.307522][ T30] audit: type=1326 audit(1762138822.465:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 171.329549][ T30] audit: type=1326 audit(1762138822.475:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 171.355215][ T30] audit: type=1326 audit(1762138822.475:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 171.450149][ T30] audit: type=1326 audit(1762138822.475:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.7.89" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 172.303029][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.459107][ T813] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 172.484249][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.693067][ T43] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.772014][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.818371][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.855860][ T813] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 172.875480][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.905641][ T813] usb 8-1: can't read configurations, error -22 [ 172.941298][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.966951][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.006859][ T43] usb 6-1: Product: syz [ 173.011055][ T43] usb 6-1: Manufacturer: syz [ 173.071365][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 173.082646][ T813] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 173.198660][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 173.296376][ T43] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 173.330540][ T43] cdc_wdm 6-1:1.0: Unknown control protocol [ 173.410121][ T813] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 173.443692][ T813] usb 8-1: can't read configurations, error -22 [ 173.469785][ T813] usb usb8-port1: attempt power cycle [ 173.921448][ T813] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 173.951506][ T6471] gretap0: entered promiscuous mode [ 173.978119][ T6471] vlan2: entered promiscuous mode [ 174.037022][ T813] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 174.056465][ T813] usb 8-1: can't read configurations, error -22 [ 174.157812][ T6476] netlink: 666 bytes leftover after parsing attributes in process `syz.9.100'. [ 174.212737][ T813] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 174.277250][ T5898] usb 6-1: USB disconnect, device number 2 [ 174.286274][ T813] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 174.313477][ T813] usb 8-1: can't read configurations, error -22 [ 174.338432][ T813] usb usb8-port1: unable to enumerate USB device [ 174.748681][ T6491] tipc: Started in network mode [ 174.756970][ T6491] tipc: Node identity 6aea4057d4d7, cluster identity 4711 [ 174.764890][ T6491] tipc: Enabled bearer , priority 0 [ 174.796245][ T6491] syzkaller0: entered promiscuous mode [ 174.808954][ T6491] syzkaller0: entered allmulticast mode [ 174.925448][ T6491] veth0_to_bond: entered promiscuous mode [ 174.950281][ T6491] veth0_to_bond: entered allmulticast mode [ 175.021361][ T6490] tipc: Resetting bearer [ 175.117500][ T6490] tipc: Disabling bearer [ 175.406735][ T813] IPVS: starting estimator thread 0... [ 175.562927][ T6507] IPVS: using max 31 ests per chain, 74400 per kthread [ 175.743234][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 175.872744][ T5957] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 175.917711][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.955986][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 175.995620][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 176.034724][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.083198][ T10] usb 6-1: config 0 descriptor?? [ 176.161454][ T6531] netlink: 666 bytes leftover after parsing attributes in process `syz.6.114'. [ 176.373885][ T10] usb 6-1: USB disconnect, device number 3 [ 176.386266][ T5957] usb 10-1: Using ep0 maxpacket: 8 [ 176.406483][ T5957] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 176.444065][ T5957] usb 10-1: config 0 has no interface number 0 [ 176.467882][ T5957] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 176.477567][ T5957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.522404][ T5957] usb 10-1: Product: syz [ 176.526685][ T5957] usb 10-1: Manufacturer: syz [ 176.531373][ T5957] usb 10-1: SerialNumber: syz [ 176.556863][ T5957] usb 10-1: config 0 descriptor?? [ 176.633198][ T6538] FAULT_INJECTION: forcing a failure. [ 176.633198][ T6538] name failslab, interval 1, probability 0, space 0, times 1 [ 176.728589][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.6.116 Not tainted syzkaller #0 PREEMPT(full) [ 176.728614][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.728630][ T6538] Call Trace: [ 176.728638][ T6538] [ 176.728645][ T6538] dump_stack_lvl+0x189/0x250 [ 176.728682][ T6538] ? __pfx____ratelimit+0x10/0x10 [ 176.728703][ T6538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.728723][ T6538] ? __pfx__printk+0x10/0x10 [ 176.728753][ T6538] ? __pfx___might_resched+0x10/0x10 [ 176.728777][ T6538] should_fail_ex+0x414/0x560 [ 176.728807][ T6538] should_failslab+0xa8/0x100 [ 176.728826][ T6538] __kmalloc_noprof+0xcb/0x7f0 [ 176.728847][ T6538] ? tomoyo_encode2+0x27f/0x530 [ 176.728870][ T6538] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 176.728899][ T6538] tomoyo_encode2+0x27f/0x530 [ 176.728929][ T6538] tomoyo_check_unix_address+0x3c3/0x7b0 [ 176.728961][ T6538] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 176.728984][ T6538] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 176.729020][ T6538] ? __might_fault+0xb0/0x130 [ 176.729047][ T6538] tomoyo_socket_connect_permission+0x1b2/0x290 [ 176.729082][ T6538] security_socket_connect+0xc8/0x2b0 [ 176.729103][ T6538] __sys_connect+0x231/0x440 [ 176.729127][ T6538] ? __fget_files+0x3a0/0x420 [ 176.729144][ T6538] ? __pfx___sys_connect+0x10/0x10 [ 176.729181][ T6538] ? __pfx_ksys_write+0x10/0x10 [ 176.729211][ T6538] __ia32_sys_connect+0x7a/0x90 [ 176.729235][ T6538] __do_fast_syscall_32+0xb6/0x2b0 [ 176.729258][ T6538] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.729283][ T6538] do_fast_syscall_32+0x34/0x80 [ 176.729306][ T6538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.729325][ T6538] RIP: 0023:0xf708d539 [ 176.729347][ T6538] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 176.729359][ T6538] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 176.729377][ T6538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 176.729389][ T6538] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 176.729399][ T6538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.729409][ T6538] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.729419][ T6538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.729447][ T6538] [ 177.186632][ T5957] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 177.194337][ T5957] uvcvideo 10-1:0.31: Failed to initialize entity for entity 6 [ 177.201893][ T5957] uvcvideo 10-1:0.31: Failed to register entities (-22). [ 177.257831][ T10] usb 10-1: USB disconnect, device number 2 [ 177.470864][ T6551] FAULT_INJECTION: forcing a failure. [ 177.470864][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 177.553648][ T6551] CPU: 0 UID: 0 PID: 6551 Comm: syz.7.119 Not tainted syzkaller #0 PREEMPT(full) [ 177.553671][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.553681][ T6551] Call Trace: [ 177.553688][ T6551] [ 177.553695][ T6551] dump_stack_lvl+0x189/0x250 [ 177.553720][ T6551] ? __pfx____ratelimit+0x10/0x10 [ 177.553742][ T6551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.553764][ T6551] ? __pfx__printk+0x10/0x10 [ 177.553784][ T6551] ? do_raw_spin_lock+0x121/0x290 [ 177.553811][ T6551] should_fail_ex+0x414/0x560 [ 177.553841][ T6551] should_failslab+0xa8/0x100 [ 177.553861][ T6551] kmem_cache_alloc_noprof+0x74/0x6e0 [ 177.553881][ T6551] ? __inet_bhash2_update_saddr+0x1c6/0x1f90 [ 177.553904][ T6551] __inet_bhash2_update_saddr+0x1c6/0x1f90 [ 177.553920][ T6551] ? debug_object_assert_init+0x20e/0x380 [ 177.553954][ T6551] ? tcp_chrono_stop+0x29d/0x470 [ 177.553975][ T6551] ? tcp_write_queue_purge+0x21e/0x300 [ 177.553997][ T6551] tcp_disconnect+0x48b/0x1f60 [ 177.554019][ T6551] __mptcp_close_ssk+0x482/0xfd0 [ 177.554042][ T6551] mptcp_destroy_common+0x152/0x320 [ 177.554065][ T6551] mptcp_disconnect+0x23d/0x700 [ 177.554089][ T6551] __inet_stream_connect+0x396/0xe70 [ 177.554123][ T6551] ? __local_bh_enable_ip+0x12d/0x1c0 [ 177.554140][ T6551] ? __pfx___inet_stream_connect+0x10/0x10 [ 177.554164][ T6551] ? __local_bh_enable_ip+0x12d/0x1c0 [ 177.554180][ T6551] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 177.554207][ T6551] inet_stream_connect+0x66/0xa0 [ 177.554233][ T6551] __sys_connect+0x316/0x440 [ 177.554255][ T6551] ? __fget_files+0x3a0/0x420 [ 177.554269][ T6551] ? __pfx___sys_connect+0x10/0x10 [ 177.554303][ T6551] ? __pfx_ksys_write+0x10/0x10 [ 177.554332][ T6551] __ia32_sys_connect+0x7a/0x90 [ 177.554356][ T6551] __do_fast_syscall_32+0xb6/0x2b0 [ 177.554378][ T6551] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.554404][ T6551] do_fast_syscall_32+0x34/0x80 [ 177.554425][ T6551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.554448][ T6551] RIP: 0023:0xf702d539 [ 177.554462][ T6551] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 177.554474][ T6551] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 177.554492][ T6551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0 [ 177.554502][ T6551] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.554511][ T6551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.554520][ T6551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.554530][ T6551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.554557][ T6551] [ 177.860442][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.118'. [ 178.633281][ T6558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.707580][ T6560] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 178.721273][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.9.122'. [ 178.738826][ T6560] bond1 (unregistering): Released all slaves [ 178.993641][ T982] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 179.403275][ T982] usb 8-1: Using ep0 maxpacket: 32 [ 179.431368][ T982] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.446019][ T982] usb 8-1: config 0 has no interface number 0 [ 179.467069][ T982] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.477141][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.498627][ T982] usb 8-1: Product: syz [ 179.679927][ T6581] netlink: 112 bytes leftover after parsing attributes in process `syz.9.124'. [ 180.250847][ T982] usb 8-1: Manufacturer: syz [ 180.344711][ T982] usb 8-1: SerialNumber: syz [ 180.534072][ T982] usb 8-1: config 0 descriptor?? [ 180.574106][ T982] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.797206][ T982] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.846627][ T982] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 181.765676][ T5878] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 181.916422][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 181.924195][ T982] usb 8-1: USB disconnect, device number 6 [ 181.942108][ T982] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 181.969435][ T982] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.037890][ T982] quatech2 8-1:0.51: device disconnected [ 182.167595][ T5878] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 182.206506][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.257273][ T5878] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 182.306004][ T5878] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 182.329728][ T5878] usb 7-1: Manufacturer: syz [ 182.351615][ T5878] usb 7-1: config 0 descriptor?? [ 182.462891][ T5878] rc_core: IR keymap rc-hauppauge not found [ 182.479101][ T5878] Registered IR keymap rc-empty [ 182.499701][ T5878] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 182.536898][ T5878] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 182.576124][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 182.765582][ T6617] ALSA: mixer_oss: invalid OSS volume 'IGCIN' [ 182.843684][ T6617] ALSA: mixer_oss: invalid OSS volume 'SYNT' [ 183.849418][ T982] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 184.131249][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 184.875977][ T982] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 184.889412][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.958160][ T982] usb 6-1: Product: syz [ 185.061233][ T982] usb 6-1: Manufacturer: syz [ 185.083312][ T982] usb 6-1: SerialNumber: syz [ 185.094740][ T10] usb 7-1: USB disconnect, device number 2 [ 185.301908][ T982] usb 6-1: config 0 descriptor?? [ 185.375848][ T982] usb 6-1: bad CDC descriptors [ 185.455328][ T6644] netlink: 136 bytes leftover after parsing attributes in process `syz.6.133'. [ 185.834925][ T10] IPVS: starting estimator thread 0... [ 186.132405][ T6650] IPVS: using max 49 ests per chain, 117600 per kthread [ 187.188960][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 187.188979][ T30] audit: type=1326 audit(1762138839.485:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.7.135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 202.482886][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.489211][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.547579][ T30] audit: type=1326 audit(1762138839.485:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.7.135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 207.342547][ T30] audit: type=1326 audit(1762138839.525:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.7.135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 307.502269][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 307.509246][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6632/1:b..l [ 307.517396][ C0] rcu: (detected by 0, t=10502 jiffies, g=15921, q=1918 ncpus=2) [ 307.525178][ C0] task:syz.5.131 state:R running task stack:24936 pid:6632 tgid:6628 ppid:6219 task_flags:0x40044c flags:0x10080002 [ 307.539193][ C0] Call Trace: [ 307.542458][ C0] [ 307.545373][ C0] __schedule+0x1798/0x4cc0 [ 307.549878][ C0] ? __pfx___schedule+0x10/0x10 [ 307.554714][ C0] ? __lock_acquire+0xab9/0xd20 [ 307.559549][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 307.564816][ C0] preempt_schedule_irq+0xb5/0x150 [ 307.569904][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 307.575601][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 307.581383][ C0] irqentry_exit+0x6f/0x90 [ 307.585774][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.591729][ C0] RIP: 0010:lock_release+0x2cd/0x3e0 [ 307.596997][ C0] Code: 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 3b ca d0 10 48 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 cc cc cc cc cc 90 0f 0b 90 e9 5d fd ff ff 90 0f 0b 90 48 c7 [ 307.616579][ C0] RSP: 0000:ffffc9000be1eb28 EFLAGS: 00000286 [ 307.622624][ C0] RAX: 830f016123ea5600 RBX: ffffffff900b6101 RCX: 830f016123ea5600 [ 307.630568][ C0] RDX: 0000000000000001 RSI: ffffffff8d8f3eb0 RDI: ffffffff8bbf0760 [ 307.638518][ C0] RBP: ffff888025736618 R08: ffffc9000be1fc10 R09: 0000000000000000 [ 307.646479][ C0] R10: ffffc9000be1ec58 R11: fffff520017c3d8d R12: ffffc9000be1fc20 [ 307.654427][ C0] R13: ffffc9000be18000 R14: ffffc9000be1ec08 R15: ffffffff81738d25 [ 307.662375][ C0] ? unwind_next_frame+0xa5/0x2390 [ 307.667472][ C0] ? unwind_next_frame+0xa5/0x2390 [ 307.672554][ C0] unwind_next_frame+0x19a9/0x2390 [ 307.677641][ C0] ? unwind_next_frame+0xa5/0x2390 [ 307.682730][ C0] ? do_exit+0x648/0x2300 [ 307.687035][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.693164][ C0] arch_stack_walk+0x11c/0x150 [ 307.697904][ C0] ? do_group_exit+0x21c/0x2d0 [ 307.702645][ C0] stack_trace_save+0x9c/0xe0 [ 307.707302][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 307.712654][ C0] save_stack+0xf5/0x1f0 [ 307.716881][ C0] ? __pfx_save_stack+0x10/0x10 [ 307.721708][ C0] ? free_unref_folios+0xdb3/0x14f0 [ 307.726885][ C0] ? folios_put_refs+0x584/0x670 [ 307.731796][ C0] ? free_pages_and_swap_cache+0x277/0x520 [ 307.737575][ C0] ? tlb_flush_mmu+0x3a0/0x680 [ 307.742316][ C0] ? unmap_page_range+0x3b37/0x4370 [ 307.747492][ C0] ? unmap_vmas+0x399/0x580 [ 307.751966][ C0] ? exit_mmap+0x240/0xb40 [ 307.756359][ C0] ? __mmput+0x118/0x430 [ 307.760576][ C0] ? exit_mm+0x1da/0x2c0 [ 307.764798][ C0] ? do_exit+0x648/0x2300 [ 307.769103][ C0] ? page_ext_put+0x97/0xc0 [ 307.773584][ C0] __reset_page_owner+0x71/0x1f0 [ 307.778499][ C0] free_unref_folios+0xdb3/0x14f0 [ 307.783504][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 307.789458][ C0] folios_put_refs+0x584/0x670 [ 307.794198][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 307.799457][ C0] ? free_swap_cache+0x109/0x300 [ 307.804370][ C0] free_pages_and_swap_cache+0x277/0x520 [ 307.809991][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 307.815358][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 307.821513][ C0] ? tlb_table_flush+0x145/0x410 [ 307.826431][ C0] tlb_flush_mmu+0x3a0/0x680 [ 307.830997][ C0] ? unmap_page_range+0x3b14/0x4370 [ 307.836179][ C0] unmap_page_range+0x3b37/0x4370 [ 307.841207][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 307.846571][ C0] ? mas_find+0xb0e/0xd30 [ 307.850885][ C0] ? unmap_vmas+0x144/0x580 [ 307.855369][ C0] unmap_vmas+0x399/0x580 [ 307.859686][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 307.864528][ C0] exit_mmap+0x240/0xb40 [ 307.868749][ C0] ? uprobe_clear_state+0x20f/0x290 [ 307.873927][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 307.878670][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 307.884289][ C0] ? __pfx_exit_aio+0x10/0x10 [ 307.888950][ C0] ? uprobe_clear_state+0x27c/0x290 [ 307.894127][ C0] __mmput+0x118/0x430 [ 307.898173][ C0] exit_mm+0x1da/0x2c0 [ 307.902220][ C0] ? __pfx_exit_mm+0x10/0x10 [ 307.906797][ C0] ? rcu_is_watching+0x15/0xb0 [ 307.911545][ C0] do_exit+0x648/0x2300 [ 307.915684][ C0] ? do_raw_spin_lock+0x121/0x290 [ 307.920687][ C0] ? __pfx_do_exit+0x10/0x10 [ 307.925265][ C0] do_group_exit+0x21c/0x2d0 [ 307.929837][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.935016][ C0] get_signal+0x1285/0x1340 [ 307.939506][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 307.945034][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 307.951174][ C0] ? __se_sys_futex_time32+0x360/0x3e0 [ 307.956623][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 307.962075][ C0] exit_to_user_mode_loop+0x72/0x130 [ 307.967337][ C0] __do_fast_syscall_32+0x1f4/0x2b0 [ 307.972520][ C0] do_fast_syscall_32+0x34/0x80 [ 307.977350][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.983656][ C0] RIP: 0023:0xf707d539 [ 307.987731][ C0] RSP: 002b:00000000f544c60c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 307.996119][ C0] RAX: fffffffffffffe00 RBX: 00000000f7445020 RCX: 0000000000000080 [ 308.004068][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7445024 [ 308.012015][ C0] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 308.019965][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.027912][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.035874][ C0] [ 308.038875][ C0] rcu: rcu_preempt kthread starved for 10163 jiffies! g15921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 308.050044][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 308.059994][ C0] rcu: RCU grace-period kthread stack dump: [ 308.065866][ C0] task:rcu_preempt state:R running task stack:27912 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 308.079407][ C0] Call Trace: [ 308.082666][ C0] [ 308.085578][ C0] __schedule+0x1798/0x4cc0 [ 308.090069][ C0] ? __lock_acquire+0xab9/0xd20 [ 308.094893][ C0] ? __pfx___schedule+0x10/0x10 [ 308.099726][ C0] ? schedule+0x91/0x360 [ 308.103947][ C0] schedule+0x165/0x360 [ 308.108082][ C0] schedule_timeout+0x12b/0x270 [ 308.112908][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 308.118257][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 308.124128][ C0] ? __pfx_process_timeout+0x10/0x10 [ 308.129395][ C0] ? prepare_to_swait_event+0x341/0x380 [ 308.134916][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 308.139747][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 308.145875][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 308.151137][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 308.156333][ C0] ? finish_swait+0xcd/0x1f0 [ 308.160903][ C0] rcu_gp_kthread+0x99/0x390 [ 308.165470][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 308.170648][ C0] ? __kthread_parkme+0x7b/0x200 [ 308.175562][ C0] ? __kthread_parkme+0x1a1/0x200 [ 308.180564][ C0] kthread+0x711/0x8a0 [ 308.184611][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 308.189787][ C0] ? __pfx_kthread+0x10/0x10 [ 308.194355][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.199540][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.204712][ C0] ? __pfx_kthread+0x10/0x10 [ 308.209279][ C0] ret_from_fork+0x4bc/0x870 [ 308.213845][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 308.218935][ C0] ? __switch_to_asm+0x39/0x70 [ 308.223669][ C0] ? __switch_to_asm+0x33/0x70 [ 308.228406][ C0] ? __pfx_kthread+0x10/0x10 [ 308.232974][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.237718][ C0] [ 308.240713][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 308.247019][ C0] Sending NMI from CPU 0 to CPUs 1: [ 308.252214][ C1] NMI backtrace for cpu 1 [ 308.252233][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 308.252249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.252257][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 308.252278][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 f1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 308.252289][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 308.252303][ C1] RAX: bb75cb3204deda00 RBX: ffffffff81967bf7 RCX: bb75cb3204deda00 [ 308.252314][ C1] RDX: 0000000000000001 RSI: ffffffff8d70d450 RDI: ffffffff8bbf0760 [ 308.252324][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 308.252335][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cdc70 [ 308.252346][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58 [ 308.252355][ C1] FS: 0000000000000000(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000 [ 308.252367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.252377][ C1] CR2: 0000000080976018 CR3: 000000007d58e000 CR4: 00000000003526f0 [ 308.252390][ C1] Call Trace: [ 308.252396][ C1] [ 308.252401][ C1] default_idle+0x13/0x20 [ 308.252414][ C1] default_idle_call+0x73/0xb0 [ 308.252427][ C1] do_idle+0x1e7/0x510 [ 308.252442][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 308.252458][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.252476][ C1] ? __pfx_do_idle+0x10/0x10 [ 308.252495][ C1] ? do_idle+0x4ed/0x510 [ 308.252511][ C1] cpu_startup_entry+0x44/0x60 [ 308.252526][ C1] start_secondary+0x101/0x110 [ 308.252546][ C1] common_startup_64+0x13e/0x147 [ 308.252572][ C1] [ 308.429387][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.435716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.027696][ T1301] ieee802154 phy0 wpan0: encryption failed: -22