last executing test programs: 1m9.254026253s ago: executing program 3 (id=114): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 1m4.069176746s ago: executing program 3 (id=117): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mount$overlay(0x0, 0x0, 0x0, 0x1000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x65, 0x35, 0x66, 0x32, 0x67, 0x38], 0x2d, [0x66, 0x65, 0x66, 0x32], 0x2d, [0x38, 0x37, 0x37, 0x38], 0x2d, [0x32, 0x64, 0x33, 0x36], 0x2d, [0x51, 0x31, 0x61, 0x35, 0x37, 0x66, 0x62, 0x61]}}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '\x11'}}, {@dont_appraise}]}) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') 58.594961317s ago: executing program 3 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000012c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 57.752145325s ago: executing program 3 (id=127): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) 55.953237205s ago: executing program 3 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x40080, 0x9) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="6b2cef72", 0x4}], 0x1, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r6 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, 0xffffffffffffffff, 0x1, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[]) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup(r9) getsockname$packet(r10, 0x0, 0x0) 54.188344638s ago: executing program 3 (id=133): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269ba, 0x8032, 0xffffffffffffffff, 0x99cef000) pipe(0x0) unshare(0x40000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') unshare(0x62040200) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 37.973246847s ago: executing program 32 (id=133): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269ba, 0x8032, 0xffffffffffffffff, 0x99cef000) pipe(0x0) unshare(0x40000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') unshare(0x62040200) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 16.797523501s ago: executing program 1 (id=230): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) unshare(0x20000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 13.744846259s ago: executing program 2 (id=242): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) 13.374579217s ago: executing program 2 (id=245): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mount$overlay(0x0, 0x0, 0x0, 0x1000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x65, 0x35, 0x66, 0x32, 0x67, 0x38], 0x2d, [0x66, 0x65, 0x66, 0x32], 0x2d, [0x38, 0x37, 0x37, 0x38], 0x2d, [0x32, 0x64, 0x33, 0x36], 0x2d, [0x51, 0x31, 0x61, 0x35, 0x37, 0x66, 0x62, 0x61]}}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '\x11'}}, {@dont_appraise}]}) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') readv(r7, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xb, @local, 0x7}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x6, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x4002000) 12.976969782s ago: executing program 1 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.945309646s ago: executing program 1 (id=248): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 11.888080312s ago: executing program 1 (id=249): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc4, &(0x7f0000000240)=""/196, 0x0, 0xd, '\x00', 0x0, @fallback=0x1d}, 0x94) 11.827451291s ago: executing program 1 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x0, 0x5, 0x6, 0x7ffffffe, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x8, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2c1, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x7, 0x8021, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0xd7f5, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x6, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x6, 0x2db4, 0xff, 0x7}, {0x2, 0x1, 0x0, 0x1, 0x2a56, 0x4}, 0xfffffff8, 0x2, 0x1bfb}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 11.812659394s ago: executing program 2 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10016}, [@FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000040), 0x1001) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) madvise(&(0x7f0000a15000/0x2000)=nil, 0x2000, 0x15) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 7.408320999s ago: executing program 0 (id=265): setpgid(0x0, 0x0) setpgid(0x0, 0x0) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) 7.224477204s ago: executing program 0 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x40080, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r5 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, r6, 0x1, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[]) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup(r9) getsockname$packet(r10, 0x0, 0x0) 5.862299586s ago: executing program 0 (id=270): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0xce21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000140)=0x1, 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x8, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x5, 0x6, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x0, 0xba55, 0x8da8, 0x1, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x101, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0xed, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x0, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x2, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x1956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x8000ffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x81, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 4.216006564s ago: executing program 2 (id=276): setpgid(0x0, 0x0) setpgid(0x0, 0x0) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) 4.206175844s ago: executing program 2 (id=277): rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) select(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) 4.194401668s ago: executing program 0 (id=278): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) 4.123856998s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x40080, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r5 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, r6, 0x1, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[]) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup(r9) getsockname$packet(r10, 0x0, 0x0) 3.975511683s ago: executing program 4 (id=280): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) unshare(0x20000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.867861379s ago: executing program 4 (id=281): sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x22044010) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 2.796317833s ago: executing program 0 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) futex(0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079109000000000006300000000000000950000000000000016fae7c771226b66e95d56d18ca8e7fcd619dc4b2b3391b5c1cbca86a6808c1767f82f5e593cf104015698e3aa5f820f6ec2933353ff709f6ee68a99245d5a5d3c7194473300f77f7c42597bc1c019d21690b5650d59e797b8b53009cff7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) geteuid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000180001007d3f7000ffdbdf2502102005fc01fd0308140000040008800c0009000900020e", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c004) 2.771038834s ago: executing program 2 (id=283): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x6040600) select(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010025bd7000dfdbdf25000000006e0012d87a33781ad4f8b1c24dfaa03b7885e4d5aa853393d7632f07b1286c022a10ca718aa0262a34c79995", @ANYRES32=0x0, @ANYBLOB="4db20200307a01000500100002000000140003006e657464657673696d30000000000000040014000a0001007a2f9711ec2b000008001f0002"], 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x20048010) setresuid(0x0, 0xee00, 0x0) 2.635982455s ago: executing program 4 (id=284): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) ptrace$peek(0x2, r0, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0xbfea782ca9645393, 0x0, @remote, {0x5, 0x4, 0x3, 0x3f, 0x505, 0x66, 0x7f2, 0x48, 0x1, 0x9, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}}, "0001000000000000"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r3}, 0x18) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, 0x0) fcntl$addseals(r2, 0x409, 0x2) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.578132915s ago: executing program 0 (id=285): pipe2$9p(0x0, 0x84880) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="91c7e7bb229feb010018000000000000000c0000000c000000021c0000000000a06223fc0000"], 0x0, 0x26}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x800) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)=0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) r7 = syz_clone(0x3a50000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r7, r7, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000140)={'team0\x00', @ifru_map={0x2, 0xd96, 0xf7b, 0xc, 0xf6, 0x9}}) 381.239937ms ago: executing program 4 (id=286): setpgid(0x0, 0x0) setpgid(0x0, 0x0) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) 215.877347ms ago: executing program 1 (id=287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_emit_ethernet(0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="e90c610faca20180c200450000230000e000028daa119078000000000000be0400000000000f9078dc41a32408610076158797dfddfe00000000"], 0x0) syz_emit_ethernet(0xd4c, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd3e, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @remote}, {0x0, 0x7, 0xd2a, 0x0, @gue={{0x2, 0x1, 0x2, 0x9}, "aa7eb08f2f3d29a2068218d6ddfeda784d79bef0f07057fc251b9339ee1826ea6df714d92028424a1bed40edff6f86728b65e9b2d06f954a5ca7b3f29f24548692f8455bbcb3e9fc587b1627487319dd2dbd6d6950a01de1b928c8645f39457629cacf49edab7071aa936f8c64dbbd7b62cb10920a15388ec431344175af9390b4bb93d735076e02481b7d6bcbb7ab508da556d76b172282e3f2f44644def63351ad9ffe7b0c959c1f110e6d7a02ae16dc237e509e65233a34a01d7b5e8fe8739bd06f67c8912232a637749083c71a17a12fca8188dc708a613e3fdf6fd4a0c7cc56819466f500df9a686b3fe165941bf9bf5fdb7a3142344ac3bdff7ef71fd5b62345381ce8369091c720a0c2537e9c15b1cd1305bde396c124ff8b81f615fb30e6b2aac18a54b76860f258ba6e09bf1ff59e9a48b0ab8fb8235dcc053ace3ce59bff6f267f9c4bbf085f64ea7c495e4cee357cbe1011d2f96f76a4f5813799d7ddaf5687efda36f8bcf4f93478a392aaa29dae704f78015651d756b522f81784daf1a5428b5cc9db39aa89044e3de403970c9b2fa594d573bb0ecf595e1d36cfd652eb17714f18943b822d8e93176e6fde3d17ce17b83e38dfbb883580faf3140db80817a136bbcca7275a5dd79db8f6d8a5c057c150108bcfa57311850dc021ac7ea3061666df27c48890f39caf378c15d5bfdc5c57cc475c7c514be490b675777e686aae4abb43b3a70d6eb15f1dcd115d6fe06fc8409787168f80a755533dacfcaf664307a08d7697b7103269d888e76fd076dc70a3b5024096faf67e06116e11c339487f6543769979cf0f42f68cd2a8abed18bb518435e27df33f4ff3dcfd7d65bae7b31854124653a3cff9841296cea0c6deec00528cf5e2125a621189be7cbdd6b39993ef973fd7c63c95837c6d8cc215d8d5b9708f2c49ad59d4d0dc48f3c84f19a1ed5089e25742723b4af43d3fa38b355308415da0e167d40941383f282bc23e8862d2a86b1f64f2fc5cbf25a0c21e502ffbec00e89d09f16852748aafdac8c6c3992b093b712abcd69a667883e9bb289949d21b0acd6ee9cf01e52b1351cc71f976dd56c9f754fafa6cdaf3c71dcd8ee97f5b602e059c5724fbee3d78260002a26e780c179a579abff783072d858cd6cd69decd55068bb0f9362e097cd6c577bb0a0c214221fb8e1177c671498bf47b7cca2801751871eee5f819d10ac59423a94c18a5d6a4d172db65a5a91083229d7e743c549dc749b8cb296bc5418f2a1b96546044e4b0511b1a81072759c56d814252b74c63441194787b1e7cddb241b22494c1d0f317c6f6b820be11c4b2d960eb9b5dc62ed7d87a0b1327a493c693666b4bc53556d4590b66b4e3d6ed997a3a40dfb3a9fe21425c0a8037b1cbe24d7b190b359789edeb47d56bea8026de805c9b365439d894cf47f2a671b9639a5b0b412d855449996086573fe02343e26884af325599defe774eed0e7a92fcdfbf0449b52783ba8cdc3a0f1bd393fdd0e851122e3e1d7f2920655be0a301ab349bf2b5f52d665d49a23be8864b04c959331c43036689738d058b4587ef45d9b43a3f37bf7dcf0ee4c9d10cb20a7741eb355d6441d32f35564c27c51812a25976c6293d0cead40baefab3915311db95b86c9bbf4b57a1dadea6cf222bf018eb930dede785c851c63354538a044dc727cacbfc03a8caa44ee65615ea941d3b777e9a8c783fada319d2a7d1ff1eaaf6445aa57f66bdd8ba17692fbc1def735f94c34c14ce2f76f280c55dd8e086eec373e0ba22348a9b61e13646bf18b1b3de4975f7214aebc037911b070b92e6e4b05defcfae14828a2636b16e6ac7907e084f0521f0e782dbc1b942f074abad341a541b2fee0036b50f20c47d458c84a6826ec596aceb3d377a8eaae5f700c15827eb675c353c87103834cc32723dceb15f5596ca2c9221592f80c78700f71f7ab662a74223be9320abd5ab3beeccfaf0829e42edd7cbdc4eebca8df00b1f48203f27e54c94931cda40da975ff4e9bf5d8eb15a2f28a5cb6c99c2d56db847e99c3aa4df0f89b70f873e693822394ca4d6578cbcee75481b4ea0491f59327b903e2ebf991c1900b5944b6b638b73fa6be3eb856e763bd3c702bc6b6885493e2517cd2402458f66867cda379259d553ff03cb76b492dfb7f65a8e79a72dffe0d6c3789022d5e2bda7b2ef0f6996121fba8a7876f0563bfad9b7e1fa8fbdd41faa676ca2c94061cf9a2bdae2fb9efaf4e25efffda19649fa35cd3ffd0c0c52b07704cc61ee2231e24077100e5df2d89e717bbcc246729e62c2dc5ad294528ab11df2f542bd1b7a5fe8ba372ef816750f71b1779621ab8cd9e516db38b2e54b0aa08eee528693ff060aface14eaf24cecc24acb73c3d80289c082378a7dd3477a35c427e7e577732b0c54df26c860b23f362e76eedf1e464935df952333092eec561b1742c11952b61c4b84f696471e4b8d3298a485c35a25eb899ffa65161cc60c4679a4f20a35872b68dc9b1138a8752f3d026032ef2c142ed7430d8ce6e4daa0c62a9542b09587829aa875cfbd1893fe113af62baf4e226b4acbc1b63a9530c9b0cfd21b6fbcf9d294cf4b2a4cdac4920afb30efdd0f90468dac9f3fd37f81e2a6d1dfb8c4cad39597af7644cc240464554e4158106c1da377092b156884bf8221d8ac92f58620ede8120b40ff191b302541fa63ae02fc3aa9747a1f6cc123438b0692c610abc28ef5379fb5f772cfb023fcb3e9327f3d3d848878fae2f20e45ea3532d0f8148a9af8b704bcf010162c951abdb1120a94843bd5a7aec958d2baed911d3102ddd969e1b5415e22d629ddd9b9593099e52f05081511e7a166676bcd597df01a5676002c6437595a00dc249af8d3d31aaf01f4c42bb209ca80911269e2e26fbba73c9c6d407b30c63288b1f853e783b7f9b1d623e4c8ce0139a8d22cd1d41344b003b6b7b52e4c29350114b5363d49574384fb8eff38d1748affdc5f2ffd757e44950d21c53ff915277e84ad1d8672977cc02d241056a443adfac8dce671173bcd13cf928672c228873f4afa98c902cdef5fd8cfe3a2c9151ec4829dc80a3bc47e9d28148b70181a60a4824289a8290f0be190cef243ac08a7e9d47d84ebd61a15bfb54d93e66ad280638901ac7ca46e5bd766f5cb4b5647a22d0821d7d8d92c71f24fbb6acdbd24d8c9833283b2c9bddbc2ef44196726aa2c76b8cb2c3fed309fef29d31d0003338e29b137411c56f2a317f938b6e10aa0d435a04c81dd4b4745bb56d3ebf413bb0ab6c08857c100b604dd1b319074845eb389a4c83b1500d66e15fc5a197a0fed4cc6db6ad056976d6a9c8d56b11b4569f042478d5928487ede6eecd82a117079eab93ddec061eda192726c502f5125ddf0c744af435f36071ffe5bd69ae014bcd7ab0c03d31120665d395e9a533dad585951ef19cdb338bfc6c2f3a71b0deea3d9b0cf7dcdb7e84b55c52bd5b3cb43989c434a5322416cf3e2a1793f44370fd10c0c3f22beddfb4237b837be79a94eef92038562ad3e712b8f48bf79010b4b7062d353491c3a86db29ab9bc43589397f471b558ac44ac375806ab826e4ce5e987adc9ab57f15726c6ddc74b14b17e3f641d313e76912146b7d3e0fb03c73d21ab700cbbb0933f055dcc9f72b7b9abd6b8dc4a451a688c4dd8f6ebed172ef965b8890635d226baee505731d126c011c7655b89434e8c171eee46ac8f18d0a75454515dc40612d42f780d233188a33dbf00bfc231fc1301d95dd2fe0adcb5f185866a1bf9896c7172fb8f5213f9e68e14d64a9d8ddd7e656d16a14f014c9a067e2596d062656160b7c43c251f3dfec8279a3b510fe7b42352ce062e6f014ace06a1620f168da94d8e9b40fc58996e87abcccd5e82593d618c956064abe303bd2d62edcfd1d2baf0b618a6718a21bca206935e4701b5457ff057851c027344ea39a23c95edf32ee59ce561138ab6a91d706824e591ea05530872c232a0797b5ea635acbd4bf630e806f42e333dbfc93ba7447bf22a293e25f61482b8561f939be953511f728046f46a0a07fb2d8389999c2d1415b8f9d0f9b4ed52e463b137035aa9f06efd5513eb41405dda27ed398ab4a7be6615e1eac7488b3d6a61e0c9defe5a7cb857ae1c1e62272f961702150becbe10a69faad979d8545b5503bbaae562e143f13a9346f54c06df76ba1300f0a5825a0fb604e9f94e9ea309a7b0450656c33e094d16068e3c89f4db21642398ad0325bd035c7109cf7e710e6606aaaa45168d9d8bb37b33c7502b5a19efbde932b281ef5cad1646ed2237e0f34af0a6efa1a04623dd23ca354caa32674f278e63fde6e1d81209fe13b70cf507de27962e312c17018fb9b98683f63e2a3b1e6a47d66df2d82fed5390fb8015c35e647031d479b083edd1abe890de4f0bbeb33b806b18b9bbc72c8e4c60b58a697a79632139f6bf6daa50f7c092b49e09253f666767db3ed59e766a93153158edff2a5b2624b46a16b910e025051ab0221b9ca087caa4c1d2b03a69f769031cad360b7ab475b44678c655c7da2f963c8bc3dd624abe7a874fc6ba55e382b36e9f8aba6544f6d01e05c8d919615bb1e4924aedf417069560055017dfdc1f77ffa7e755a91f072f1f367fcde4055ec095084c84bf709fa40b7b0a28d85a68af3c96b3f63c0ec992e444ce1dce0b2957472ef20318411b02b03dd7f086983b7b1943a20"}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x11) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) r2 = socket(0x24, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="896d75f2531b121c6f634784d39dddf2", 0x10) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00cf4a000000275b277a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz1\x00', 0x200002, 0x0) r6 = openat$hwrng(0xffffff9c, &(0x7f0000001c00), 0x438400, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r6, r6, 0x22}, 0x20) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000880)={"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"}) 0s ago: executing program 4 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x40080, 0x9) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="6b2cef72", 0x4}], 0x1, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r6 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x1) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r7, 0x1, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$P9_RLERRORu(r8, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$inet6(0xa, 0x2, 0x0) dup(r9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 91.822734][ T5795] cgroup: Unknown subsys name 'net' [ 92.064115][ T5795] cgroup: Unknown subsys name 'cpuset' [ 92.117148][ T5795] cgroup: Unknown subsys name 'rlimit' [ 92.154052][ T36] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 94.239930][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.936291][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.943826][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.953431][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.958809][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.960829][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.961437][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.964371][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.964839][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.991507][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.996903][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.018743][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.074430][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.098428][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.101091][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.123599][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.125238][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.150112][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.181736][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.186192][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.203299][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.214530][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.227685][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.229309][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.261825][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.263223][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.330120][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 98.498879][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 98.580748][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 98.597391][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 98.666131][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 98.871331][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.872286][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.872456][ T5808] bridge_slave_0: entered allmulticast mode [ 98.874555][ T5808] bridge_slave_0: entered promiscuous mode [ 98.951024][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.951122][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.951541][ T5808] bridge_slave_1: entered allmulticast mode [ 98.953499][ T5808] bridge_slave_1: entered promiscuous mode [ 99.089244][ T5819] Bluetooth: hci0: command tx timeout [ 99.108321][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.108863][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.109060][ T5809] bridge_slave_0: entered allmulticast mode [ 99.111105][ T5809] bridge_slave_0: entered promiscuous mode [ 99.199670][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.199868][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.200016][ T5809] bridge_slave_1: entered allmulticast mode [ 99.201950][ T5809] bridge_slave_1: entered promiscuous mode [ 99.224262][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.224981][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.225306][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.225811][ T5812] bridge_slave_0: entered allmulticast mode [ 99.246734][ T5819] Bluetooth: hci3: command tx timeout [ 99.246741][ T5817] Bluetooth: hci1: command tx timeout [ 99.256357][ T5812] bridge_slave_0: entered promiscuous mode [ 99.272617][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.272955][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.273442][ T5810] bridge_slave_0: entered allmulticast mode [ 99.293243][ T5810] bridge_slave_0: entered promiscuous mode [ 99.327862][ T5817] Bluetooth: hci4: command tx timeout [ 99.327882][ T5819] Bluetooth: hci2: command tx timeout [ 99.352130][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.352460][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.352580][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.352963][ T5812] bridge_slave_1: entered allmulticast mode [ 99.354782][ T5812] bridge_slave_1: entered promiscuous mode [ 99.360499][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.360798][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.361306][ T5810] bridge_slave_1: entered allmulticast mode [ 99.383704][ T5810] bridge_slave_1: entered promiscuous mode [ 99.403715][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.403967][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.404526][ T5811] bridge_slave_0: entered allmulticast mode [ 99.425494][ T5811] bridge_slave_0: entered promiscuous mode [ 99.502397][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.502535][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.502714][ T5811] bridge_slave_1: entered allmulticast mode [ 99.504597][ T5811] bridge_slave_1: entered promiscuous mode [ 99.532310][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.603031][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.605537][ T5808] team0: Port device team_slave_0 added [ 99.622237][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.637094][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.688850][ T5808] team0: Port device team_slave_1 added [ 99.692012][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.695033][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.722882][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.792425][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.794489][ T5809] team0: Port device team_slave_0 added [ 99.868524][ T5809] team0: Port device team_slave_1 added [ 99.869539][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.869552][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.869572][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.873407][ T5812] team0: Port device team_slave_0 added [ 99.876234][ T5810] team0: Port device team_slave_0 added [ 99.968514][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.968527][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.968548][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.971056][ T5812] team0: Port device team_slave_1 added [ 99.973091][ T5810] team0: Port device team_slave_1 added [ 99.975197][ T5811] team0: Port device team_slave_0 added [ 100.083943][ T5811] team0: Port device team_slave_1 added [ 100.084766][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.084778][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.084799][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.169541][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.169555][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.169575][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.171533][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.171544][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.171564][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.173251][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.173262][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.173282][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.326051][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.326065][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.326086][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.365743][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.365821][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.365909][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.758473][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.758487][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.758508][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.843943][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.843957][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.843977][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.890197][ T5808] hsr_slave_0: entered promiscuous mode [ 100.899341][ T5808] hsr_slave_1: entered promiscuous mode [ 101.011237][ T5809] hsr_slave_0: entered promiscuous mode [ 101.012278][ T5809] hsr_slave_1: entered promiscuous mode [ 101.013021][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 101.013103][ T5809] Cannot create hsr debugfs directory [ 101.096771][ T5812] hsr_slave_0: entered promiscuous mode [ 101.098288][ T5812] hsr_slave_1: entered promiscuous mode [ 101.099192][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 101.099211][ T5812] Cannot create hsr debugfs directory [ 101.132690][ T5810] hsr_slave_0: entered promiscuous mode [ 101.133699][ T5810] hsr_slave_1: entered promiscuous mode [ 101.134401][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 101.134418][ T5810] Cannot create hsr debugfs directory [ 101.166702][ T5819] Bluetooth: hci0: command tx timeout [ 101.199639][ T5811] hsr_slave_0: entered promiscuous mode [ 101.200616][ T5811] hsr_slave_1: entered promiscuous mode [ 101.201277][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 101.201295][ T5811] Cannot create hsr debugfs directory [ 101.326630][ T5819] Bluetooth: hci3: command tx timeout [ 101.326663][ T5819] Bluetooth: hci1: command tx timeout [ 101.407647][ T5817] Bluetooth: hci2: command tx timeout [ 101.407681][ T5817] Bluetooth: hci4: command tx timeout [ 102.276105][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.334302][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.344474][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.373484][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.374904][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.413254][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.438724][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.472466][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.616276][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.651754][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.664216][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.691250][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.693454][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.718554][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.743386][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.780672][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.906074][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.949906][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.960947][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.991567][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.007719][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.050784][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.080045][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.113377][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.248760][ T5819] Bluetooth: hci0: command tx timeout [ 103.297849][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.336799][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.358332][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.390554][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.408758][ T5819] Bluetooth: hci1: command tx timeout [ 103.408792][ T5819] Bluetooth: hci3: command tx timeout [ 103.445817][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.489216][ T5817] Bluetooth: hci4: command tx timeout [ 103.489258][ T5817] Bluetooth: hci2: command tx timeout [ 103.511637][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.551294][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.594626][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.640596][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.759397][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.795521][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.843876][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.871420][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.883867][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.910459][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.913862][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.916071][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.953029][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.023695][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.023985][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.083973][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.084271][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.108820][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.223266][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.262797][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.263042][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.296299][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.339256][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.339424][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.436063][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.492664][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.492885][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.568951][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.620847][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.620996][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.723153][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.797664][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.797809][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.826341][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.871774][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.871941][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.003899][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.092193][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.092413][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.208736][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.212023][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.212256][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.326612][ T5819] Bluetooth: hci0: command tx timeout [ 105.482965][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.486727][ T5819] Bluetooth: hci3: command tx timeout [ 105.486762][ T5819] Bluetooth: hci1: command tx timeout [ 105.566840][ T5817] Bluetooth: hci2: command tx timeout [ 105.566875][ T5817] Bluetooth: hci4: command tx timeout [ 105.671441][ T5808] veth0_vlan: entered promiscuous mode [ 105.720766][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.757497][ T5808] veth1_vlan: entered promiscuous mode [ 105.916785][ T5809] veth0_vlan: entered promiscuous mode [ 105.944586][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.019350][ T5809] veth1_vlan: entered promiscuous mode [ 106.115336][ T5808] veth0_macvtap: entered promiscuous mode [ 106.154275][ T5808] veth1_macvtap: entered promiscuous mode [ 106.264335][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.290188][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.308838][ T5809] veth0_macvtap: entered promiscuous mode [ 106.340655][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.345374][ T5809] veth1_macvtap: entered promiscuous mode [ 106.393157][ T5811] veth0_vlan: entered promiscuous mode [ 106.405091][ T3574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.425275][ T3574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.443313][ T3574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.484105][ T3574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.509440][ T5811] veth1_vlan: entered promiscuous mode [ 106.575033][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.658459][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.785647][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.818432][ T5810] veth0_vlan: entered promiscuous mode [ 106.835612][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.886028][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.905985][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.923439][ T5812] veth0_vlan: entered promiscuous mode [ 107.023446][ T5810] veth1_vlan: entered promiscuous mode [ 107.131376][ T5812] veth1_vlan: entered promiscuous mode [ 107.179937][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.179964][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.239429][ T5811] veth0_macvtap: entered promiscuous mode [ 107.391788][ T5811] veth1_macvtap: entered promiscuous mode [ 107.464267][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.464289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.640140][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.668323][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.668346][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.709930][ T5810] veth0_macvtap: entered promiscuous mode [ 107.733376][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.734813][ T5812] veth0_macvtap: entered promiscuous mode [ 107.786941][ T5810] veth1_macvtap: entered promiscuous mode [ 107.835611][ T5812] veth1_macvtap: entered promiscuous mode [ 107.846511][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.877447][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.901841][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.937484][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.938721][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.938740][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.131501][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.147242][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.243793][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.393670][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.502600][ T1281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.551891][ T1281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.605703][ T1281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.622734][ T1281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.661845][ T1281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.664240][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.664258][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.713047][ T1281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.718679][ T1281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.774567][ T1281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.937719][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.433537][ T31] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 109.433569][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.433590][ T31] usb 2-1: config 1 has no interface number 2 [ 109.433650][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.433677][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 109.497940][ T31] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 109.497973][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.497995][ T31] usb 2-1: Product: syz [ 109.498010][ T31] usb 2-1: Manufacturer: syz [ 109.498026][ T31] usb 2-1: SerialNumber: syz [ 109.609678][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.609701][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.309727][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.309747][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.676351][ T31] usb 2-1: unit 4 not found! [ 111.678225][ T31] usb 2-1: unit 2 not found! [ 111.762539][ T31] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 111.762587][ T31] snd-usb-audio 2-1:1.255: probe with driver snd-usb-audio failed with error -22 [ 111.765048][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.765067][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.888269][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.056949][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.056972][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.416037][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.416061][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.512212][ T31] usb 2-1: USB disconnect, device number 2 [ 116.377992][ T5895] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.684620][ T5895] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.684683][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.684713][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.684738][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.688740][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.688775][ T5895] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.688800][ T5895] usb 5-1: Manufacturer: syz [ 118.509482][ T5895] usb 5-1: config 0 descriptor?? [ 119.065803][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 119.065945][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 120.170155][ T5895] usb 5-1: USB disconnect, device number 2 [ 121.216583][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.386551][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 121.389738][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 121.389772][ T31] usb 2-1: config 0 has no interface number 0 [ 121.392485][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 121.392516][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.392537][ T31] usb 2-1: Product: syz [ 121.392553][ T31] usb 2-1: Manufacturer: syz [ 121.392569][ T31] usb 2-1: SerialNumber: syz [ 121.481285][ T31] usb 2-1: config 0 descriptor?? [ 123.182026][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.385550][ T5894] usb 3-1: config 4 has an invalid interface number: 74 but max is 0 [ 123.385578][ T5894] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 123.385598][ T5894] usb 3-1: config 4 has no interface number 0 [ 123.385697][ T5894] usb 3-1: config 4 interface 74 altsetting 6 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 123.385726][ T5894] usb 3-1: config 4 interface 74 altsetting 6 endpoint 0xF has invalid wMaxPacketSize 0 [ 123.385749][ T5894] usb 3-1: config 4 interface 74 has no altsetting 0 [ 123.472732][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 123.472762][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.475219][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 123.509635][ T5894] usb 3-1: New USB device found, idVendor=1f7b, idProduct=550c, bcdDevice=46.bd [ 123.509681][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.509702][ T5894] usb 3-1: Product: syz [ 123.509716][ T5894] usb 3-1: Manufacturer: syz [ 123.509730][ T5894] usb 3-1: SerialNumber: syz [ 123.516136][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 123.582195][ T31] usb 2-1: USB disconnect, device number 3 [ 124.054270][ T5894] usb 3-1: USB disconnect, device number 2 [ 128.029628][ T6101] binder: 6099:6101 ioctl c0306201 0 returned -14 [ 128.072721][ T6101] binder: 6099:6101 ioctl c0306201 2000000001c0 returned -14 [ 128.276744][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.483709][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 131.403773][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.404916][ T5894] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.404964][ T5894] usb 4-1: can't read configurations, error -71 [ 133.537708][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.537808][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.236513][ T1006] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.396517][ T1006] usb 2-1: Using ep0 maxpacket: 32 [ 134.428426][ T1006] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.428458][ T1006] usb 2-1: config 0 has no interface number 0 [ 134.428505][ T1006] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.428535][ T1006] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.428575][ T1006] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 134.428601][ T1006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.542618][ T1006] usb 2-1: config 0 descriptor?? [ 135.056568][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.206625][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 135.219130][ T9] usb 5-1: config 8 has an invalid interface number: 37 but max is 0 [ 135.219160][ T9] usb 5-1: config 8 has no interface number 0 [ 135.219209][ T9] usb 5-1: config 8 interface 37 altsetting 255 bulk endpoint 0xB has invalid maxpacket 64 [ 135.219303][ T9] usb 5-1: config 8 interface 37 altsetting 255 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 135.219333][ T9] usb 5-1: config 8 interface 37 has no altsetting 0 [ 135.225307][ T9] usb 5-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=2b.c9 [ 135.225779][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.225804][ T9] usb 5-1: Product: syz [ 135.225819][ T9] usb 5-1: Manufacturer: syz [ 135.225835][ T9] usb 5-1: SerialNumber: syz [ 135.832507][ T6159] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 136.100643][ T9] ums-sddr55 5-1:8.37: USB Mass Storage device detected [ 136.713936][ T1006] uclogic 0003:28BD:0094.0001: pen parameters not found [ 136.713973][ T1006] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring [ 139.141190][ T1006] usb 2-1: USB disconnect, device number 4 [ 140.076943][ T9] usb 5-1: USB disconnect, device number 3 [ 140.376498][ T5935] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.387493][ T6184] process 'syz.2.85' launched '/dev/fd/5' with NULL argv: empty string added [ 140.529822][ T5935] usb 4-1: config 0 has no interfaces? [ 140.545901][ T5935] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 140.545939][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.545964][ T5935] usb 4-1: Product: syz [ 140.545982][ T5935] usb 4-1: Manufacturer: syz [ 140.546000][ T5935] usb 4-1: SerialNumber: syz [ 141.594979][ T5935] usb 4-1: config 0 descriptor?? [ 141.884456][ T31] usb 4-1: USB disconnect, device number 4 [ 142.616244][ T6210] Zero length message leads to an empty skb [ 148.818667][ T6246] binfmt_misc: register: failed to install interpreter file ./file0 [ 177.359539][ T819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 177.506499][ T819] usb 1-1: Using ep0 maxpacket: 16 [ 177.509302][ T819] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 177.509330][ T819] usb 1-1: config 1 has an invalid descriptor of length 50, skipping remainder of the config [ 177.509353][ T819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.512951][ T819] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.512981][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.513003][ T819] usb 1-1: Product: syz [ 177.513019][ T819] usb 1-1: Manufacturer: syz [ 177.513035][ T819] usb 1-1: SerialNumber: syz [ 177.632956][ T819] usb 1-1: 0:2 : does not exist [ 177.885985][ T819] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 178.058103][ T819] usb 1-1: USB disconnect, device number 2 [ 179.221107][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.875994][ T819] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 186.625919][ T819] usb 3-1: device descriptor read/all, error -110 [ 186.766679][ T819] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 186.896565][ T819] usb 3-1: device descriptor read/64, error -32 [ 187.006871][ T819] usb usb3-port1: attempt power cycle [ 188.118654][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.168539][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.175371][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.195214][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.213002][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.336573][ T819] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 188.366893][ T819] usb 3-1: device descriptor read/8, error -32 [ 188.606505][ T819] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 188.626740][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 188.626874][ T819] usb 3-1: device descriptor read/8, error -32 [ 188.746824][ T819] usb usb3-port1: unable to enumerate USB device [ 188.851125][ T6404] raw-gadget.0 gadget.2: failed to queue disconnect event [ 191.300658][ T5819] Bluetooth: hci5: command tx timeout [ 193.896517][ T5819] Bluetooth: hci5: command tx timeout [ 194.535922][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.535997][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.493097][ T5819] Bluetooth: hci5: command tx timeout [ 198.090437][ T1120] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.622743][ T5819] Bluetooth: hci5: command tx timeout [ 200.219903][ T1120] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.688376][ T5819] Bluetooth: hci5: command tx timeout [ 202.060796][ T1120] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.292151][ T1120] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.301115][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 213.013560][ T6732] capability: warning: `syz.2.251' uses deprecated v2 capabilities in a way that may be insecure [ 213.614888][ T6716] syz.2.251 (6716) used greatest stack depth: 18400 bytes left [ 216.409812][ T1120] bridge_slave_1: left allmulticast mode [ 216.409902][ T1120] bridge_slave_1: left promiscuous mode [ 216.410384][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.633713][ T1120] bridge_slave_0: left allmulticast mode [ 216.633746][ T1120] bridge_slave_0: left promiscuous mode [ 216.633995][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.316393][ T6775] binfmt_misc: register: failed to install interpreter file ./file0 [ 219.417147][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.477395][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.520834][ T1120] bond0 (unregistering): Released all slaves [ 223.294808][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 223.295126][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 223.295278][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 223.295407][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 223.365390][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.365538][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.366309][ T6439] bridge_slave_0: entered allmulticast mode [ 223.389465][ T6439] bridge_slave_0: entered promiscuous mode [ 223.544841][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.544998][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.545237][ T6439] bridge_slave_1: entered allmulticast mode [ 223.657327][ T6439] bridge_slave_1: entered promiscuous mode [ 223.955016][ T6823] overlayfs: failed to resolve './file0': -2 [ 224.036565][ T6011] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 224.036585][ T6011] #PF: supervisor read access in kernel mode [ 224.036597][ T6011] #PF: error_code(0x0000) - not-present page [ 224.036609][ T6011] PGD 8000000042778067 P4D 8000000042778067 PUD 0 [ 224.036647][ T6011] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 224.036680][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.036705][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.036718][ T6011] Workqueue: usb_hub_wq hub_event [ 224.036744][ T6011] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 224.036781][ T6011] Code: 8e 8d 4c 8b b8 08 b4 72 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 a0 56 02 8e 4d 8b 3f 49 81 ff a0 56 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 91 dc e6 02 84 c0 74 0e 49 8b 07 49 [ 224.036799][ T6011] RSP: 0018:ffffc900053e77c8 EFLAGS: 00010207 [ 224.036817][ T6011] RAX: 0000000000000000 RBX: ffff8880281a5c40 RCX: 0000000000000000 [ 224.036832][ T6011] RDX: 000000004210cf00 RSI: 0000000000000001 RDI: ffffffff8ba73e00 [ 224.036845][ T6011] RBP: 0000000000100000 R08: ffffffff8b2ee740 R09: ffffffff8dfc80c0 [ 224.036860][ T6011] R10: dffffc0000000000 R11: fffffbfff1f178bf R12: 0000000000000002 [ 224.036874][ T6011] R13: 0000000000000001 R14: ffff888035baf500 R15: 0000000000000000 [ 224.036888][ T6011] FS: 0000000000000000(0000) GS:ffff8881260fe000(0000) knlGS:0000000000000000 [ 224.036904][ T6011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.036918][ T6011] CR2: 0000000000000010 CR3: 000000002c136000 CR4: 00000000003526f0 [ 224.036936][ T6011] Call Trace: [ 224.036944][ T6011] [ 224.036955][ T6011] hub_event+0x150/0x4f60 [ 224.036982][ T6011] ? __lock_acquire+0x6b5/0x2cf0 [ 224.037007][ T6011] ? look_up_lock_class+0x57/0x110 [ 224.037035][ T6011] ? __lock_acquire+0x6b5/0x2cf0 [ 224.037073][ T6011] ? lock_acquire+0x106/0x350 [ 224.037099][ T6011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.037122][ T6011] ? __pfx_hub_event+0x10/0x10 [ 224.037146][ T6011] ? process_scheduled_works+0xa70/0x1860 [ 224.037184][ T6011] ? process_scheduled_works+0xa70/0x1860 [ 224.037217][ T6011] ? process_scheduled_works+0xa70/0x1860 [ 224.037252][ T6011] process_scheduled_works+0xb5d/0x1860 [ 224.037301][ T6011] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.037338][ T6011] ? assign_work+0x3d5/0x5e0 [ 224.037372][ T6011] worker_thread+0xa53/0xfc0 [ 224.037406][ T6011] kthread+0x388/0x470 [ 224.037431][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 224.037449][ T6011] ? __pfx_kthread+0x10/0x10 [ 224.037475][ T6011] ret_from_fork+0x514/0xb70 [ 224.037497][ T6011] ? __pfx_ret_from_fork+0x10/0x10 [ 224.037517][ T6011] ? __switch_to+0xc79/0x1410 [ 224.037547][ T6011] ? __pfx_kthread+0x10/0x10 [ 224.037572][ T6011] ret_from_fork_asm+0x1a/0x30 [ 224.037604][ T6011] [ 224.037612][ T6011] Modules linked in: [ 224.037637][ T6011] CR2: 0000000000000010 [ 224.037652][ T6011] ---[ end trace 0000000000000000 ]--- [ 224.037663][ T6011] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 224.037698][ T6011] Code: 8e 8d 4c 8b b8 08 b4 72 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 a0 56 02 8e 4d 8b 3f 49 81 ff a0 56 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 91 dc e6 02 84 c0 74 0e 49 8b 07 49 [ 224.037716][ T6011] RSP: 0018:ffffc900053e77c8 EFLAGS: 00010207 [ 224.037733][ T6011] RAX: 0000000000000000 RBX: ffff8880281a5c40 RCX: 0000000000000000 [ 224.037747][ T6011] RDX: 000000004210cf00 RSI: 0000000000000001 RDI: ffffffff8ba73e00 [ 224.037762][ T6011] RBP: 0000000000100000 R08: ffffffff8b2ee740 R09: ffffffff8dfc80c0 [ 224.037777][ T6011] R10: dffffc0000000000 R11: fffffbfff1f178bf R12: 0000000000000002 [ 224.037791][ T6011] R13: 0000000000000001 R14: ffff888035baf500 R15: 0000000000000000 [ 224.037805][ T6011] FS: 0000000000000000(0000) GS:ffff8881260fe000(0000) knlGS:0000000000000000 [ 224.037822][ T6011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.037837][ T6011] CR2: 0000000000000010 CR3: 000000002c136000 CR4: 00000000003526f0 [ 224.037857][ T6011] Kernel panic - not syncing: Fatal exception [ 224.038019][ T6011] Kernel Offset: disabled