last executing test programs: 9m11.640612727s ago: executing program 32 (id=23): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sw_sync_info(0xffffff9c, &(0x7f00000003c0), 0x81, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendmsg$can_raw(r6, &(0x7f0000000080)={&(0x7f0000000180), 0x10, &(0x7f0000000140)={0x0}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2b, 0xfffffffb, 0xa00001, 0x1, 0xc7, 0x1, 0x61, 0x0, 0x0, 0x10, 0x3}}, 0x50) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r2) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12004, 0x8000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040881}, 0x4008000) 8m16.11613439s ago: executing program 33 (id=147): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x1000a8, &(0x7f0000000180)={[{@dax_always}]}, 0x4, 0x50f, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f00000001c0)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a528070679baf75e3a4f87987e5460c109d882afd2c2bfb760eaaae9b0710000", @ANYRES16=0x0], 0x1, 0x1a4, &(0x7f0000000700)="$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") pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 8m13.762684522s ago: executing program 0 (id=184): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_setup(0x5e6f, &(0x7f0000000380)={0x0, 0x850c, 0x200, 0x2, 0x127}, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f00001f9000/0x1000)=nil, 0x1000, 0x3000002, 0x100010, 0xffffffffffffffff, 0xcdabd000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1c010}, 0x20000000) close(r4) 8m9.142527338s ago: executing program 0 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="4a000e0080000000ffffffffffff0802110000005a3c4caeb92900000000000000000000070001000406f0027f0006a706020600250301ae0872060303030303037107ff000101ff8e08000020000f002d1a00400d7f00000000000000460008000d0000000100050000000508002600"], 0xa0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 8m7.318046764s ago: executing program 0 (id=196): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x8) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8m6.517764629s ago: executing program 0 (id=199): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x13, 0x400, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 8m4.039697193s ago: executing program 0 (id=203): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x76bc, 0x8000) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r1, 0x0, 0x7fff, 'syz1\x00', 0x0}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x30000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x100078}, 0x20) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010026"], 0x1c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000300)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 8m3.189722684s ago: executing program 0 (id=206): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x804000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='stack\x00') read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x181f) close(0xffffffffffffffff) 7m51.41379484s ago: executing program 34 (id=197): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0x80) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) r7 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x60c01, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 7m46.977437109s ago: executing program 35 (id=206): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x804000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='stack\x00') read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x181f) close(0xffffffffffffffff) 6m40.254520707s ago: executing program 3 (id=309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000006c0)={{0x2, 0xffffffff, 0xd, 0x8, 0x4, 0x7}, 0x104, [0xfffff001, 0x1, 0x5, 0xff, 0xf, 0x3, 0xb0ef, 0x6, 0x6, 0x80000000, 0xfff, 0x7, 0x7f, 0x4, 0x4, 0x2, 0x3, 0x3, 0x2, 0x81, 0x0, 0x6, 0x7, 0xf0, 0x800, 0x5, 0x0, 0x4, 0x3, 0xeb, 0xacd, 0x390d, 0x9, 0x7, 0x40000, 0x9, 0x1fe, 0x20, 0xf, 0x6, 0x8, 0x1ff, 0x6, 0x4, 0x6d4, 0x3ff, 0x1db, 0x5, 0x200, 0x2, 0x200, 0xfffffff9, 0x3ff, 0xae15, 0x1ffe000, 0x9, 0x1, 0x0, 0x826, 0x89, 0x1, 0x1, 0x9, 0x80, 0xf, 0x4, 0x9, 0x1, 0xb, 0x3, 0x6, 0x7, 0xf6bf, 0x3, 0x1, 0x2, 0x7, 0x672ad39f, 0x8, 0x80000001, 0x4, 0x3, 0x7, 0x10001, 0x1, 0x8, 0x7, 0x16, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x9, 0x5, 0x7, 0x81, 0x6, 0x0, 0x7f, 0x2, 0x7, 0x8, 0xfffd, 0x8001, 0x0, 0x9, 0x4, 0x6, 0x6, 0x6, 0x401, 0x1, 0x7fffffff, 0xf43, 0x8000, 0x0, 0x6, 0x4, 0x31, 0x9, 0xe1df8dc, 0x5, 0x8, 0x5, 0x3, 0x4, 0x7, 0x6, 0x81, 0xffffffff, 0x4, 0x0, 0x5, 0x100, 0x0, 0x167, 0x10, 0x3, 0x3, 0x3, 0x6, 0xb96, 0x1ff, 0x19db1239, 0x2, 0x4, 0x5, 0x2, 0xd, 0x100, 0x80000000, 0x5, 0x3, 0x400, 0x7fffffff, 0x6, 0x1, 0x4, 0x9, 0x81, 0x5, 0x7, 0x8, 0xa, 0xaf, 0x4, 0x35f4, 0xfff, 0x4, 0x8000, 0x5, 0x9, 0x4, 0x40, 0x3, 0x5, 0x0, 0x7, 0x7, 0xff, 0x1ff, 0x4, 0x3073, 0xfffffffc, 0x2, 0x10001, 0x5, 0x5, 0x0, 0x80, 0x9, 0xf8e0, 0x2, 0xfffffffa, 0x3, 0x4, 0x1, 0x4, 0x80000000, 0x2824, 0x8, 0x9d, 0x7f, 0x7ff, 0x4, 0x5, 0x600000, 0x21, 0x5, 0xfffffffe, 0xffff, 0x34a5, 0x9, 0xbcfd, 0x7, 0x5, 0x8, 0x7, 0x40, 0x8000, 0xe, 0xc32, 0x5, 0x0, 0x7ff, 0x3, 0x1736, 0x4, 0x8, 0x7, 0x7, 0x5, 0x3, 0x2, 0xc96, 0x9, 0x3, 0x28, 0x28b4f571, 0x33, 0x3ff, 0x2, 0xae, 0x2, 0x51, 0xe239, 0x1fffe, 0x4, 0x3, 0x2, 0x9, 0x1000, 0x27e, 0xfd9, 0xc48ff3b, 0x0, 0x7, 0x6, 0x5, 0x5, 0x5, 0x7ff, 0x63b, 0x0, 0x9, 0x7, 0xbf, 0x2, 0xfffffff7, 0x8000, 0x4, 0x70, 0x4, 0xfffffff8, 0x7, 0x7, 0x1460, 0x2, 0x0, 0x7, 0x800, 0x4, 0x7, 0x0, 0x9, 0x1, 0x9, 0x1, 0x9, 0x80, 0x4, 0x5, 0x1000, 0x1a4, 0x5, 0x4, 0x7fffffff, 0x6c7, 0x100, 0xffffff01, 0x6, 0x400, 0x0, 0xfff, 0x8, 0x8, 0x2, 0x9, 0x8, 0x2, 0x6, 0x38000000, 0x1, 0xe48e, 0x7, 0x8, 0x6, 0x8, 0x9, 0x1ff, 0x401, 0x3, 0x7, 0xf, 0x10000, 0x0, 0x6, 0x10, 0x9, 0xce, 0x639, 0x40, 0x10000, 0x7, 0xad, 0x7, 0x4, 0x5, 0xccb, 0xfffffffa, 0xd, 0x80, 0x0, 0x6, 0x5, 0x8c2bfa9d, 0x0, 0x3, 0x8, 0x5, 0x1, 0x8001, 0x401, 0x8, 0xb, 0x4, 0xa0000000, 0x2, 0x9, 0x7ff, 0x4, 0x9, 0x7, 0x1, 0x0, 0x8001, 0x0, 0x4, 0x7f, 0xfffffffd, 0xcfa, 0x9, 0xfffffffb, 0x8000, 0x0, 0x4, 0x6, 0x5, 0x6baf, 0x3, 0xffffffff, 0x9, 0x7fff, 0x200, 0x7, 0x8, 0xb, 0x7, 0x8, 0x0, 0x0, 0x9, 0x1, 0x4, 0x0, 0x7, 0x4, 0xffffffff, 0x3, 0x4, 0x81, 0x7, 0x2, 0xb, 0x5, 0x401, 0x8, 0x2, 0x816, 0x6, 0x1, 0x6, 0x7, 0xfffffff7, 0x7ff, 0xfffffc00, 0x491, 0x3, 0x2, 0x9, 0x3, 0xa, 0x3, 0x8001, 0x9, 0xa, 0x10001, 0x7, 0x9b, 0x0, 0xff, 0xa, 0xf, 0x4e980e24, 0x7, 0x3, 0x3, 0x6, 0xd429, 0x1, 0x7fff, 0xffff0000, 0x42, 0x4, 0x6, 0x16b, 0xf, 0x3, 0x8, 0xe, 0x401, 0x8, 0x200, 0x2994, 0x3, 0x2, 0xc178, 0xa54a, 0x3ff, 0x67, 0x1000, 0x9, 0x7, 0x9, 0x0, 0x1, 0x84d9, 0x7a, 0x3, 0x8001, 0x0, 0x9, 0x7, 0x3, 0xa0, 0x2, 0x4, 0x4, 0x4, 0x8, 0x0, 0x5, 0x401, 0x8, 0x5e, 0x9, 0x8, 0xabd, 0x0, 0x5956, 0x7, 0x3, 0x5, 0x10001, 0xfffffffd, 0x6, 0xa, 0x0, 0x10000, 0x1, 0x83, 0x5, 0xa29, 0x3, 0x11d, 0xb7, 0x7, 0x9, 0x0, 0x7, 0x4, 0x1, 0x6, 0x4, 0x8000, 0x5, 0x401, 0x6, 0xfffffff8, 0x2, 0xb398, 0x4, 0x8, 0x74, 0x2, 0x0, 0x5, 0x7, 0x7fffffff, 0x8001, 0x4, 0xe, 0x5, 0x5, 0x80000003, 0x1, 0x5, 0x7, 0x200, 0x2, 0x514, 0x0, 0xed, 0x10000, 0x5, 0x1, 0x9, 0xffff, 0x9, 0x1, 0x3, 0x6, 0x1b5, 0x9, 0x7d00, 0x5, 0x2, 0x2, 0x77c, 0x2, 0x81, 0x6, 0x8, 0xff93, 0x2, 0x0, 0x6, 0x0, 0x6, 0x8000, 0x7, 0x5, 0x6, 0xff, 0x4, 0x3, 0x7, 0xfffffe01, 0xfff, 0x9, 0x6, 0x5, 0x3, 0xc, 0x1ff, 0xb, 0x1000, 0x6, 0x3, 0x5, 0x4, 0x5, 0xb89b, 0x7fff, 0x8, 0x100, 0xfffffffb, 0x5, 0x7a1f32f3, 0x6aa, 0x6, 0x5, 0x3, 0x0, 0xb17, 0x9, 0x1, 0x3, 0x4, 0x1, 0x2, 0x6, 0x1, 0x7, 0x5, 0x0, 0x8, 0x2, 0x7, 0x3, 0x4000000, 0x9, 0x5c, 0x9, 0x716, 0x2, 0x9, 0x9, 0x68, 0x3, 0xb65, 0x7, 0x89, 0x3, 0x0, 0x2, 0x7, 0x3000, 0x8, 0x1, 0x6, 0x7ff, 0x5, 0x2, 0x9, 0x2, 0x1, 0x4, 0x4, 0x3, 0x4e5a, 0x0, 0xffffff00, 0x3, 0x7, 0xfffffc01, 0xc8, 0xfffffff7, 0x4, 0x1, 0x1, 0x5, 0x7f, 0x2, 0x2, 0xffffffff, 0x2, 0x7fff, 0x92b7, 0x988, 0xffffffff, 0x3, 0x7, 0x0, 0x2eb, 0xffffffff, 0xbdf, 0x1000, 0x0, 0x1, 0x10000000, 0x4, 0x2, 0xfffffff8, 0x8, 0x6caf4ff7, 0xfffffff7, 0x6, 0x1, 0x7, 0x3, 0xdf, 0x1, 0x7, 0x1, 0x9, 0x10000, 0x0, 0x9e, 0x0, 0x7, 0x1000, 0x1, 0xb, 0x5, 0xe, 0x10000, 0x3, 0x3, 0xfffffff8, 0x7, 0x5, 0x200, 0x2273, 0x6, 0x6, 0x4, 0x8, 0x6568, 0x59, 0x8, 0x1, 0x9, 0x2000, 0x4, 0xf4, 0x7, 0xc979, 0x96, 0x58, 0x2, 0xe1b, 0x7fff, 0x101, 0x7, 0x7f, 0x7, 0x7, 0x5, 0x4, 0x7, 0x40, 0x7, 0x8, 0xa, 0x1, 0xffff, 0x8001, 0x3, 0xb3, 0x2, 0x1, 0x0, 0x3, 0x401, 0x608ea1b9, 0x4, 0x7, 0x8, 0xffffffff, 0x10, 0x1, 0x7, 0xf09, 0x7, 0x9f0, 0x857, 0x9, 0x3, 0xfffffffb, 0x0, 0x0, 0x4, 0xc, 0x4, 0x8, 0x54, 0x4, 0x81, 0x7, 0x6, 0x6, 0x4, 0x2, 0x9, 0xffff, 0x40, 0x4, 0x9, 0x7, 0x2, 0x40002, 0xfffffffb, 0x1, 0x0, 0x9, 0x1, 0x4, 0x3, 0x8, 0xfffffff8, 0x1, 0xf, 0x2, 0x10, 0x80000000, 0x3, 0x4, 0x0, 0x3, 0x1, 0xfff, 0x5, 0x4, 0x6, 0x4, 0x4c57, 0xce, 0x3, 0x6, 0x8, 0x7, 0x3, 0x6, 0x3, 0x5, 0x0, 0x3, 0xfffffffc, 0xa83, 0x7ff, 0x4, 0x6, 0x7f, 0x6, 0x2, 0x0, 0x5d, 0x3, 0xbb8f, 0x10, 0xffffffde, 0x3, 0x9, 0x5, 0x6, 0x4, 0x5, 0x8, 0x7, 0x4, 0x7, 0x0, 0x9, 0x9, 0x17, 0xe4, 0x0, 0xc, 0x10000, 0x5, 0x6, 0x3a74, 0x3, 0x1, 0xa8, 0x400, 0x8, 0x1, 0x8, 0x6a7a, 0x7fff, 0x0, 0x9, 0x7, 0x1659, 0x4, 0x1, 0x401, 0x0, 0x4e2, 0x8, 0x139c, 0x4ac5, 0x1, 0x1, 0x40, 0x80, 0x5f7c, 0xfffff801, 0x81, 0x8, 0xc61, 0x4, 0x7, 0xfffffffe, 0x1000, 0x1, 0x4, 0xffff, 0x4, 0x0, 0x400, 0x9, 0xfd16, 0xfffffffd, 0x9, 0xf2, 0x4, 0xdc, 0x400, 0x8, 0x0, 0x6c9, 0x10000, 0x8001, 0x6, 0x1, 0x4, 0x1000, 0x3, 0xfffffffc, 0xe, 0x5, 0x6, 0x9, 0x0, 0x8, 0x0, 0x5, 0x7, 0x1, 0x7fffffff, 0xaa78, 0x6, 0x8, 0x81, 0x4, 0x2, 0x4, 0x4, 0x9, 0x9, 0x8, 0xc, 0x1, 0xb, 0xf, 0x1, 0x3ff, 0x2, 0x4, 0xf1b, 0x10000, 0xf, 0x8, 0x3, 0x3, 0xfffffef3, 0x2, 0x7, 0x4, 0x40, 0x2, 0x100, 0x2, 0x4f4, 0xffffff1f, 0x8d7f, 0x8, 0x7fff, 0x7fff, 0xe, 0x8, 0x3, 0x1, 0x9, 0x2, 0x0, 0xece, 0x401, 0x8000, 0xff, 0x36a, 0x9, 0x4, 0xfe, 0x0, 0x2, 0x1, 0x2000003, 0x2, 0x0, 0x6, 0x2, 0x6c18, 0xffffffff, 0x7, 0x4, 0xf83da26a, 0x7, 0x0, 0x5, 0x5, 0xe, 0x4, 0x3, 0x3, 0x7, 0x1, 0x1000, 0x13f0, 0x7, 0x2, 0x3, 0x4, 0x0, 0x28000000, 0x2, 0xe, 0xffff, 0xb, 0x6]}) 6m35.273940137s ago: executing program 3 (id=314): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xdb) 6m34.050669055s ago: executing program 3 (id=317): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m33.163359943s ago: executing program 3 (id=319): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) getpid() mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) 6m31.940113071s ago: executing program 3 (id=323): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000006c0)={{0x2, 0xffffffff, 0xd, 0x8, 0x4, 0x7}, 0x104, [0xfffff001, 0x1, 0x5, 0xff, 0xf, 0x3, 0xb0ef, 0x6, 0x6, 0x80000000, 0xfff, 0x7, 0x7f, 0x4, 0x4, 0x2, 0x3, 0x3, 0x2, 0x81, 0x0, 0x6, 0x7, 0xf0, 0x800, 0x5, 0x0, 0x4, 0x3, 0xeb, 0xacd, 0x390d, 0x9, 0x7, 0x40000, 0x9, 0x1fe, 0x20, 0xf, 0x6, 0x8, 0x1ff, 0x6, 0x4, 0x6d4, 0x3ff, 0x1db, 0x5, 0x200, 0x2, 0x200, 0xfffffff9, 0x3ff, 0xae15, 0x1ffe000, 0x9, 0x1, 0x0, 0x826, 0x89, 0x1, 0x1, 0x9, 0x80, 0xf, 0x4, 0x9, 0x1, 0xb, 0x3, 0x6, 0x7, 0xf6bf, 0x3, 0x1, 0x2, 0x7, 0x672ad39f, 0x8, 0x80000001, 0x4, 0x3, 0x7, 0x10001, 0x1, 0x8, 0x7, 0x16, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x9, 0x5, 0x7, 0x81, 0x6, 0x0, 0x7f, 0x2, 0x7, 0x8, 0xfffd, 0x8001, 0x0, 0x9, 0x4, 0x6, 0x6, 0x6, 0x401, 0x1, 0x7fffffff, 0xf43, 0x8000, 0x0, 0x6, 0x4, 0x31, 0x9, 0xe1df8dc, 0x5, 0x8, 0x5, 0x3, 0x4, 0x7, 0x6, 0x81, 0xffffffff, 0x4, 0x0, 0x5, 0x100, 0x0, 0x167, 0x10, 0x3, 0x3, 0x3, 0x6, 0xb96, 0x1ff, 0x19db1239, 0x2, 0x4, 0x5, 0x2, 0xd, 0x100, 0x80000000, 0x5, 0x3, 0x400, 0x7fffffff, 0x6, 0x1, 0x4, 0x9, 0x81, 0x5, 0x7, 0x8, 0xa, 0xaf, 0x4, 0x35f4, 0xfff, 0x4, 0x8000, 0x5, 0x9, 0x4, 0x40, 0x3, 0x5, 0x0, 0x7, 0x7, 0xff, 0x1ff, 0x4, 0x3073, 0xfffffffc, 0x2, 0x10001, 0x5, 0x5, 0x0, 0x80, 0x9, 0xf8e0, 0x2, 0xfffffffa, 0x3, 0x4, 0x1, 0x4, 0x80000000, 0x2824, 0x8, 0x9d, 0x7f, 0x7ff, 0x4, 0x5, 0x600000, 0x21, 0x5, 0xfffffffe, 0xffff, 0x34a5, 0x9, 0xbcfd, 0x7, 0x5, 0x8, 0x7, 0x40, 0x8000, 0xe, 0xc32, 0x5, 0x0, 0x7ff, 0x3, 0x1736, 0x4, 0x8, 0x7, 0x7, 0x5, 0x3, 0x2, 0xc96, 0x9, 0x3, 0x28, 0x28b4f571, 0x33, 0x3ff, 0x2, 0xae, 0x2, 0x51, 0xe239, 0x1fffe, 0x4, 0x3, 0x2, 0x9, 0x1000, 0x27e, 0xfd9, 0xc48ff3b, 0x0, 0x7, 0x6, 0x5, 0x5, 0x5, 0x7ff, 0x63b, 0x0, 0x9, 0x7, 0xbf, 0x2, 0xfffffff7, 0x8000, 0x4, 0x70, 0x4, 0xfffffff8, 0x7, 0x7, 0x1460, 0x2, 0x0, 0x7, 0x800, 0x4, 0x7, 0x0, 0x9, 0x1, 0x9, 0x1, 0x9, 0x80, 0x4, 0x5, 0x1000, 0x1a4, 0x5, 0x4, 0x7fffffff, 0x6c7, 0x100, 0xffffff01, 0x6, 0x400, 0x0, 0xfff, 0x8, 0x8, 0x2, 0x9, 0x8, 0x2, 0x6, 0x38000000, 0x1, 0xe48e, 0x7, 0x8, 0x6, 0x8, 0x9, 0x1ff, 0x401, 0x3, 0x7, 0xf, 0x10000, 0x0, 0x6, 0x10, 0x9, 0xce, 0x639, 0x40, 0x10000, 0x7, 0xad, 0x7, 0x4, 0x5, 0xccb, 0xfffffffa, 0xd, 0x80, 0x0, 0x6, 0x5, 0x8c2bfa9d, 0x0, 0x3, 0x8, 0x5, 0x1, 0x8001, 0x401, 0x8, 0xb, 0x4, 0xa0000000, 0x2, 0x9, 0x7ff, 0x4, 0x9, 0x7, 0x1, 0x0, 0x8001, 0x0, 0x4, 0x7f, 0xfffffffd, 0xcfa, 0x9, 0xfffffffb, 0x8000, 0x0, 0x4, 0x6, 0x5, 0x6baf, 0x3, 0xffffffff, 0x9, 0x7fff, 0x200, 0x7, 0x8, 0xb, 0x7, 0x8, 0x0, 0x0, 0x9, 0x1, 0x4, 0x0, 0x7, 0x4, 0xffffffff, 0x3, 0x4, 0x81, 0x7, 0x2, 0xb, 0x5, 0x401, 0x8, 0x2, 0x816, 0x6, 0x1, 0x6, 0x7, 0xfffffff7, 0x7ff, 0xfffffc00, 0x491, 0x3, 0x2, 0x9, 0x3, 0xa, 0x3, 0x8001, 0x9, 0xa, 0x10001, 0x7, 0x9b, 0x0, 0xff, 0xa, 0xf, 0x4e980e24, 0x7, 0x3, 0x3, 0x6, 0xd429, 0x1, 0x7fff, 0xffff0000, 0x42, 0x4, 0x6, 0x16b, 0xf, 0x3, 0x8, 0xe, 0x401, 0x8, 0x200, 0x2994, 0x3, 0x2, 0xc178, 0xa54a, 0x3ff, 0x67, 0x1000, 0x9, 0x7, 0x9, 0x0, 0x1, 0x84d9, 0x7a, 0x3, 0x8001, 0x0, 0x9, 0x7, 0x3, 0xa0, 0x2, 0x4, 0x4, 0x4, 0x8, 0x0, 0x5, 0x401, 0x8, 0x5e, 0x9, 0x8, 0xabd, 0x0, 0x5956, 0x7, 0x3, 0x5, 0x10001, 0xfffffffd, 0x6, 0xa, 0x0, 0x10000, 0x1, 0x83, 0x5, 0xa29, 0x3, 0x11d, 0xb7, 0x7, 0x9, 0x0, 0x7, 0x4, 0x1, 0x6, 0x4, 0x8000, 0x5, 0x401, 0x6, 0xfffffff8, 0x2, 0xb398, 0x4, 0x8, 0x74, 0x2, 0x0, 0x5, 0x7, 0x7fffffff, 0x8001, 0x4, 0xe, 0x5, 0x5, 0x80000003, 0x1, 0x5, 0x7, 0x200, 0x2, 0x514, 0x0, 0xed, 0x10000, 0x5, 0x1, 0x9, 0xffff, 0x9, 0x1, 0x3, 0x6, 0x1b5, 0x9, 0x7d00, 0x5, 0x2, 0x2, 0x77c, 0x2, 0x81, 0x6, 0x8, 0xff93, 0x2, 0x0, 0x6, 0x0, 0x6, 0x8000, 0x7, 0x5, 0x6, 0xff, 0x4, 0x3, 0x7, 0xfffffe01, 0xfff, 0x9, 0x6, 0x5, 0x3, 0xc, 0x1ff, 0xb, 0x1000, 0x6, 0x3, 0x5, 0x4, 0x5, 0xb89b, 0x7fff, 0x8, 0x100, 0xfffffffb, 0x5, 0x7a1f32f3, 0x6aa, 0x6, 0x5, 0x3, 0x0, 0xb17, 0x9, 0x1, 0x3, 0x4, 0x1, 0x2, 0x6, 0x1, 0x7, 0x5, 0x0, 0x8, 0x2, 0x7, 0x3, 0x4000000, 0x9, 0x5c, 0x9, 0x716, 0x2, 0x9, 0x9, 0x68, 0x3, 0xb65, 0x7, 0x89, 0x3, 0x0, 0x2, 0x7, 0x3000, 0x8, 0x1, 0x6, 0x7ff, 0x5, 0x2, 0x9, 0x2, 0x1, 0x4, 0x4, 0x3, 0x4e5a, 0x0, 0xffffff00, 0x3, 0x7, 0xfffffc01, 0xc8, 0xfffffff7, 0x4, 0x1, 0x1, 0x5, 0x7f, 0x2, 0x2, 0xffffffff, 0x2, 0x7fff, 0x92b7, 0x988, 0xffffffff, 0x3, 0x7, 0x0, 0x2eb, 0xffffffff, 0xbdf, 0x1000, 0x0, 0x1, 0x10000000, 0x4, 0x2, 0xfffffff8, 0x8, 0x6caf4ff7, 0xfffffff7, 0x6, 0x1, 0x7, 0x3, 0xdf, 0x1, 0x7, 0x1, 0x9, 0x10000, 0x0, 0x9e, 0x0, 0x7, 0x1000, 0x1, 0xb, 0x5, 0xe, 0x10000, 0x3, 0x3, 0xfffffff8, 0x7, 0x5, 0x200, 0x2273, 0x6, 0x6, 0x4, 0x8, 0x6568, 0x59, 0x8, 0x1, 0x9, 0x2000, 0x4, 0xf4, 0x7, 0xc979, 0x96, 0x58, 0x2, 0xe1b, 0x7fff, 0x101, 0x7, 0x7f, 0x7, 0x7, 0x5, 0x4, 0x7, 0x40, 0x7, 0x8, 0xa, 0x1, 0xffff, 0x8001, 0x3, 0xb3, 0x2, 0x1, 0x0, 0x3, 0x401, 0x608ea1b9, 0x4, 0x7, 0x8, 0xffffffff, 0x10, 0x1, 0x7, 0xf09, 0x7, 0x9f0, 0x857, 0x9, 0x3, 0xfffffffb, 0x0, 0x0, 0x4, 0xc, 0x4, 0x8, 0x54, 0x4, 0x81, 0x7, 0x6, 0x6, 0x4, 0x2, 0x9, 0xffff, 0x40, 0x4, 0x9, 0x7, 0x2, 0x40002, 0xfffffffb, 0x1, 0x0, 0x9, 0x1, 0x4, 0x3, 0x8, 0xfffffff8, 0x1, 0xf, 0x2, 0x10, 0x80000000, 0x3, 0x4, 0x0, 0x3, 0x1, 0xfff, 0x5, 0x4, 0x6, 0x4, 0x4c57, 0xce, 0x3, 0x6, 0x8, 0x7, 0x3, 0x6, 0x3, 0x5, 0x0, 0x3, 0xfffffffc, 0xa83, 0x7ff, 0x4, 0x6, 0x7f, 0x6, 0x2, 0x0, 0x5d, 0x3, 0xbb8f, 0x10, 0xffffffde, 0x3, 0x9, 0x5, 0x6, 0x4, 0x5, 0x8, 0x7, 0x4, 0x7, 0x0, 0x9, 0x9, 0x17, 0xe4, 0x0, 0xc, 0x10000, 0x5, 0x6, 0x3a74, 0x3, 0x1, 0xa8, 0x400, 0x8, 0x1, 0x8, 0x6a7a, 0x7fff, 0x0, 0x9, 0x7, 0x1659, 0x4, 0x1, 0x401, 0x0, 0x4e2, 0x8, 0x139c, 0x4ac5, 0x1, 0x1, 0x40, 0x80, 0x5f7c, 0xfffff801, 0x81, 0x8, 0xc61, 0x4, 0x7, 0xfffffffe, 0x1000, 0x1, 0x4, 0xffff, 0x4, 0x0, 0x400, 0x9, 0xfd16, 0xfffffffd, 0x9, 0xf2, 0x4, 0xdc, 0x400, 0x8, 0x0, 0x6c9, 0x10000, 0x8001, 0x6, 0x1, 0x4, 0x1000, 0x3, 0xfffffffc, 0xe, 0x5, 0x6, 0x9, 0x0, 0x8, 0x0, 0x5, 0x7, 0x1, 0x7fffffff, 0xaa78, 0x6, 0x8, 0x81, 0x4, 0x2, 0x4, 0x4, 0x9, 0x9, 0x8, 0xc, 0x1, 0xb, 0xf, 0x1, 0x3ff, 0x2, 0x4, 0xf1b, 0x10000, 0xf, 0x8, 0x3, 0x3, 0xfffffef3, 0x2, 0x7, 0x4, 0x40, 0x2, 0x100, 0x2, 0x4f4, 0xffffff1f, 0x8d7f, 0x8, 0x7fff, 0x7fff, 0xe, 0x8, 0x3, 0x1, 0x9, 0x2, 0x0, 0xece, 0x401, 0x8000, 0xff, 0x36a, 0x9, 0x4, 0xfe, 0x0, 0x2, 0x1, 0x2000003, 0x2, 0x0, 0x6, 0x2, 0x6c18, 0xffffffff, 0x7, 0x4, 0xf83da26a, 0x7, 0x0, 0x5, 0x5, 0xe, 0x4, 0x3, 0x3, 0x7, 0x1, 0x1000, 0x13f0, 0x7, 0x2, 0x3, 0x4, 0x0, 0x28000000, 0x2, 0xe, 0xffff, 0xb, 0x6]}) 6m29.084796755s ago: executing program 3 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010040), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$kcm(0x10, 0x400000002, 0x0) 6m13.594086857s ago: executing program 36 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010040), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$kcm(0x10, 0x400000002, 0x0) 5m48.552030191s ago: executing program 7 (id=381): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x4000080) 5m47.865837228s ago: executing program 7 (id=383): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x820303) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x11, 0x21, 0x10, 0xb95, 0x178a, 0xfc30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}], 0x1, 0x0) 5m45.686396248s ago: executing program 7 (id=388): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xdb) 5m44.571091274s ago: executing program 7 (id=390): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x141002, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x3, 0xc42, 0x0, 0x0}) 5m41.603869453s ago: executing program 7 (id=391): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x4000080) 5m40.881002539s ago: executing program 7 (id=394): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ff63d649", 0x4) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FICLONE(r1, 0x40049409, r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r3 = epoll_create1(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) r7 = epoll_create1(0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r8 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000001c0)) read$FUSE(r8, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f0000000000)='fdinfo/4\x00') preadv(r10, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x2, 0x0) 5m25.709862313s ago: executing program 37 (id=394): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ff63d649", 0x4) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FICLONE(r1, 0x40049409, r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r3 = epoll_create1(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) r7 = epoll_create1(0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r8 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000001c0)) read$FUSE(r8, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f0000000000)='fdinfo/4\x00') preadv(r10, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x2, 0x0) 5m11.692334339s ago: executing program 6 (id=412): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000340)=0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) 5m11.024772037s ago: executing program 6 (id=414): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x3, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x8, 0x7, 0x6, 0x7, 0x9, 0x56, 0x5, 0x9, r0, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_io_uring_setup(0x832, &(0x7f00000001c0)={0x0, 0x8, 0x800, 0x3}, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380), 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 5m5.513711674s ago: executing program 6 (id=416): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x808, 0x500000000, 0x80000000000000c, 0x10, 0x0, 0x10000, 0x7, 0x34bd80000000, 0x9, 0x8, 0x31, 0x5, 0x8, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x100000000000001, 0xffffffffbffffffb, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x1, 0x5, 0x479, 0x4, 0x6, 0x9, 0xc0, 0x1, 0x6, 0x46, 0x40, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffb, 0x2, 0xe, 0x6, 0x4, 0x40000000e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0xffffffff, 0xbbd9, 0x1, 0xfffffffffffffc00, 0x2, 0x9, 0x8, 0x3, 0x4000000007, 0x2, 0x3, 0x7fffffff, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xaba, 0x0, 0x3, 0x0, 0xffffffffffff1218, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xe5a, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x22933331, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x5, 0x8, 0x80000001, 0x3, 0xdfd3, 0xfff9, 0xef3, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 4m56.800760119s ago: executing program 6 (id=421): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000340)=0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) 4m56.325291079s ago: executing program 6 (id=423): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x3, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x8, 0x7, 0x6, 0x7, 0x9, 0x56, 0x5, 0x9, r0, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_io_uring_setup(0x832, &(0x7f00000001c0)={0x0, 0x8, 0x800, 0x3}, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380), 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 4m51.745978667s ago: executing program 6 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r6 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4m32.268610927s ago: executing program 38 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r6 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m53.304823135s ago: executing program 2 (id=449): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) lseek(r1, 0x10001, 0x1) 3m52.015870253s ago: executing program 2 (id=450): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) syz_io_uring_setup(0x7966, &(0x7f0000000300)={0x0, 0x7a3c, 0x8, 0x2, 0x238}, &(0x7f0000000380), &(0x7f00000003c0)) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r1, 0x0, 0x0, 0xfffffffffffffffe}]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000700)) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500008b0000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff, 0xee00}}, './bus\x00'}) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x8, 0x2c, 0x17, 0x5, 0x2, 0x5, 0x6, 0x3b}}) dup(r8) 3m49.755935748s ago: executing program 2 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01000000000014000000600000000028"], 0xfdef) 3m47.536338939s ago: executing program 2 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="200000001a00010000000000000000000a00fc003a2a5e247b000000"], 0x20}], 0x1}, 0x0) 3m46.760142379s ago: executing program 2 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) 3m45.385848037s ago: executing program 2 (id=454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 3m29.11747108s ago: executing program 39 (id=454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 2m48.84569816s ago: executing program 8 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0405fa97d7a9f74823"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m40.779292616s ago: executing program 8 (id=520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r4, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 2m25.466210873s ago: executing program 40 (id=520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r4, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 2m25.374463241s ago: executing program 9 (id=544): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a300000000008000540000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) close(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, &(0x7f0000000380)={0x0, 0x1, 0x3, 0x1, 0x9}, 0x8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(r0, 0x0, 0x0) 2m15.66194512s ago: executing program 9 (id=548): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000280)={0x7}) 2m14.727253865s ago: executing program 9 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2m12.886723396s ago: executing program 9 (id=552): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) syz_io_uring_setup(0x7966, &(0x7f0000000300)={0x0, 0x7a3c, 0x8, 0x2, 0x238}, &(0x7f0000000380), &(0x7f00000003c0)) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0xe3}]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44020000dbb73d85dfb3a1f5457a2237be746be93e00000000090000005e186377d16753d67b02ca76df8e68e28d9305fbcc43988add6406389865673c7ba17a493e5baa32464cfb4f9e9a3c6da4b3e8679174b4fe81bce8e553ed35d00c1a1219dfee0ccc1e35d201e45192e29c36e43d26", @ANYRES16, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0xee00}}, './bus\x00'}) 2m12.423397143s ago: executing program 4 (id=554): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r1, 0x0, 0x7fff, 'syz1\x00', 0x0}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x30000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000"], 0x1c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000300)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 2m11.129749947s ago: executing program 4 (id=557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a300000000008000540000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) close(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, &(0x7f0000000380)={0x0, 0x1, 0x3, 0x1, 0x9}, 0x8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(r0, 0x0, 0x0) 2m10.444509112s ago: executing program 9 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x8001, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x5, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0xffffffff, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e0, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x3, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x0, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x40, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0xfffffffe, 0x46, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x79d, 0x1, 0x48, 0x10001, 0x5, 0x81, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000004, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0x9, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0xb, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x8, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/34, 0x22}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 2m3.293060193s ago: executing program 9 (id=562): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x4000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000100)={0x281}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x9}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m57.462692201s ago: executing program 4 (id=563): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 1m56.619783239s ago: executing program 4 (id=565): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x1, 0x0, [{0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}]}) 1m55.215736923s ago: executing program 4 (id=567): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) syz_io_uring_setup(0x7966, &(0x7f0000000300)={0x0, 0x7a3c, 0x8, 0x2, 0x238}, &(0x7f0000000380), &(0x7f00000003c0)) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0xe3}]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44020000dbb73d85dfb3a1f5457a2237be746be93e00000000090000005e186377d16753d67b02ca76df8e68e28d9305fbcc43988add6406389865673c7ba17a493e5baa32464cfb4f9e9a3c6da4b3e8679174b4fe81bce8e553ed35d00c1a1219dfee0ccc1e35d201e45192e29c36e43d26", @ANYRES16, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0xee00}}, './bus\x00'}) 1m53.325367905s ago: executing program 4 (id=570): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x72bd28, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 1m47.901329044s ago: executing program 41 (id=562): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x4000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000100)={0x281}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x9}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m36.110322397s ago: executing program 42 (id=570): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x72bd28, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 19.998741023s ago: executing program 5 (id=633): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 18.186506342s ago: executing program 5 (id=636): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) 17.629756297s ago: executing program 5 (id=637): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0xe5a, 0x80000) r2 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) fcntl$setpipe(r3, 0x407, 0x80000000) sendmsg$key(r2, 0x0, 0x40408c0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) 5.679549535s ago: executing program 1 (id=639): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) 5.34054204s ago: executing program 5 (id=640): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) close(0x3) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 4.954867429s ago: executing program 1 (id=641): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 3.980208586s ago: executing program 1 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f7274000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d30800"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 3.28280086s ago: executing program 1 (id=643): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 2.97075831s ago: executing program 5 (id=644): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010102, @remote}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.863578529s ago: executing program 5 (id=645): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 1.655032081s ago: executing program 1 (id=646): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 0s ago: executing program 1 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x480d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4800) kernel console output (not intermixed with test programs): s: Mfr=1, Product=2, SerialNumber=3 [ 595.315482][ T5884] usb 8-1: Product: syz [ 595.319723][ T5884] usb 8-1: Manufacturer: syz [ 595.324584][ T5884] usb 8-1: SerialNumber: syz [ 595.401248][ T5884] usb 8-1: config 0 descriptor?? [ 595.455719][ T5884] ax88179_178a 8-1:0.0: probe with driver ax88179_178a failed with error -22 [ 595.500216][ T7244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.674298][ T5884] usb 8-1: USB disconnect, device number 7 [ 595.739338][ T7244] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.821113][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.828746][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.011016][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.018471][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.883475][ T5867] Bluetooth: (null): Invalid header checksum [ 599.928143][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 600.117984][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.151258][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.165825][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.187700][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.238277][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 600.322688][ T794] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 600.362445][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 600.557343][ T7244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.571862][ T794] usb 8-1: config 0 has no interfaces? [ 600.577764][ T794] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 600.587440][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.658252][ T794] usb 8-1: config 0 descriptor?? [ 603.327320][ T5820] Bluetooth: hci5: command tx timeout [ 607.223400][ T5829] Bluetooth: hci5: command tx timeout [ 609.402860][ T5829] Bluetooth: hci5: command tx timeout [ 609.444977][ T5884] usb 8-1: USB disconnect, device number 8 [ 610.298726][ T5802] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 610.453043][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 610.505923][ T5883] Bluetooth: (null): Invalid header checksum [ 610.512549][ T5802] usb 8-1: Using ep0 maxpacket: 16 [ 610.623814][ T5802] usb 8-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 610.633262][ T5802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.643260][ T5802] usb 8-1: Product: syz [ 610.647588][ T5802] usb 8-1: Manufacturer: syz [ 610.652546][ T5802] usb 8-1: SerialNumber: syz [ 610.758296][ T5802] usb 8-1: config 0 descriptor?? [ 610.785211][ T5802] ax88179_178a 8-1:0.0: probe with driver ax88179_178a failed with error -22 [ 611.178066][ T5884] usb 8-1: USB disconnect, device number 9 [ 611.482648][ T5829] Bluetooth: hci5: command tx timeout [ 612.519974][ T5867] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.565839][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.583550][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.600287][ T7434] bridge_slave_0: entered allmulticast mode [ 612.613477][ T7434] bridge_slave_0: entered promiscuous mode [ 612.727110][ T5867] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.792799][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.800349][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.808301][ T7434] bridge_slave_1: entered allmulticast mode [ 612.880684][ T7434] bridge_slave_1: entered promiscuous mode [ 612.926379][ T5867] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.111241][ T5867] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.406722][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.568530][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.598186][ T7244] veth0_vlan: entered promiscuous mode [ 615.615075][ T7434] team0: Port device team_slave_0 added [ 615.703729][ T7434] team0: Port device team_slave_1 added [ 616.114517][ T5848] Bluetooth: (null): Invalid header checksum [ 616.220870][ T7244] veth1_vlan: entered promiscuous mode [ 616.245403][ T5867] bridge_slave_1: left allmulticast mode [ 616.251229][ T5867] bridge_slave_1: left promiscuous mode [ 616.260200][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.326187][ T5867] bridge_slave_0: left allmulticast mode [ 616.332340][ T5867] bridge_slave_0: left promiscuous mode [ 616.338902][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.453120][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.498584][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.537979][ T5867] bond0 (unregistering): Released all slaves [ 617.682641][ T5884] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 617.794096][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.801319][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.828009][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.872300][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.879412][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.906318][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.972268][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 618.025854][ T5884] usb 3-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 618.035592][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.043791][ T5884] usb 3-1: Product: syz [ 618.048075][ T5884] usb 3-1: Manufacturer: syz [ 618.052879][ T5884] usb 3-1: SerialNumber: syz [ 618.104217][ T5884] usb 3-1: config 0 descriptor?? [ 618.118403][ T5884] ax88179_178a 3-1:0.0: probe with driver ax88179_178a failed with error -22 [ 618.319720][ T5867] hsr_slave_0: left promiscuous mode [ 618.362784][ T5867] hsr_slave_1: left promiscuous mode [ 618.370242][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.378523][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.390491][ T11] usb 3-1: USB disconnect, device number 5 [ 618.465264][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.474430][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.562854][ T5867] veth1_macvtap: left promiscuous mode [ 618.568557][ T5867] veth0_macvtap: left promiscuous mode [ 618.574649][ T5867] veth1_vlan: left promiscuous mode [ 618.580101][ T5867] veth0_vlan: left promiscuous mode [ 618.656322][ T7525] fuse: Bad value for 'group_id' [ 618.661537][ T7525] fuse: Bad value for 'group_id' [ 619.500944][ T5867] team0 (unregistering): Port device team_slave_1 removed [ 619.591283][ T5867] team0 (unregistering): Port device team_slave_0 removed [ 620.027865][ T7244] veth0_macvtap: entered promiscuous mode [ 620.071677][ T7244] veth1_macvtap: entered promiscuous mode [ 620.312557][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.491419][ T7434] hsr_slave_0: entered promiscuous mode [ 620.501163][ T7434] hsr_slave_1: entered promiscuous mode [ 620.509683][ T7434] debugfs: 'hsr0' already exists in 'hsr' [ 620.515716][ T7434] Cannot create hsr debugfs directory [ 620.598311][ T5867] IPVS: stop unused estimator thread 0... [ 620.619015][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.976574][ T7537] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 621.000710][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 621.150812][ T5919] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.208369][ T5919] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.375578][ T5919] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.415882][ T5919] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.311515][ T7434] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 622.458809][ T7434] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 622.554415][ T7434] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 622.678223][ T7434] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 623.922837][ T7568] fuse: Bad value for 'group_id' [ 623.928152][ T7568] fuse: Bad value for 'group_id' [ 623.988837][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.136155][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.199888][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.207498][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.330938][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.338548][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.953429][ T11] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 625.162822][ T11] usb 8-1: Using ep0 maxpacket: 16 [ 625.232686][ T11] usb 8-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 625.244627][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.253291][ T11] usb 8-1: Product: syz [ 625.257613][ T11] usb 8-1: Manufacturer: syz [ 625.262600][ T11] usb 8-1: SerialNumber: syz [ 625.437397][ T11] usb 8-1: config 0 descriptor?? [ 625.475993][ T11] ax88179_178a 8-1:0.0: probe with driver ax88179_178a failed with error -22 [ 625.677586][ T11] usb 8-1: USB disconnect, device number 10 [ 625.967029][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 626.241148][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.605055][ T7434] veth0_vlan: entered promiscuous mode [ 631.743159][ T7434] veth1_vlan: entered promiscuous mode [ 632.023273][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 632.041314][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.050716][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.101827][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.121962][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.239116][ T7434] veth0_macvtap: entered promiscuous mode [ 632.356285][ T7434] veth1_macvtap: entered promiscuous mode [ 639.075484][ T5829] Bluetooth: hci3: command tx timeout [ 639.441055][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.536809][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.582622][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 639.825426][ T5848] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.836015][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 639.859750][ T1892] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.910608][ T11] usb 3-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 639.920055][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.930593][ T11] usb 3-1: Product: syz [ 639.935093][ T11] usb 3-1: Manufacturer: syz [ 639.939773][ T11] usb 3-1: SerialNumber: syz [ 640.003038][ T1892] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.077828][ T1892] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.088784][ T11] usb 3-1: config 0 descriptor?? [ 640.169560][ T11] ax88179_178a 3-1:0.0: probe with driver ax88179_178a failed with error -22 [ 640.385035][ T11] usb 3-1: USB disconnect, device number 6 [ 641.164017][ T5829] Bluetooth: hci3: command tx timeout [ 641.623770][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 642.912771][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.920150][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.929769][ T7637] bridge_slave_0: entered allmulticast mode [ 642.938015][ T7637] bridge_slave_0: entered promiscuous mode [ 643.009269][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.018622][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.026387][ T7637] bridge_slave_1: entered allmulticast mode [ 643.034614][ T7637] bridge_slave_1: entered promiscuous mode [ 643.242427][ T5829] Bluetooth: hci3: command tx timeout [ 643.392855][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.521139][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.740638][ T7637] team0: Port device team_slave_0 added [ 643.786200][ T5883] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.864624][ T7637] team0: Port device team_slave_1 added [ 643.911953][ T5883] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.148319][ T5883] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.173352][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.180826][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.208748][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.270548][ T5883] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.289137][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.298365][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.326747][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.510794][ T7637] hsr_slave_0: entered promiscuous mode [ 644.519347][ T7637] hsr_slave_1: entered promiscuous mode [ 644.528450][ T7637] debugfs: 'hsr0' already exists in 'hsr' [ 644.535975][ T7637] Cannot create hsr debugfs directory [ 644.887977][ T5883] bridge_slave_1: left allmulticast mode [ 644.893931][ T5883] bridge_slave_1: left promiscuous mode [ 644.900395][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.123093][ T5883] bridge_slave_0: left allmulticast mode [ 645.128933][ T5883] bridge_slave_0: left promiscuous mode [ 645.135999][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.594603][ T5829] Bluetooth: hci3: command tx timeout [ 646.813375][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.908535][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.966600][ T5883] bond0 (unregistering): Released all slaves [ 647.344662][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 647.373206][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 647.397227][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 647.418913][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 647.431347][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.511731][ T5883] hsr_slave_0: left promiscuous mode [ 647.558644][ T5883] hsr_slave_1: left promiscuous mode [ 647.566608][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.576799][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.644282][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.651845][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.748766][ T5883] veth1_macvtap: left promiscuous mode [ 647.756252][ T5883] veth0_macvtap: left promiscuous mode [ 647.761951][ T5883] veth1_vlan: left promiscuous mode [ 647.767636][ T5883] veth0_vlan: left promiscuous mode [ 652.202826][ T5829] Bluetooth: hci1: command tx timeout [ 652.996146][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 653.262324][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 653.516076][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 653.593586][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 653.902799][ T5873] usb 3-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 653.912206][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.920376][ T5873] usb 3-1: Product: syz [ 653.924925][ T5873] usb 3-1: Manufacturer: syz [ 653.929669][ T5873] usb 3-1: SerialNumber: syz [ 654.040009][ T5873] usb 3-1: config 0 descriptor?? [ 654.286414][ T5829] Bluetooth: hci1: command tx timeout [ 654.379046][ T5873] ax88179_178a 3-1:0.0: probe with driver ax88179_178a failed with error -22 [ 654.634167][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.640764][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.730788][ T5873] usb 3-1: USB disconnect, device number 7 [ 656.129239][ T7726] [U] [ 656.132181][ T7726] [U] [ 656.135009][ T7726] [U] [ 656.137827][ T7726] [U] [ 656.179783][ T7726] [U] [ 656.182764][ T7726] [U] [ 656.185704][ T7726] [U] [ 656.188628][ T7726] [U] [ 656.252917][ T7726] [U] [ 656.255787][ T7726] [U] [ 656.258606][ T7726] [U] [ 656.308108][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 656.363578][ T5829] Bluetooth: hci1: command tx timeout [ 656.861975][ T7724] [U] [ 657.155919][ T7637] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 657.194294][ T7637] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 657.294643][ T7637] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 657.348661][ T7637] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 657.945359][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.955144][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.962885][ T7694] bridge_slave_0: entered allmulticast mode [ 657.971004][ T7694] bridge_slave_0: entered promiscuous mode [ 658.070593][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.078392][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.087184][ T7694] bridge_slave_1: entered allmulticast mode [ 658.097123][ T7694] bridge_slave_1: entered promiscuous mode [ 658.391108][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.444269][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.456071][ T5829] Bluetooth: hci1: command tx timeout [ 658.857478][ T7694] team0: Port device team_slave_0 added [ 658.969125][ T7694] team0: Port device team_slave_1 added [ 659.036216][ T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 659.227028][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 659.286220][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.295255][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.321522][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.406846][ T11] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 659.416201][ T11] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 659.426568][ T11] usb 3-1: Product: syz [ 659.430827][ T11] usb 3-1: Manufacturer: syz [ 659.435702][ T11] usb 3-1: SerialNumber: syz [ 659.523280][ T11] usb 3-1: config 0 descriptor?? [ 659.568258][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.578268][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.606122][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.940902][ T11] usb 3-1: USB disconnect, device number 8 [ 660.362348][ T7694] hsr_slave_0: entered promiscuous mode [ 660.370623][ T7694] hsr_slave_1: entered promiscuous mode [ 660.378163][ T7694] debugfs: 'hsr0' already exists in 'hsr' [ 660.385669][ T7694] Cannot create hsr debugfs directory [ 660.685102][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.734152][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.755364][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.788876][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.822833][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 661.609961][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.917244][ T6866] udevd[6866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.530434][ T7637] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.562885][ T5829] Bluetooth: hci4: command tx timeout [ 666.904287][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.911644][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.201967][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.209497][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.314841][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 667.466822][ T7775] [U] [ 667.469809][ T7775] [U] [ 667.472734][ T7775] [U] [ 667.475652][ T7775] [U] [ 667.526156][ T7775] [U] [ 667.529168][ T7775] [U] [ 667.532100][ T7775] [U] [ 667.535032][ T7775] [U] [ 667.590871][ T7775] [U] [ 667.593746][ T7775] [U] [ 667.596580][ T7775] [U] [ 668.140161][ T7774] [U] [ 668.602414][ T5829] Bluetooth: hci4: command tx timeout [ 670.708156][ T5829] Bluetooth: hci4: command tx timeout [ 671.667260][ T5919] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.205099][ T7694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 672.486759][ T5919] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.574564][ T7694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 672.674987][ T7694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 672.726635][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.734259][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.741817][ T7752] bridge_slave_0: entered allmulticast mode [ 672.754504][ T7752] bridge_slave_0: entered promiscuous mode [ 672.782960][ T5829] Bluetooth: hci4: command tx timeout [ 672.850114][ T5919] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.016815][ T7694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 673.084431][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.091836][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.099702][ T7752] bridge_slave_1: entered allmulticast mode [ 673.109513][ T7752] bridge_slave_1: entered promiscuous mode [ 673.135389][ T5919] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.232681][ T5952] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 673.542447][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.591812][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.894385][ T5919] bridge_slave_1: left allmulticast mode [ 673.900156][ T5919] bridge_slave_1: left promiscuous mode [ 673.906600][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.965257][ T5919] bridge_slave_0: left allmulticast mode [ 673.971089][ T5919] bridge_slave_0: left promiscuous mode [ 673.979080][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.124653][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.135860][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.146159][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.159358][ T5952] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.168696][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.202922][ T5952] usb 3-1: config 0 descriptor?? [ 674.654317][ T5829] Bluetooth: hci0: ISO packet too small [ 674.803542][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.826400][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.864886][ T5919] bond0 (unregistering): Released all slaves [ 674.956300][ T7752] team0: Port device team_slave_0 added [ 674.973133][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 674.979642][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 675.061036][ T7752] team0: Port device team_slave_1 added [ 675.192417][ T5919] hsr_slave_0: left promiscuous mode [ 675.199914][ T5919] hsr_slave_1: left promiscuous mode [ 675.209276][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.216967][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.314421][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.323870][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.446092][ T5919] veth1_macvtap: left promiscuous mode [ 675.451817][ T5919] veth0_macvtap: left promiscuous mode [ 675.457927][ T5919] veth1_vlan: left promiscuous mode [ 675.463457][ T5919] veth0_vlan: left promiscuous mode [ 675.694266][ T5952] usb 3-1: USB disconnect, device number 9 [ 681.182130][ T5919] team0 (unregistering): Port device team_slave_1 removed [ 681.205395][ T5919] team0 (unregistering): Port device team_slave_0 removed [ 681.344127][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.351176][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.379363][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.747882][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.755191][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.783162][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.988220][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.127781][ T7815] [U] [ 682.130656][ T7815] [U] [ 682.133478][ T7815] [U] [ 682.136299][ T7815] [U] [ 682.139121][ T7815] [U] [ 682.141943][ T7815] [U] [ 682.144774][ T7815] [U] [ 682.147591][ T7815] [U] [ 682.271648][ T7815] [U] [ 682.274522][ T7815] [U] [ 682.277348][ T7815] [U] [ 682.386137][ T7752] hsr_slave_0: entered promiscuous mode [ 682.399391][ T7752] hsr_slave_1: entered promiscuous mode [ 682.407036][ T7752] debugfs: 'hsr0' already exists in 'hsr' [ 682.413180][ T7752] Cannot create hsr debugfs directory [ 682.413855][ T7814] [U] [ 682.450999][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.699768][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.707259][ T4180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.856465][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.863901][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.723351][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.305625][ T7752] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 684.443973][ T7752] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 684.526579][ T7752] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 684.656447][ T7752] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 684.744210][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.197742][ T7694] veth0_vlan: entered promiscuous mode [ 685.288292][ T7694] veth1_vlan: entered promiscuous mode [ 685.624107][ T7694] veth0_macvtap: entered promiscuous mode [ 686.564311][ T7828] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 686.696610][ T7828] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 686.861741][ T7694] veth1_macvtap: entered promiscuous mode [ 688.220071][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.484518][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.795242][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.838256][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.924899][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.932344][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.049213][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.056614][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.181254][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.194117][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.208402][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.281859][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.174695][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.198359][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.228392][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.259089][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.269913][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.395618][ T5802] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 692.709626][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.721809][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.733618][ T5802] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.746889][ T5802] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.756275][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.935349][ T5802] usb 3-1: config 0 descriptor?? [ 693.569414][ T5802] usbhid 3-1:0.0: can't add hid device: -71 [ 693.580682][ T5802] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 693.613977][ T5802] usb 3-1: USB disconnect, device number 10 [ 693.796129][ T7849] chnl_net:caif_netlink_parms(): no params data found [ 694.189109][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.366152][ T5820] Bluetooth: hci5: command tx timeout [ 699.455870][ T5820] Bluetooth: hci5: command tx timeout [ 700.798881][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.808070][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.815893][ T7849] bridge_slave_0: entered allmulticast mode [ 700.824300][ T7849] bridge_slave_0: entered promiscuous mode [ 701.030150][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.040638][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.050725][ T7849] bridge_slave_1: entered allmulticast mode [ 701.063321][ T7849] bridge_slave_1: entered promiscuous mode [ 701.476218][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.487918][ T5820] Bluetooth: hci5: command tx timeout [ 701.579532][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.947506][ T7849] team0: Port device team_slave_0 added [ 701.998184][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 702.014477][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 702.023540][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 702.038618][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 702.051091][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 702.106805][ T7849] team0: Port device team_slave_1 added [ 703.094771][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.101828][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.130482][ T7849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.231717][ T7752] veth0_vlan: entered promiscuous mode [ 703.327780][ T7752] veth1_vlan: entered promiscuous mode [ 703.416630][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.425462][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.451636][ T7849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.594091][ T5829] Bluetooth: hci5: command tx timeout [ 704.122476][ T5829] Bluetooth: hci6: command tx timeout [ 704.265473][ T7849] hsr_slave_0: entered promiscuous mode [ 704.275803][ T7849] hsr_slave_1: entered promiscuous mode [ 704.284801][ T7849] debugfs: 'hsr0' already exists in 'hsr' [ 704.290607][ T7849] Cannot create hsr debugfs directory [ 704.415833][ T7886] chnl_net:caif_netlink_parms(): no params data found [ 704.781852][ T7752] veth0_macvtap: entered promiscuous mode [ 705.359920][ T7752] veth1_macvtap: entered promiscuous mode [ 705.925506][ T5920] bridge_slave_1: left allmulticast mode [ 705.931270][ T5920] bridge_slave_1: left promiscuous mode [ 705.937806][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.046419][ T5920] bridge_slave_0: left allmulticast mode [ 706.052449][ T5920] bridge_slave_0: left promiscuous mode [ 706.058636][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.203220][ T5829] Bluetooth: hci6: command tx timeout [ 706.812277][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.874245][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.907275][ T5920] bond0 (unregistering): Released all slaves [ 707.328695][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.426273][ T5920] hsr_slave_0: left promiscuous mode [ 707.534285][ T5920] hsr_slave_1: left promiscuous mode [ 707.542314][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.584930][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.798324][ T7915] [U] [ 707.801334][ T7915] [U] [ 707.804246][ T7915] [U] [ 707.807147][ T7915] [U] [ 707.810055][ T7915] [U] [ 707.813030][ T7915] [U] [ 707.815975][ T7915] [U] [ 707.818903][ T7915] [U] [ 707.968166][ T7915] [U] [ 707.971153][ T7915] [U] [ 707.974081][ T7915] [U] [ 708.011863][ T7914] [U] [ 708.154597][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.176880][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.187333][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.200635][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.217351][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.287627][ T5820] Bluetooth: hci6: command tx timeout [ 710.201008][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 710.235807][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 710.907315][ T5820] Bluetooth: hci0: command tx timeout [ 710.913022][ T5820] Bluetooth: hci6: command tx timeout [ 710.945186][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.953045][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.960535][ T7886] bridge_slave_0: entered allmulticast mode [ 710.969779][ T7886] bridge_slave_0: entered promiscuous mode [ 711.223433][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.354285][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.361748][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.369600][ T7886] bridge_slave_1: entered allmulticast mode [ 711.378798][ T7886] bridge_slave_1: entered promiscuous mode [ 711.808915][ T6148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.901283][ T6148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.936195][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.116530][ T6148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.191048][ T6148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.231001][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.355628][ T7849] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 712.421228][ T7849] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 712.574431][ T5920] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.752234][ T7849] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 712.923269][ T5829] Bluetooth: hci0: command tx timeout [ 713.076942][ T5920] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.219681][ T7849] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 713.503630][ T7886] team0: Port device team_slave_0 added [ 713.570823][ T7886] team0: Port device team_slave_1 added [ 713.767060][ T5920] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.854383][ T5885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 714.067053][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.078723][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.088754][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.103795][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.113118][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.226161][ T5885] usb 3-1: config 0 descriptor?? [ 714.342814][ T5920] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.430195][ T7918] chnl_net:caif_netlink_parms(): no params data found [ 714.453816][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.460898][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.488828][ T7886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.824510][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.831596][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.860664][ T7886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.007619][ T5829] Bluetooth: hci0: command tx timeout [ 715.117980][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 715.126117][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 715.200985][ T5885] usb 3-1: USB disconnect, device number 11 [ 715.282964][ T7886] hsr_slave_0: entered promiscuous mode [ 715.291479][ T7886] hsr_slave_1: entered promiscuous mode [ 715.299081][ T7886] debugfs: 'hsr0' already exists in 'hsr' [ 715.306605][ T7886] Cannot create hsr debugfs directory [ 715.851158][ T5920] bridge_slave_1: left allmulticast mode [ 715.857207][ T5920] bridge_slave_1: left promiscuous mode [ 715.863652][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.965027][ T5920] bridge_slave_0: left allmulticast mode [ 715.970832][ T5920] bridge_slave_0: left promiscuous mode [ 715.977591][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.103482][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.110082][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.603325][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.640830][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.691081][ T5920] bond0 (unregistering): Released all slaves [ 717.083141][ T5829] Bluetooth: hci0: command tx timeout [ 717.661823][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.710546][ T5920] hsr_slave_0: left promiscuous mode [ 717.745212][ T5920] hsr_slave_1: left promiscuous mode [ 717.756801][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.767372][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.818395][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.828111][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.911296][ T5920] veth1_macvtap: left promiscuous mode [ 717.920200][ T5920] veth0_macvtap: left promiscuous mode [ 717.926119][ T5920] veth1_vlan: left promiscuous mode [ 717.931488][ T5920] veth0_vlan: left promiscuous mode [ 719.143095][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 719.414905][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 720.046338][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.199954][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.207369][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.434166][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.441463][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.637240][ T7849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 720.648877][ T7849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.866466][ T5920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.367477][ T5920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.694515][ T5920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.823919][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.831265][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.841737][ T7918] bridge_slave_0: entered allmulticast mode [ 721.853637][ T7918] bridge_slave_0: entered promiscuous mode [ 721.974173][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.981523][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.991154][ T7918] bridge_slave_1: entered allmulticast mode [ 721.999901][ T7918] bridge_slave_1: entered promiscuous mode [ 722.320261][ T5920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.571177][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.733100][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.024886][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 723.037106][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 723.047956][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.295822][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.814177][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.856992][ T5920] bridge_slave_1: left allmulticast mode [ 724.862986][ T5920] bridge_slave_1: left promiscuous mode [ 724.869151][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.168406][ T5920] bridge_slave_0: left allmulticast mode [ 725.174562][ T5920] bridge_slave_0: left promiscuous mode [ 725.180725][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.784626][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.829114][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.875178][ T5920] bond0 (unregistering): Released all slaves [ 726.370741][ T7886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 726.545573][ T7886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 726.688737][ T7886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 726.969868][ T5820] Bluetooth: hci1: command tx timeout [ 727.046622][ T7886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.143518][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.279963][ T5920] hsr_slave_0: left promiscuous mode [ 727.316333][ T5920] hsr_slave_1: left promiscuous mode [ 727.324870][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.334056][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.419464][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.428788][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.585977][ T5920] veth1_macvtap: left promiscuous mode [ 727.591598][ T5920] veth0_macvtap: left promiscuous mode [ 727.599504][ T5920] veth1_vlan: left promiscuous mode [ 727.606780][ T5920] veth0_vlan: left promiscuous mode [ 727.928595][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 728.869291][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 728.908035][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 729.032570][ T5820] Bluetooth: hci1: command tx timeout [ 729.182477][ T7918] team0: Port device team_slave_0 added [ 729.469736][ T7918] team0: Port device team_slave_1 added [ 729.662530][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 729.835347][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.842586][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.870662][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.035925][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.044697][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.070969][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.338940][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.579645][ T7918] hsr_slave_0: entered promiscuous mode [ 730.589752][ T7918] hsr_slave_1: entered promiscuous mode [ 730.600829][ T7918] debugfs: 'hsr0' already exists in 'hsr' [ 730.606822][ T7918] Cannot create hsr debugfs directory [ 730.614647][ T5802] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 730.660547][ T7886] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.753480][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.760784][ T4180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.777635][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.785047][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.943370][ T5920] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.073920][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.085109][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.095107][ T5802] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 731.109896][ T5802] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 731.119238][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.152782][ T5820] Bluetooth: hci1: command tx timeout [ 731.204329][ T5802] usb 3-1: config 0 descriptor?? [ 731.344636][ T5920] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.606052][ T5920] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.877693][ T5920] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.979567][ T5802] usbhid 3-1:0.0: can't add hid device: -71 [ 731.985996][ T5802] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 732.107884][ T5802] usb 3-1: USB disconnect, device number 12 [ 733.114400][ T5920] bridge_slave_1: left allmulticast mode [ 733.120248][ T5920] bridge_slave_1: left promiscuous mode [ 733.126715][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.162668][ T5820] Bluetooth: hci1: command tx timeout [ 733.209038][ T5920] bridge_slave_0: left allmulticast mode [ 733.214985][ T5920] bridge_slave_0: left promiscuous mode [ 733.221130][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.456697][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.495470][ T8053] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 734.506557][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.718928][ T5920] bond0 (unregistering): Released all slaves [ 735.058004][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.067096][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.074887][ T7992] bridge_slave_0: entered allmulticast mode [ 735.083216][ T7992] bridge_slave_0: entered promiscuous mode [ 735.259608][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.269816][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.279139][ T7992] bridge_slave_1: entered allmulticast mode [ 735.287320][ T7992] bridge_slave_1: entered promiscuous mode [ 735.709371][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.826259][ T5920] hsr_slave_0: left promiscuous mode [ 735.838872][ T5920] hsr_slave_1: left promiscuous mode [ 735.849032][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.857532][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.914569][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.922997][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.023805][ T5920] veth1_macvtap: left promiscuous mode [ 736.029423][ T5920] veth0_macvtap: left promiscuous mode [ 736.035552][ T5920] veth1_vlan: left promiscuous mode [ 736.040922][ T5920] veth0_vlan: left promiscuous mode [ 739.005770][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 739.116523][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 739.417867][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.439206][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.893264][ T7992] team0: Port device team_slave_0 added [ 739.966232][ T7992] team0: Port device team_slave_1 added [ 740.262817][ T7849] veth0_vlan: entered promiscuous mode [ 740.385771][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.393074][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.419381][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.537062][ T5920] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.621671][ T7849] veth1_vlan: entered promiscuous mode [ 740.664138][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.671251][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.698722][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.749023][ T5920] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.986716][ T5920] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.329686][ T5920] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.397129][ T7992] hsr_slave_0: entered promiscuous mode [ 741.406937][ T7992] hsr_slave_1: entered promiscuous mode [ 741.408442][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.450'. [ 741.415513][ T7992] debugfs: 'hsr0' already exists in 'hsr' [ 741.427712][ T7992] Cannot create hsr debugfs directory [ 741.976399][ T7849] veth0_macvtap: entered promiscuous mode [ 742.111738][ T7849] veth1_macvtap: entered promiscuous mode [ 742.425326][ T7918] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 742.500508][ T5920] bridge_slave_1: left allmulticast mode [ 742.506606][ T5920] bridge_slave_1: left promiscuous mode [ 742.513853][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.587706][ T5920] bridge_slave_0: left allmulticast mode [ 742.593744][ T5920] bridge_slave_0: left promiscuous mode [ 742.600206][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.788148][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.836679][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.867104][ T5920] bond0 (unregistering): Released all slaves [ 743.905233][ T7918] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 744.067102][ T7918] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 744.158567][ T7918] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 744.277480][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.377829][ T7886] veth0_vlan: entered promiscuous mode [ 744.524840][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.678774][ T7710] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.700119][ T7886] veth1_vlan: entered promiscuous mode [ 744.787708][ T7710] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.849713][ T5920] hsr_slave_0: left promiscuous mode [ 744.863392][ T5920] hsr_slave_1: left promiscuous mode [ 744.871046][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.878914][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.914517][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.922387][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.989196][ T5920] veth1_macvtap: left promiscuous mode [ 744.995832][ T5920] veth0_macvtap: left promiscuous mode [ 745.001687][ T5920] veth1_vlan: left promiscuous mode [ 745.007529][ T5920] veth0_vlan: left promiscuous mode [ 745.058317][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 746.067644][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 746.121476][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 746.454872][ T7710] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.606027][ T7710] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.913758][ T5920] IPVS: stop unused estimator thread 0... [ 746.990996][ T7886] veth0_macvtap: entered promiscuous mode [ 747.119368][ T7886] veth1_macvtap: entered promiscuous mode [ 747.354229][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.437459][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.501630][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.531504][ T5920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.568583][ T7992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 747.605942][ T5920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.665771][ T5920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.693919][ T7992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 747.877754][ T5919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.909233][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.926334][ T7992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 748.006347][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.013734][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.026639][ T7992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 748.190570][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.197969][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.345054][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.647384][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.810092][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.817666][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.945961][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.953338][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.607586][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.159812][ T7918] veth0_vlan: entered promiscuous mode [ 751.290384][ T7918] veth1_vlan: entered promiscuous mode [ 751.683908][ T7918] veth0_macvtap: entered promiscuous mode [ 751.841383][ T7918] veth1_macvtap: entered promiscuous mode [ 752.051840][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.220496][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.418295][ T6147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.495908][ T6148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.571741][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.580376][ T6148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.670262][ T6148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.630280][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.639600][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.655201][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.669998][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.693502][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 755.568707][ T5888] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.706956][ T5888] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.804720][ T5820] Bluetooth: hci3: command tx timeout [ 755.820554][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 755.915504][ T5888] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.027259][ T7992] veth0_vlan: entered promiscuous mode [ 756.267253][ T5888] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.468377][ T7992] veth1_vlan: entered promiscuous mode [ 756.496469][ T1892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.504672][ T1892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.944862][ T4180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.953176][ T4180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.113504][ T5888] bridge_slave_1: left allmulticast mode [ 757.119344][ T5888] bridge_slave_1: left promiscuous mode [ 757.126347][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.263002][ T5888] bridge_slave_0: left allmulticast mode [ 757.268838][ T5888] bridge_slave_0: left promiscuous mode [ 757.276896][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.883567][ T5820] Bluetooth: hci3: command tx timeout [ 758.045698][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.076068][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.090734][ T5888] bond0 (unregistering): Released all slaves [ 758.391425][ T5888] hsr_slave_0: left promiscuous mode [ 758.424897][ T5888] hsr_slave_1: left promiscuous mode [ 758.433741][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.441290][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.494465][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.507479][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.605206][ T5888] veth1_macvtap: left promiscuous mode [ 758.611372][ T5888] veth0_macvtap: left promiscuous mode [ 758.618389][ T5888] veth1_vlan: left promiscuous mode [ 758.623990][ T5888] veth0_vlan: left promiscuous mode [ 759.875381][ T5888] team0 (unregistering): Port device team_slave_1 removed [ 759.904094][ T5888] team0 (unregistering): Port device team_slave_0 removed [ 760.062973][ T5820] Bluetooth: hci3: command tx timeout [ 760.783846][ T8245] Invalid ELF header type: 2 != 1 [ 760.827441][ T7992] veth0_macvtap: entered promiscuous mode [ 761.936992][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.944890][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.952861][ T8186] bridge_slave_0: entered allmulticast mode [ 761.961942][ T8186] bridge_slave_0: entered promiscuous mode [ 762.005837][ T7992] veth1_macvtap: entered promiscuous mode [ 762.074375][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.081831][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.092900][ T8186] bridge_slave_1: entered allmulticast mode [ 762.102181][ T8186] bridge_slave_1: entered promiscuous mode [ 762.131314][ T5820] Bluetooth: hci3: command tx timeout [ 762.514594][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.579228][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.654651][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.989288][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.050187][ T8186] team0: Port device team_slave_0 added [ 763.091427][ T8186] team0: Port device team_slave_1 added [ 763.246743][ T6148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.338079][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.346069][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.372798][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.411079][ T5888] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.432184][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.440176][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.442842][ T5888] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.552468][ T5888] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.610472][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.619793][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.646182][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.730507][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.739300][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.390161][ T8186] hsr_slave_0: entered promiscuous mode [ 764.399954][ T8186] hsr_slave_1: entered promiscuous mode [ 764.549294][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 764.587517][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 764.598787][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 764.638025][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 764.652495][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 765.355131][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 766.487827][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 766.763402][ T5829] Bluetooth: hci4: command tx timeout [ 767.204002][ T8292] kvm: MWAIT instruction emulated as NOP! [ 767.428925][ T8186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 767.527834][ T8186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 767.638165][ T8186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 767.821143][ T8186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 767.923725][ T8302] Bluetooth: MGMT ver 1.23 [ 768.410490][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.418165][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.426036][ T8265] bridge_slave_0: entered allmulticast mode [ 768.435358][ T8265] bridge_slave_0: entered promiscuous mode [ 768.664879][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.672487][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.680193][ T8265] bridge_slave_1: entered allmulticast mode [ 768.691694][ T8265] bridge_slave_1: entered promiscuous mode [ 768.852700][ T5829] Bluetooth: hci4: command tx timeout [ 768.985317][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.073306][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.144221][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 769.459857][ T8265] team0: Port device team_slave_0 added [ 769.619687][ T8265] team0: Port device team_slave_1 added [ 770.120890][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.128732][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.156529][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.192629][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.420071][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.429047][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.459573][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.512770][ T8186] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.628529][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.636092][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.922465][ T5829] Bluetooth: hci4: command tx timeout [ 771.145165][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.152678][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.188343][ T8265] hsr_slave_0: entered promiscuous mode [ 771.197985][ T8265] hsr_slave_1: entered promiscuous mode [ 771.209512][ T8265] debugfs: 'hsr0' already exists in 'hsr' [ 771.217989][ T8265] Cannot create hsr debugfs directory [ 771.405976][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 771.678790][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.689237][ T5887] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 771.698755][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.719866][ T5918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.782910][ T5887] usb 5-1: config 0 descriptor?? [ 771.946673][ T5918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.149301][ T5918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.357063][ T5918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.418515][ T5887] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 773.043154][ T5829] Bluetooth: hci4: command tx timeout [ 773.237090][ T5887] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 773.264013][ T5887] usb 5-1: USB disconnect, device number 6 [ 773.634466][ T5918] bridge_slave_1: left allmulticast mode [ 773.640341][ T5918] bridge_slave_1: left promiscuous mode [ 773.653472][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.658604][ T8350] fido_id[8350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 773.695976][ T5918] bridge_slave_0: left allmulticast mode [ 773.701821][ T5918] bridge_slave_0: left promiscuous mode [ 773.710449][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.773551][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.933397][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.000334][ T5918] bond0 (unregistering): Released all slaves [ 775.450722][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.458988][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.104395][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.112727][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.273588][ T5918] hsr_slave_0: left promiscuous mode [ 776.302435][ T5918] hsr_slave_1: left promiscuous mode [ 776.310049][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.319678][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.364738][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.374870][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.500290][ T5918] veth1_macvtap: left promiscuous mode [ 776.507739][ T5918] veth0_macvtap: left promiscuous mode [ 776.513960][ T5918] veth1_vlan: left promiscuous mode [ 776.519421][ T5918] veth0_vlan: left promiscuous mode [ 777.521398][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.528342][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 778.454360][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 778.556818][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 779.185841][ T5802] infiniband syz0: ib_query_port failed (-19) [ 779.251168][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.300586][ T8265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 779.596796][ T5918] IPVS: stop unused estimator thread 0... [ 779.683408][ T8265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 779.870170][ T8265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 780.047787][ T8265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 780.156012][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'. [ 781.691525][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.904583][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.058915][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.066449][ T4180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.236569][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.244096][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.750407][ T8186] veth0_vlan: entered promiscuous mode [ 782.843670][ T8434] IPVS: lc: FWM 3 0x00000003 - no destination available [ 782.870049][ T8033] IPVS: starting estimator thread 0... [ 782.998638][ T8435] IPVS: using max 240 ests per chain, 12000 per kthread [ 784.325520][ T8186] veth1_vlan: entered promiscuous mode [ 785.004440][ T8445] capability: warning: `syz.9.491' uses 32-bit capabilities (legacy support in use) [ 785.016156][ T8445] Falling back ldisc for ttyS3. [ 786.531248][ T8186] veth0_macvtap: entered promiscuous mode [ 786.628584][ T8186] veth1_macvtap: entered promiscuous mode [ 786.849667][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.981914][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.084303][ T7710] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.152568][ T7710] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.286434][ T5888] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.362134][ T5888] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.149487][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.545976][ T8496] warning: `syz.1.502' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 795.264840][ T8265] veth0_vlan: entered promiscuous mode [ 795.629433][ T8265] veth1_vlan: entered promiscuous mode [ 797.582654][ T8265] veth0_macvtap: entered promiscuous mode [ 797.636579][ T8265] veth1_macvtap: entered promiscuous mode [ 797.664180][ T8514] tipc: Started in network mode [ 797.669327][ T8514] tipc: Node identity 72dfb13b4c34, cluster identity 4711 [ 797.677470][ T8514] tipc: Enabled bearer , priority 0 [ 797.817637][ T8517] syzkaller0: entered promiscuous mode [ 797.823530][ T8517] syzkaller0: entered allmulticast mode [ 797.862431][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.951265][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.029908][ T8514] tipc: Resetting bearer [ 798.080077][ T1892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.127629][ T1892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.155924][ T8513] tipc: Resetting bearer [ 798.245019][ T8513] tipc: Disabling bearer [ 798.358494][ T1892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.399778][ T1892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.576562][ T5887] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 798.789725][ T5887] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 798.798947][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.905350][ T5887] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 798.914775][ T5887] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 798.923208][ T5887] usb 5-1: Manufacturer: syz [ 799.018171][ T5887] usb 5-1: config 0 descriptor?? [ 799.170280][ T8541] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 800.732229][ T5887] rc_core: IR keymap rc-hauppauge not found [ 800.738312][ T5887] Registered IR keymap rc-empty [ 800.745939][ T5887] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 800.760244][ T5887] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 801.446510][ T8547] Process accounting resumed [ 801.770319][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.778459][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.855350][ T5802] usb 5-1: USB disconnect, device number 7 [ 802.573076][ T4180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.581219][ T4180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.845419][ T8571] infiniband syz1: set active [ 803.850315][ T8571] infiniband syz1: added syz_tun [ 803.923384][ T8571] RDS/IB: syz1: added [ 803.927589][ T8571] smc: adding ib device syz1 with port count 1 [ 803.934030][ T8571] smc: ib device syz1 port 1 has no pnetid [ 810.924240][ T8605] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 811.064676][ T8604] syzkaller0: entered promiscuous mode [ 811.070463][ T8604] syzkaller0: entered allmulticast mode [ 812.712330][ T5952] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 813.183653][ T5952] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 813.194553][ T5952] usb 2-1: config 4 has no interface number 0 [ 813.414292][ T5952] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 813.424042][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.433250][ T5952] usb 2-1: Product: syz [ 813.437665][ T5952] usb 2-1: Manufacturer: syz [ 813.442895][ T5952] usb 2-1: SerialNumber: syz [ 813.882245][ T5848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.889850][ T5952] gspca_main: spca505-2.14.0 probing 0733:0430 [ 813.890396][ T5848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.168066][ T5952] gspca_spca505: reg write: error -71 [ 814.174508][ T5952] spca505 2-1:4.9: probe with driver spca505 failed with error -5 [ 814.351311][ T5952] usb 2-1: USB disconnect, device number 2 [ 814.464131][ T8630] Process accounting resumed [ 814.762465][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.771307][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.304936][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.457'. [ 818.058771][ T8673] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 820.485600][ T8683] syzkaller0: entered promiscuous mode [ 820.491638][ T8683] syzkaller0: entered allmulticast mode [ 823.871499][ T8692] Process accounting resumed [ 825.808343][ T5820] Bluetooth: hci6: command 0x0406 tx timeout [ 826.179730][ T8718] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 826.822508][ T5952] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 829.033044][ T5952] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 829.042094][ T5952] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 829.054135][ T5952] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 829.071439][ T5952] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 829.086990][ T5952] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 832.134636][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 836.123376][ T5952] usb 6-1: unable to read config index 1 descriptor/all [ 836.131791][ T5952] usb 6-1: can't read configurations, error -110 [ 836.435598][ T8746] syzkaller0: entered promiscuous mode [ 836.441811][ T8746] syzkaller0: entered allmulticast mode [ 837.034146][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.057185][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.075859][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.098505][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.117743][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.988983][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.999439][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.162534][ T5820] Bluetooth: hci2: command tx timeout [ 840.290183][ T8765] Process accounting resumed [ 840.459639][ T8779] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 841.251249][ T5820] Bluetooth: hci2: command tx timeout [ 843.564900][ T5820] Bluetooth: hci2: command tx timeout [ 845.662413][ T5829] Bluetooth: hci2: command tx timeout [ 847.302371][ T8799] syzkaller0: entered promiscuous mode [ 847.308838][ T8799] syzkaller0: entered allmulticast mode [ 847.704127][ T8033] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 848.064720][ T8033] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 848.077165][ T8033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.193422][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 848.464222][ T8033] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 848.477053][ T8033] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 848.487929][ T8033] usb 2-1: Manufacturer: syz [ 848.865829][ T8033] usb 2-1: config 0 descriptor?? [ 851.243022][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 851.456388][ T8033] rc_core: IR keymap rc-hauppauge not found [ 851.465784][ T8033] Registered IR keymap rc-empty [ 851.475320][ T8033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 851.506432][ T8033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 854.853672][ T8033] usb 2-1: USB disconnect, device number 3 [ 855.666912][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.675902][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.691429][ T8752] bridge_slave_0: entered allmulticast mode [ 855.702734][ T8752] bridge_slave_0: entered promiscuous mode [ 856.029421][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.038183][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.047858][ T8752] bridge_slave_1: entered allmulticast mode [ 856.058721][ T8752] bridge_slave_1: entered promiscuous mode [ 856.520864][ T8836] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 856.956814][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.182766][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.594735][ T8752] team0: Port device team_slave_0 added [ 857.709768][ T8752] team0: Port device team_slave_1 added [ 858.203564][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.212448][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.245380][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.507306][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.515032][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.545834][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.951271][ T8752] hsr_slave_0: entered promiscuous mode [ 859.960978][ T8752] hsr_slave_1: entered promiscuous mode [ 859.970483][ T8752] debugfs: 'hsr0' already exists in 'hsr' [ 859.978568][ T8752] Cannot create hsr debugfs directory [ 860.060935][ T8855] block nbd4: not configured, cannot reconfigure [ 860.659402][ T6147] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.393166][ T6147] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.203438][ T6147] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.586878][ T6147] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.293596][ T6147] bridge_slave_1: left allmulticast mode [ 869.301638][ T6147] bridge_slave_1: left promiscuous mode [ 869.310131][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.503502][ T6147] bridge_slave_0: left allmulticast mode [ 869.511366][ T6147] bridge_slave_0: left promiscuous mode [ 869.528073][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.588016][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.603668][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 870.617155][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 870.635270][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 870.669380][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.691143][ T6147] bond0 (unregistering): Released all slaves [ 870.703618][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 870.826356][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 873.032806][ T5829] Bluetooth: hci3: command tx timeout [ 873.885239][ T6147] hsr_slave_0: left promiscuous mode [ 874.385693][ T6147] hsr_slave_1: left promiscuous mode [ 874.396230][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.405575][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.082271][ T5829] Bluetooth: hci3: command tx timeout [ 875.966538][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.975435][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.133707][ T6147] veth1_macvtap: left promiscuous mode [ 876.140210][ T6147] veth0_macvtap: left promiscuous mode [ 876.148110][ T6147] veth1_vlan: left promiscuous mode [ 876.155091][ T6147] veth0_vlan: left promiscuous mode [ 876.740294][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 876.740371][ T30] audit: type=1326 audit(1765048842.292:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.5.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ebd78f749 code=0x0 [ 877.167871][ T5829] Bluetooth: hci3: command tx timeout [ 877.406827][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 877.478637][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 878.110717][ T8752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 878.536561][ T8752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 878.884684][ T5918] smc: removing ib device syz1 [ 878.904406][ T8752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 878.953868][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 878.975663][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 878.985967][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 878.995776][ T8752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 879.014396][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 879.075606][ T8033] syz1: Port: 1 Link DOWN [ 879.138877][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 879.254732][ T5829] Bluetooth: hci3: command tx timeout [ 881.247511][ T5820] Bluetooth: hci1: command tx timeout [ 882.438750][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 882.589605][ T5918] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.753935][ T5918] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.780199][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 882.905654][ T5918] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.069316][ T5918] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.169180][ T8937] syzkaller0: entered promiscuous mode [ 883.176174][ T8937] syzkaller0: entered allmulticast mode [ 883.325964][ T5820] Bluetooth: hci1: command tx timeout [ 883.564837][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.854541][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.884037][ T5918] bridge_slave_1: left allmulticast mode [ 883.890395][ T5918] bridge_slave_1: left promiscuous mode [ 883.897549][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.958416][ T5918] bridge_slave_0: left allmulticast mode [ 883.965534][ T5918] bridge_slave_0: left promiscuous mode [ 883.972877][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.402389][ T5829] Bluetooth: hci1: command tx timeout [ 885.578855][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.606099][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.632978][ T5918] bond0 (unregistering): Released all slaves [ 885.695784][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.705202][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.959780][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.970316][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.430362][ T8953] comedi comedi0: pcl730: I/O port conflict (0x6,4) [ 887.163479][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 887.184136][ T5918] hsr_slave_0: left promiscuous mode [ 887.210501][ T5918] hsr_slave_1: left promiscuous mode [ 887.221687][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.231441][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.486537][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.492214][ T5820] Bluetooth: hci1: command tx timeout [ 887.496030][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.750101][ T5918] veth1_macvtap: left promiscuous mode [ 887.757483][ T5918] veth0_macvtap: left promiscuous mode [ 887.764261][ T5918] veth1_vlan: left promiscuous mode [ 887.770975][ T5918] veth0_vlan: left promiscuous mode [ 889.096982][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 889.839685][ T8962] overlayfs: missing 'lowerdir' [ 890.165679][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 890.181290][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 890.194737][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 890.234053][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 890.248511][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 890.634188][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 890.876427][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.884637][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.893686][ T8897] bridge_slave_0: entered allmulticast mode [ 890.903748][ T8897] bridge_slave_0: entered promiscuous mode [ 890.918794][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.928297][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.936456][ T8928] bridge_slave_0: entered allmulticast mode [ 890.946301][ T8928] bridge_slave_0: entered promiscuous mode [ 891.647391][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.655900][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.664876][ T8928] bridge_slave_1: entered allmulticast mode [ 891.675235][ T8928] bridge_slave_1: entered promiscuous mode [ 891.740200][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.748192][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.757595][ T8897] bridge_slave_1: entered allmulticast mode [ 891.767438][ T8897] bridge_slave_1: entered promiscuous mode [ 892.310077][ T5829] Bluetooth: hci5: command tx timeout [ 892.338793][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.595106][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.767993][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.813293][ T6148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.845647][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.875036][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 893.072241][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 893.178063][ T6148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.229386][ T5887] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 893.239000][ T5887] usb 2-1: config 0 has no interface number 0 [ 893.349761][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 893.360256][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.369346][ T5887] usb 2-1: Product: syz [ 893.374193][ T5887] usb 2-1: Manufacturer: syz [ 893.380165][ T5887] usb 2-1: SerialNumber: syz [ 893.392246][ T5887] usb 2-1: config 0 descriptor?? [ 893.410854][ T5887] hub 2-1:0.132: bad descriptor, ignoring hub [ 893.419527][ T5887] hub 2-1:0.132: probe with driver hub failed with error -5 [ 893.504941][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input10 [ 893.582674][ T8928] team0: Port device team_slave_0 added [ 893.779653][ T6148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.904554][ T8897] team0: Port device team_slave_0 added [ 893.930594][ T8928] team0: Port device team_slave_1 added [ 894.364251][ T5829] Bluetooth: hci5: command tx timeout [ 894.406362][ T6148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.524079][ T8897] team0: Port device team_slave_1 added [ 894.909670][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.918205][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.953655][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.199105][ T8964] chnl_net:caif_netlink_parms(): no params data found [ 895.225241][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.232918][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.263980][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.289298][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.297731][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.329339][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.457476][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.466713][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.497910][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.591418][ T6148] bridge_slave_1: left allmulticast mode [ 895.598315][ T6148] bridge_slave_1: left promiscuous mode [ 895.606697][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.695861][ T6148] bridge_slave_0: left allmulticast mode [ 895.702670][ T6148] bridge_slave_0: left promiscuous mode [ 895.710130][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.770254][ T5829] Bluetooth: hci5: command tx timeout [ 896.781817][ T5887] usb 2-1: USB disconnect, device number 4 [ 896.879300][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.114691][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.130641][ T6148] bond0 (unregistering): Released all slaves [ 897.886266][ T8928] hsr_slave_0: entered promiscuous mode [ 897.895527][ T8928] hsr_slave_1: entered promiscuous mode [ 898.029526][ T8980] syzkaller0: entered promiscuous mode [ 898.036641][ T8980] syzkaller0: entered allmulticast mode [ 898.251563][ T8897] hsr_slave_0: entered promiscuous mode [ 898.260998][ T8897] hsr_slave_1: entered promiscuous mode [ 898.269690][ T8897] debugfs: 'hsr0' already exists in 'hsr' [ 898.276121][ T8897] Cannot create hsr debugfs directory [ 898.457566][ T6148] hsr_slave_0: left promiscuous mode [ 898.492190][ T6148] hsr_slave_1: left promiscuous mode [ 898.501750][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.511426][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.574153][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.583255][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.649287][ T6148] veth1_macvtap: left promiscuous mode [ 898.656274][ T6148] veth0_macvtap: left promiscuous mode [ 898.662458][ T6148] veth1_vlan: left promiscuous mode [ 898.668827][ T6148] veth0_vlan: left promiscuous mode [ 898.847209][ T5829] Bluetooth: hci5: command tx timeout [ 899.280301][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.593'. [ 899.770988][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 899.794996][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 900.410241][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.421446][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.383415][ T6148] IPVS: stop unused estimator thread 0... [ 903.696246][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.704591][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.714454][ T8964] bridge_slave_0: entered allmulticast mode [ 903.723699][ T8964] bridge_slave_0: entered promiscuous mode [ 904.033431][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.041317][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.050306][ T8964] bridge_slave_1: entered allmulticast mode [ 904.059830][ T8964] bridge_slave_1: entered promiscuous mode [ 904.581708][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.153718][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.573669][ T8964] team0: Port device team_slave_0 added [ 905.665877][ T8964] team0: Port device team_slave_1 added [ 906.186262][ T6148] bridge_slave_1: left allmulticast mode [ 906.192953][ T6148] bridge_slave_1: left promiscuous mode [ 906.199526][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.250042][ T6148] bridge_slave_0: left allmulticast mode [ 906.256275][ T6148] bridge_slave_0: left promiscuous mode [ 906.262810][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.287917][ T9021] netlink: 'syz.5.601': attribute type 10 has an invalid length. [ 906.414423][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.601'. [ 906.645294][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.668973][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.691033][ T30] audit: type=1326 audit(1765049384.245:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.5.601" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ebd78f749 code=0x0 [ 906.696290][ T6148] bond0 (unregistering): Released all slaves [ 907.867843][ T6148] hsr_slave_0: left promiscuous mode [ 908.982739][ T6148] hsr_slave_1: left promiscuous mode [ 908.991289][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.274320][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.749969][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 909.802828][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 910.547651][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.557235][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.576575][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.584701][ T9021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.593560][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.601548][ T9021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.621313][ T9021] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 910.707435][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.715654][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.746566][ T8964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.910233][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.918081][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.946585][ T8964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.783629][ T8964] hsr_slave_0: entered promiscuous mode [ 911.795247][ T8964] hsr_slave_1: entered promiscuous mode [ 911.804749][ T8964] debugfs: 'hsr0' already exists in 'hsr' [ 911.814624][ T8964] Cannot create hsr debugfs directory [ 912.027089][ T8897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 912.058574][ T8897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.431115][ T8897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 912.533497][ T8897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 912.583768][ T8928] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 912.668010][ T8928] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 912.853237][ T8928] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 913.043960][ T8928] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 914.595220][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.010175][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.100331][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.111683][ T8964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 915.209879][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.217975][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.233765][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.242304][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.386027][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.462554][ T8964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 915.603471][ T8964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.731321][ T8964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 915.850374][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.858595][ T8871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.203240][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.211793][ T8871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.145109][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.535875][ T8964] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.726043][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.735360][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.881781][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.890498][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.471146][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.102547][ T794] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 922.361048][ T8897] veth0_vlan: entered promiscuous mode [ 922.432548][ T794] usb 6-1: Using ep0 maxpacket: 8 [ 922.441619][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.445790][ T794] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.461993][ T794] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.473806][ T794] usb 6-1: config 0 interface 0 has no altsetting 0 [ 922.481274][ T794] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 922.492090][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.655465][ T8897] veth1_vlan: entered promiscuous mode [ 922.792349][ T794] usb 6-1: config 0 descriptor?? [ 923.189134][ T8897] veth0_macvtap: entered promiscuous mode [ 923.342575][ T8897] veth1_macvtap: entered promiscuous mode [ 923.593592][ T794] usbhid 6-1:0.0: can't add hid device: -71 [ 923.600881][ T794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 923.677358][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.750196][ T794] usb 6-1: USB disconnect, device number 5 [ 923.829975][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.966885][ T1892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.089347][ T1892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.229255][ T1892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.314874][ T1892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.312677][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.577308][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 926.352635][ T8964] veth0_vlan: entered promiscuous mode [ 926.588712][ T8964] veth1_vlan: entered promiscuous mode [ 929.463660][ T8964] veth0_macvtap: entered promiscuous mode [ 929.773881][ T8964] veth1_macvtap: entered promiscuous mode [ 930.094075][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.104976][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.112172][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.144209][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.167586][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.178694][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.200003][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.766120][ T1892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.882925][ T1892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.181789][ T7710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.215151][ T8928] veth0_vlan: entered promiscuous mode [ 931.314997][ T3472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.448489][ T8928] veth1_vlan: entered promiscuous mode [ 932.202307][ T5829] Bluetooth: hci2: command tx timeout [ 932.408276][ T8928] veth0_macvtap: entered promiscuous mode [ 932.511186][ T8928] veth1_macvtap: entered promiscuous mode [ 932.657823][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.714416][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 932.766324][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.389457][ T5888] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.821322][ T5888] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.039454][ T5888] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.253197][ T5888] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.302907][ T5829] Bluetooth: hci2: command tx timeout [ 934.492520][ T6148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.936622][ T6148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.334972][ T6148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.649817][ T6148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.959862][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.968740][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.977733][ T9102] bridge_slave_0: entered allmulticast mode [ 935.987876][ T9102] bridge_slave_0: entered promiscuous mode [ 936.152805][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 936.215615][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.223505][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.232327][ T9102] bridge_slave_1: entered allmulticast mode [ 936.241475][ T9102] bridge_slave_1: entered promiscuous mode [ 936.362373][ T5829] Bluetooth: hci2: command tx timeout [ 938.038887][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.472299][ T5829] Bluetooth: hci2: command tx timeout [ 939.149406][ T6148] bridge_slave_1: left allmulticast mode [ 939.155931][ T6148] bridge_slave_1: left promiscuous mode [ 939.163071][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.215919][ T6148] bridge_slave_0: left allmulticast mode [ 939.222507][ T6148] bridge_slave_0: left promiscuous mode [ 939.229774][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.912636][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 941.013571][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 941.043609][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 941.078352][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 941.147835][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 941.181278][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.221583][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.256636][ T6148] bond0 (unregistering): Released all slaves [ 941.379727][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.397285][ T9102] team0: Port device team_slave_0 added [ 942.424530][ T6148] hsr_slave_0: left promiscuous mode [ 942.482615][ T6148] hsr_slave_1: left promiscuous mode [ 942.490335][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.498820][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.622387][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.631534][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.778326][ T6148] veth1_macvtap: left promiscuous mode [ 942.785489][ T6148] veth0_macvtap: left promiscuous mode [ 942.791605][ T6148] veth1_vlan: left promiscuous mode [ 942.797375][ T6148] veth0_vlan: left promiscuous mode [ 943.284459][ T5820] Bluetooth: hci3: command tx timeout [ 945.020012][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 945.100731][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 945.363720][ T5820] Bluetooth: hci3: command tx timeout [ 947.562833][ T5820] Bluetooth: hci3: command tx timeout [ 948.008253][ T9102] team0: Port device team_slave_1 added [ 948.865428][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.873171][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.901779][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.354132][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.362763][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.396624][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.451035][ T9203] netlink: 80 bytes leftover after parsing attributes in process `syz.1.630'. [ 949.461814][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 949.472317][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 949.651481][ T5820] Bluetooth: hci3: command tx timeout [ 950.168104][ T5879] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.577204][ T5879] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.702957][ T9102] hsr_slave_0: entered promiscuous mode [ 950.711779][ T9102] hsr_slave_1: entered promiscuous mode [ 950.720190][ T9102] debugfs: 'hsr0' already exists in 'hsr' [ 950.727023][ T9102] Cannot create hsr debugfs directory [ 950.736839][ T9161] chnl_net:caif_netlink_parms(): no params data found [ 950.817041][ T5879] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.153733][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 951.178268][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 951.189990][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 951.233006][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 951.246201][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.265733][ T5879] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.895314][ T5879] bridge_slave_1: left allmulticast mode [ 952.901822][ T5879] bridge_slave_1: left promiscuous mode [ 952.908666][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.231154][ T5879] bridge_slave_0: left allmulticast mode [ 953.238263][ T5879] bridge_slave_0: left promiscuous mode [ 953.245406][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.402767][ T5820] Bluetooth: hci1: command tx timeout [ 954.256030][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.366607][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.423446][ T5879] bond0 (unregistering): Released all slaves [ 955.212525][ T5879] hsr_slave_0: left promiscuous mode [ 955.256337][ T5879] hsr_slave_1: left promiscuous mode [ 955.264252][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.273741][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.367984][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.377110][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.482390][ T5820] Bluetooth: hci1: command tx timeout [ 955.511673][ T5879] veth1_macvtap: left promiscuous mode [ 955.518425][ T5879] veth0_macvtap: left promiscuous mode [ 955.525733][ T5879] veth1_vlan: left promiscuous mode [ 955.531806][ T5879] veth0_vlan: left promiscuous mode [ 957.035183][ T5879] team0 (unregistering): Port device team_slave_1 removed [ 957.226604][ T5879] team0 (unregistering): Port device team_slave_0 removed [ 957.572773][ T5820] Bluetooth: hci1: command tx timeout [ 958.410198][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.419824][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.429009][ T9161] bridge_slave_0: entered allmulticast mode [ 958.439466][ T9161] bridge_slave_0: entered promiscuous mode [ 958.763465][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.771593][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.781228][ T9161] bridge_slave_1: entered allmulticast mode [ 958.791103][ T9161] bridge_slave_1: entered promiscuous mode [ 959.418728][ T5879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.643224][ T5820] Bluetooth: hci1: command tx timeout [ 959.841576][ T9161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.945748][ T5879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.053478][ T9161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.093631][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 960.228671][ T5879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.569172][ T5879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.861539][ T9161] team0: Port device team_slave_0 added [ 961.039838][ T9161] team0: Port device team_slave_1 added [ 961.084346][ T9102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 961.466778][ T9102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 961.720012][ T9102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 961.874863][ T9161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.883258][ T9161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.911235][ T9161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.934675][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.941833][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.064165][ T9102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 962.152459][ T5879] bridge_slave_1: left allmulticast mode [ 962.158430][ T5879] bridge_slave_1: left promiscuous mode [ 962.165434][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.363159][ T5879] bridge_slave_0: left allmulticast mode [ 962.369810][ T5879] bridge_slave_0: left promiscuous mode [ 962.376897][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.423712][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.537312][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.597075][ T5879] bond0 (unregistering): Released all slaves [ 963.855494][ T9161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.863038][ T9161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.892255][ T9161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.026431][ T5879] hsr_slave_0: left promiscuous mode [ 964.084243][ T5879] hsr_slave_1: left promiscuous mode [ 964.093695][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.102687][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.194777][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.205028][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.343240][ T5879] veth1_macvtap: left promiscuous mode [ 964.350111][ T5879] veth0_macvtap: left promiscuous mode [ 964.357980][ T5879] veth1_vlan: left promiscuous mode [ 964.363909][ T5879] veth0_vlan: left promiscuous mode [ 965.657796][ T5879] team0 (unregistering): Port device team_slave_1 removed [ 965.719059][ T5879] team0 (unregistering): Port device team_slave_0 removed [ 966.170038][ T9161] hsr_slave_0: entered promiscuous mode [ 966.179508][ T9161] hsr_slave_1: entered promiscuous mode [ 967.183182][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.191670][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.200802][ T9211] bridge_slave_0: entered allmulticast mode [ 967.212712][ T9211] bridge_slave_0: entered promiscuous mode [ 967.283410][ T5911] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 967.381424][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.389910][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.399093][ T9211] bridge_slave_1: entered allmulticast mode [ 967.408712][ T9211] bridge_slave_1: entered promiscuous mode [ 967.583470][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 967.668134][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.681382][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.692636][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.927584][ T5911] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 967.937535][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 967.946494][ T5911] usb 6-1: Product: syz [ 967.951104][ T5911] usb 6-1: Manufacturer: syz [ 967.956252][ T5911] usb 6-1: SerialNumber: syz [ 968.001574][ T5911] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11 [ 968.233828][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.287928][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.290058][ T5911] usb 6-1: USB disconnect, device number 6 [ 968.430426][ T5911] appletouch 6-1:1.0: input: appletouch disconnected [ 968.499351][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.641484][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.045886][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.053993][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.165887][ T9211] team0: Port device team_slave_0 added [ 969.261381][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.269091][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.400787][ T9211] team0: Port device team_slave_1 added [ 969.776675][ T9161] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 969.863054][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.871229][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.901033][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.113704][ T9161] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 970.211807][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.219138][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.245802][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.292424][ T9161] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 970.343207][ T9161] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 971.047782][ T9211] hsr_slave_0: entered promiscuous mode [ 971.057736][ T9211] hsr_slave_1: entered promiscuous mode [ 971.065959][ T9211] debugfs: 'hsr0' already exists in 'hsr' [ 971.072064][ T9211] Cannot create hsr debugfs directory [ 971.182463][ T5911] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 971.613053][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 971.721002][ T5911] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 971.731775][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.865210][ T5911] usb 6-1: config 0 descriptor?? [ 972.133873][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 972.189651][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 972.281406][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 972.290063][ T5911] usb 6-1: media controller created [ 972.346461][ T9293] ===================================================== [ 972.355056][ T9293] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23de/0x2f40 [ 972.364089][ T9293] __i2c_smbus_xfer+0x23de/0x2f40 [ 972.369773][ T9293] i2c_smbus_xfer+0x31d/0x4d0 [ 972.375426][ T9293] i2cdev_ioctl_smbus+0x4a1/0x660 [ 972.381232][ T9293] i2cdev_ioctl+0xa14/0xf40 [ 972.386295][ T9293] __se_sys_ioctl+0x23c/0x400 [ 972.391248][ T9293] __x64_sys_ioctl+0x97/0xe0 [ 972.396423][ T9293] x64_sys_call+0x18a7/0x3e70 [ 972.402377][ T9293] do_syscall_64+0xd9/0xf80 [ 972.407785][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.414983][ T9293] [ 972.417505][ T9293] Local variable msgbuf1.i created at: [ 972.423571][ T9293] __i2c_smbus_xfer+0x891/0x2f40 [ 972.428835][ T9293] i2c_smbus_xfer+0x31d/0x4d0 [ 972.434274][ T9293] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 972.436838][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.5.645 Tainted: G L syzkaller #0 PREEMPT(none) [ 972.448786][ T9293] Tainted: [L]=SOFTLOCKUP [ 972.455985][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 972.467848][ T9293] ===================================================== [ 972.475973][ T9293] Disabling lock debugging due to kernel taint [ 972.483668][ T9293] Kernel panic - not syncing: kmsan.panic set ... [ 972.490537][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.5.645 Tainted: G B L syzkaller #0 PREEMPT(none) [ 972.502371][ T9293] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 972.508735][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 972.519278][ T9293] Call Trace: [ 972.522649][ T9293] [ 972.525691][ T9293] __dump_stack+0x26/0x30 [ 972.530364][ T9293] dump_stack_lvl+0x53/0x270 [ 972.535557][ T9293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 972.541853][ T9293] dump_stack+0x1e/0x25 [ 972.546263][ T9293] vpanic+0x435/0xd30 [ 972.550834][ T9293] panic+0x15d/0x160 [ 972.555638][ T9293] kmsan_report+0x31c/0x320 [ 972.560824][ T9293] ? __msan_warning+0x1b/0x30 [ 972.565736][ T9293] ? __i2c_smbus_xfer+0x23de/0x2f40 [ 972.571155][ T9293] ? i2c_smbus_xfer+0x31d/0x4d0 [ 972.576995][ T9293] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 972.582952][ T9293] ? i2cdev_ioctl+0xa14/0xf40 [ 972.588115][ T9293] ? __se_sys_ioctl+0x23c/0x400 [ 972.593419][ T9293] ? __x64_sys_ioctl+0x97/0xe0 [ 972.598382][ T9293] ? x64_sys_call+0x18a7/0x3e70 [ 972.604065][ T9293] ? do_syscall_64+0xd9/0xf80 [ 972.609101][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.615681][ T9293] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 972.622254][ T9293] ? kmsan_get_metadata+0xfb/0x160 [ 972.628560][ T9293] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 972.635660][ T9293] ? kmsan_get_metadata+0xfb/0x160 [ 972.643453][ T9293] ? kmsan_get_metadata+0xfb/0x160 [ 972.649600][ T9293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 972.657206][ T9293] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 972.663367][ T9293] __msan_warning+0x1b/0x30 [ 972.668495][ T9293] __i2c_smbus_xfer+0x23de/0x2f40 [ 972.674032][ T9293] ? kmsan_get_metadata+0xfb/0x160 [ 972.679871][ T9293] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 972.686446][ T9293] ? rt_mutex_lock+0x3e/0x70 [ 972.691722][ T9293] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 972.698775][ T9293] i2c_smbus_xfer+0x31d/0x4d0 [ 972.703677][ T9293] i2cdev_ioctl_smbus+0x4a1/0x660 [ 972.709380][ T9293] i2cdev_ioctl+0xa14/0xf40 [ 972.714286][ T9293] ? kmsan_get_shadow_origin_ptr+0xa9/0xb0 [ 972.720755][ T9293] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 972.726617][ T9293] __se_sys_ioctl+0x23c/0x400 [ 972.732812][ T9293] __x64_sys_ioctl+0x97/0xe0 [ 972.737711][ T9293] x64_sys_call+0x18a7/0x3e70 [ 972.742647][ T9293] do_syscall_64+0xd9/0xf80 [ 972.747420][ T9293] ? clear_bhb_loop+0x40/0x90 [ 972.752724][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.760103][ T9293] RIP: 0033:0x7f0ebd78f749 [ 972.764824][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.785331][ T9293] RSP: 002b:00007f0ebe5dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.795634][ T9293] RAX: ffffffffffffffda RBX: 00007f0ebd9e5fa0 RCX: 00007f0ebd78f749 [ 972.805454][ T9293] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 972.814322][ T9293] RBP: 00007f0ebd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 972.824115][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.833346][ T9293] R13: 00007f0ebd9e6038 R14: 00007f0ebd9e5fa0 R15: 00007ffd31261d18 [ 972.842155][ T9293] [ 972.846201][ T9293] Kernel Offset: disabled [ 972.851686][ T9293] Rebooting in 86400 seconds..