last executing test programs: 16.373559173s ago: executing program 1 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 15.569579112s ago: executing program 2 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x172) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000006c0)='g', 0x1}], 0x1) close(r0) 15.202052382s ago: executing program 2 (id=101): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x200, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x14, 0x0, 0x5}, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x4, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 12.609568533s ago: executing program 2 (id=103): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) symlink(0x0, &(0x7f0000000100)='.\x00') 12.480143798s ago: executing program 1 (id=104): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)='{', 0x1}], 0x1) 10.465047271s ago: executing program 3 (id=110): landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@subsystem='pids'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00') 10.128065506s ago: executing program 4 (id=111): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x172) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000006c0)='g', 0x1}], 0x1) close(r0) 9.871156159s ago: executing program 4 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000"], 0x34}}, 0x0) 9.673187218s ago: executing program 4 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, 0x0) r4 = dup(r0) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r5, 0x8020100001, 0x0) 9.461886665s ago: executing program 3 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 8.744384072s ago: executing program 0 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 8.725469822s ago: executing program 1 (id=116): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x200, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x14, 0x0, 0x5}, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x4, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 8.530394487s ago: executing program 4 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.607207226s ago: executing program 0 (id=118): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 6.603241079s ago: executing program 1 (id=119): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@local, 0x63}) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a0}}, 0x0) 6.36392467s ago: executing program 0 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, 0x0) r3 = dup(r0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r4, 0x8020100001, 0x0) 5.206043887s ago: executing program 2 (id=121): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.873245282s ago: executing program 3 (id=122): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x172) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000006c0)='g', 0x1}], 0x1) close(r0) 4.457842851s ago: executing program 0 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000"], 0x34}}, 0x0) 4.379666364s ago: executing program 0 (id=124): landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@subsystem='pids'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00') 4.375316124s ago: executing program 3 (id=125): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x15, 0x3, "153c14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x20000400) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') lseek(r4, 0x2000, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.345075781s ago: executing program 4 (id=126): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe6, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x88e, 0xd50, 0x7, 0x5, 0x2, 0x10009, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x3, 0x3, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x3, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x49, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0xa, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xda7b, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x38d, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0xfffffffd, 0x4, 0x8, 0x3, 0x8, 0x13ffd, 0x400001, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x8, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.29862031s ago: executing program 0 (id=127): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)="0e", 0x1}], 0x1, 0x7c58fc9b, 0xc) 2.811815253s ago: executing program 1 (id=128): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400000000008, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 603.71389ms ago: executing program 2 (id=129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 477.57848ms ago: executing program 1 (id=130): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 341.50876ms ago: executing program 3 (id=131): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@local, 0x63}) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a0}}, 0x0) 267.324849ms ago: executing program 4 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 250.732107ms ago: executing program 2 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, 0x0) r3 = dup(r0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r4, 0x8020100001, 0x0) 0s ago: executing program 3 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 90.669147][ T5785] cgroup: Unknown subsys name 'net' [ 90.920484][ T5785] cgroup: Unknown subsys name 'cpuset' [ 90.975630][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.039171][ T44] cfg80211: failed to load regulatory.db [ 93.113213][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.583953][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.598398][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.613911][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.633728][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.647597][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.651457][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.657683][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.659016][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.659804][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.662275][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.662766][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.662932][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.663348][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.664309][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.666494][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.667076][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.669527][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.670584][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.679956][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.690731][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.692396][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.706105][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.712997][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.722511][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.726689][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.818368][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 96.869229][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 96.889105][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 97.156237][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 97.163080][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 97.776490][ T5805] Bluetooth: hci2: command tx timeout [ 97.817837][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.818634][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.819085][ T5808] bridge_slave_0: entered allmulticast mode [ 97.821205][ T5808] bridge_slave_0: entered promiscuous mode [ 97.854998][ T5798] Bluetooth: hci0: command tx timeout [ 97.855235][ T5802] Bluetooth: hci4: command tx timeout [ 97.855366][ T5805] Bluetooth: hci3: command tx timeout [ 97.855713][ T5811] Bluetooth: hci1: command tx timeout [ 98.037628][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.037738][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.037885][ T5808] bridge_slave_1: entered allmulticast mode [ 98.039765][ T5808] bridge_slave_1: entered promiscuous mode [ 98.042362][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.042452][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.042774][ T5800] bridge_slave_0: entered allmulticast mode [ 98.044582][ T5800] bridge_slave_0: entered promiscuous mode [ 98.131010][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.131185][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.131514][ T5799] bridge_slave_0: entered allmulticast mode [ 98.133374][ T5799] bridge_slave_0: entered promiscuous mode [ 98.216000][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.216122][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.216259][ T5800] bridge_slave_1: entered allmulticast mode [ 98.218125][ T5800] bridge_slave_1: entered promiscuous mode [ 98.387626][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.387828][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.388022][ T5799] bridge_slave_1: entered allmulticast mode [ 98.389847][ T5799] bridge_slave_1: entered promiscuous mode [ 98.801455][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.897018][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.897171][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.897315][ T5796] bridge_slave_0: entered allmulticast mode [ 98.899184][ T5796] bridge_slave_0: entered promiscuous mode [ 98.900906][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.901064][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.901236][ T5801] bridge_slave_0: entered allmulticast mode [ 98.903282][ T5801] bridge_slave_0: entered promiscuous mode [ 99.029707][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.043994][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.054922][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.055052][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.055247][ T5796] bridge_slave_1: entered allmulticast mode [ 99.058007][ T5796] bridge_slave_1: entered promiscuous mode [ 99.059596][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.059771][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.059946][ T5801] bridge_slave_1: entered allmulticast mode [ 99.062729][ T5801] bridge_slave_1: entered promiscuous mode [ 99.210655][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.278363][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.408390][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.748711][ T5808] team0: Port device team_slave_0 added [ 99.839230][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.854982][ T5811] Bluetooth: hci2: command tx timeout [ 99.920218][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.922558][ T5808] team0: Port device team_slave_1 added [ 99.928542][ T5800] team0: Port device team_slave_0 added [ 99.935067][ T5798] Bluetooth: hci0: command tx timeout [ 99.935149][ T5802] Bluetooth: hci4: command tx timeout [ 99.935213][ T5805] Bluetooth: hci3: command tx timeout [ 99.935275][ T5811] Bluetooth: hci1: command tx timeout [ 99.943343][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.951490][ T5799] team0: Port device team_slave_0 added [ 99.966761][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.047919][ T5800] team0: Port device team_slave_1 added [ 100.129473][ T5799] team0: Port device team_slave_1 added [ 100.837303][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.837317][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.837377][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.918207][ T5796] team0: Port device team_slave_0 added [ 100.998267][ T5801] team0: Port device team_slave_0 added [ 100.999251][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.999266][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.999296][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.000445][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.001203][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.001346][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.004164][ T5796] team0: Port device team_slave_1 added [ 101.011566][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.011610][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.011681][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.029180][ T5801] team0: Port device team_slave_1 added [ 101.070541][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.070604][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.070678][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.206497][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.206511][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.206531][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.509474][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.509489][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.509508][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.616736][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.616751][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.616770][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.619752][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.619764][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.619783][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.826613][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.826627][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.826647][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.936506][ T5811] Bluetooth: hci2: command tx timeout [ 102.016391][ T5802] Bluetooth: hci4: command tx timeout [ 102.016425][ T5798] Bluetooth: hci0: command tx timeout [ 102.016497][ T5805] Bluetooth: hci3: command tx timeout [ 102.016573][ T5811] Bluetooth: hci1: command tx timeout [ 102.060197][ T5808] hsr_slave_0: entered promiscuous mode [ 102.061468][ T5808] hsr_slave_1: entered promiscuous mode [ 102.253423][ T5800] hsr_slave_0: entered promiscuous mode [ 102.254478][ T5800] hsr_slave_1: entered promiscuous mode [ 102.267584][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 102.267672][ T5800] Cannot create hsr debugfs directory [ 102.287689][ T5799] hsr_slave_0: entered promiscuous mode [ 102.288741][ T5799] hsr_slave_1: entered promiscuous mode [ 102.289389][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 102.289406][ T5799] Cannot create hsr debugfs directory [ 102.832043][ T5796] hsr_slave_0: entered promiscuous mode [ 102.833053][ T5796] hsr_slave_1: entered promiscuous mode [ 102.833827][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 102.833845][ T5796] Cannot create hsr debugfs directory [ 102.992979][ T5801] hsr_slave_0: entered promiscuous mode [ 102.993970][ T5801] hsr_slave_1: entered promiscuous mode [ 102.996898][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 102.996974][ T5801] Cannot create hsr debugfs directory [ 104.014991][ T5811] Bluetooth: hci2: command tx timeout [ 104.095074][ T5802] Bluetooth: hci0: command tx timeout [ 104.095119][ T5805] Bluetooth: hci3: command tx timeout [ 104.095161][ T5798] Bluetooth: hci4: command tx timeout [ 104.095188][ T5811] Bluetooth: hci1: command tx timeout [ 104.292190][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.334712][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.369220][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.433421][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.534712][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.560888][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.608303][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.655998][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.788475][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.842998][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.882599][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.922014][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.067643][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.110930][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.149977][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.201631][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.339750][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.343508][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.395193][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.448354][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.497714][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.605793][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.634322][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.676530][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.676895][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.719907][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.720542][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.774126][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.818629][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.818777][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.860100][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.879019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.879169][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.969080][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.000259][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.027465][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.027615][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.089476][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.089697][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.170016][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.216364][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.219510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.220489][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.297839][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.298037][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.392416][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.451003][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.451402][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.527507][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.527685][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.573130][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.859723][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.232506][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.248999][ T5800] veth0_vlan: entered promiscuous mode [ 107.316952][ T5800] veth1_vlan: entered promiscuous mode [ 107.416905][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.491382][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.521538][ T5800] veth0_macvtap: entered promiscuous mode [ 107.547422][ T5799] veth0_vlan: entered promiscuous mode [ 107.566784][ T5800] veth1_macvtap: entered promiscuous mode [ 107.619161][ T5799] veth1_vlan: entered promiscuous mode [ 107.621547][ T5808] veth0_vlan: entered promiscuous mode [ 107.673110][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.683999][ T5801] veth0_vlan: entered promiscuous mode [ 107.700406][ T5808] veth1_vlan: entered promiscuous mode [ 107.712973][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.754592][ T1175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.771474][ T5801] veth1_vlan: entered promiscuous mode [ 107.773746][ T1175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.795841][ T1175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.802077][ T1175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.803820][ T5796] veth0_vlan: entered promiscuous mode [ 107.882554][ T5799] veth0_macvtap: entered promiscuous mode [ 107.941371][ T5799] veth1_macvtap: entered promiscuous mode [ 107.964359][ T5796] veth1_vlan: entered promiscuous mode [ 108.039097][ T5808] veth0_macvtap: entered promiscuous mode [ 108.075844][ T5808] veth1_macvtap: entered promiscuous mode [ 108.104301][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.142110][ T5801] veth0_macvtap: entered promiscuous mode [ 108.169617][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.183638][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.183659][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.213104][ T5801] veth1_macvtap: entered promiscuous mode [ 108.233436][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.247727][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.270567][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.270850][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.330770][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.392290][ T5796] veth0_macvtap: entered promiscuous mode [ 108.403317][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.404267][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.404290][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.443214][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.456073][ T5796] veth1_macvtap: entered promiscuous mode [ 108.500340][ T1038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516076][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.518295][ T3491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.547890][ T3491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.556810][ T3491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.665555][ T3491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.683877][ T3491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.701419][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.701517][ T3491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.751330][ T3491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.839868][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.889871][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.889895][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.982053][ T3491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.004494][ T3491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.019238][ T3491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.042779][ T3491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.337354][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.337378][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.434867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.444322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.577986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.584842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.590491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.594840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.604840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.614841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.624844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.634841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.426741][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.426762][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.588661][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.588689][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.725003][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.725025][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.815591][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.815613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.941270][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.941293][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.113144][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.113167][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.703109][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.884929][ T10] usb 2-1: device descriptor read/64, error -71 [ 119.054872][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.244970][ T10] usb 2-1: device descriptor read/64, error -110 [ 124.367652][ T10] usb usb2-port1: attempt power cycle [ 124.735197][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.755403][ T10] usb 2-1: device descriptor read/8, error -32 [ 126.646114][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.665643][ T10] usb 2-1: device descriptor read/8, error -32 [ 126.775208][ T10] usb usb2-port1: unable to enumerate USB device [ 130.855007][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.498132][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 131.560079][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.560135][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.560161][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.745444][ T10] usb 1-1: config 0 descriptor?? [ 133.167735][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.581270][ T5979] usb 1-1: USB disconnect, device number 2 [ 138.952028][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.952137][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.900384][ T6100] fuse: Bad value for 'fd' [ 149.745020][ T5953] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.848548][ T6126] vlan2: entered allmulticast mode [ 149.848645][ T6126] veth0_to_bond: entered allmulticast mode [ 151.140502][ T5953] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 151.140525][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.140540][ T5953] usb 3-1: Product: syz [ 151.140550][ T5953] usb 3-1: Manufacturer: syz [ 151.140560][ T5953] usb 3-1: SerialNumber: syz [ 152.277415][ T5953] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 152.277494][ T5953] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 152.805092][ T6139] faux_driver vkms: [drm] Unknown color mode 1194; guessing buffer size. [ 153.532045][ T6141] fuse: Bad value for 'fd' [ 154.221080][ T5953] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 154.221152][ T5953] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 154.240207][ T5953] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 154.275485][ T6146] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 154.781008][ T5953] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 154.795099][ T6083] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.358879][ T6083] usb 4-1: Using ep0 maxpacket: 8 [ 155.505519][ T6083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.505575][ T6083] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.505600][ T6083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.546957][ T5953] usb 3-1: USB disconnect, device number 2 [ 155.623799][ T6083] usb 4-1: config 0 descriptor?? [ 157.703599][ T6083] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 157.746556][ T6083] usb 4-1: USB disconnect, device number 2 [ 157.801343][ T5953] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.958517][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 157.961197][ T5953] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 157.961226][ T5953] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.961248][ T5953] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.961268][ T5953] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.961288][ T5953] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 157.961310][ T5953] usb 3-1: config 0 has no interface number 0 [ 157.961411][ T5953] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 157.961441][ T5953] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 157.961465][ T5953] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.961501][ T5953] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.961530][ T5953] usb 3-1: config 0 interface 125 has no altsetting 0 [ 157.961548][ T5953] usb 3-1: config 0 interface 125 has no altsetting 2 [ 157.994648][ T5953] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 157.994740][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.995097][ T5953] usb 3-1: Product: syz [ 157.995146][ T5953] usb 3-1: Manufacturer: syz [ 157.995185][ T5953] usb 3-1: SerialNumber: syz [ 158.121494][ T5953] usb 3-1: config 0 descriptor?? [ 158.187225][ T5953] usb 3-1: selecting invalid altsetting 2 [ 161.212088][ T6083] usb 3-1: USB disconnect, device number 3 [ 161.393088][ T6190] fuse: Bad value for 'fd' [ 169.153627][ T6240] fuse: Bad value for 'fd' [ 169.245345][ T5973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.867485][ T5973] usb 1-1: Using ep0 maxpacket: 32 [ 170.093746][ T5973] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 170.093777][ T5973] usb 1-1: config 0 has no interface number 0 [ 170.093826][ T5973] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.131563][ T5973] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 170.131597][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.131618][ T5973] usb 1-1: Product: syz [ 170.131634][ T5973] usb 1-1: Manufacturer: syz [ 170.131650][ T5973] usb 1-1: SerialNumber: syz [ 170.277903][ T5973] usb 1-1: config 0 descriptor?? [ 172.314046][ T5973] usb 1-1: USB disconnect, device number 3 [ 174.424118][ T6268] vlan2: entered allmulticast mode [ 174.424140][ T6268] veth0_to_bond: entered allmulticast mode [ 175.263347][ T6282] fuse: Invalid rootmode [ 175.291260][ T6281] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 176.196935][ T6283] vlan2: entered allmulticast mode [ 176.196958][ T6283] veth0_to_bond: entered allmulticast mode [ 178.756886][ T5947] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.383755][ T5855] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.727431][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 179.774997][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 179.776911][ T5947] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 179.776937][ T5947] usb 2-1: config 0 has no interface number 0 [ 179.776985][ T5947] usb 2-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.818524][ T5855] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 179.818617][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.818640][ T5855] usb 1-1: Product: syz [ 179.818662][ T5855] usb 1-1: Manufacturer: syz [ 179.818678][ T5855] usb 1-1: SerialNumber: syz [ 179.818943][ T5947] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 179.818968][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.818989][ T5947] usb 2-1: Product: syz [ 179.819005][ T5947] usb 2-1: Manufacturer: syz [ 179.819020][ T5947] usb 2-1: SerialNumber: syz [ 179.916551][ T5947] usb 2-1: config 0 descriptor?? [ 179.945534][ T5855] usb 1-1: config 0 descriptor?? [ 180.463847][ T6316] vlan2: entered allmulticast mode [ 180.463870][ T6316] veth0_to_bond: entered allmulticast mode [ 180.618397][ T5855] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 180.657490][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.660195][ T5855] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 180.660259][ T5855] usb 1-1: media controller created [ 180.741956][ T6321] fuse: Invalid rootmode [ 180.784090][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.964978][ T5855] zl10353_read_register: readreg error (reg=127, ret==0) [ 180.965056][ T5855] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 180.965078][ T5855] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 180.971730][ T5855] usb 1-1: USB disconnect, device number 4 [ 181.271777][ T5855] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 182.003943][ T5849] usb 2-1: USB disconnect, device number 6 [ 186.278620][ T6356] fuse: Invalid rootmode [ 186.710607][ T5924] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 186.865094][ T5855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 186.891851][ T5924] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.891882][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.891903][ T5924] usb 3-1: Product: syz [ 186.891918][ T5924] usb 3-1: Manufacturer: syz [ 186.891934][ T5924] usb 3-1: SerialNumber: syz [ 186.930383][ T5924] usb 3-1: config 0 descriptor?? [ 187.014906][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 187.018775][ T5855] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 187.018803][ T5855] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.018919][ T5855] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.018942][ T5855] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.018963][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.018985][ T5855] usb 4-1: config 0 has no interface number 0 [ 187.019043][ T5855] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 187.019073][ T5855] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 187.019097][ T5855] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.019135][ T5855] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.019166][ T5855] usb 4-1: config 0 interface 125 has no altsetting 0 [ 187.019185][ T5855] usb 4-1: config 0 interface 125 has no altsetting 2 [ 187.028748][ T5855] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 187.028797][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.028819][ T5855] usb 4-1: Product: syz [ 187.028841][ T5855] usb 4-1: Manufacturer: syz [ 187.028880][ T5855] usb 4-1: SerialNumber: syz [ 187.217923][ T5924] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.448767][ T5855] usb 4-1: config 0 descriptor?? [ 187.493121][ T5855] usb 4-1: selecting invalid altsetting 2 [ 187.914915][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.977996][ T5855] get_1284_register timeout [ 189.984247][ C0] usb 4-1: async_complete: urb error -104 [ 189.986914][ C0] usb 4-1: async_complete: urb error -104 [ 189.987383][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 189.989691][ T5855] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 190.029304][ T5924] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 190.076989][ T5924] usb 3-1: USB disconnect, device number 4 [ 190.109602][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 190.145166][ T9] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 190.145197][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.145218][ T9] usb 1-1: Product: syz [ 190.145233][ T9] usb 1-1: Manufacturer: syz [ 190.145248][ T9] usb 1-1: SerialNumber: syz [ 190.246143][ T9] usb 1-1: config 0 descriptor?? [ 190.340820][ T5924] usb 4-1: USB disconnect, device number 3 [ 190.704628][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 190.736812][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.058698][ T6371] ------------[ cut here ]------------ [ 191.058713][ T6371] usb 1-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType c0 [ 191.058741][ T6371] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#1: syz.0.127/6371 [ 191.058791][ T6371] Modules linked in: [ 191.058829][ T6371] CPU: 1 UID: 0 PID: 6371 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.058855][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.058871][ T6371] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 191.058898][ T6371] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 191.058916][ T6371] RSP: 0018:ffffc9000c3076e0 EFLAGS: 00010246 [ 191.058936][ T6371] RAX: 0000000000000000 RBX: ffff88814d9f8c00 RCX: 0000000080000580 [ 191.058952][ T6371] RDX: ffff88801fae7540 RSI: ffffffff8b83ac20 RDI: ffffffff8ee6e670 [ 191.058969][ T6371] RBP: 1ffff110058b5f2c R08: 00000000000000c0 R09: 0000000000000000 [ 191.058984][ T6371] R10: ffffc9000c3077e0 R11: fffff52001860f08 R12: ffff8880385c4100 [ 191.059001][ T6371] R13: ffff88802c5af960 R14: 0000000080000580 R15: ffff88801fae7540 [ 191.059018][ T6371] FS: 00007fe0c3a5e6c0(0000) GS:ffff888126dee000(0000) knlGS:0000000000000000 [ 191.059037][ T6371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.059052][ T6371] CR2: 0000200000011000 CR3: 00000000374a2000 CR4: 00000000003526f0 [ 191.059072][ T6371] Call Trace: [ 191.059085][ T6371] [ 191.059122][ T6371] usb_start_wait_urb+0x115/0x4f0 [ 191.059162][ T6371] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 191.059213][ T6371] usb_control_msg+0x232/0x3e0 [ 191.059247][ T6371] dtv5100_i2c_msg+0x231/0x2f0 [ 191.059284][ T6371] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 191.059322][ T6371] __i2c_transfer+0x79a/0x1f00 [ 191.059356][ T6371] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 191.059382][ T6371] ? i2c_transfer+0xc8/0x2d0 [ 191.059410][ T6371] i2c_transfer+0x1cc/0x2d0 [ 191.059441][ T6371] i2c_transfer_buffer_flags+0x105/0x190 [ 191.059472][ T6371] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 191.059505][ T6371] ? _copy_from_user+0x94/0xb0 [ 191.059553][ T6371] i2cdev_write+0x116/0x1f0 [ 191.059584][ T6371] vfs_writev+0x4bf/0x970 [ 191.059605][ T6371] ? finish_task_switch+0x23d/0x940 [ 191.059639][ T6371] ? __pfx_i2cdev_write+0x10/0x10 [ 191.059668][ T6371] ? __pfx_vfs_writev+0x10/0x10 [ 191.059714][ T6371] ? __fget_files+0x2a/0x420 [ 191.059742][ T6371] ? __fget_files+0x3a6/0x420 [ 191.059764][ T6371] ? __fget_files+0x2a/0x420 [ 191.059797][ T6371] __x64_sys_pwritev+0x19a/0x2a0 [ 191.059831][ T6371] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 191.059873][ T6371] do_syscall_64+0xec/0xf80 [ 191.059892][ T6371] ? rcu_is_watching+0x15/0xb0 [ 191.059909][ T6371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.059927][ T6371] ? clear_bhb_loop+0x60/0xb0 [ 191.059951][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.059969][ T6371] RIP: 0033:0x7fe0c57ff749 [ 191.059995][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.060011][ T6371] RSP: 002b:00007fe0c3a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 191.060033][ T6371] RAX: ffffffffffffffda RBX: 00007fe0c5a55fa0 RCX: 00007fe0c57ff749 [ 191.060049][ T6371] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 191.060063][ T6371] RBP: 00007fe0c5883f91 R08: 000000000000000c R09: 0000000000000000 [ 191.060076][ T6371] R10: 000000007c58fc9b R11: 0000000000000246 R12: 0000000000000000 [ 191.060089][ T6371] R13: 00007fe0c5a56038 R14: 00007fe0c5a55fa0 R15: 00007ffe36387aa8 [ 191.060125][ T6371] [ 191.060142][ T6371] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.060159][ T6371] CPU: 1 UID: 0 PID: 6371 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.060185][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.060197][ T6371] Call Trace: [ 191.060206][ T6371] [ 191.060215][ T6371] vpanic+0x1e0/0x670 [ 191.060249][ T6371] panic+0xb9/0xc0 [ 191.060278][ T6371] ? __pfx_panic+0x10/0x10 [ 191.060324][ T6371] __warn+0x317/0x4b0 [ 191.060351][ T6371] ? usb_submit_urb+0x105c/0x18d0 [ 191.060385][ T6371] ? usb_submit_urb+0x105c/0x18d0 [ 191.060409][ T6371] __report_bug+0x288/0x500 [ 191.060432][ T6371] ? usb_submit_urb+0x105c/0x18d0 [ 191.060483][ T6371] ? __pfx___report_bug+0x10/0x10 [ 191.060514][ T6371] ? usb_submit_urb+0x1121/0x18d0 [ 191.060539][ T6371] ? usb_submit_urb+0x111c/0x18d0 [ 191.060574][ T6371] report_bug_entry+0x19a/0x290 [ 191.060597][ T6371] ? usb_submit_urb+0x111c/0x18d0 [ 191.060622][ T6371] ? usb_submit_urb+0x1121/0x18d0 [ 191.060647][ T6371] handle_bug+0xca/0x200 [ 191.060674][ T6371] exc_invalid_op+0x1a/0x50 [ 191.060724][ T6371] asm_exc_invalid_op+0x1a/0x20 [ 191.060745][ T6371] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 191.060772][ T6371] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 191.060790][ T6371] RSP: 0018:ffffc9000c3076e0 EFLAGS: 00010246 [ 191.060810][ T6371] RAX: 0000000000000000 RBX: ffff88814d9f8c00 RCX: 0000000080000580 [ 191.060826][ T6371] RDX: ffff88801fae7540 RSI: ffffffff8b83ac20 RDI: ffffffff8ee6e670 [ 191.060843][ T6371] RBP: 1ffff110058b5f2c R08: 00000000000000c0 R09: 0000000000000000 [ 191.060858][ T6371] R10: ffffc9000c3077e0 R11: fffff52001860f08 R12: ffff8880385c4100 [ 191.060875][ T6371] R13: ffff88802c5af960 R14: 0000000080000580 R15: ffff88801fae7540 [ 191.060927][ T6371] usb_start_wait_urb+0x115/0x4f0 [ 191.060963][ T6371] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 191.061016][ T6371] usb_control_msg+0x232/0x3e0 [ 191.061049][ T6371] dtv5100_i2c_msg+0x231/0x2f0 [ 191.061086][ T6371] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 191.061126][ T6371] __i2c_transfer+0x79a/0x1f00 [ 191.061161][ T6371] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 191.061188][ T6371] ? i2c_transfer+0xc8/0x2d0 [ 191.061217][ T6371] i2c_transfer+0x1cc/0x2d0 [ 191.061248][ T6371] i2c_transfer_buffer_flags+0x105/0x190 [ 191.061280][ T6371] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 191.061314][ T6371] ? _copy_from_user+0x94/0xb0 [ 191.061340][ T6371] i2cdev_write+0x116/0x1f0 [ 191.061371][ T6371] vfs_writev+0x4bf/0x970 [ 191.061394][ T6371] ? finish_task_switch+0x23d/0x940 [ 191.061429][ T6371] ? __pfx_i2cdev_write+0x10/0x10 [ 191.061460][ T6371] ? __pfx_vfs_writev+0x10/0x10 [ 191.061500][ T6371] ? __fget_files+0x2a/0x420 [ 191.061528][ T6371] ? __fget_files+0x3a6/0x420 [ 191.061550][ T6371] ? __fget_files+0x2a/0x420 [ 191.061584][ T6371] __x64_sys_pwritev+0x19a/0x2a0 [ 191.061621][ T6371] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 191.061670][ T6371] do_syscall_64+0xec/0xf80 [ 191.061698][ T6371] ? rcu_is_watching+0x15/0xb0 [ 191.061718][ T6371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.061741][ T6371] ? clear_bhb_loop+0x60/0xb0 [ 191.061768][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.061790][ T6371] RIP: 0033:0x7fe0c57ff749 [ 191.061809][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.061827][ T6371] RSP: 002b:00007fe0c3a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 191.061848][ T6371] RAX: ffffffffffffffda RBX: 00007fe0c5a55fa0 RCX: 00007fe0c57ff749 [ 191.061865][ T6371] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 191.061879][ T6371] RBP: 00007fe0c5883f91 R08: 000000000000000c R09: 0000000000000000 [ 191.061894][ T6371] R10: 000000007c58fc9b R11: 0000000000000246 R12: 0000000000000000 [ 191.061908][ T6371] R13: 00007fe0c5a56038 R14: 00007fe0c5a55fa0 R15: 00007ffe36387aa8 [ 191.061945][ T6371] [ 191.062556][ T6371] Kernel Offset: disabled