last executing test programs: 17m27.64077103s ago: executing program 32 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x3ff, 0x4) 17m15.80695517s ago: executing program 33 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000007df3000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0x12) 16m52.137872122s ago: executing program 34 (id=29): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10882008180f00fff3c00e140000001a00ffffba16a0aa1c091dbf", 0x34}], 0x1}, 0x0) 16m36.440275121s ago: executing program 35 (id=45): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0xc, 0x8010, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af25, 0x0) 15m3.879537196s ago: executing program 36 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB], 0x84}}, 0x0) 14m22.95226928s ago: executing program 37 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xec}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(0x0, 0x80242, 0x1df2a23c5997fa5f) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) 14m0.13465699s ago: executing program 38 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffff7, 0x810, r1, 0xc479b000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000a7000000dd0000000a0000b6c8000000", @ANYRESDEC=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r6, 0xe7d4c009da6c1985}, {r6, 0x201}], 0x2, 0x4) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) 12m19.914192326s ago: executing program 39 (id=367): bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000180), 0x10) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 12m13.94413863s ago: executing program 40 (id=374): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x88ad, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) 12m6.613182423s ago: executing program 41 (id=225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x2000, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x100}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) 10m50.524171392s ago: executing program 42 (id=469): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) 10m32.379621563s ago: executing program 43 (id=499): socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x5, &(0x7f0000000180)={0x0, 0xc, 0x4, @thr={&(0x7f0000000080)="e728a097a686b6459815716722362dedc1a918b863df3460e45e7c", &(0x7f0000000340)="f459b915a3878b9272a70ebc154702d1b18e0fd17193afcc408b926bae7fb9ca7cb41bad025451d98bd494b3995cc6bbb1d41a6111885649d32803c6881336a72c626d9b37550ee45b9410b634923ce7189a636f7a2ae01ad42f06e374f521b0dedd2c2b2aed75c23b9a887aea1680f61d5fd1cc6d8ccfa13b45f368ccd11c1424103f1d545891017bd9ece3adac42b65b7c8b24d4cdca827dc8e47e92f4a19be945f422"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000440)={{r4, r5+60000000}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r6, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c03, 0xffffffffffffffff) syz_open_dev$MSR(0x0, 0x0, 0x0) gettid() 9m37.15149556s ago: executing program 44 (id=565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2f}}, 0xfffffff7, 0x200, 0x4, 0x126, 0xbc0}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r3, 0xc1e}, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7m34.021827084s ago: executing program 1 (id=712): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}], 0x1}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x19, 0xc, "fafd8317e5a11400001a8dbe43ea6a4996e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab61c9e6d680f985891a7beda9b79098c8b534464c5100dd8e0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a0b2f7b6aa54cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8cc85ba139c01802c4dae4162e43ac61b7ad33", [0x800000000005, 0x7]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0xa, 0x8, 0x0, 0x8001, 0xc, 0xd7, 0x10, 0xfc, 0xc9, 0xe3, 0xc5, 0x0, 0xff, 0x5, 0x7f, 0x79, 0x7, 0x3, '\x00', 0x92, 0x84}) 7m31.786390017s ago: executing program 1 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e", 0x9}], 0x3, 0xffffffff, 0x4) 7m30.075735102s ago: executing program 1 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, 0x0, 0xa01, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008004) 7m29.557266087s ago: executing program 1 (id=724): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m11.9616829s ago: executing program 45 (id=724): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m0.125309953s ago: executing program 7 (id=780): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010000000000000000001000000015fe0000f2"], 0x30}], 0x1}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x19, 0xc, "fafd8317e5a11400001a8dbe43ea6a4996e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab61c9e6d680f985891a7beda9b79098c8b534464c5100dd8e0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a0b2f7b6aa54cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8cc85ba139c01802c4dae4162e43ac61b7ad33", [0x800000000005, 0x7]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0xa, 0x8, 0x0, 0x8001, 0xc, 0xd7, 0x10, 0xfc, 0xc9, 0xe3, 0xc5, 0x0, 0xff, 0x5, 0x7f, 0x79, 0x7, 0x3, '\x00', 0x92, 0x84}) 6m59.252866004s ago: executing program 8 (id=783): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 6m59.170826582s ago: executing program 7 (id=784): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x17, 0x65, 0x0, 0x10, 0x29, 0x0, @remote, @local}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m58.462879797s ago: executing program 8 (id=785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) statfs(0x0, 0x0) semtimedop(0x0, &(0x7f00000001c0), 0x0, 0x0) 6m55.406436273s ago: executing program 7 (id=791): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) semctl$GETALL(0x0, 0x0, 0xd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) userfaultfd(0x80001) 6m42.91459048s ago: executing program 46 (id=785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) statfs(0x0, 0x0) semtimedop(0x0, &(0x7f00000001c0), 0x0, 0x0) 6m38.852351748s ago: executing program 47 (id=791): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) semctl$GETALL(0x0, 0x0, 0xd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) userfaultfd(0x80001) 3m9.262635892s ago: executing program 2 (id=1163): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 3m6.80232854s ago: executing program 2 (id=1166): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0xb1f}], 0x1}}], 0x1, 0x400c0) 3m5.094558078s ago: executing program 2 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1814018, 0x0) 3m4.334610029s ago: executing program 2 (id=1172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000028501, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000300)) 3m2.974306205s ago: executing program 2 (id=1177): r0 = open(&(0x7f00000006c0)='./file0\x00', 0x14b37e, 0x36) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x1000000) 3m1.079779131s ago: executing program 2 (id=1179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0xed9b, 0xff, 0x6, 0x3, {0x5, 0x8, 0x8fee, 0x7, 0xac4, 0xd, 0x6, 0xff, 0x1, 0x4000, 0x5, 0x0, 0x0, 0xd, 0xff}}, {0x0, 0x1e}}}, 0xa0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m45.538874292s ago: executing program 48 (id=1179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0xed9b, 0xff, 0x6, 0x3, {0x5, 0x8, 0x8fee, 0x7, 0xac4, 0xd, 0x6, 0xff, 0x1, 0x4000, 0x5, 0x0, 0x0, 0xd, 0xff}}, {0x0, 0x1e}}}, 0xa0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m38.313205001s ago: executing program 5 (id=1217): syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0) 2m33.684701173s ago: executing program 5 (id=1221): open(0x0, 0x284800, 0x30) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xca000) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2m32.981389646s ago: executing program 5 (id=1224): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000400)="9e81a190", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x3], 0x0, 0x0, 0x1}}, 0x3c) 2m32.093885931s ago: executing program 3 (id=1227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) 2m31.602970615s ago: executing program 5 (id=1229): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) r7 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x228a, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1000001, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x38) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 2m31.02441845s ago: executing program 3 (id=1231): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040', @ANYBLOB=',g']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m28.676237836s ago: executing program 5 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1814018, 0x0) 2m27.686243663s ago: executing program 4 (id=1234): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8c030) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xa0, r9, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "ad8b00a639d7d76b00"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd59abd6ed343d93b7b16781a0e0e73c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "8e007f625fdba5dabe7bd5b3bf30ff3d"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="ad0c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "47a029190018480000000000d509e669"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 2m27.536821256s ago: executing program 3 (id=1235): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010000000000000000001000000015fe0000f25e0000000000000d"], 0x30}], 0x1}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x19, 0xc, "fafd8317e5a11400001a8dbe43ea6a4996e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab61c9e6d680f985891a7beda9b79098c8b534464c5100dd8e0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a0b2f7b6aa54cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8cc85ba139c01802c4dae4162e43ac61b7ad33", [0x800000000005, 0x7]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0xa, 0x8, 0x0, 0x8001, 0xc, 0xd7, 0x10, 0xfc, 0xc9, 0xe3, 0xc5, 0x0, 0xff, 0x5, 0x7f, 0x79, 0x7, 0x3, '\x00', 0x92, 0x84}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m27.418822454s ago: executing program 5 (id=1236): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2m26.627620315s ago: executing program 3 (id=1237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="000827bd7000fcdb1b"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m26.074878116s ago: executing program 4 (id=1238): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x17, 0x65, 0x0, 0x10, 0x29, 0x0, @remote, @local}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m25.144778335s ago: executing program 3 (id=1240): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000500)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2m24.815096757s ago: executing program 4 (id=1242): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="780200002400010026bd7000fedbdf25670200800c0001"], 0x278}], 0x1}, 0x0) 2m22.724671149s ago: executing program 3 (id=1243): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 2m20.176917229s ago: executing program 4 (id=1245): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040', @ANYBLOB=',g']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m19.167971946s ago: executing program 4 (id=1247): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8c030) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xa0, r9, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "ad8b00a639d7d76b00"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd59abd6ed343d93b7b16781a0e0e73c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "8e007f625fdba5dabe7bd5b3bf30ff3d"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="ad0c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "47a029190018480000000000d509e669"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 2m17.072557864s ago: executing program 4 (id=1250): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) brk(0x400000ffc000) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) 2m9.335236248s ago: executing program 49 (id=1236): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2m6.650446401s ago: executing program 50 (id=1243): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 2m1.036178754s ago: executing program 51 (id=1250): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) brk(0x400000ffc000) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) 1m25.297142251s ago: executing program 0 (id=1287): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xd167c59f62fd874c) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.750085869s ago: executing program 0 (id=1288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) shutdown(r0, 0x1) 1m20.654025232s ago: executing program 0 (id=1289): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x17, 0x65, 0x0, 0x10, 0x29, 0x0, @remote, @local}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m19.580988528s ago: executing program 0 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0xc, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 1m18.675690387s ago: executing program 0 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1814018, 0x0) 1m17.710308363s ago: executing program 0 (id=1292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 1m11.56556865s ago: executing program 1 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_io_uring_setup(0x23d, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0xc, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 1m10.736801982s ago: executing program 1 (id=1293): fallocate(0xffffffffffffffff, 0x8, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000000c0)={0x18}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001540), 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0}, 0x90) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) getsockname(r4, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "f3ffff0d00ffffff", "37a0f9ffff4b00000200007d00", "40c28f00", "de3f106b925ded4d"}, 0x28) ioctl$FBIOPUT_CON2FBMAP(r2, 0xc0684608, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2}}, 0xfffffffffffffee3, 0x0}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) lseek(0xffffffffffffffff, 0x0, 0x4) 1m8.960987095s ago: executing program 8 (id=1259): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8c030) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x4000}) bind$alg(r6, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xa0, r9, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "ad8b00a639d7d76b00"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd59abd6ed343d93b7b16781a0e0e73c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "8e007f625fdba5dabe7bd5b3bf30ff3d"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="ad0c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "47a029190018480000000000d509e669"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 1m6.920038284s ago: executing program 8 (id=1295): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) shutdown(r0, 0x1) 1m6.160168486s ago: executing program 8 (id=1297): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r0, {0x7, 0x26, 0xc, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 1m5.137956918s ago: executing program 8 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xfffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m2.382899157s ago: executing program 52 (id=1292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 54.597051286s ago: executing program 53 (id=1293): fallocate(0xffffffffffffffff, 0x8, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000000c0)={0x18}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001540), 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0}, 0x90) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) getsockname(r4, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "f3ffff0d00ffffff", "37a0f9ffff4b00000200007d00", "40c28f00", "de3f106b925ded4d"}, 0x28) ioctl$FBIOPUT_CON2FBMAP(r2, 0xc0684608, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2}}, 0xfffffffffffffee3, 0x0}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) lseek(0xffffffffffffffff, 0x0, 0x4) 49.503585962s ago: executing program 54 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xfffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 42.22127863s ago: executing program 6 (id=1322): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x448}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 36.126600179s ago: executing program 6 (id=1324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) 34.153606138s ago: executing program 6 (id=1325): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8c030) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x4000}) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x60, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xa0, r9, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "ad8b00a639d7d76b00"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd59abd6ed343d93b7b16781a0e0e73c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "8e007f625fdba5dabe7bd5b3bf30ff3d"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="ad0c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "47a029190018480000000000d509e669"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 31.968184371s ago: executing program 6 (id=1327): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x17, 0x65, 0x0, 0x10, 0x29, 0x0, @remote, @local}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.462845902s ago: executing program 6 (id=1329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0\x00', 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 25.148922646s ago: executing program 6 (id=1331): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) 19.446407277s ago: executing program 9 (id=1332): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) gettid() r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d04700847610000000109021200010000000009"], 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x6, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 13.730020789s ago: executing program 9 (id=1333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0802000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r6, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000980)=ANY=[@ANYBLOB="500000000802190000010802110000000802110000000000000000000000000064000100010882848b960c121824969864df54da2ae83e1d13adec1743be95f905350d42d5f2c38d0f3e8a8c769c3c5231b8efbf46ad753bccebf32256db1181f1e80dabe17a52392c774040b1d4018cd53e57fe32ea87f8baca7b8d96b6f05a9d7811e3c5a6a67af4a5298935d6936587e18572"], 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 10.26516612s ago: executing program 9 (id=1334): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8c030) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x4000}) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x60, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xa0, r9, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "ad8b00a639d7d76b00"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd59abd6ed343d93b7b16781a0e0e73c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "8e007f625fdba5dabe7bd5b3bf30ff3d"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="ad0c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "47a029190018480000000000d509e669"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 8.382993457s ago: executing program 55 (id=1331): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) 7.523037912s ago: executing program 9 (id=1336): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x17, 0x65, 0x0, 0x10, 0x29, 0x0, @remote, @local}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.070528169s ago: executing program 9 (id=1337): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x7) shutdown(r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="2681770b6d0000000f01c9660f3820c6c4c2ddbe1563020000360f017269676426660f5905c4e13d67dbf30f2d266618d8650f01c8", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.350653961s ago: executing program 7 (id=1301): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.512868463s ago: executing program 7 (id=1338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0\x00', 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 49.63561ms ago: executing program 9 (id=1339): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000000, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r6, 0x5421, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7bd}}, './file0\x00'}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregs(0xc, r7, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r8, 0x0, 0x201f00) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 0s ago: executing program 7 (id=1340): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "02000000"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000009c0)={0x0, 0x15, 0x4, "c70b9810"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0xf, 0x4, "a9e218ec"}, 0x0, 0x0}) kernel console output (not intermixed with test programs): timeout [ 948.248740][ T5817] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 948.333545][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.599083][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.698005][ T3824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.753874][ T6976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.812362][ T6976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.860631][ T6976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.149174][ T6358] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 957.513849][ T6358] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.525521][ T6358] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.536063][ T6358] usb 6-1: config 0 interface 0 has no altsetting 0 [ 957.543120][ T6358] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 957.552580][ T6358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.721111][ T6358] usb 6-1: config 0 descriptor?? [ 958.199386][ T6358] usbhid 6-1:0.0: can't add hid device: -71 [ 958.221447][ T6358] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 958.293294][ T6358] usb 6-1: USB disconnect, device number 11 [ 965.329632][ T6340] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 965.566967][ T6340] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.579927][ T6340] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.596876][ T6340] usb 6-1: config 0 interface 0 has no altsetting 0 [ 965.604031][ T6340] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 965.613586][ T6340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.778902][ T6340] usb 6-1: config 0 descriptor?? [ 966.459810][ T6340] usbhid 6-1:0.0: can't add hid device: -71 [ 966.466528][ T6340] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 966.541231][ T6340] usb 6-1: USB disconnect, device number 12 [ 967.049374][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.056088][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.604323][ T3508] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.766503][ T3508] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.173435][ T3508] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.407165][ T3508] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.139467][ T3508] bridge_slave_1: left allmulticast mode [ 970.145414][ T3508] bridge_slave_1: left promiscuous mode [ 970.152943][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.259443][ T3508] bridge_slave_0: left allmulticast mode [ 970.265355][ T3508] bridge_slave_0: left promiscuous mode [ 970.272506][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.367839][ T8038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 970.400017][ T8038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 970.557456][ T8038] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 970.573478][ T8038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 970.585767][ T8038] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 970.796866][ T6359] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 971.165748][ T9679] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 971.352693][ T6359] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.364814][ T6359] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.375302][ T6359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 971.382391][ T6359] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 971.392486][ T6359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.545733][ T6359] usb 5-1: config 0 descriptor?? [ 971.980736][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.155723][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.190563][ T3508] bond0 (unregistering): Released all slaves [ 972.336665][ T9679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.360173][ T9679] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 972.388861][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.397002][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.766293][ T6359] usbhid 5-1:0.0: can't add hid device: -71 [ 972.776719][ T6359] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 972.779652][ T8038] Bluetooth: hci1: command tx timeout [ 972.854360][ T6359] usb 5-1: USB disconnect, device number 13 [ 973.633178][ T3508] hsr_slave_0: left promiscuous mode [ 973.668374][ T3508] hsr_slave_1: left promiscuous mode [ 973.682926][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.690767][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.783317][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.791416][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.940388][ T3508] veth1_macvtap: left promiscuous mode [ 973.946188][ T3508] veth0_macvtap: left promiscuous mode [ 973.952613][ T3508] veth1_vlan: left promiscuous mode [ 973.958436][ T3508] veth0_vlan: left promiscuous mode [ 974.863010][ T8038] Bluetooth: hci1: command tx timeout [ 974.870587][ T8038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.907724][ T9694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.920547][ T9694] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.942566][ T9694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.955074][ T9694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.542156][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 975.688735][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 977.295925][ T9694] Bluetooth: hci1: command tx timeout [ 977.302184][ T9694] Bluetooth: hci3: command tx timeout [ 978.125698][ T4063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.426550][ T4063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.687247][ T4063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.081040][ T4063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.369877][ T5817] Bluetooth: hci3: command tx timeout [ 979.375642][ T5817] Bluetooth: hci1: command tx timeout [ 979.781038][ T9727] netlink: 'syz.5.905': attribute type 13 has an invalid length. [ 979.790577][ T9727] netlink: 'syz.5.905': attribute type 17 has an invalid length. [ 979.949686][ T6326] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 980.189909][ T6326] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.199180][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.905'. [ 980.202004][ T6326] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.220804][ T6326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 980.230962][ T6326] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 980.241872][ T6326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.294872][ T6326] usb 5-1: config 0 descriptor?? [ 980.464102][ T9727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 980.645760][ T9732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.766219][ T4063] bridge_slave_1: left allmulticast mode [ 980.773161][ T4063] bridge_slave_1: left promiscuous mode [ 980.781019][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.814795][ T4063] bridge_slave_0: left allmulticast mode [ 980.822411][ T4063] bridge_slave_0: left promiscuous mode [ 980.830137][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.012533][ T6326] usbhid 5-1:0.0: can't add hid device: -71 [ 981.020477][ T6326] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 981.050993][ T6326] usb 5-1: USB disconnect, device number 14 [ 981.408719][ T9694] Bluetooth: hci3: command tx timeout [ 981.550290][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.601363][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.619543][ T4063] bond0 (unregistering): Released all slaves [ 981.660662][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 981.912674][ T9692] chnl_net:caif_netlink_parms(): no params data found [ 982.528995][ T4063] hsr_slave_0: left promiscuous mode [ 982.545592][ T4063] hsr_slave_1: left promiscuous mode [ 982.554828][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.562985][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.593627][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.601435][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.635525][ T4063] veth1_macvtap: left promiscuous mode [ 982.643175][ T4063] veth0_macvtap: left promiscuous mode [ 982.649552][ T4063] veth1_vlan: left promiscuous mode [ 982.655318][ T4063] veth0_vlan: left promiscuous mode [ 983.523504][ T9694] Bluetooth: hci3: command tx timeout [ 983.532911][ T4063] team0 (unregistering): Port device team_slave_1 removed [ 983.577702][ T4063] team0 (unregistering): Port device team_slave_0 removed [ 984.745695][ T4063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.925217][ T4063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.185504][ T4063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.740467][ T4063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.876361][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.884691][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.893158][ T9669] bridge_slave_0: entered allmulticast mode [ 985.903580][ T9669] bridge_slave_0: entered promiscuous mode [ 986.115377][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.123819][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.132024][ T9669] bridge_slave_1: entered allmulticast mode [ 986.142351][ T9669] bridge_slave_1: entered promiscuous mode [ 987.016529][ T9773] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 987.617719][ T4063] bridge_slave_1: left allmulticast mode [ 987.624187][ T4063] bridge_slave_1: left promiscuous mode [ 987.631033][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.712421][ T4063] bridge_slave_0: left allmulticast mode [ 987.718926][ T4063] bridge_slave_0: left promiscuous mode [ 987.725679][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.908319][ T6340] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 989.115637][ T6340] usb 5-1: device descriptor read/all, error -71 [ 989.241238][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.300485][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.355272][ T4063] bond0 (unregistering): Released all slaves [ 989.458399][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.657644][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.669766][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.677480][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.686360][ T9692] bridge_slave_0: entered allmulticast mode [ 989.696701][ T9692] bridge_slave_0: entered promiscuous mode [ 989.714274][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.722353][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.730474][ T9692] bridge_slave_1: entered allmulticast mode [ 989.740662][ T9692] bridge_slave_1: entered promiscuous mode [ 990.391568][ T9792] netlink: 'syz.3.924': attribute type 13 has an invalid length. [ 990.400955][ T9792] netlink: 'syz.3.924': attribute type 17 has an invalid length. [ 990.448578][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.473983][ T9669] team0: Port device team_slave_0 added [ 991.585010][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.634216][ T9792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.681474][ T4063] hsr_slave_0: left promiscuous mode [ 991.691625][ T4063] hsr_slave_1: left promiscuous mode [ 991.709348][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.717612][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.742123][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.750853][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.780832][ T4063] veth1_macvtap: left promiscuous mode [ 991.786618][ T4063] veth0_macvtap: left promiscuous mode [ 991.793702][ T4063] veth1_vlan: left promiscuous mode [ 991.801816][ T4063] veth0_vlan: left promiscuous mode [ 992.866804][ T4063] team0 (unregistering): Port device team_slave_1 removed [ 992.916415][ T4063] team0 (unregistering): Port device team_slave_0 removed [ 993.366614][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.583116][ T9669] team0: Port device team_slave_1 added [ 994.371707][ T9692] team0: Port device team_slave_0 added [ 995.831106][ T9692] team0: Port device team_slave_1 added [ 996.259648][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.266954][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.293539][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.562441][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.571768][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.600488][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.635905][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.643555][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.671211][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.978550][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.985815][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.013168][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.345884][ T9669] hsr_slave_0: entered promiscuous mode [ 997.357899][ T9669] hsr_slave_1: entered promiscuous mode [ 997.367274][ T9669] debugfs: 'hsr0' already exists in 'hsr' [ 997.373806][ T9669] Cannot create hsr debugfs directory [ 997.466009][ T9817] fuse: Unknown parameter 'group_i00000000000000000000' [ 997.663425][ T9692] hsr_slave_0: entered promiscuous mode [ 997.683118][ T9692] hsr_slave_1: entered promiscuous mode [ 997.692519][ T9692] debugfs: 'hsr0' already exists in 'hsr' [ 997.698866][ T9692] Cannot create hsr debugfs directory [ 1004.827026][ T9849] netlink: 'syz.3.939': attribute type 13 has an invalid length. [ 1004.836414][ T9849] netlink: 'syz.3.939': attribute type 17 has an invalid length. [ 1004.957287][ T9694] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.103396][ T9851] fuse: Unknown parameter 'group_i00000000000000000000' [ 1005.376202][ T9849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1005.395639][ T9669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1005.468885][ T9692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1005.554056][ T9669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1005.659778][ T9692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1006.000660][ T9669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1006.078447][ T9692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1006.170822][ T9669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1006.324305][ T9692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1006.664359][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 1006.712355][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.184930][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.355887][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.461436][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.534688][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.542706][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.641170][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.680723][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.688515][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.872171][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.880006][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.903289][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.911039][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.345220][ T9669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.463736][ T9692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1009.476310][ T9692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1011.931002][ T9893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.552726][ T9896] fuse: Unknown parameter 'group_id00000000000000000000' [ 1014.077825][ T9908] netlink: 'syz.3.952': attribute type 13 has an invalid length. [ 1014.087094][ T9908] netlink: 'syz.3.952': attribute type 17 has an invalid length. [ 1015.159717][ T9908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1016.512435][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.697935][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.246750][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.342557][ T9669] veth0_vlan: entered promiscuous mode [ 1017.525817][ T9669] veth1_vlan: entered promiscuous mode [ 1017.722751][ T9692] veth0_vlan: entered promiscuous mode [ 1017.863791][ T9692] veth1_vlan: entered promiscuous mode [ 1017.942499][ T9669] veth0_macvtap: entered promiscuous mode [ 1018.055395][ T9669] veth1_macvtap: entered promiscuous mode [ 1018.391699][ T9692] veth0_macvtap: entered promiscuous mode [ 1018.536473][ T9692] veth1_macvtap: entered promiscuous mode [ 1018.583270][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.724331][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.771522][ T8309] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1018.853752][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.907859][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.935476][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.965015][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.972732][ T5094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.020828][ T8309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1019.032709][ T8309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1019.047742][ T8309] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1019.055735][ T5094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.058144][ T8309] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1019.058310][ T8309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.212401][ T8309] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1019.284143][ T5094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.350063][ T5094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.438326][ T5094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.590466][ T5094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.833766][ T8309] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1019.940988][ T9934] fuse: Unknown parameter 'group_id00000000000000000000' [ 1019.952051][ T8309] usb 5-1: USB disconnect, device number 17 [ 1020.677639][ T9942] fuse: Bad value for 'fd' [ 1021.654346][ T9952] tipc: Started in network mode [ 1021.659793][ T9952] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 1021.672013][ T9952] tipc: Enabled bearer , priority 10 [ 1023.107878][ T8309] tipc: Node number set to 4269801491 [ 1024.299425][ T9970] netlink: 'syz.4.965': attribute type 13 has an invalid length. [ 1024.307567][ T9970] netlink: 'syz.4.965': attribute type 17 has an invalid length. [ 1025.495528][ T9970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1025.820668][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 1026.017303][ T9968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.372688][ T9989] fuse: Unknown parameter 'group_id00000000000000000000' [ 1026.668470][ T6358] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1026.857253][ T9997] fuse: Bad value for 'fd' [ 1026.925088][ T6358] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1026.936966][ T6358] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1026.947355][ T6358] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1026.957828][ T6358] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1026.967485][ T6358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.249087][ T6358] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1027.499944][ T6358] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1027.659106][ T6358] usb 6-1: USB disconnect, device number 13 [ 1027.860418][T10008] tipc: Enabling of bearer rejected, already enabled [ 1028.480973][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.487794][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1032.443538][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.454945][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.793065][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.801914][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.828557][ T6358] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1033.003211][T10038] fuse: Bad value for 'user_id' [ 1033.010000][T10038] fuse: Bad value for 'user_id' [ 1033.121182][ T6358] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.129698][ T6358] usb 5-1: config 0 has no interface number 0 [ 1033.136131][ T6358] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1033.147774][ T6358] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1033.159276][ T6358] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1033.173997][ T6358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.242807][T10040] fuse: Bad value for 'fd' [ 1033.353335][ T6358] usb 5-1: config 0 descriptor?? [ 1033.363111][T10035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1033.449220][ T6358] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1033.685671][ T9694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.698713][ T9694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1033.716773][ T9694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1033.732175][ T9694] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1033.746255][ T9694] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1034.105343][ T8309] usb 5-1: USB disconnect, device number 18 [ 1034.176090][T10050] netlink: 'syz.5.980': attribute type 13 has an invalid length. [ 1034.185022][T10050] netlink: 'syz.5.980': attribute type 17 has an invalid length. [ 1034.796642][T10050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1034.951363][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.980'. [ 1035.369789][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1035.382121][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1035.390241][ T8309] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1035.405131][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1035.427908][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1035.442183][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1035.668814][T10060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.679190][ T8309] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1035.679394][ T8309] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1035.701666][ T8309] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1035.711981][ T8309] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1035.721616][ T8309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.842519][ T5817] Bluetooth: hci0: command tx timeout [ 1036.005204][T10063] tipc: Enabling of bearer rejected, already enabled [ 1036.054337][ T8309] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1036.403212][ T8309] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1036.490152][ T8309] usb 4-1: USB disconnect, device number 22 [ 1037.492670][ T5817] Bluetooth: hci5: command tx timeout [ 1037.901539][ T5817] Bluetooth: hci0: command tx timeout [ 1037.940713][T10042] chnl_net:caif_netlink_parms(): no params data found [ 1039.624842][ T5817] Bluetooth: hci5: command tx timeout [ 1039.975689][ T5817] Bluetooth: hci0: command tx timeout [ 1040.506425][ T4117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.143990][ T4117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.220031][T10092] overlayfs: overlapping lowerdir path [ 1041.649786][ T4117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.659006][ T5817] Bluetooth: hci5: command tx timeout [ 1041.860656][T10098] fuse: Bad value for 'user_id' [ 1041.866393][T10098] fuse: Bad value for 'user_id' [ 1041.914786][ T4117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.052392][ T5817] Bluetooth: hci0: command tx timeout [ 1042.432073][T10058] chnl_net:caif_netlink_parms(): no params data found [ 1042.810729][ T4117] bridge_slave_1: left allmulticast mode [ 1042.816662][ T4117] bridge_slave_1: left promiscuous mode [ 1042.823920][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.891446][ T4117] bridge_slave_0: left allmulticast mode [ 1042.905721][ T4117] bridge_slave_0: left promiscuous mode [ 1042.912948][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.557701][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.599672][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.627419][ T4117] bond0 (unregistering): Released all slaves [ 1043.648621][ T6340] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1043.666114][T10119] netlink: 'syz.4.994': attribute type 13 has an invalid length. [ 1043.674474][T10119] netlink: 'syz.4.994': attribute type 17 has an invalid length. [ 1043.732131][ T5817] Bluetooth: hci5: command tx timeout [ 1043.880829][ T6340] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1043.892809][ T6340] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1043.904401][ T6340] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1043.914756][ T6340] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1043.927632][ T6340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.949395][T10110] tipc: Enabling of bearer rejected, already enabled [ 1044.129406][T10042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.137025][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.146276][T10042] bridge_slave_0: entered allmulticast mode [ 1044.156685][T10042] bridge_slave_0: entered promiscuous mode [ 1044.167544][ T6340] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1044.202493][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.210773][T10042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.220244][T10042] bridge_slave_1: entered allmulticast mode [ 1044.238668][T10042] bridge_slave_1: entered promiscuous mode [ 1044.371773][ T4117] hsr_slave_0: left promiscuous mode [ 1044.434227][ T4117] hsr_slave_1: left promiscuous mode [ 1044.442941][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.443840][T10117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.452579][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.601530][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.612181][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.653280][ T4117] veth1_macvtap: left promiscuous mode [ 1044.659678][ T4117] veth0_macvtap: left promiscuous mode [ 1044.665631][ T4117] veth1_vlan: left promiscuous mode [ 1044.671542][ T4117] veth0_vlan: left promiscuous mode [ 1044.689166][ T6340] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1044.711639][ T6340] usb 6-1: USB disconnect, device number 14 [ 1046.547527][ C0] hrtimer: interrupt took 289801 ns [ 1046.595057][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 1046.626990][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 1047.309691][T10119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1047.904577][T10149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.182353][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.346445][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.641344][ T4117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.714076][T10042] team0: Port device team_slave_0 added [ 1049.557789][T10154] loop4: detected capacity change from 0 to 7 [ 1049.681037][T10154] Dev loop4: unable to read RDB block 7 [ 1049.687281][T10154] loop4: unable to read partition table [ 1049.694333][T10154] loop4: partition table beyond EOD, truncated [ 1049.701372][T10154] loop_reread_partitions: partition scan of loop4 (Êô«xÝ—ŸÑà– ) failed (rc=-5) [ 1049.837774][ T4117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.928354][T10042] team0: Port device team_slave_1 added [ 1049.972890][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.980914][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.989160][T10058] bridge_slave_0: entered allmulticast mode [ 1049.999279][T10058] bridge_slave_0: entered promiscuous mode [ 1050.194562][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.202542][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.214299][T10058] bridge_slave_1: entered allmulticast mode [ 1050.224407][T10058] bridge_slave_1: entered promiscuous mode [ 1050.356179][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.365669][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.392173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.406316][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.594985][ T4117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.822093][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.831068][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.857449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.865447][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.995911][ T4117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.073877][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.140993][T10163] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1003'. [ 1051.167555][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.210930][T10163] tipc: Enabling of bearer rejected, already enabled [ 1051.764608][T10042] hsr_slave_0: entered promiscuous mode [ 1051.775722][T10042] hsr_slave_1: entered promiscuous mode [ 1051.785200][T10042] debugfs: 'hsr0' already exists in 'hsr' [ 1051.791385][T10042] Cannot create hsr debugfs directory [ 1051.854937][T10169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.886452][T10058] team0: Port device team_slave_0 added [ 1051.917548][T10058] team0: Port device team_slave_1 added [ 1051.988585][ T6358] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1052.123363][ T4117] bridge_slave_1: left allmulticast mode [ 1052.129818][ T4117] bridge_slave_1: left promiscuous mode [ 1052.136490][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.169212][ T4117] bridge_slave_0: left allmulticast mode [ 1052.175249][ T4117] bridge_slave_0: left promiscuous mode [ 1052.182224][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.201371][ T6358] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1052.218880][ T6358] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1052.231055][ T6358] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1052.241369][ T6358] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1052.251035][ T6358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.351105][ T6358] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1052.699329][ T6358] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1052.793617][ T6358] usb 4-1: USB disconnect, device number 23 [ 1053.354886][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.461439][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.527758][ T4117] bond0 (unregistering): Released all slaves [ 1054.010752][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.018243][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.046203][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.146411][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.153899][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.185943][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.484129][T10186] netlink: 'syz.4.1011': attribute type 13 has an invalid length. [ 1054.493183][T10186] netlink: 'syz.4.1011': attribute type 17 has an invalid length. [ 1055.060316][T10186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1055.125267][T10183] loop4: detected capacity change from 0 to 7 [ 1055.151474][T10183] Dev loop4: unable to read RDB block 7 [ 1055.158783][T10183] loop4: unable to read partition table [ 1055.165877][T10183] loop4: partition table beyond EOD, truncated [ 1055.172843][T10183] loop_reread_partitions: partition scan of loop4 (Êô«xÝ—ŸÑà– ) failed (rc=-5) [ 1055.176660][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 1055.417247][T10186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.863678][T10058] hsr_slave_0: entered promiscuous mode [ 1055.874739][T10058] hsr_slave_1: entered promiscuous mode [ 1055.884183][T10058] debugfs: 'hsr0' already exists in 'hsr' [ 1055.890377][T10058] Cannot create hsr debugfs directory [ 1055.972550][T10194] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1013'. [ 1056.224848][T10198] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1014'. [ 1056.659410][T10198] tipc: Started in network mode [ 1056.664623][T10198] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 1056.677080][T10198] tipc: Enabled bearer , priority 10 [ 1056.995371][ T4117] hsr_slave_0: left promiscuous mode [ 1057.039362][ T4117] hsr_slave_1: left promiscuous mode [ 1057.048274][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.056128][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.152967][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.161237][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.344332][ T4117] veth1_macvtap: left promiscuous mode [ 1057.350593][ T4117] veth0_macvtap: left promiscuous mode [ 1057.356765][ T4117] veth1_vlan: left promiscuous mode [ 1057.362844][ T4117] veth0_vlan: left promiscuous mode [ 1057.943917][ T6358] tipc: Node number set to 4269801491 [ 1058.901875][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 1059.035422][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 1061.040122][T10233] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1023'. [ 1061.586581][T10242] netlink: 'syz.3.1025': attribute type 13 has an invalid length. [ 1061.595138][T10242] netlink: 'syz.3.1025': attribute type 17 has an invalid length. [ 1061.695978][T10242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.174776][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 1062.322267][T10241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.045250][T10042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1063.621367][T10058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1063.689016][T10042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1063.744739][T10058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1063.793657][T10042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1063.830645][T10058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1063.880039][T10042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1063.929954][T10058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1065.599780][T10274] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1034'. [ 1065.671548][T10268] loop4: detected capacity change from 0 to 7 [ 1065.694223][T10268] Dev loop4: unable to read RDB block 7 [ 1065.700653][T10268] loop4: unable to read partition table [ 1065.707404][T10268] loop4: partition table beyond EOD, truncated [ 1065.714728][T10268] loop_reread_partitions: partition scan of loop4 (Êô«xÝ—ŸÑà– ) failed (rc=-5) [ 1066.596931][T10042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.763745][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.930527][T10042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.982696][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.011323][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.019078][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.064652][T10286] binder: 10285:10286 unknown command 0 [ 1067.070759][T10286] binder: 10285:10286 ioctl c0306201 200000000080 returned -22 [ 1067.125080][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.132842][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.150520][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.158312][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.271661][T10286] binder: 10285:10286 ioctl c0306201 0 returned -14 [ 1067.452073][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.459822][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.781695][T10042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1067.792536][T10042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1067.893138][T10058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1067.906563][T10058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1068.128417][ T8309] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1068.330780][ T8309] usb 5-1: Using ep0 maxpacket: 16 [ 1068.366152][ T8309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.378707][ T8309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.389137][ T8309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1068.405388][ T8309] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1068.416287][ T8309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.476329][T10300] netlink: 'syz.3.1041': attribute type 13 has an invalid length. [ 1068.486733][T10300] netlink: 'syz.3.1041': attribute type 17 has an invalid length. [ 1068.586733][ T8309] usb 5-1: config 0 descriptor?? [ 1068.738949][T10300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1069.240738][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 1069.263358][T10292] random: crng reseeded on system resumption [ 1069.521433][ T8309] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 1069.664087][ T8309] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 1069.674447][ T8309] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1069.687462][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.996251][ T6326] usb 5-1: USB disconnect, device number 19 [ 1070.015080][T10315] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1070.026906][T10315] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1070.041332][T10315] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1070.055561][T10315] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1070.274765][T10321] fuse: Unknown parameter 'use00000000000000000000' [ 1070.822224][T10042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.963985][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.778277][T10324] loop4: detected capacity change from 0 to 7 [ 1071.791557][T10324] Dev loop4: unable to read RDB block 7 [ 1071.797572][T10324] loop4: unable to read partition table [ 1071.805471][T10324] loop4: partition table beyond EOD, truncated [ 1071.812140][T10324] loop_reread_partitions: partition scan of loop4 (Êô«xÝ—ŸÑà– ) failed (rc=-5) [ 1071.826993][T10327] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1045'. [ 1071.882134][T10058] veth0_vlan: entered promiscuous mode [ 1072.025843][T10042] veth0_vlan: entered promiscuous mode [ 1072.145842][T10058] veth1_vlan: entered promiscuous mode [ 1072.271557][T10042] veth1_vlan: entered promiscuous mode [ 1072.539515][T10042] veth0_macvtap: entered promiscuous mode [ 1072.646324][T10042] veth1_macvtap: entered promiscuous mode [ 1072.847317][T10058] veth0_macvtap: entered promiscuous mode [ 1072.952104][T10042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.991164][T10058] veth1_macvtap: entered promiscuous mode [ 1073.087191][T10042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.220224][ T6976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.244636][T10340] binder: 10338:10340 unknown command 0 [ 1073.253746][T10340] binder: 10338:10340 ioctl c0306201 200000000080 returned -22 [ 1073.275059][ T3824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.302508][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.348368][ T3824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.357447][ T3824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.424770][T10340] binder: 10338:10340 ioctl c0306201 0 returned -14 [ 1073.447665][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.586951][ T4117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.685938][ T5094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.735824][ T5094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.991483][ T5094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.607428][T10354] fuse: Unknown parameter 'use00000000000000000000' [ 1075.391552][T10368] netlink: 'syz.4.1053': attribute type 13 has an invalid length. [ 1075.401261][T10368] netlink: 'syz.4.1053': attribute type 17 has an invalid length. [ 1075.435776][T10365] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1054'. [ 1075.745796][T10368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1077.511091][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 1077.677359][T10368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.934487][T10388] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1056'. [ 1082.862939][T10429] fuse: Unknown parameter 'user_i00000000000000000000' [ 1083.676974][T10441] netlink: 'syz.4.1066': attribute type 13 has an invalid length. [ 1083.685486][T10441] netlink: 'syz.4.1066': attribute type 17 has an invalid length. [ 1083.897696][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.932454][T10444] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1067'. [ 1084.437889][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.269315][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.277652][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.406900][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.418835][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.575973][T10479] fuse: Unknown parameter 'user_i00000000000000000000' [ 1087.937182][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.945902][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.953899][ T3902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.954020][ T3902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.512229][T10490] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1077'. [ 1090.036209][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1090.043096][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.293020][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 1090.429424][T10514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.411159][T10540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1090'. [ 1093.341135][T10555] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1094'. [ 1093.468555][T10555] tipc: Enabling of bearer rejected, already enabled [ 1096.033625][T10587] netlink: 'syz.4.1102': attribute type 13 has an invalid length. [ 1096.047839][T10587] netlink: 'syz.4.1102': attribute type 17 has an invalid length. [ 1096.445319][T10587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1099.980252][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 1100.156213][T10587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.719258][T10618] fuse: Unknown parameter 'user_id00000000000000000000' [ 1102.783081][T10632] fuse: Bad value for 'fd' [ 1103.865324][T10645] fuse: Invalid rootmode [ 1104.521849][T10659] netlink: 'syz.2.1124': attribute type 13 has an invalid length. [ 1104.530312][T10659] netlink: 'syz.2.1124': attribute type 17 has an invalid length. [ 1104.819729][T10662] fuse: Unknown parameter 'user_id00000000000000000000' [ 1105.372883][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 1106.016936][T10677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.119356][T10659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.729302][T10693] fuse: Bad value for 'fd' [ 1107.690529][T10704] fuse: Bad value for 'rootmode' [ 1108.049030][ T6358] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1108.798451][ T6358] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1108.809702][ T6358] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1108.851801][ T6358] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1108.862367][ T6358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.870928][ T6358] usb 4-1: Product: syz [ 1108.875334][ T6358] usb 4-1: Manufacturer: syz [ 1108.880416][ T6358] usb 4-1: SerialNumber: syz [ 1108.961461][ T6358] usb 4-1: config 0 descriptor?? [ 1109.113022][T10717] fuse: Unknown parameter 'user_id00000000000000000000' [ 1109.345649][ T6358] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 1109.430601][ T6358] usb 4-1: USB disconnect, device number 24 [ 1110.818102][T10727] comedi comedi2: reset error (fatal) [ 1114.686929][T10755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1117.856360][T10760] fuse: Bad value for 'fd' [ 1118.530114][ T6340] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1118.748269][ T6340] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1118.759551][ T6340] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1118.855436][ T6340] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1118.865441][ T6340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.879013][ T6340] usb 6-1: Product: syz [ 1118.883424][ T6340] usb 6-1: Manufacturer: syz [ 1118.890257][ T6340] usb 6-1: SerialNumber: syz [ 1119.049039][ T6340] usb 6-1: config 0 descriptor?? [ 1120.403328][ T6340] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 1120.537582][ T6340] usb 6-1: USB disconnect, device number 15 [ 1122.918593][T10792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1124.065728][T10797] fuse: Bad value for 'rootmode' [ 1124.319120][T10802] netlink: 'syz.3.1165': attribute type 13 has an invalid length. [ 1124.327351][T10802] netlink: 'syz.3.1165': attribute type 17 has an invalid length. [ 1125.318984][T10802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.599323][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 1125.747045][T10800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.818442][ T6358] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1126.016511][ T6358] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 1126.027234][ T6358] usb 6-1: config 0 has no interface number 0 [ 1126.079932][ T6358] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1126.091178][ T6358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.104656][ T6358] usb 6-1: Product: syz [ 1126.109371][ T6358] usb 6-1: Manufacturer: syz [ 1126.114362][ T6358] usb 6-1: SerialNumber: syz [ 1126.216034][ T6358] usb 6-1: config 0 descriptor?? [ 1126.523925][ T6358] peak_usb 6-1:0.56: PEAK-System PCAN-USB X6 v50 fw v117.0.0 (2 channels) [ 1126.747886][ T6358] peak_usb 6-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 1126.761664][ T6358] peak_usb 6-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1126.880672][ T6358] peak_usb 6-1:0.56: probe with driver peak_usb failed with error -71 [ 1126.952377][ T6358] usb 6-1: USB disconnect, device number 16 [ 1127.318955][ T6340] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1127.676331][ T6340] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1127.692203][ T6340] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1127.835071][ T6340] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1127.844904][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.854043][ T6340] usb 5-1: Product: syz [ 1127.858568][ T6340] usb 5-1: Manufacturer: syz [ 1127.863368][ T6340] usb 5-1: SerialNumber: syz [ 1127.925577][ T6340] usb 5-1: config 0 descriptor?? [ 1128.138580][T10841] fuse: Unknown parameter 'use00000000000000000000' [ 1128.987282][ T6340] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 1129.368817][ T6340] usb 5-1: USB disconnect, device number 20 [ 1130.168578][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 1132.718814][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 1133.137492][T10874] netlink: 'syz.5.1185': attribute type 13 has an invalid length. [ 1133.146292][T10874] netlink: 'syz.5.1185': attribute type 17 has an invalid length. [ 1133.355006][T10874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1133.829992][ T6358] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1134.155895][ T6358] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 1134.165979][ T6358] usb 1-1: config 0 has no interface number 0 [ 1134.959093][ T6358] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1134.969070][ T6358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.977709][ T6358] usb 1-1: Product: syz [ 1134.982448][ T6358] usb 1-1: Manufacturer: syz [ 1134.987263][ T6358] usb 1-1: SerialNumber: syz [ 1135.020033][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 1135.410909][T10873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.479867][ T6358] usb 1-1: config 0 descriptor?? [ 1135.776593][ T6358] peak_usb 1-1:0.56 can0: unable to request usb[type=0 value=1] err=-71 [ 1135.789046][ T6358] peak_usb 1-1:0.56: unable to read PCAN-USB X6 firmware info (err -71) [ 1136.031372][ T6358] peak_usb 1-1:0.56: probe with driver peak_usb failed with error -71 [ 1136.114500][ T6358] usb 1-1: USB disconnect, device number 4 [ 1136.969110][T10894] fuse: Unknown parameter 'use00000000000000000000' [ 1137.558579][ T6340] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1137.801560][ T6340] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1137.812538][ T6340] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1138.032711][ T6340] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1138.042770][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.051587][ T6340] usb 1-1: Product: syz [ 1138.055887][ T6340] usb 1-1: Manufacturer: syz [ 1138.062959][ T6340] usb 1-1: SerialNumber: syz [ 1138.195451][ T6340] usb 1-1: config 0 descriptor?? [ 1138.254310][ T6340] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 1138.730619][T10906] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1139.068876][T10906] kvm: pic: non byte read [ 1139.143520][T10906] kvm: pic: level sensitive irq not supported [ 1139.144112][T10906] kvm: pic: non byte read [ 1144.029413][ T6340] usb 1-1: USB disconnect, device number 5 [ 1144.788725][ T6340] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1145.019130][ T6340] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 1145.027777][ T6340] usb 5-1: config 0 has no interface number 0 [ 1145.152604][ T6340] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1145.162431][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.171172][ T6340] usb 5-1: Product: syz [ 1145.175874][ T6340] usb 5-1: Manufacturer: syz [ 1145.180954][ T6340] usb 5-1: SerialNumber: syz [ 1145.383629][ T6340] usb 5-1: config 0 descriptor?? [ 1145.589473][T10315] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1145.710982][ T6340] peak_usb 5-1:0.56 can0: unable to request usb[type=0 value=1] err=-71 [ 1145.720013][ T6340] peak_usb 5-1:0.56: unable to read PCAN-USB X6 firmware info (err -71) [ 1145.918837][T10315] usb 4-1: Using ep0 maxpacket: 16 [ 1145.942929][ T6340] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -71 [ 1146.002538][T10315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.020147][T10315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.032097][T10315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1146.045789][T10315] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1146.055277][T10315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.108663][ T6340] usb 5-1: USB disconnect, device number 21 [ 1146.287848][T10315] usb 4-1: config 0 descriptor?? [ 1146.814614][T10937] random: crng reseeded on system resumption [ 1147.122303][T10315] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 1147.232981][T10315] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 1147.251003][T10315] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1147.498834][ T9694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1147.511574][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1147.529951][ T9694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1147.540600][T10315] usb 4-1: USB disconnect, device number 25 [ 1147.563627][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1147.575402][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1147.587116][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1147.599563][ T9694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1147.676084][ T9694] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1147.710208][ T9694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1151.310453][ T5817] Bluetooth: hci1: command tx timeout [ 1151.381842][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.388888][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.809563][ T6326] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1152.074361][ T6326] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1152.086300][ T6326] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1152.247451][ T6326] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1152.261852][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.271412][ T6326] usb 5-1: Product: syz [ 1152.275732][ T6326] usb 5-1: Manufacturer: syz [ 1152.280578][ T6326] usb 5-1: SerialNumber: syz [ 1152.294467][T10945] chnl_net:caif_netlink_parms(): no params data found [ 1152.407644][ T6326] usb 5-1: config 0 descriptor?? [ 1153.911133][ T6326] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 1153.918480][ T9694] Bluetooth: hci1: command tx timeout [ 1155.003432][T10315] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1155.998680][ T5817] Bluetooth: hci1: command tx timeout [ 1156.198520][ T6326] usb 5-1: USB disconnect, device number 22 [ 1156.747190][T10315] usb 6-1: unable to read config index 0 descriptor/all [ 1156.755104][T10315] usb 6-1: can't read configurations, error -71 [ 1157.735896][T10991] comedi comedi0: Minor 5 could not be opened [ 1157.934163][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.942314][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.951940][T10945] bridge_slave_0: entered allmulticast mode [ 1157.960956][T10945] bridge_slave_0: entered promiscuous mode [ 1158.013310][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.021568][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.029684][T10945] bridge_slave_1: entered allmulticast mode [ 1158.039641][T10945] bridge_slave_1: entered promiscuous mode [ 1158.048332][ T8038] Bluetooth: hci1: command tx timeout [ 1158.292761][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.436535][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.530554][ T8038] Bluetooth: hci5: command 0x0406 tx timeout [ 1158.538689][ T8038] Bluetooth: hci0: command 0x0406 tx timeout [ 1158.729066][T10945] team0: Port device team_slave_0 added [ 1158.756901][T10945] team0: Port device team_slave_1 added [ 1159.150242][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.157760][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.185521][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.216736][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.229492][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.255920][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.263960][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.250528][T10945] hsr_slave_0: entered promiscuous mode [ 1162.267078][T10945] hsr_slave_1: entered promiscuous mode [ 1162.276800][T10945] debugfs: 'hsr0' already exists in 'hsr' [ 1162.283183][T10945] Cannot create hsr debugfs directory [ 1162.382438][ T6326] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1162.442005][ T3987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.589200][ T6326] usb 1-1: Using ep0 maxpacket: 8 [ 1162.638756][ T6326] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1162.649235][ T6326] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1162.659600][ T6326] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1162.669952][ T6326] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.683515][ T6326] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1162.693144][ T6326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.744122][ T3987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.983757][ T3987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.019824][ T6326] usb 1-1: GET_CAPABILITIES returned 0 [ 1163.026145][ T6326] usbtmc 1-1:16.0: can't read capabilities [ 1163.258179][ T24] usb 1-1: USB disconnect, device number 6 [ 1163.277211][ T3987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.891962][ T3987] bridge_slave_1: left allmulticast mode [ 1163.897877][ T3987] bridge_slave_1: left promiscuous mode [ 1163.905087][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.991115][ T3987] bridge_slave_0: left allmulticast mode [ 1163.997196][ T3987] bridge_slave_0: left promiscuous mode [ 1164.003690][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.768426][ T3987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.797618][ T3987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.821072][ T3987] bond0 (unregistering): Released all slaves [ 1165.880634][ T3987] hsr_slave_0: left promiscuous mode [ 1165.907492][ T3987] hsr_slave_1: left promiscuous mode [ 1165.915571][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.923552][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.939475][T11052] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 1165.947554][T11052] netlink: 600 bytes leftover after parsing attributes in process `syz.4.1242'. [ 1165.956068][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.964881][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.524559][ T3987] veth1_macvtap: left promiscuous mode [ 1166.531888][ T3987] veth0_macvtap: left promiscuous mode [ 1166.537842][ T3987] veth1_vlan: left promiscuous mode [ 1166.544173][ T3987] veth0_vlan: left promiscuous mode [ 1169.232280][ T3987] team0 (unregistering): Port device team_slave_1 removed [ 1169.274988][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 1169.350455][ T3987] team0 (unregistering): Port device team_slave_0 removed [ 1170.013959][T10945] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1170.110798][T10945] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1170.237824][T10945] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1170.326082][T10945] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1172.070946][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.374657][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.414109][T11079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.537338][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.544925][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.742887][ T3987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.750515][ T3987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.126574][T11103] fuse: Unknown parameter 'fd0x0000000000000003' [ 1176.237775][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.052607][T11123] kvm: user requested TSC rate below hardware speed [ 1185.062432][T11123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1188.988773][ T9694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1189.003486][ T9694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1189.015164][ T9694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1189.203707][ T9694] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1189.248509][ T9694] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1189.543326][T10945] veth0_vlan: entered promiscuous mode [ 1189.785267][T10945] veth1_vlan: entered promiscuous mode [ 1190.233901][ T9694] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1190.272017][ T9694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1190.289814][ T9694] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1190.396253][ T9694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1190.520719][ T9694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1190.729798][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1190.741242][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1190.746819][T10945] veth0_macvtap: entered promiscuous mode [ 1190.750823][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1190.773959][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1190.786027][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1191.105455][T10945] veth1_macvtap: entered promiscuous mode [ 1191.459360][ T9694] Bluetooth: hci0: command tx timeout [ 1191.807204][T10945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.277542][T10945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.368476][T11131] chnl_net:caif_netlink_parms(): no params data found [ 1192.475426][ T3987] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.608842][ T3987] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.618145][ T3987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.660152][ T3508] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.709620][ T5817] Bluetooth: hci3: command tx timeout [ 1193.008859][ T5817] Bluetooth: hci7: command tx timeout [ 1193.499606][ T5817] Bluetooth: hci0: command tx timeout [ 1193.511373][T11137] chnl_net:caif_netlink_parms(): no params data found [ 1194.516488][T11135] chnl_net:caif_netlink_parms(): no params data found [ 1194.798847][ T5817] Bluetooth: hci3: command tx timeout [ 1195.109552][ T5817] Bluetooth: hci7: command tx timeout [ 1195.450228][T11164] fuse: Unknown parameter 'fd0x0000000000000003' [ 1195.568844][ T5817] Bluetooth: hci0: command tx timeout [ 1196.325024][ T3902] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.463207][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.471084][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.479199][T11131] bridge_slave_0: entered allmulticast mode [ 1196.489813][T11131] bridge_slave_0: entered promiscuous mode [ 1196.794421][ T3902] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.849028][ T5817] Bluetooth: hci3: command tx timeout [ 1196.927154][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.936714][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.944924][T11131] bridge_slave_1: entered allmulticast mode [ 1196.956094][T11131] bridge_slave_1: entered promiscuous mode [ 1196.982174][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.990022][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.998408][T11137] bridge_slave_0: entered allmulticast mode [ 1197.015035][T11137] bridge_slave_0: entered promiscuous mode [ 1197.174562][ T5817] Bluetooth: hci7: command tx timeout [ 1197.257395][ T3902] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.972629][ T5817] Bluetooth: hci0: command tx timeout [ 1199.006990][ T5817] Bluetooth: hci3: command tx timeout [ 1199.796416][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.804618][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.814141][T11137] bridge_slave_1: entered allmulticast mode [ 1199.819937][ T5817] Bluetooth: hci7: command tx timeout [ 1199.824715][T11137] bridge_slave_1: entered promiscuous mode [ 1200.065065][ T3902] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.113875][T11131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.298843][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.306330][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.314513][T11135] bridge_slave_0: entered allmulticast mode [ 1200.323431][T11135] bridge_slave_0: entered promiscuous mode [ 1200.345519][T11131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.619522][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.627001][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.635174][T11135] bridge_slave_1: entered allmulticast mode [ 1200.644081][T11135] bridge_slave_1: entered promiscuous mode [ 1200.711253][T11137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.955263][T11131] team0: Port device team_slave_0 added [ 1201.094379][T11131] team0: Port device team_slave_1 added [ 1201.120754][T11137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.149690][ T3902] bridge_slave_1: left allmulticast mode [ 1201.155514][ T3902] bridge_slave_1: left promiscuous mode [ 1201.162354][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.243583][ T3902] bridge_slave_0: left allmulticast mode [ 1201.249778][ T3902] bridge_slave_0: left promiscuous mode [ 1201.256277][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.070400][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.111067][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.187420][ T3902] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1202.225652][ T3902] bond0 (unregistering): Released all slaves [ 1202.652565][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.883109][T11137] team0: Port device team_slave_0 added [ 1202.915191][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.924701][ T3902] tipc: Disabling bearer [ 1202.930840][ T3902] tipc: Left network mode [ 1202.939589][T11137] team0: Port device team_slave_1 added [ 1202.960759][T11131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.968323][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.994712][T11131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.321919][T11131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.330029][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.359894][T11131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.633576][T11135] team0: Port device team_slave_0 added [ 1203.820728][T11137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.833900][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.861524][T11137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.933889][T11195] fuse: Unknown parameter 'fd0x0000000000000003' [ 1204.043189][T11135] team0: Port device team_slave_1 added [ 1204.231789][T11137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.239205][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.265854][T11137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.541909][T11199] overlayfs: failed to resolve './file1': -2 [ 1204.578542][ T3902] hsr_slave_0: left promiscuous mode [ 1204.614069][ T3902] hsr_slave_1: left promiscuous mode [ 1204.622631][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.630754][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.667260][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.677867][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.733561][ T3902] veth1_macvtap: left promiscuous mode [ 1204.739980][ T3902] veth0_macvtap: left promiscuous mode [ 1204.752528][ T3902] veth1_vlan: left promiscuous mode [ 1204.758365][ T3902] veth0_vlan: left promiscuous mode [ 1205.895873][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 1205.985518][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 1206.648890][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.656057][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.682760][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.887247][T11131] hsr_slave_0: entered promiscuous mode [ 1206.898444][T11131] hsr_slave_1: entered promiscuous mode [ 1207.265775][T11137] hsr_slave_0: entered promiscuous mode [ 1207.276853][T11137] hsr_slave_1: entered promiscuous mode [ 1207.286573][T11137] debugfs: 'hsr0' already exists in 'hsr' [ 1207.293010][T11137] Cannot create hsr debugfs directory [ 1207.371479][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.379813][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.407607][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.676105][ T3902] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.976433][ T9694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1207.990707][ T9694] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.000486][ T9694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.016660][ T9694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.058575][ T9694] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1208.085720][ T3902] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.242796][ T3902] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.595071][ T3902] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.122547][T11135] hsr_slave_0: entered promiscuous mode [ 1209.133725][T11135] hsr_slave_1: entered promiscuous mode [ 1209.143327][T11135] debugfs: 'hsr0' already exists in 'hsr' [ 1209.149403][T11135] Cannot create hsr debugfs directory [ 1210.119692][ T3902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.130646][ T5817] Bluetooth: hci2: command tx timeout [ 1210.340077][ T3902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.516860][ T3902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.741522][ T3902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.369460][ T3902] bridge_slave_1: left allmulticast mode [ 1211.375385][ T3902] bridge_slave_1: left promiscuous mode [ 1211.384607][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.450404][ T3902] bridge_slave_0: left allmulticast mode [ 1211.456765][ T3902] bridge_slave_0: left promiscuous mode [ 1211.463759][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.483536][ T3902] bridge_slave_1: left allmulticast mode [ 1211.490652][ T3902] bridge_slave_1: left promiscuous mode [ 1211.497038][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.513012][ T3902] bridge_slave_0: left allmulticast mode [ 1211.521133][ T3902] bridge_slave_0: left promiscuous mode [ 1211.530166][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.208871][ T5817] Bluetooth: hci2: command tx timeout [ 1212.218332][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.239637][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.257767][ T3902] bond0 (unregistering): Released all slaves [ 1212.584498][T11228] overlayfs: failed to resolve './file1': -2 [ 1212.753753][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.806098][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.832118][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.850381][ T3902] bond0 (unregistering): Released all slaves [ 1212.974944][T11210] chnl_net:caif_netlink_parms(): no params data found [ 1213.179982][ T3902] tipc: Disabling bearer [ 1213.191081][ T3902] tipc: Left network mode [ 1213.310775][ T3902] tipc: Disabling bearer [ 1213.316721][ T3902] tipc: Left network mode [ 1214.318819][ T5817] Bluetooth: hci2: command tx timeout [ 1214.407569][ T3902] hsr_slave_0: left promiscuous mode [ 1214.471609][ T3902] hsr_slave_1: left promiscuous mode [ 1214.480432][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.488415][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.525936][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.534159][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.616109][ T3902] hsr_slave_0: left promiscuous mode [ 1214.629713][ T3902] hsr_slave_1: left promiscuous mode [ 1214.638444][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.646066][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.663764][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.671784][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.725004][ T3902] veth1_macvtap: left promiscuous mode [ 1214.730986][ T3902] veth0_macvtap: left promiscuous mode [ 1214.736920][ T3902] veth1_vlan: left promiscuous mode [ 1214.742677][ T3902] veth0_vlan: left promiscuous mode [ 1214.753629][ T3902] veth1_macvtap: left promiscuous mode [ 1214.759678][ T3902] veth0_macvtap: left promiscuous mode [ 1214.766135][ T3902] veth1_vlan: left promiscuous mode [ 1214.775769][ T3902] veth0_vlan: left promiscuous mode [ 1215.969594][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 1215.999547][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 1216.377253][ T5817] Bluetooth: hci2: command tx timeout [ 1216.781317][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 1216.826737][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 1217.627651][T11210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.635598][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.643917][T11210] bridge_slave_0: entered allmulticast mode [ 1217.654144][T11210] bridge_slave_0: entered promiscuous mode [ 1217.671137][T11210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.680323][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.690670][T11210] bridge_slave_1: entered allmulticast mode [ 1217.703588][T11210] bridge_slave_1: entered promiscuous mode [ 1217.910446][T11210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.959761][T11210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.053071][T11131] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1218.304543][T11131] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1218.332457][T11131] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1218.375917][T11210] team0: Port device team_slave_0 added [ 1218.387367][T11137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1218.482995][ T3902] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.543235][T11249] overlayfs: failed to resolve './file0': -2 [ 1218.556846][T11131] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1218.664592][ T3902] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.720111][T11210] team0: Port device team_slave_1 added [ 1218.740772][T11137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1218.820065][ T3902] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.862315][T11135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1218.969182][T11137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1219.042717][ T3902] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.071781][T11135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1219.180450][T11210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.187632][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.214625][T11210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.229369][T11137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1219.278489][T11135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1219.313642][T11210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.322674][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.352083][T11210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.403878][T11135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1219.843157][T11210] hsr_slave_0: entered promiscuous mode [ 1219.854067][T11210] hsr_slave_1: entered promiscuous mode [ 1219.866660][T11210] debugfs: 'hsr0' already exists in 'hsr' [ 1219.872705][T11210] Cannot create hsr debugfs directory [ 1219.883520][ T3902] bridge_slave_1: left allmulticast mode [ 1219.889740][ T3902] bridge_slave_1: left promiscuous mode [ 1219.896660][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.945711][ T3902] bridge_slave_0: left allmulticast mode [ 1219.952026][ T3902] bridge_slave_0: left promiscuous mode [ 1219.961195][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.499521][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.524154][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.550229][ T3902] bond0 (unregistering): Released all slaves [ 1220.977037][ T3902] hsr_slave_0: left promiscuous mode [ 1221.007268][ T3902] hsr_slave_1: left promiscuous mode [ 1221.016226][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.024985][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.049258][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.056868][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.106790][ T3902] veth1_macvtap: left promiscuous mode [ 1221.112841][ T3902] veth0_macvtap: left promiscuous mode [ 1221.119822][ T3902] veth1_vlan: left promiscuous mode [ 1221.125525][ T3902] veth0_vlan: left promiscuous mode [ 1221.876389][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 1221.906721][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 1223.010379][T11131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.151015][T11137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.383260][T11131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.432901][T11137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.468970][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.476562][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.547350][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.616602][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.624298][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.786821][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.794540][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.811723][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.819396][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.883509][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.982739][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.990497][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.022805][T11210] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1224.133362][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.141236][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.160022][T11210] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1224.294628][T11210] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1224.336314][T11210] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1224.665510][T11131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1226.066066][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.396295][T11210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.501399][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.509130][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.635174][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.642860][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.400131][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.476723][T11131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.660182][T11137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.086592][T11135] veth0_vlan: entered promiscuous mode [ 1228.275343][T11135] veth1_vlan: entered promiscuous mode [ 1228.565371][T11135] veth0_macvtap: entered promiscuous mode [ 1228.681761][T11135] veth1_macvtap: entered promiscuous mode [ 1228.893011][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.018997][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.166860][ T6976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.224526][ T3987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.306378][ T3987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.337787][T11210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.370194][ T3902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.810766][T11131] veth0_vlan: entered promiscuous mode [ 1230.986569][T11131] veth1_vlan: entered promiscuous mode [ 1231.026079][T11137] veth0_vlan: entered promiscuous mode [ 1231.172875][T11137] veth1_vlan: entered promiscuous mode [ 1231.424611][T11131] veth0_macvtap: entered promiscuous mode [ 1231.502664][T11131] veth1_macvtap: entered promiscuous mode [ 1231.567275][T11137] veth0_macvtap: entered promiscuous mode [ 1231.702128][T11137] veth1_macvtap: entered promiscuous mode [ 1231.773056][T11131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.904564][T11137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.946667][T11131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.015977][ T3902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.042980][T11137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.095737][ T3902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.149386][ T3902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.203765][ T3902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.210916][T11312] overlayfs: failed to resolve './file0': -2 [ 1232.306142][ T3902] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.383882][ T3902] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.427504][ T3902] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.470419][ T3902] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.645314][T11210] veth0_vlan: entered promiscuous mode [ 1232.812093][T11210] veth1_vlan: entered promiscuous mode [ 1233.204868][T11210] veth0_macvtap: entered promiscuous mode [ 1233.294848][T11210] veth1_macvtap: entered promiscuous mode [ 1233.643288][T11210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.837243][T11210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.031137][ T4063] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.054600][ T4063] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.136579][ T4063] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.186677][ T3824] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.402677][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.411376][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.626418][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.634988][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.299588][T11390] : renamed from bridge_slave_0 (while UP) [ 1240.615755][T10778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.624018][T10778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.884940][ T6976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.893435][ T6976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.146794][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.155519][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.281160][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.289411][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.076722][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1255'. [ 1242.203230][ T6976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.212360][ T6976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.403037][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.412531][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.318754][T11411] netlink: 'syz.9.1205': attribute type 13 has an invalid length. [ 1243.327106][T11411] netlink: 'syz.9.1205': attribute type 17 has an invalid length. [ 1244.295312][T11411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1244.921220][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1205'. [ 1244.979873][T11426] fuse: Bad value for 'fd' [ 1245.172729][T11411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.596688][T11429] netlink: 'syz.8.1299': attribute type 4 has an invalid length. [ 1248.527236][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1303'. [ 1249.343809][ T9694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1249.353977][ T9694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1249.367658][ T9694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1249.389173][ T9694] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1249.400560][ T9694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1251.358628][T11451] chnl_net:caif_netlink_parms(): no params data found [ 1251.494076][ T9694] Bluetooth: hci1: command tx timeout [ 1253.133613][T11451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.141199][T11451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.149070][T11451] bridge_slave_0: entered allmulticast mode [ 1253.157792][T11451] bridge_slave_0: entered promiscuous mode [ 1253.291146][T11451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.298673][T11451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.306285][T11451] bridge_slave_1: entered allmulticast mode [ 1253.315548][T11451] bridge_slave_1: entered promiscuous mode [ 1253.568228][ T9694] Bluetooth: hci1: command tx timeout [ 1253.694267][T11451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.804150][T11451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.192660][T11451] team0: Port device team_slave_0 added [ 1254.261071][T11451] team0: Port device team_slave_1 added [ 1254.577533][T11451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.584892][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.611619][T11451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.829528][T11451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.836804][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.868629][T11451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.930588][T11480] fuse: Bad value for 'fd' [ 1255.467423][T11451] hsr_slave_0: entered promiscuous mode [ 1255.485584][T11451] hsr_slave_1: entered promiscuous mode [ 1255.494005][T11451] debugfs: 'hsr0' already exists in 'hsr' [ 1255.501021][T11451] Cannot create hsr debugfs directory [ 1255.658317][ T9694] Bluetooth: hci1: command tx timeout [ 1256.947480][T11486] netlink: 'syz.6.1311': attribute type 13 has an invalid length. [ 1256.955880][T11486] netlink: 'syz.6.1311': attribute type 17 has an invalid length. [ 1257.660746][T11486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1257.738483][ T9694] Bluetooth: hci1: command tx timeout [ 1258.317194][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 1258.440440][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1258.479836][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1258.491854][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1258.515049][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1258.532928][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1258.637328][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.982176][T11451] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1259.157103][T11451] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1259.328553][T11451] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1259.501840][T11451] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1259.666181][T11500] tipc: Started in network mode [ 1259.671555][T11500] tipc: Node identity eadbe47a36b6, cluster identity 4711 [ 1259.686063][T11500] tipc: Enabled bearer , priority 0 [ 1259.855025][T11499] syzkaller0: entered promiscuous mode [ 1259.860925][T11499] syzkaller0: entered allmulticast mode [ 1260.237161][T11504] tipc: Resetting bearer [ 1260.688305][ T5817] Bluetooth: hci4: command tx timeout [ 1260.782830][T11498] tipc: Resetting bearer [ 1260.867506][T11498] tipc: Disabling bearer [ 1260.936799][ T6358] tipc: Node number set to 3698189434 [ 1262.391003][T11451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.727240][T11451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.789802][ T5817] Bluetooth: hci4: command tx timeout [ 1262.976311][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.983869][ T3902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.147808][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.155686][ T3902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.450322][ T9694] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1263.475071][ T9694] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1263.488772][ T9694] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1263.512404][ T9694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1263.546926][ T9694] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1263.707578][T11493] chnl_net:caif_netlink_parms(): no params data found [ 1264.911614][ T9694] Bluetooth: hci4: command tx timeout [ 1265.674257][ T9694] Bluetooth: hci6: command tx timeout [ 1266.941177][ T9694] Bluetooth: hci4: command tx timeout [ 1267.728684][ T9694] Bluetooth: hci6: command tx timeout [ 1268.308671][ T6359] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1268.534782][ T6359] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.546690][ T6359] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.557050][ T6359] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1268.564268][ T6359] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1268.573688][ T6359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.603629][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.611646][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.620074][T11493] bridge_slave_0: entered allmulticast mode [ 1268.630728][T11493] bridge_slave_0: entered promiscuous mode [ 1268.710038][T11523] chnl_net:caif_netlink_parms(): no params data found [ 1268.952771][ T6359] usb 10-1: config 0 descriptor?? [ 1269.321127][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.329084][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.337124][T11493] bridge_slave_1: entered allmulticast mode [ 1269.347713][T11493] bridge_slave_1: entered promiscuous mode [ 1269.616808][ T6359] usb 10-1: string descriptor 0 read error: -22 [ 1269.817295][ T9694] Bluetooth: hci6: command tx timeout [ 1269.835544][ T6359] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 1269.850156][ T6358] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1270.038468][ T6358] usb 7-1: Using ep0 maxpacket: 16 [ 1270.089271][ T6359] usb 10-1: USB disconnect, device number 10 [ 1270.109166][ T6358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.124944][ T6358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.136958][ T6358] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1270.150150][ T6358] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1270.159777][ T6358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.373432][ T6358] usb 7-1: config 0 descriptor?? [ 1270.895679][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x2 [ 1270.907496][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.915312][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.923063][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.932503][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.950869][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.958929][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.966529][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1270.974327][ T6358] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1271.075099][ T6358] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000C/input/input24 [ 1271.107796][T11493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.180204][T11493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.675630][ T6358] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1271.841420][T11563] netlink: 'syz.9.1323': attribute type 13 has an invalid length. [ 1271.849741][T11563] netlink: 'syz.9.1323': attribute type 17 has an invalid length. [ 1271.908182][ T9694] Bluetooth: hci6: command tx timeout [ 1271.947835][T11563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1272.242431][ T8309] usb 7-1: USB disconnect, device number 12 [ 1272.350904][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1323'. [ 1272.624628][T11565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.769762][ T5094] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.957626][ T5094] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.327591][T11493] team0: Port device team_slave_0 added [ 1273.477774][ T5094] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.872275][T11493] team0: Port device team_slave_1 added [ 1273.891665][ T5094] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.968568][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.976063][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.984250][T11523] bridge_slave_0: entered allmulticast mode [ 1273.993182][T11523] bridge_slave_0: entered promiscuous mode [ 1274.157579][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.165566][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.173666][T11523] bridge_slave_1: entered allmulticast mode [ 1274.182637][T11523] bridge_slave_1: entered promiscuous mode [ 1274.228389][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.289291][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.474136][T11493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.482002][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.509048][T11493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.738809][T11493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.746255][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.773209][T11493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.104727][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.124578][ T5094] bridge_slave_1: left allmulticast mode [ 1275.130763][ T5094] bridge_slave_1: left promiscuous mode [ 1275.144640][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.220969][ T5094] bridge_slave_0: left allmulticast mode [ 1275.226993][ T5094] bridge_slave_0: left promiscuous mode [ 1275.233521][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.094196][ T5094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.216246][ T5094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.290768][ T5094] bond0 (unregistering): Released all slaves [ 1276.680990][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.019776][T11493] hsr_slave_0: entered promiscuous mode [ 1277.029436][T11493] hsr_slave_1: entered promiscuous mode [ 1277.037599][T11493] debugfs: 'hsr0' already exists in 'hsr' [ 1277.043576][T11493] Cannot create hsr debugfs directory [ 1277.071705][T11523] team0: Port device team_slave_0 added [ 1277.386275][T11523] team0: Port device team_slave_1 added [ 1278.440064][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.447517][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.475184][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.711326][ T5094] hsr_slave_0: left promiscuous mode [ 1278.758790][ T5094] hsr_slave_1: left promiscuous mode [ 1278.767479][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.775692][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.941833][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.949954][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.170694][ T5094] veth1_macvtap: left promiscuous mode [ 1279.177128][ T5094] veth0_macvtap: left promiscuous mode [ 1279.183525][ T5094] veth1_vlan: left promiscuous mode [ 1279.189325][ T5094] veth0_vlan: left promiscuous mode [ 1280.606918][ T5094] team0 (unregistering): Port device team_slave_1 removed [ 1280.655228][ T5094] team0 (unregistering): Port device team_slave_0 removed [ 1281.191404][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.199137][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.225675][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.031829][T11523] hsr_slave_0: entered promiscuous mode [ 1282.041292][T11523] hsr_slave_1: entered promiscuous mode [ 1282.049902][T11523] debugfs: 'hsr0' already exists in 'hsr' [ 1282.055774][T11523] Cannot create hsr debugfs directory [ 1283.015287][T11451] veth0_vlan: entered promiscuous mode [ 1283.245607][T11451] veth1_vlan: entered promiscuous mode [ 1285.469956][T11451] veth0_macvtap: entered promiscuous mode [ 1285.656076][T11451] veth1_macvtap: entered promiscuous mode [ 1286.000265][ T8309] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1286.311963][T11451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1286.353432][T11451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.353944][ T8309] usb 10-1: Using ep0 maxpacket: 16 [ 1286.476461][ T5094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.520805][ T5094] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.545265][ T8309] usb 10-1: config 0 has no interfaces? [ 1286.588954][ T8309] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1286.598673][ T8309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.609686][ T8309] usb 10-1: Product: syz [ 1286.614267][ T8309] usb 10-1: Manufacturer: syz [ 1286.619857][ T8309] usb 10-1: SerialNumber: syz [ 1286.754363][ T5094] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.788860][ T8309] usb 10-1: config 0 descriptor?? [ 1286.988971][ T3987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.246200][ T5094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.319132][ T3987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.492133][T11493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1287.518905][T11523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1287.618838][T11493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1287.682618][ T3987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.901060][T11523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1287.964763][T11493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1288.127490][ T3987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.303267][T11523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1288.338338][T11493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1288.548580][T11523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1289.159351][ T3987] bridge_slave_1: left allmulticast mode [ 1289.170897][ T3987] bridge_slave_1: left promiscuous mode [ 1289.177813][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.310317][ T3987] bridge_slave_0: left allmulticast mode [ 1289.316353][ T3987] bridge_slave_0: left promiscuous mode [ 1289.322942][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.538342][ T3987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.603260][ T8309] usb 10-1: USB disconnect, device number 11 [ 1290.730305][ T3987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.785256][ T3987] bond0 (unregistering): Released all slaves [ 1292.108650][T11624] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1292.535911][ T3987] hsr_slave_0: left promiscuous mode [ 1292.575917][ T3987] hsr_slave_1: left promiscuous mode [ 1292.583933][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.591727][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.599845][T11624] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1292.610237][T11624] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1292.619880][T11624] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.656255][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.664022][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.761141][T11624] usb 10-1: config 0 descriptor?? [ 1292.906102][ T3987] veth1_macvtap: left promiscuous mode [ 1292.912051][ T3987] veth0_macvtap: left promiscuous mode [ 1292.917810][ T3987] veth1_vlan: left promiscuous mode [ 1292.923541][ T3987] veth0_vlan: left promiscuous mode [ 1293.304407][T11629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.912750][ T3987] team0 (unregistering): Port device team_slave_1 removed [ 1293.956818][ T3987] team0 (unregistering): Port device team_slave_0 removed [ 1295.245867][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.666238][ T3902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.795523][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.971276][ T3902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.057744][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.065291][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.119236][ T3902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.225001][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.237384][T11624] usb 10-1: USB disconnect, device number 12 [ 1296.397345][ T3902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.514230][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.521880][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.801905][T11493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.091979][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.099838][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.205979][T11523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1297.289522][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.297120][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.344737][T11641] netlink: 'syz.9.1333': attribute type 13 has an invalid length. [ 1297.354001][T11641] netlink: 'syz.9.1333': attribute type 17 has an invalid length. [ 1297.482665][T11641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1297.696624][ T3902] bridge_slave_1: left allmulticast mode [ 1297.703015][ T3902] bridge_slave_1: left promiscuous mode [ 1297.710214][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.816803][ T3902] : left allmulticast mode [ 1297.821793][ T3902] : left promiscuous mode [ 1297.827651][ T3902] bridge0: port 1() entered disabled state [ 1297.961229][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1333'. [ 1298.104976][T11641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.669098][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.742197][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.780292][ T3902] bond0 (unregistering): Released all slaves [ 1299.086843][T11493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1300.165633][ T3902] hsr_slave_0: left promiscuous mode [ 1300.181547][ T3902] hsr_slave_1: left promiscuous mode [ 1300.191156][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.199743][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.299082][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.306860][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.366733][ T3902] veth1_macvtap: left promiscuous mode [ 1300.372713][ T3902] veth0_macvtap: left promiscuous mode [ 1300.378847][ T3902] veth1_vlan: left promiscuous mode [ 1300.384600][ T3902] veth0_vlan: left promiscuous mode [ 1301.367819][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 1301.399302][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 1302.206193][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.583972][T11493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.269352][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1304.283700][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1304.303582][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1304.428622][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1304.444254][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1304.445338][T11493] veth0_vlan: entered promiscuous mode [ 1304.979096][T11493] veth1_vlan: entered promiscuous mode [ 1305.306489][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.314825][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.449812][T11493] veth0_macvtap: entered promiscuous mode [ 1305.677697][T11493] veth1_macvtap: entered promiscuous mode [ 1305.772429][ T8181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.781539][ T8181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.991489][T11493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.073150][T11523] veth0_vlan: entered promiscuous mode [ 1306.147329][T11493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.261998][T11523] veth1_vlan: entered promiscuous mode [ 1306.330231][ T1090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.379777][ T1090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.431284][ T1090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.441740][ T1090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.975388][ T5817] Bluetooth: hci3: command tx timeout [ 1307.640424][T11691] chnl_net:caif_netlink_parms(): no params data found [ 1308.718533][T11523] veth0_macvtap: entered promiscuous mode [ 1309.003603][T11523] veth1_macvtap: entered promiscuous mode [ 1309.029251][ T5817] Bluetooth: hci3: command tx timeout [ 1309.196206][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.291113][T11523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.476371][ T1090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.527502][ T1090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.602786][ T1090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.667471][ T1090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.035202][ T6359] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1311.100600][ T9694] Bluetooth: hci3: command tx timeout [ 1311.269835][ T6359] usb 8-1: Using ep0 maxpacket: 32 [ 1311.330834][ T6359] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1311.340050][ T6359] usb 8-1: config 0 has no interface number 0 [ 1311.452962][ T6359] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1311.462798][ T6359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.471660][ T6359] usb 8-1: Product: syz [ 1311.476074][ T6359] usb 8-1: Manufacturer: syz [ 1311.481099][ T6359] usb 8-1: SerialNumber: syz [ 1312.159574][T11730] ===================================================== [ 1312.166829][T11730] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1312.174349][T11730] _copy_to_user+0xcc/0x120 [ 1312.179832][T11730] do_insn_ioctl+0x59c/0x6d0 [ 1312.184717][T11730] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 1312.190489][T11730] __se_sys_ioctl+0x239/0x400 [ 1312.195371][T11730] __x64_sys_ioctl+0x97/0xe0 [ 1312.200289][T11730] x64_sys_call+0x1cbc/0x3e20 [ 1312.208405][T11730] do_syscall_64+0xd9/0x210 [ 1312.213136][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.221039][T11730] [ 1312.223465][T11730] Uninit was created at: [ 1312.228096][T11730] __kmalloc_noprof+0x95f/0x1310 [ 1312.233317][T11730] do_insn_ioctl+0x108/0x6d0 [ 1312.238604][T11730] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 1312.244334][T11730] __se_sys_ioctl+0x239/0x400 [ 1312.249400][T11730] __x64_sys_ioctl+0x97/0xe0 [ 1312.254370][T11730] x64_sys_call+0x1cbc/0x3e20 [ 1312.259501][T11730] do_syscall_64+0xd9/0x210 [ 1312.264322][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.270553][T11730] [ 1312.272976][T11730] Bytes 4-583 of 584 are uninitialized [ 1312.278851][T11730] Memory access of size 584 starts at ffff88804e86fc00 [ 1312.285850][T11730] [ 1312.288479][T11730] CPU: 1 UID: 0 PID: 11730 Comm: syz.9.1339 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(none) [ 1312.300885][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1312.314163][T11730] ===================================================== [ 1312.322847][T11730] Disabling lock debugging due to kernel taint [ 1312.329304][T11730] Kernel panic - not syncing: kmsan.panic set ... [ 1312.335978][T11730] CPU: 1 UID: 0 PID: 11730 Comm: syz.9.1339 Tainted: G B 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(none) [ 1312.349948][T11730] Tainted: [B]=BAD_PAGE [ 1312.354215][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1312.364436][T11730] Call Trace: [ 1312.367844][T11730] [ 1312.370879][T11730] __dump_stack+0x26/0x30 [ 1312.375441][T11730] dump_stack_lvl+0x53/0x270 [ 1312.380256][T11730] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1312.386488][T11730] dump_stack+0x1e/0x25 [ 1312.390860][T11730] vpanic+0x361/0xc50 [ 1312.395085][T11730] panic+0x15d/0x160 [ 1312.399281][T11730] kmsan_report+0x31c/0x320 [ 1312.404006][T11730] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1312.410191][T11730] ? kmsan_copy_to_user+0xf1/0x190 [ 1312.415518][T11730] ? _copy_to_user+0xcc/0x120 [ 1312.420389][T11730] ? do_insn_ioctl+0x59c/0x6d0 [ 1312.425373][T11730] ? comedi_unlocked_ioctl+0xa5e/0x1f60 [ 1312.431106][T11730] ? __se_sys_ioctl+0x239/0x400 [ 1312.436177][T11730] ? __x64_sys_ioctl+0x97/0xe0 [ 1312.441167][T11730] ? x64_sys_call+0x1cbc/0x3e20 [ 1312.446270][T11730] ? do_syscall_64+0xd9/0x210 [ 1312.451173][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.457559][T11730] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1312.463979][T11730] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1312.470004][T11730] ? stack_depot_save_flags+0x615/0x7b0 [ 1312.475803][T11730] ? kmsan_get_metadata+0xfb/0x160 [ 1312.481231][T11730] ? kmsan_get_metadata+0xfb/0x160 [ 1312.486581][T11730] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1312.492613][T11730] ? kmsan_get_metadata+0xfb/0x160 [ 1312.497943][T11730] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1312.504170][T11730] ? kmsan_get_metadata+0xfb/0x160 [ 1312.509553][T11730] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1312.515729][T11730] kmsan_internal_check_memory+0x1e1/0x230 [ 1312.521811][T11730] kmsan_copy_to_user+0xf1/0x190 [ 1312.526981][T11730] _copy_to_user+0xcc/0x120 [ 1312.531729][T11730] do_insn_ioctl+0x59c/0x6d0 [ 1312.536620][T11730] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 1312.542283][T11730] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1312.548294][T11730] __se_sys_ioctl+0x239/0x400 [ 1312.553237][T11730] __x64_sys_ioctl+0x97/0xe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1312.558129][T11730] x64_sys_call+0x1cbc/0x3e20 [ 1312.563246][T11730] do_syscall_64+0xd9/0x210 [ 1312.567980][T11730] ? irqentry_exit+0x16/0x60 [ 1312.572786][T11730] ? clear_bhb_loop+0x40/0x90 [ 1312.577857][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.583966][T11730] RIP: 0033:0x7f7bdb58ebe9 [ 1312.588558][T11730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.608494][T11730] RSP: 002b:00007f7bdc340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1312.617217][T11730] RAX: ffffffffffffffda RBX: 00007f7bdb7b6270 RCX: 00007f7bdb58ebe9 [ 1312.625741][T11730] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 1312.633985][T11730] RBP: 00007f7bdb611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1312.642220][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.650362][T11730] R13: 00007f7bdb7b6308 R14: 00007f7bdb7b6270 R15: 00007ffc11907f48 [ 1312.658755][T11730] [ 1312.662273][T11730] Kernel Offset: disabled [ 1312.666764][T11730] Rebooting in 86400 seconds..