last executing test programs: 7.094369168s ago: executing program 4 (id=5): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x6, @loopback, 0x4}}}, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000006c0)={r6, 0x3, 0x4, 0x0, 0xfffd, 0xc, 0x9, 0x5, {r6, @in6={{0xa, 0x4e23, 0x3d1, @loopback, 0x6}}, 0x1, 0x0, 0x80000001, 0x101, 0x3}}, &(0x7f0000000780)=0xb0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$BLKCRYPTOGENERATEKEY(r9, 0xc030128a, 0x0) wait4(r8, &(0x7f0000000000), 0x80000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) 6.275264308s ago: executing program 3 (id=4): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x6, @loopback, 0x4}}}, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000000780)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) wait4(r6, &(0x7f0000000000), 0x80000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) 6.160116051s ago: executing program 0 (id=1): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff000705810200"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x101, 0x80000001, 0xa6d8, 0x2, 0x1, 0x4009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x8, 0x5, 0x9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x1, 0x2, 0xfffffffe, 0x6, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0xf5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x480c4) ioctl$KVM_SET_REGS(r9, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x20010, r6, 0xc4934000) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x4f) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0xde, 0x3}) 4.879618936s ago: executing program 3 (id=6): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) name_to_handle_at(r3, &(0x7f0000000040)='./file7/file0/file0\x00', &(0x7f0000000500)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x2, 0x0, "3e6ae85f03eb6b3c5f389545a9049e71"}}}, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002cbd7000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080098999c2229b5139c9dc30c91a7afeb7de6"], 0x24}}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a2102030109021b00020000000009046f0000aad823000904"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L+xg', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25080000002c00028006000e004e2300000800060003000000080009007f000000080008000300000008000900090800000c0001800600020006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x20, r0, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r13, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x8, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_CLASSID={0x8}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x198, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4a4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40810}, 0x40001) sendmmsg$inet(r13, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x10, 0xa00, 0x1, 0x2}}], 0x10}}], 0x1, 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) 4.875215453s ago: executing program 2 (id=3): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02d8d44a995bba463c0000000100000000002000000000000000"], 0x24, 0x1) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r3 = epoll_create1(0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0xe000200c}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10013, 0xbf}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000020601020000000000000000000000000900020073797a31000000000500010007000000f9652f4c7dc5c04f0c00078008001240fffffffa0c000300686173683a6970000500040000000000"], 0x50}}, 0x4000800) 4.726391788s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef28"], 0xffdd) close(r2) 4.233045493s ago: executing program 4 (id=7): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x6, @loopback, 0x4}}}, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000006c0)={r6, 0x3, 0x4, 0x0, 0xfffd, 0xc, 0x9, 0x5, {r6, @in6={{0xa, 0x4e23, 0x3d1, @loopback, 0x6}}, 0x1, 0x0, 0x80000001, 0x101, 0x3}}, &(0x7f0000000780)=0xb0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$BLKCRYPTOGENERATEKEY(r9, 0xc030128a, 0x0) wait4(r8, &(0x7f0000000000), 0x80000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) 3.787077338s ago: executing program 1 (id=8): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) sync() sync() sync() sync() openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x400e02, 0x0) socket$netlink(0x10, 0x3, 0x10) sync() syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x91a, 0x10000, 0x0, 0x40058}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)) 3.214253018s ago: executing program 2 (id=9): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x6, @loopback, 0x4}}}, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000006c0)={r4, 0x3, 0x4, 0x0, 0xfffd, 0xc, 0x9, 0x5, {r4, @in6={{0xa, 0x4e23, 0x3d1, @loopback, 0x6}}, 0x1, 0x0, 0x80000001, 0x101, 0x3}}, &(0x7f0000000780)=0xb0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) wait4(r6, &(0x7f0000000000), 0x80000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) 2.940887888s ago: executing program 0 (id=10): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0xf0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x20088c4) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000f1365c63bd3bb618b7bf3ac3d4522d6dc594113804dd20c8c9e139f82b922f36ce3d389575b8a9cc70d3d303c292d82dc04eff0fc03a6f078981e5302224b7dbb90420d712e579e9b9c58fe654cb6ad9deb3a0637cbf291c25ebbdcbd08d653fdbb88cb92855931af35f9e63cd6b099abba080bbeab49acfc1b6045f42c257421c8d2c2bf2fb905f6762d426030d47", @ANYRES16=r3, @ANYBLOB="08002dbd7000fbdbdf25100000000500380001000000050035000800000008003200d0e5ffff080031000a00"], 0x34}, 0x1, 0x0, 0x0, 0x20000811}, 0x4008000) recvfrom$inet(r0, &(0x7f00000004c0)=""/182, 0xb6, 0x40000002, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000008c0)={0x8, 0x0, [{0xb, 0xffffffff, 0x4, 0xbfffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x75, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000005, 0x100, 0x4, 0x3, 0x400003, 0x40000002, 0x9}, {0x7ffffffe, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0x80000008, 0xffffffff, 0x8, 0x6, 0x62, 0xfb7, 0x800}]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) 2.476970906s ago: executing program 1 (id=11): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) name_to_handle_at(r3, &(0x7f0000000040)='./file7/file0/file0\x00', &(0x7f0000000500)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x2, 0x0, "3e6ae85f03eb6b3c5f389545a9049e71"}}}, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff0007000000080003", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002cbd7000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080098999c2229b5139c9dc30c91a7afeb7de6"], 0x24}}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a2102030109021b00020000000009046f0000aad823000904"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L+xg', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25080000002c00028006000e004e2300000800060003000000080009007f000000080008000300000008000900090800000c0001800600020006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x20, r0, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r13, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x8, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_CLASSID={0x8}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x198, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4a4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40810}, 0x40001) sendmmsg$inet(r13, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x10, 0xa00, 0x1, 0x2}}], 0x10}}], 0x1, 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) 1.474632691s ago: executing program 2 (id=12): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x3, 0x80000, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5a1c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r2, 0x0, 0x0, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local}, 0xc) 1.242526571s ago: executing program 3 (id=13): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1) 1.165036402s ago: executing program 2 (id=14): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x6, @loopback, 0x4}}}, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000006c0)={r6, 0x3, 0x4, 0x0, 0xfffd, 0xc, 0x9, 0x5, {r6, @in6={{0xa, 0x4e23, 0x3d1, @loopback, 0x6}}, 0x1, 0x0, 0x80000001, 0x101, 0x3}}, &(0x7f0000000780)=0xb0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$BLKCRYPTOGENERATEKEY(r9, 0xc030128a, 0x0) wait4(r8, &(0x7f0000000000), 0x80000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) 1.045036138s ago: executing program 4 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1404022, &(0x7f0000000180)=ANY=[@ANYBLOB="66f5"]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0xa8182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 92.336682][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.345547][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.357246][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.371455][ T10] cfg80211: failed to load regulatory.db [ 92.378219][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.383000][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.387989][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.402012][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.402861][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.419598][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.420517][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.436099][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.439222][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.455039][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.462611][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.463729][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.474873][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.479321][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.487763][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.493220][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.500100][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.507982][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.518323][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.542158][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.552249][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.708975][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.716848][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.724818][ T5634] bridge_slave_0: entered allmulticast mode [ 93.733044][ T5634] bridge_slave_0: entered promiscuous mode [ 93.748947][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.756586][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.765821][ T5632] bridge_slave_0: entered allmulticast mode [ 93.774011][ T5632] bridge_slave_0: entered promiscuous mode [ 93.806167][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.814310][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.823226][ T5634] bridge_slave_1: entered allmulticast mode [ 93.831545][ T5634] bridge_slave_1: entered promiscuous mode [ 93.849565][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.857146][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.864960][ T5632] bridge_slave_1: entered allmulticast mode [ 93.872321][ T5632] bridge_slave_1: entered promiscuous mode [ 93.926930][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.934537][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.943017][ T5635] bridge_slave_0: entered allmulticast mode [ 93.951128][ T5635] bridge_slave_0: entered promiscuous mode [ 93.959090][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.966608][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.974275][ T5636] bridge_slave_0: entered allmulticast mode [ 93.981466][ T5636] bridge_slave_0: entered promiscuous mode [ 94.021896][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.029142][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.036669][ T5635] bridge_slave_1: entered allmulticast mode [ 94.044171][ T5635] bridge_slave_1: entered promiscuous mode [ 94.051306][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.058556][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.066108][ T5636] bridge_slave_1: entered allmulticast mode [ 94.073654][ T5636] bridge_slave_1: entered promiscuous mode [ 94.084027][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.107252][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.144006][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.154167][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.162953][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.170434][ T5637] bridge_slave_0: entered allmulticast mode [ 94.177663][ T5637] bridge_slave_0: entered promiscuous mode [ 94.188663][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.237460][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.245183][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.253018][ T5637] bridge_slave_1: entered allmulticast mode [ 94.260735][ T5637] bridge_slave_1: entered promiscuous mode [ 94.280421][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.292621][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.304785][ T5634] team0: Port device team_slave_0 added [ 94.335671][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.348824][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.361371][ T5634] team0: Port device team_slave_1 added [ 94.379982][ T5632] team0: Port device team_slave_0 added [ 94.419321][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.431791][ T5632] team0: Port device team_slave_1 added [ 94.470327][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.492099][ T5635] team0: Port device team_slave_0 added [ 94.501236][ T5636] team0: Port device team_slave_0 added [ 94.508026][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.516505][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.543325][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.578733][ T5635] team0: Port device team_slave_1 added [ 94.590072][ T50] Bluetooth: hci1: command tx timeout [ 94.590278][ T5620] Bluetooth: hci4: command tx timeout [ 94.597594][ T5626] Bluetooth: hci2: command tx timeout [ 94.604469][ T5628] Bluetooth: hci3: command tx timeout [ 94.612332][ T50] Bluetooth: hci0: command tx timeout [ 94.629091][ T5636] team0: Port device team_slave_1 added [ 94.635796][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.642928][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.670264][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.694564][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.701634][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.728248][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.775874][ T5637] team0: Port device team_slave_0 added [ 94.782766][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.790176][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.817094][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.830335][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.838473][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.866814][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.891455][ T5637] team0: Port device team_slave_1 added [ 94.905747][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.912967][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.941224][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.955559][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.962995][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.991209][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.044576][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.051885][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.079159][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.098814][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.105958][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.132752][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.171118][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.178155][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.204672][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.230398][ T5634] hsr_slave_0: entered promiscuous mode [ 95.237954][ T5634] hsr_slave_1: entered promiscuous mode [ 95.292289][ T5632] hsr_slave_0: entered promiscuous mode [ 95.299155][ T5632] hsr_slave_1: entered promiscuous mode [ 95.305778][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 95.312400][ T5632] Cannot create hsr debugfs directory [ 95.378377][ T5636] hsr_slave_0: entered promiscuous mode [ 95.385917][ T5636] hsr_slave_1: entered promiscuous mode [ 95.392978][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 95.398819][ T5636] Cannot create hsr debugfs directory [ 95.410116][ T5635] hsr_slave_0: entered promiscuous mode [ 95.416882][ T5635] hsr_slave_1: entered promiscuous mode [ 95.423723][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 95.430466][ T5635] Cannot create hsr debugfs directory [ 95.483849][ T5637] hsr_slave_0: entered promiscuous mode [ 95.490931][ T5637] hsr_slave_1: entered promiscuous mode [ 95.497100][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 95.503178][ T5637] Cannot create hsr debugfs directory [ 96.051012][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.066420][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.074871][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.085732][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.094223][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.105960][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.114499][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.124539][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.208683][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.224482][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.234711][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.245284][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.254050][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.264759][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.274946][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.286447][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.392715][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.402887][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.417807][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.428129][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.443030][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.452784][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.462482][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.472857][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.601902][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.612862][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.623636][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.640270][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.653767][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.662352][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.670024][ T5626] Bluetooth: hci4: command tx timeout [ 96.670088][ T5620] Bluetooth: hci0: command tx timeout [ 96.675482][ T50] Bluetooth: hci3: command tx timeout [ 96.681018][ T5623] Bluetooth: hci2: command tx timeout [ 96.689979][ T5628] Bluetooth: hci1: command tx timeout [ 96.697625][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.721367][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.734190][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.787714][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.842554][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.850470][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.897066][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.904661][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.914119][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.928875][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.938402][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.948784][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.957793][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.968587][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.991589][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.002711][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.025113][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.116407][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.133381][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.159858][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.167234][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.210870][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.218161][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.271512][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.323991][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.331309][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.358175][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.365434][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.427179][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.467913][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.518630][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.536349][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.573041][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.580879][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.624846][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.632125][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.650249][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.677170][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.684626][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.733182][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.747274][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.754705][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.784505][ T5634] veth0_vlan: entered promiscuous mode [ 97.816861][ T5634] veth1_vlan: entered promiscuous mode [ 97.883878][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.985033][ T5632] veth0_vlan: entered promiscuous mode [ 98.002500][ T5634] veth0_macvtap: entered promiscuous mode [ 98.037732][ T5634] veth1_macvtap: entered promiscuous mode [ 98.076245][ T5632] veth1_vlan: entered promiscuous mode [ 98.085529][ T5636] veth0_vlan: entered promiscuous mode [ 98.098145][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.118929][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.131290][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.169091][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.177817][ T5636] veth1_vlan: entered promiscuous mode [ 98.273549][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.299151][ T5632] veth0_macvtap: entered promiscuous mode [ 98.309423][ T89] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.373539][ T5632] veth1_macvtap: entered promiscuous mode [ 98.409829][ T5636] veth0_macvtap: entered promiscuous mode [ 98.422283][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.442036][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.456198][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.469423][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.488556][ T5636] veth1_macvtap: entered promiscuous mode [ 98.536496][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.565532][ T5637] veth0_vlan: entered promiscuous mode [ 98.574155][ T5635] veth0_vlan: entered promiscuous mode [ 98.595083][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.622724][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.629496][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.638510][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.668380][ T5637] veth1_vlan: entered promiscuous mode [ 98.706887][ T5635] veth1_vlan: entered promiscuous mode [ 98.719099][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.729921][ T89] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.737514][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.755825][ T5628] Bluetooth: hci0: command tx timeout [ 98.755890][ T5623] Bluetooth: hci1: command tx timeout [ 98.761642][ T50] Bluetooth: hci3: command tx timeout [ 98.761679][ T50] Bluetooth: hci4: command tx timeout [ 98.779456][ T5620] Bluetooth: hci2: command tx timeout [ 98.801724][ T5634] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.832810][ T5634] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.846597][ T5634] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.859372][ T5634] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 99.032627][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.046483][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.060061][ T5637] veth0_macvtap: entered promiscuous mode [ 99.089587][ T1002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.130860][ T5635] veth0_macvtap: entered promiscuous mode [ 99.161487][ T5637] veth1_macvtap: entered promiscuous mode [ 99.179706][ T89] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204544][ T89] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.244539][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.261702][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.278304][ T5635] veth1_macvtap: entered promiscuous mode [ 99.313553][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.384110][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.398102][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.435382][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.465231][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.491549][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.505029][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.523212][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.565740][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.607821][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.660729][ T1002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.697378][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.799394][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.950552][ T3332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.975429][ T3332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.061041][ T1002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.124819][ T1002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.249843][ T5700] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.279601][ T3332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.426075][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.434577][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.435697][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.481507][ T5700] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 100.514033][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.542801][ T5700] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.571453][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.595635][ T5700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.597570][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.667685][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.693413][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 100.731197][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.747185][ T5700] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 100.771580][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.790242][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.830425][ T5620] Bluetooth: hci1: command tx timeout [ 100.840344][ T5620] Bluetooth: hci2: command tx timeout [ 100.841828][ T5623] Bluetooth: hci3: command tx timeout [ 100.846436][ T50] Bluetooth: hci0: command tx timeout [ 100.853387][ T5623] Bluetooth: hci4: command tx timeout [ 100.916527][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.946508][ T5700] usb 1-1: probing VID:PID(0424:012C) [ 100.971914][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.997988][ T5700] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 101.026518][ T5700] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 101.157001][ T5700] vub300 1-1:1.0: probe with driver vub300 failed with error -22 [ 101.185324][ T5720] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.346451][ T30] audit: type=1326 audit(1787200359.419:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.400406][ T5728] netlink: 'syz.3.6': attribute type 11 has an invalid length. [ 101.421318][ T30] audit: type=1326 audit(1787200359.419:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.481227][ T5730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.490834][ T5730] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.497255][ T30] audit: type=1326 audit(1787200359.459:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.615947][ T5730] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.645512][ T30] audit: type=1326 audit(1787200359.469:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.712722][ T30] audit: type=1326 audit(1787200359.469:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.738092][ T5730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.738243][ T5730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.771677][ T5730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.812791][ T30] audit: type=1326 audit(1787200359.529:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.815703][ T5730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.841307][ T30] audit: type=1326 audit(1787200359.529:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.877136][ T30] audit: type=1326 audit(1787200359.529:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.886991][ T5730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.914994][ T30] audit: type=1326 audit(1787200359.529:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 101.944660][ T5730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.946488][ T30] audit: type=1326 audit(1787200359.529:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf716a850 code=0x7ffc0000 [ 101.983533][ T5730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.991412][ T5730] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.003179][ T5730] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.022824][ T5730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.048473][ T5730] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.057713][ T5730] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.243329][ T5708] usb 1-1: USB disconnect, device number 2 [ 102.321198][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.489867][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 102.514634][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 102.551278][ T5730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 102.567084][ T9] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 102.596083][ T9] usb 4-1: config 0 has no interface number 1 [ 102.623018][ T9] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 102.639990][ T9] usb 4-1: Product: syz [ 102.662961][ T9] usb 4-1: Manufacturer: syz [ 102.689021][ T9] usb 4-1: SerialNumber: syz [ 102.720609][ T9] usb 4-1: config 0 descriptor?? [ 103.531327][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 103.559260][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.728315][ T5761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.764661][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 103.789932][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.843306][ T9] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 103.873671][ T9] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 103.892305][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.937867][ T9] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 103.947199][ T9] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 104.005652][ T9] usb 4-1: USB disconnect, device number 2 [ 104.029859][ T5680] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.040172][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.049855][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.065130][ T5767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'. [ 104.204241][ T5680] usb 1-1: device descriptor read/64, error -71 [ 104.499449][ T5680] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 104.530009][ T5618] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.650419][ T5680] usb 1-1: device descriptor read/64, error -71 [ 104.699359][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 104.722550][ T5618] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 104.742451][ T5618] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 104.767828][ T5618] usb 2-1: config 0 has no interface number 1 [ 104.791762][ T5680] usb usb1-port1: attempt power cycle [ 104.842733][ T5618] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 104.869014][ T5618] usb 2-1: Product: syz [ 104.884009][ T5618] usb 2-1: Manufacturer: syz [ 104.894756][ T5618] usb 2-1: SerialNumber: syz [ 104.943698][ T5618] usb 2-1: config 0 descriptor?? [ 105.099675][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.148192][ T5782] loop2: detected capacity change from 0 to 16384 [ 105.169414][ T5680] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 105.235271][ T5680] usb 1-1: device descriptor read/8, error -71 [ 105.269854][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 105.300332][ T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 105.331187][ T5618] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 105.354472][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.364529][ T5618] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 105.400164][ T24] usb 4-1: Product: syz [ 105.400424][ C0] I/O error, dev loop2, sector 640 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2 [ 105.414810][ C0] I/O error, dev loop2, sector 15648 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 105.430848][ C0] I/O error, dev loop2, sector 15648 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.439741][ C1] I/O error, dev loop2, sector 640 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.441256][ C0] Buffer I/O error on dev loop2, logical block 1956, async page read [ 105.451056][ C1] Buffer I/O error on dev loop2, logical block 80, async page read [ 105.477694][ T24] usb 4-1: Manufacturer: syz [ 105.483227][ T5783] loop2: detected capacity change from 16384 to 0 [ 105.493318][ T5618] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 105.505380][ T24] usb 4-1: SerialNumber: syz [ 105.515527][ T5618] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 105.529304][ T5680] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 105.530541][ T24] usb 4-1: config 0 descriptor?? [ 105.567666][ T5618] usb 2-1: USB disconnect, device number 2 [ 105.610346][ T5680] usb 1-1: device descriptor read/8, error -71 [ 105.631686][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.771056][ T5680] usb usb1-port1: unable to enumerate USB device [ 105.873439][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.954972][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.981298][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 106.081695][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.111797][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.119685][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.140441][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 106.203215][ T24] usb 4-1: media controller created [ 106.231476][ T5777] ------------[ cut here ]------------ [ 106.239134][ T5777] usb 4-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 106.250161][ T5777] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.3.13/5777 [ 106.260673][ T5777] Modules linked in: [ 106.266224][ T5777] CPU: 1 UID: 0 PID: 5777 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 106.279806][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.291004][ T5777] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 106.296741][ T5777] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 106.316995][ T5777] RSP: 0000:ffffc90004d8f6f8 EFLAGS: 00010246 [ 106.324401][ T5777] RAX: 0000000000000000 RBX: ffff88807595b900 RCX: 0000000080000380 [ 106.333484][ T5777] RDX: ffff888021ae41c0 RSI: ffffffff8ca30900 RDI: ffffffff9065d010 [ 106.342443][ T5777] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 106.351976][ T5777] R10: ffffc90004d8f7e0 R11: fffff520009b1f08 R12: 1ffff110477e2400 [ 106.361005][ T5777] R13: ffff88823bf12000 R14: ffff888021ae41c0 R15: 0000000080000380 [ 106.369465][ T5777] FS: 0000000000000000(0000) GS:ffff888125036000(0063) knlGS:00000000f5416b40 [ 106.378947][ T5777] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 106.385812][ T5777] CR2: 0000000080000100 CR3: 0000000025710000 CR4: 00000000003526f0 [ 106.394212][ T5777] Call Trace: [ 106.397529][ T5777] [ 106.400960][ T5777] usb_start_wait_urb+0x13f/0x5b0 [ 106.406090][ T5777] ? trace_kmalloc+0x2a/0xf0 [ 106.411564][ T5777] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 106.417231][ T5777] usb_control_msg+0x234/0x3e0 [ 106.422359][ T5777] dtv5100_i2c_msg+0x231/0x2f0 [ 106.427170][ T5777] dtv5100_i2c_xfer+0x1a5/0x610 [ 106.437360][ T5777] __i2c_transfer+0x7bf/0x1fe0 [ 106.442623][ T5777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.450080][ T5777] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.456155][ T5777] ? rt_mutex_lock_nested+0x156/0x1c0 [ 106.462385][ T5777] ? i2c_transfer+0xc7/0x2d0 [ 106.467206][ T5777] i2c_transfer+0x1cb/0x2d0 [ 106.471900][ T5777] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 106.477553][ T5777] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 106.483924][ T5777] ? _copy_from_user+0x94/0xb0 [ 106.489009][ T5777] i2cdev_write+0x113/0x1e0 [ 106.493718][ T5777] vfs_writev+0x4bb/0x990 [ 106.498098][ T5777] ? __pfx_i2cdev_write+0x10/0x10 [ 106.503519][ T5777] ? __pfx_vfs_writev+0x10/0x10 [ 106.508632][ T5777] ? __fget_files+0x2a/0x420 [ 106.514126][ T5777] ? __fget_files+0x3a2/0x420 [ 106.519016][ T5777] ? __fget_files+0x2a/0x420 [ 106.523830][ T5777] do_writev+0x154/0x2e0 [ 106.528255][ T5777] ? __pfx_do_writev+0x10/0x10 [ 106.533414][ T5777] __do_fast_syscall_32+0x27a/0x6a0 [ 106.538730][ T5777] ? do_fast_syscall_32+0x33/0x70 [ 106.543893][ T5777] ? asm_int80_emulation+0x1a/0x20 [ 106.550095][ T5777] ? do_int80_emulation+0x299/0x500 [ 106.555538][ T5777] do_fast_syscall_32+0x33/0x70 [ 106.561068][ T5777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.567459][ T5777] RIP: 0023:0xf7f580ec [ 106.571829][ T5777] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 106.592853][ T5777] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 106.601666][ T5777] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 106.610663][ T5777] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.619121][ T5777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.627485][ T5777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.635722][ T5777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.644384][ T5777] [ 106.647555][ T5777] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.655230][ T5777] CPU: 1 UID: 0 PID: 5777 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 106.668135][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.680363][ T5777] Call Trace: [ 106.683945][ T5777] [ 106.687586][ T5777] vpanic+0x56d/0xa60 [ 106.692016][ T5777] ? __pfx__printk+0x10/0x10 [ 106.697918][ T5777] ? __pfx_vpanic+0x10/0x10 [ 106.702628][ T5777] ? is_bpf_text_address+0x292/0x2b0 [ 106.708219][ T5777] ? is_bpf_text_address+0x26/0x2b0 [ 106.713513][ T5777] panic+0xc5/0xd0 [ 106.717304][ T5777] ? __pfx_panic+0x10/0x10 [ 106.722104][ T5777] __warn+0x315/0x4c0 [ 106.726301][ T5777] ? usb_submit_urb+0x1057/0x18b0 [ 106.732143][ T5777] ? usb_submit_urb+0x1057/0x18b0 [ 106.737321][ T5777] __report_bug+0x276/0x570 [ 106.742721][ T5777] ? usb_submit_urb+0x1057/0x18b0 [ 106.748134][ T5777] ? __pfx___report_bug+0x10/0x10 [ 106.753548][ T5777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.759651][ T5777] ? __kmalloc_noprof+0x1af/0x720 [ 106.764893][ T5777] ? kasan_save_track+0x4f/0x80 [ 106.770202][ T5777] report_bug_entry+0x19b/0x290 [ 106.775361][ T5777] ? usb_submit_urb+0x1100/0x18b0 [ 106.780731][ T5777] ? usb_submit_urb+0x1105/0x18b0 [ 106.786270][ T5777] handle_bug+0xce/0x200 [ 106.790653][ T5777] exc_invalid_op+0x1a/0x50 [ 106.795297][ T5777] asm_exc_invalid_op+0x1a/0x20 [ 106.800529][ T5777] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 106.806283][ T5777] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 106.827989][ T5777] RSP: 0000:ffffc90004d8f6f8 EFLAGS: 00010246 [ 106.836302][ T5777] RAX: 0000000000000000 RBX: ffff88807595b900 RCX: 0000000080000380 [ 106.846391][ T5777] RDX: ffff888021ae41c0 RSI: ffffffff8ca30900 RDI: ffffffff9065d010 [ 106.854932][ T5777] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 106.863018][ T5777] R10: ffffc90004d8f7e0 R11: fffff520009b1f08 R12: 1ffff110477e2400 [ 106.871113][ T5777] R13: ffff88823bf12000 R14: ffff888021ae41c0 R15: 0000000080000380 [ 106.879462][ T5777] ? usb_submit_urb+0x1091/0x18b0 [ 106.884952][ T5777] usb_start_wait_urb+0x13f/0x5b0 [ 106.890010][ T5777] ? trace_kmalloc+0x2a/0xf0 [ 106.895154][ T5777] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 106.900774][ T5777] usb_control_msg+0x234/0x3e0 [ 106.905746][ T5777] dtv5100_i2c_msg+0x231/0x2f0 [ 106.910731][ T5777] dtv5100_i2c_xfer+0x1a5/0x610 [ 106.915717][ T5777] __i2c_transfer+0x7bf/0x1fe0 [ 106.920532][ T5777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.926382][ T5777] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.932256][ T5777] ? rt_mutex_lock_nested+0x156/0x1c0 [ 106.937670][ T5777] ? i2c_transfer+0xc7/0x2d0 [ 106.942643][ T5777] i2c_transfer+0x1cb/0x2d0 [ 106.947700][ T5777] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 106.953919][ T5777] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 106.960660][ T5777] ? _copy_from_user+0x94/0xb0 [ 106.965469][ T5777] i2cdev_write+0x113/0x1e0 [ 106.970010][ T5777] vfs_writev+0x4bb/0x990 [ 106.974475][ T5777] ? __pfx_i2cdev_write+0x10/0x10 [ 106.979544][ T5777] ? __pfx_vfs_writev+0x10/0x10 [ 106.984469][ T5777] ? __fget_files+0x2a/0x420 [ 106.989758][ T5777] ? __fget_files+0x3a2/0x420 [ 106.994762][ T5777] ? __fget_files+0x2a/0x420 [ 106.999592][ T5777] do_writev+0x154/0x2e0 [ 107.004772][ T5777] ? __pfx_do_writev+0x10/0x10 [ 107.009660][ T5777] __do_fast_syscall_32+0x27a/0x6a0 [ 107.014988][ T5777] ? do_fast_syscall_32+0x33/0x70 [ 107.020140][ T5777] ? asm_int80_emulation+0x1a/0x20 [ 107.025882][ T5777] ? do_int80_emulation+0x299/0x500 [ 107.031633][ T5777] do_fast_syscall_32+0x33/0x70 [ 107.037001][ T5777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.043408][ T5777] RIP: 0023:0xf7f580ec [ 107.048638][ T5777] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 107.072777][ T5777] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 107.082446][ T5777] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 107.090969][ T5777] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.100064][ T5777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.108697][ T5777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.117918][ T5777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.127582][ T5777] [ 107.131879][ T5777] Kernel Offset: disabled [ 107.137167][ T5777] Rebooting in 86400 seconds..