last executing test programs: 31m55.017060093s ago: executing program 32 (id=376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 30m31.85159696s ago: executing program 3 (id=537): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="050000000064e0e4328328b16000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) 30m28.180521598s ago: executing program 5 (id=541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="1700", 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000600)={0x7, 0xab, [{0x101, 0x0, 0x78}, {0x7ff, 0x0, 0x4}, {0x3, 0x0, 0x2}, {0x8000, 0x0, 0xec3}, {0x400, 0x0, 0x1}, {0x5, 0x0, 0x2}, {0x3, 0x0, 0x3}, {0xc6, 0x0, 0xff}, {0x0, 0x0, 0x5}, {0xc99a, 0x0, 0xfffffffffffff77d}, {0x2d, 0x0, 0x48}, {0xffffffc0}, {0x6, 0x0, 0xa}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x5}, {0x6, 0x0, 0xfffffffffffffffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) close(r4) 30m28.126097009s ago: executing program 3 (id=543): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB], 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 30m26.471229424s ago: executing program 3 (id=547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 30m26.469520834s ago: executing program 5 (id=548): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 30m24.690827815s ago: executing program 5 (id=549): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x1, 0x4}, 0x50) 30m22.249433605s ago: executing program 3 (id=552): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB], 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) 30m21.182835711s ago: executing program 3 (id=554): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30m20.346499172s ago: executing program 5 (id=555): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 30m20.070663078s ago: executing program 5 (id=558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) 30m19.282085161s ago: executing program 5 (id=559): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 30m16.398676393s ago: executing program 3 (id=561): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2) r6 = socket(0x9, 0xa, 0xffffffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) io_setup(0x8, &(0x7f00000001c0)=0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) 30m3.778100965s ago: executing program 33 (id=559): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 30m1.168864377s ago: executing program 34 (id=561): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2) r6 = socket(0x9, 0xa, 0xffffffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) io_setup(0x8, &(0x7f00000001c0)=0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) 26m30.499933908s ago: executing program 6 (id=905): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) 26m30.153720506s ago: executing program 6 (id=906): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) sendto$packet(r5, &(0x7f00000003c0)="11eb534bfc0baf745837da8888a8", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @random="91425f8f5afa"}, 0x14) 26m28.883536779s ago: executing program 6 (id=907): socket$inet6(0xa, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) unshare(0x20000600) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 26m26.874827501s ago: executing program 6 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 26m19.928188135s ago: executing program 6 (id=915): socket$kcm(0xa, 0x3, 0x3a) socket$rds(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x142, 0x805, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0}], 0x4}, 0x2}], 0x2, 0x40010142, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @private}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0x23, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x13c0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0xb, 0xff, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0xc}, {0x2, 0x4, 0x3, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x4, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x4}, {0x3, 0x4, 0x5, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x5, 0x1, 0x10, 0xc}], 0x10, 0x200}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) 26m16.718544807s ago: executing program 6 (id=918): socket$inet6(0xa, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) unshare(0x20000600) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 26m1.353518544s ago: executing program 35 (id=918): socket$inet6(0xa, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) unshare(0x20000600) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 23m21.294428379s ago: executing program 4 (id=1246): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xd440}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x141}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/119, 0x77}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x8}, 0x228}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x3, 0x40, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 23m19.679623934s ago: executing program 4 (id=1247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="1700", 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000600)={0x7, 0xab, [{0x101, 0x0, 0x78}, {0x7ff, 0x0, 0x4}, {0x3, 0x0, 0x2}, {0x8000, 0x0, 0xec3}, {0x400, 0x0, 0x1}, {0x5, 0x0, 0x2}, {0x3, 0x0, 0x3}, {0xc6, 0x0, 0xff}, {0x0, 0x0, 0x5}, {0xc99a, 0x0, 0xfffffffffffff77d}, {0x2d, 0x0, 0x48}, {0xffffffc0}, {0x6, 0x0, 0xa}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x5}, {0x6, 0x0, 0xfffffffffffffffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x49) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) 23m16.155371125s ago: executing program 4 (id=1253): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x1, 0x4}, 0x50) 23m14.304813269s ago: executing program 4 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xd440}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x141}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/119, 0x77}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x8}, 0x228}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x3, 0x40, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 23m13.973420987s ago: executing program 4 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20000400) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000600)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eb", 0x44, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, 0x0) 23m10.036184275s ago: executing program 4 (id=1262): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) open(0x0, 0x64842, 0x389b0d52417bb201) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) 22m54.254360028s ago: executing program 36 (id=1262): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) open(0x0, 0x64842, 0x389b0d52417bb201) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) 18m39.924821814s ago: executing program 1 (id=1853): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x8, &(0x7f0000006680)) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) waitid(0x1, 0x0, 0x0, 0x40000000, &(0x7f00000006c0)) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 18m34.650053282s ago: executing program 1 (id=1859): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) mknod$loop(0x0, 0x8000, 0x1) acct(&(0x7f0000000600)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kvm_unmap_hva_range\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x800, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) 18m29.650189887s ago: executing program 1 (id=1869): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x8, &(0x7f0000006680)) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) waitid(0x1, 0x0, 0x0, 0x40000000, &(0x7f00000006c0)) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 18m28.300212503s ago: executing program 1 (id=1871): r0 = syz_usb_connect(0x3, 0x73b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xed, 0x99, 0x0, 0x20, 0xa5c, 0x21e1, 0xa2cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x729, 0x4, 0x3, 0x9, 0x10, 0x81, [{{0x9, 0x4, 0xa1, 0xf3, 0x2, 0xc9, 0xf3, 0x12, 0x7, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x2, 0x5b, "b24b4587"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x4}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "80"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x300}, [@obex={0x5, 0x24, 0x15, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x37}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0x6, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xe, 0x40, 0x4d}]}], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x81, 0x4, 0xb, [@generic={0xd, 0x24, "cc36cacae880c93e89a361"}, @generic={0x45, 0x30, "ca5b1753f2b4449808409c657f12e3eb65384624650949949628a66c9496319e2eb1eb4710f114af9aa97eca7654d3bcb7213390196ad572809e3e775ba443992f3663"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x3, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xa}, @generic={0xd0, 0x3, "d001b1fc93f34e66e0f613a234fa958f87d857d58c60be7563dd9796823ad186456b9bf41e738785e236790d64aff4ecd566ad6dad6885cc2090dbee97cf33d758a7627cc65312324d32df15b645d047cd1ae6334cbbc57679be5fdcf87a9417b101c344cf588733c1a8a021e655fbb2ebe76505934d7c2646d088067d6255919f9f17b3a330cc882edb761c8c5b618ef55a583136243d258695d349036b0ec610d2d1be3fdb9c23e31649eca41218972c471170500837f3514fbab385f05ad70bab8b4661e3597dcc44e6741af8"}]}}]}}, {{0x9, 0x4, 0xfe, 0xfb, 0x8, 0xd1, 0x44, 0xf7, 0xb8, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x1, 0x10, 0x28, "0a90cb"}]}], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x60, 0x7, 0xf7, [@generic={0xbc, 0x0, "80653581114a5833bdb6e3a3b1cc49ef16b72c441784a5539e20ab355a4dc668bdf0d7ea404dbba72bf9a42012475e45d2d4163691f6b93174ce7d4b9a3e2bed365c20d64c23e77db7050a7fc297d9b1b6828c234033fe6edadf3fbee01005c0f50289ec2a171031752b8d98b37c4f85c82d42c8d01f7d3a524006775d5f38ca59dfd3df4de8bce4915f8e8a9a1a8a28336c353365973241c4ef14a6164cfa3a42e4dd924e6f44add2986aae8cfcb825b4970fcef5e33735e0bc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x8}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x8, 0x4f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x4, 0xcb, 0x6, [@generic={0xf9, 0x2, "006ee655a45ee2214e4cd1d38e1b8961491e282af4a7f49272400acaea5af4a401e44cea4c0dde5984e7002ab39b2a57712d8f39eeb3638871554051532823bb3d9388572bc84cede379014ffae9573ebb5c486ad56da5590bb5ca8d36df5b093d3d63e39490966813b6f28609abc1594b3d93a361faf28d98b1be0cafdac11dd7fd3489f611625dda9761610c510280577b2b80275aee806c69a461029647d249aed15196b09c1743a635b4003cea117e9b85021947d5d3cc2ec7369fa79e14061386b61d6ab1c64d34f4ff5005ed695168e3ccf6abf53d3933731474a7757888bef47fbea63aedcd9a1628bb316e77041a627ef7ba9b"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3e, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0xd, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x9}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x1, 0xfb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x6, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9}]}}]}}, {{0x9, 0x4, 0x76, 0xe, 0x9, 0x48, 0xa6, 0xa6, 0x80, [], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x7, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x77, 0x4, 0xbb, [@generic={0xa2, 0x9, "28508403fa22db707911378ef2009c7f5600251e65e8c44535b71779660f0ce7178ed85bb595854633b4714930a090fd71308fc91bb5b6c3a17e09c6cc22de28ba39b6ed8590929b0d5a3cb76a44723d08940a7c8e90faec21a781f588f65927d816c4fce94c4e64fffdbfaa046e983958a4143add3becd911e3e35a4375818254f53585205b8a459361ae7e8f1f113370978289af109f8bdee778507d0690b8"}, @generic={0xe6, 0x11, "f6b47ae1da2b07390b7801511501181006ea46eccfa807c5418d2d4f246bef90fc073137ccf56523eb777bd12e4671c9b9d1b93d64d42c2ac7f8fb0bb981f17a4181f65b8514fad0cce2c9c078f9ff6b81ba36f245e042a19491efa6119315bdffd1952332cf997419fec794dc7d23659e585f4bd1e5855627e8c593b41534d7e088824c8e97b11ec6b85dcc72965b681d49ca567fb3001287f1b0db262da0706335cba36eeca62ec8714a8dba16b01fea9b2189b8c043023697c0048d703d40ae5abd3dd94c52aa6cab732ebae3921f5c46de6551aaa10e6cd955f482fb845f2d0d22cf"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x2, 0x9d, 0x9, [@generic={0x1f, 0x21, "cf7fec62dfcb96654ab63f57db28110454d119d515e300928e8bbcccb9"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x0, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}, @generic={0xcd, 0x4, "5b43994031b4cad1c0c2dc309a5b1c2a321e9d44d3e4287100cf7e4c7444b095872a302129138a553f9a025cb625ec51b572f8c6d4244de6336a39440629c44029c6d3cd8f0e05e2a7123ffba271a939bf26dd36d4eff13838e1b7b2cb1cc118c00f2b0710af2eb749d6ef0bd60f428296c756dd0aecb7280c9ae544e94b2b19fb644875ea5b4ac14b5df8e653b351cfd9a4726f17102f588d7ea9827a7d4db3127b6e47c372711e49c4168c78d483c9702f738b949728b738082b295d6a65f025a70d3a1037fc640ac19a"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x8, 0xd, 0x6, [@generic={0x9, 0x2, "a6ba57a75329d0"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0xa8, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x1, 0x8f, 0x5, [@generic={0x2, 0xb}]}}]}}, {{0x9, 0x4, 0x84, 0x7, 0x4, 0xa0, 0xa, 0x7c, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x9, 0x97, 0x96}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x3, 0x99, 0x7, [@generic={0x9, 0x4, "fe23716971f49f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xa, 0x2, 0x2, [@generic={0x9, 0x4, "80e322f3d5e10d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x2a1b3fae2c0946e6, 0x6, 0x8, 0x1}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x40, 0xff, 0xa, 0x8, 0x6}, 0x8, &(0x7f0000000e80)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2c2b}}, {0x21, &(0x7f0000001000)=@string={0x21, 0x3, "4d64232d0d0156447340be0f6a9b6d47782ec5a4fd7ccf4f85c2134394aeb7"}}, {0xba, &(0x7f0000001040)=@string={0xba, 0x3, "a604e52ace048e4e8d71eeb61819561addfaa72ea6da34828c55ec3fc39b4dac3e66d64eace8f0d92cf3807e54766e03aa18f962e6f46fb0009ad28456d8fd5d6af100d3ba9dc6607b96e91cbee3be165b798c3e8bb20c785caf7f4be00dd495b95d9245ff5686d884206cf83af381afe78f7b729ae20303f07fe35511c5534c6d89ae54806191cf477cd9623b190f55a8ab835969bb36f2b0fc744d980e54d3e4d34e0fbe0cac94e06f158ba2997e01425703c1f68e0e43"}}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$lan78xx(r0, &(0x7f00000012c0)={0x14, &(0x7f0000001180)={0x40, 0x2, 0x5d, {0x5d, 0x21, "85b9d551f5b66eef20ecb5f0c57c1e492caaab96dd374ef90fb3432c6ce508f7520c9762ec63524d00bff487057b77581e87aa41b0b14590a02f1ae0dbc048c64e04eb077439aee4a6185ef15a9245c7fb43fbe99ca89dd0de015a"}}, &(0x7f0000001200)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "3378cd8be4e6b3ab25d1858abe6a528bf082e3cfb80dc8c35392d63a7a2cf41d82000a2a19ad68ffa59732e56e0345c8566b899bd4ce7c97a7d8df53bc5e2e56a6d2e748c1dab55c9b6d702265f82415ce9e70f936dad818a74925eed4b7a501b3c966ca2543fb4a169634d0ea95276bde6db6217de717d300e1fc308d03c68302c94430c040d1e9741c3650a94bec4dcb0883cc5e6fc738a59681ff7133e24e0e5dad52ba9c3f"}}}, &(0x7f00000014c0)={0x34, &(0x7f0000001300)={0x0, 0x15, 0x69, "810441ebc065e3b422c40df591d25121c5e65b65991a2fc85a571e6d342153562cb7d1f40e2b14be6c299b0b51f14ce3e97d31973aafa9753df80909d4497a61cf8fc8c56b800fbdaa52639ef14b6ba78070e8b2665e0e5aa0f829cd8d8fc632ae11f4b5016944c648"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001400)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000001440)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000001480)={0xc0, 0xa2, 0x2f, "4d29739bc133fc75347f6e84dfb5b2c924c54db314d548b41b956a6e35f500418cab485661fc91eca5942215defde1"}}) 18m24.495177376s ago: executing program 1 (id=1881): pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 18m23.467442165s ago: executing program 1 (id=1883): r0 = socket$key(0xf, 0x3, 0x2) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x110) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf7") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) 18m8.117859125s ago: executing program 37 (id=1883): r0 = socket$key(0xf, 0x3, 0x2) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x110) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf7") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) 15m57.052793602s ago: executing program 7 (id=2116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x0, 0x40002003, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 15m52.433828309s ago: executing program 7 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x841b71589640384a, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x90) 15m51.385163243s ago: executing program 7 (id=2123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x24, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 15m49.115266871s ago: executing program 7 (id=2126): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed841572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134fba55526983dabf2f189c70ddec701b55256d383dd802b4b09b801fb6cbe3408c9eb6d1fd85bf93b60b966680485d4550a3aa3454d888d6f8e81f669d4d87914041ac313e39f0ae29f31dedba1c5964c6729045cbd010e4469a7220335f76983c7d22a53401cb25444b9103643843726bdbb28d4032f9258f8539b9a7dfd6558b2c524d38c9e2e1c23fd7a6a42bf4bb5ebdf0b75ecc547ef15865536ee1de07155bc5e6b5a227c1170a6e4e44991f0685219c417d7194a4cdbce6a1e76f830fdd07887b49a3b648772b6e1b6fda08931540cc521e44f3fb221ce86438759704ce2422653a35f62c483a21ae6b34b14e6d900172dddecf8846a9423d784341296e141423f1c1efed6a0c334430647c0408af67c54a8cad69a43bf28ebe4a650343151223969bafa661999342df2a160f45b950f258f1e444575d6251a917bfcbb4dc834bd08d4deeb3be0dabade5f46060e54bc71f137f47e4233804eb9de", 0x589}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f000001000000003800"/24], 0x58}, 0x4) 15m48.646839895s ago: executing program 7 (id=2130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x0, 0x40002003, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 15m47.036197925s ago: executing program 0 (id=2131): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xf}, {0x0, 0xa}}, [@TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x47, 0xa, 0x2, 0xfffffffd, 0x2, 0x8, 0x8, 0x5}}, {0xe, 0x2, [0x10, 0x74, 0xffd, 0x4, 0x3]}}, {{0x1c, 0x1, {0xf0, 0x3, 0x8001, 0x6, 0x0, 0x2d, 0x100, 0x3}}, {0xa, 0x2, [0x1, 0x8000, 0x7]}}, {{0x1c, 0x1, {0xb0, 0x7, 0x6, 0x100, 0x2, 0x7, 0x5, 0x3}}, {0xa, 0x2, [0x7, 0x1000, 0x8000]}}, {{0x1c, 0x1, {0xe6, 0x9f, 0x5, 0xff, 0x0, 0xff, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x0, 0x7, 0x6, 0x6, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x2, [0x1, 0x948]}}, {{0x1c, 0x1, {0x1, 0x99, 0xcbce, 0x8, 0x0, 0x7fffffff, 0x5, 0x8}}, {0x14, 0x2, [0xff, 0x1000, 0x9, 0xd, 0x8, 0xb3b0, 0x5, 0x6a6]}}, {{0x1c, 0x1, {0x2, 0x4, 0x7, 0x8, 0x2, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0x2, 0x8, 0x5, 0x87, 0x6, 0x9, 0xffff, 0x1000]}}, {{0x1c, 0x1, {0x10, 0x45, 0x8, 0x2, 0x1, 0x9, 0x7, 0x4}}, {0xc, 0x2, [0x10, 0x7, 0x81, 0x9]}}, {{0x1c, 0x1, {0x8, 0x8, 0x81, 0x6, 0x0, 0xa, 0x7, 0x6}}, {0x10, 0x2, [0x3196, 0x18, 0x79, 0x0, 0xe00e, 0x7ff]}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 15m46.706737008s ago: executing program 0 (id=2133): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10}, 0x18) 15m46.034577073s ago: executing program 0 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x0, 0x40002003, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088) 15m44.66089652s ago: executing program 7 (id=2137): r0 = socket$key(0xf, 0x3, 0x2) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x110) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf77247") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) 15m44.515855452s ago: executing program 0 (id=2138): mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(r1, &(0x7f00000009c0), 0x0, 0x20, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000580)) socket$kcm(0x21, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000600)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 15m41.373521094s ago: executing program 0 (id=2142): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 15m39.322175653s ago: executing program 0 (id=2145): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0xf, 0x0, [@multicast2, @private, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) 15m27.881957321s ago: executing program 38 (id=2137): r0 = socket$key(0xf, 0x3, 0x2) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x110) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf77247") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) 15m23.270364741s ago: executing program 39 (id=2145): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0xf, 0x0, [@multicast2, @private, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) 9m4.909541809s ago: executing program 8 (id=2715): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9m4.42662562s ago: executing program 8 (id=2716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 8m59.152499724s ago: executing program 8 (id=2722): mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(r1, &(0x7f00000009c0), 0x0, 0x20, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000580)) socket$kcm(0x21, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000600)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f0000000a40)}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 8m55.883313273s ago: executing program 8 (id=2723): mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(r1, &(0x7f00000009c0), 0x0, 0x20, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 8m47.857438295s ago: executing program 8 (id=2727): ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x20, 0x6, 0x7f}, 0x2c) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000040), 0x1001) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000540)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) 8m46.622163957s ago: executing program 8 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 8m31.306652664s ago: executing program 40 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 14.990886963s ago: executing program 9 (id=3341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 11.862831975s ago: executing program 2 (id=3344): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) socketpair(0x1, 0x100000005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x0, 0x9, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x64, 0x0, 0xc5, 0x2f, 0x0, @empty, @empty}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 10.816150367s ago: executing program 2 (id=3345): socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r7, 0x10000000005, 0x0) 10.773896121s ago: executing program 9 (id=3346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x2401c040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prlimit64(r0, 0x5, &(0x7f00000000c0)={0x5, 0x2}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 9.495551695s ago: executing program 9 (id=3347): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r4, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10, 0x0, 0x200}, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0xc0) getdents(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4cbe8) 5.385997613s ago: executing program 2 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffffc, 0x101b, 0x0, 0x8, 0x6, 0x1, 0x7}}) ustat(0x11, &(0x7f0000000600)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, "200080", 0x0, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x406, 0x0) 5.384326495s ago: executing program 9 (id=3349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x2}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000280)="ba86b0e3400822b058de3e11cadc83d6b092e37cbea6fb8f7307c049e35f418733102fc34ad9e55a71aff6c38f635e4ef9ef76e7d61dc59441e5f5ef042f14793e2ed08e7ce9a8ebcb002fb86db556899d7beec3beabd30254fe1b0e7cca74e0bf474cdd54f364f060aee6d78e72358e19d5ee6f04b07c2537cc47ea04d09d052feda4c27945cb9c67594494c3b267e9d1ad6e67889d0c0b52f0ab9c045b5f3e546958b6e644329ee3f7041013a6bbbba908ac75f58ebf7951579eda6dc99082c2405cf5eee074ce40503a1e586cf2536038cd7d6cfb8415470e", &(0x7f0000000380)=""/255}, 0x20) select(0x17, &(0x7f0000000980)={0x7f}, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x48819) sendto$inet6(r4, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 4.361270167s ago: executing program 2 (id=3350): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.927381537s ago: executing program 9 (id=3351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffffc, 0x101b, 0x0, 0x8, 0x6, 0x1, 0x7}}) ustat(0x11, &(0x7f0000000600)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, "200080", 0x0, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x406, 0x0) 1.627730806s ago: executing program 9 (id=3352): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) setns(r4, 0x24020000) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0xffffffff, {0x0, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0x2, 0xc000, 0x20000000, 0x0, 0x0, 0x3ff, 0xb100}}, {0x0, 0x1e}}}, 0xa0) 1.231563363s ago: executing program 2 (id=3353): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) socketpair(0x1, 0x100000005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x0, 0x9, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x64, 0x0, 0xc5, 0x2f, 0x0, @empty, @empty}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 0s ago: executing program 2 (id=3354): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0xf, 0x0, [@multicast2, @private, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): x0c23 length: 249 > 4 [ 1888.590831][T13404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1889.349566][T13695] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1889.494957][T13695] usb 10-1: Using ep0 maxpacket: 8 [ 1889.500469][T13695] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1889.500502][T13695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.500525][T13695] usb 10-1: Product: syz [ 1889.500541][T13695] usb 10-1: Manufacturer: syz [ 1889.500558][T13695] usb 10-1: SerialNumber: syz [ 1889.543853][T13695] usb 10-1: config 0 descriptor?? [ 1889.562995][T13695] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1889.967778][T13695] gspca_sonixj: reg_r err -32 [ 1889.967876][T13695] sonixj 10-1:0.0: probe with driver sonixj failed with error -32 [ 1890.109952][ T3175] bridge_slave_1: left allmulticast mode [ 1890.109998][ T3175] bridge_slave_1: left promiscuous mode [ 1890.110411][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.172590][ T3175] bridge_slave_0: left allmulticast mode [ 1890.172627][ T3175] bridge_slave_0: left promiscuous mode [ 1890.172964][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.260737][ T3175] bridge_slave_1: left allmulticast mode [ 1890.260771][ T3175] bridge_slave_1: left promiscuous mode [ 1890.261050][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.499631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.508632][ T3175] bridge_slave_0: left allmulticast mode [ 1890.508667][ T3175] bridge_slave_0: left promiscuous mode [ 1890.508950][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.640412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.303541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.324645][T15363] Bluetooth: hci5: command tx timeout [ 1891.483369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1892.304449][ T5657] usb 10-1: USB disconnect, device number 32 [ 1892.854960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.135494][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.215440][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.280271][ T3175] bond0 (unregistering): Released all slaves [ 1893.378174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.395072][T13404] Bluetooth: hci5: command tx timeout [ 1893.567299][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.655513][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.707698][ T3175] bond0 (unregistering): Released all slaves [ 1893.965749][T17128] chnl_net:caif_netlink_parms(): no params data found [ 1895.497558][T13404] Bluetooth: hci5: command tx timeout [ 1895.584638][ T3175] hsr_slave_0: left promiscuous mode [ 1895.604897][ T3175] hsr_slave_1: left promiscuous mode [ 1895.605645][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1895.628134][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.744668][ T3175] hsr_slave_0: left promiscuous mode [ 1895.764676][ T3175] hsr_slave_1: left promiscuous mode [ 1895.765770][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1895.787979][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.372867][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 1897.577020][T13404] Bluetooth: hci5: command tx timeout [ 1897.635982][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 1898.695534][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 1898.815485][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 1899.325625][T17162] batadv_slave_0: entered promiscuous mode [ 1899.325932][T17164] batadv_slave_0: left promiscuous mode [ 1899.771455][ T38] audit: type=1400 audit(1761592860.755:519): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=17170 comm="syz.2.2986" daddr=::ffff:172.20.20.55 dest=20001 [ 1900.612425][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1900.612569][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.612840][T17128] bridge_slave_0: entered allmulticast mode [ 1900.657010][T17128] bridge_slave_0: entered promiscuous mode [ 1900.661920][T17128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.662084][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.662314][T17128] bridge_slave_1: entered allmulticast mode [ 1900.664311][T17128] bridge_slave_1: entered promiscuous mode [ 1901.299402][T17128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.421467][T17128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.906772][T17128] team0: Port device team_slave_0 added [ 1901.909555][T17128] team0: Port device team_slave_1 added [ 1902.127835][T17128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.127854][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.127884][T17128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.130280][T17128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.130296][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.130317][T17128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1902.423025][T17128] hsr_slave_0: entered promiscuous mode [ 1902.424078][T17128] hsr_slave_1: entered promiscuous mode [ 1902.425310][T17128] debugfs: 'hsr0' already exists in 'hsr' [ 1902.425341][T17128] Cannot create hsr debugfs directory [ 1902.522590][T17184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1903.382820][T15363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1903.387737][T15363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1903.389187][T15363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1903.405019][T15363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1903.406377][T15363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1904.860152][T15363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1904.877261][T15363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1904.879511][T15363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1904.882460][T15363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1904.883466][T15363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1905.545511][T13404] Bluetooth: hci2: command tx timeout [ 1906.994782][T13404] Bluetooth: hci0: command tx timeout [ 1907.554758][T13404] Bluetooth: hci2: command tx timeout [ 1908.928269][T17237] batadv_slave_0: entered promiscuous mode [ 1909.180366][T17231] batadv_slave_0: left promiscuous mode [ 1909.200553][T13404] Bluetooth: hci0: command tx timeout [ 1909.782000][T13404] Bluetooth: hci2: command tx timeout [ 1910.828678][ T3175] bridge_slave_1: left allmulticast mode [ 1910.828712][ T3175] bridge_slave_1: left promiscuous mode [ 1910.829070][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.179387][ T3175] bridge_slave_0: left allmulticast mode [ 1911.179425][ T3175] bridge_slave_0: left promiscuous mode [ 1911.179712][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.245922][T13404] Bluetooth: hci0: command tx timeout [ 1911.808276][T13404] Bluetooth: hci2: command tx timeout [ 1912.826839][T17257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1912.957619][T17260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1913.314693][T13404] Bluetooth: hci0: command tx timeout [ 1915.455882][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1915.555351][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1915.617218][ T3175] bond0 (unregistering): Released all slaves [ 1915.635252][T17284] batadv_slave_0: entered promiscuous mode [ 1915.635540][T17285] batadv_slave_0: left promiscuous mode [ 1916.100046][T17187] chnl_net:caif_netlink_parms(): no params data found [ 1916.746261][T17203] chnl_net:caif_netlink_parms(): no params data found [ 1916.998812][T17299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1917.063537][T17301] netlink: 'syz.9.3007': attribute type 7 has an invalid length. [ 1917.354796][ T3175] hsr_slave_0: left promiscuous mode [ 1917.374926][ T3175] hsr_slave_1: left promiscuous mode [ 1917.375867][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.785669][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1921.565342][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 1921.705562][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 1922.493223][T17301] netlink: 'syz.9.3007': attribute type 7 has an invalid length. [ 1922.675502][T16724] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1922.837743][T16724] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1923.005177][T16724] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1923.051897][T16724] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1924.258164][T17335] batadv_slave_0: entered promiscuous mode [ 1924.258505][T17336] batadv_slave_0: left promiscuous mode [ 1925.205208][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.205954][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1926.002168][T17349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1926.199568][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.199739][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.199995][T17187] bridge_slave_0: entered allmulticast mode [ 1926.202691][T17187] bridge_slave_0: entered promiscuous mode [ 1926.216379][T17203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.216538][T17203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.216815][T17203] bridge_slave_0: entered allmulticast mode [ 1926.220297][T17203] bridge_slave_0: entered promiscuous mode [ 1926.227300][T17203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.227454][T17203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.227739][T17203] bridge_slave_1: entered allmulticast mode [ 1926.231043][T17203] bridge_slave_1: entered promiscuous mode [ 1932.975970][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.976211][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.976420][T17187] bridge_slave_1: entered allmulticast mode [ 1932.979334][T17187] bridge_slave_1: entered promiscuous mode [ 1933.531572][T17203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.405953][T17364] macsec1: entered promiscuous mode [ 1934.406034][T17364] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 1934.938604][T17364] mac80211_hwsim hwsim43 wlan1: left promiscuous mode [ 1935.037958][T17203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1935.069115][T17187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1935.311778][T17187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1935.454710][ T6017] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1935.594334][T17203] team0: Port device team_slave_0 added [ 1935.604603][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 1935.606547][ T6017] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.606565][ T6017] usb 10-1: config 0 has no interfaces? [ 1935.609483][ T6017] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1935.609505][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.609520][ T6017] usb 10-1: Product: syz [ 1935.609531][ T6017] usb 10-1: Manufacturer: syz [ 1935.609542][ T6017] usb 10-1: SerialNumber: syz [ 1935.719926][ T6017] usb 10-1: config 0 descriptor?? [ 1935.810739][T17203] team0: Port device team_slave_1 added [ 1935.819381][T17187] team0: Port device team_slave_0 added [ 1935.988641][T17187] team0: Port device team_slave_1 added [ 1936.316010][T17128] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1937.616521][T17389] batadv_slave_0: entered promiscuous mode [ 1937.616829][T17390] batadv_slave_0: left promiscuous mode [ 1937.617949][T17203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1937.617960][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1937.617981][T17203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1937.835881][T17128] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1938.262041][T17203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.262859][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.263077][T17203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.423701][T17187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.423723][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.423757][T17187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.424886][T17128] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1938.594707][ T5875] usb 10-1: USB disconnect, device number 33 [ 1938.675713][T17187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.675731][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.675770][T17187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.676358][T17128] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1938.678873][T17398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1939.537503][T17203] hsr_slave_0: entered promiscuous mode [ 1939.538563][T17203] hsr_slave_1: entered promiscuous mode [ 1939.539331][T17203] debugfs: 'hsr0' already exists in 'hsr' [ 1939.539350][T17203] Cannot create hsr debugfs directory [ 1939.572232][T17187] hsr_slave_0: entered promiscuous mode [ 1939.573745][T17187] hsr_slave_1: entered promiscuous mode [ 1939.575184][T17187] debugfs: 'hsr0' already exists in 'hsr' [ 1939.575215][T17187] Cannot create hsr debugfs directory [ 1947.225528][T17428] batadv_slave_0: entered promiscuous mode [ 1947.225806][T17429] batadv_slave_0: left promiscuous mode [ 1948.056041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1948.375514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1948.460271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1948.657903][T17439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1948.806601][T15363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1948.824878][T15363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1948.834289][T15363] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1948.844156][T15363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1948.857399][T15363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1949.304921][ T6017] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1949.437409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1949.481088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1949.965776][ T6017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.965839][ T6017] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1949.965866][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.015502][ T6017] usb 3-1: config 0 descriptor?? [ 1950.031417][ T6017] ttusbir 3-1:0.0: cannot find expected altsetting [ 1950.328021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.496686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.505880][ T5657] usb 3-1: USB disconnect, device number 71 [ 1950.614054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.930652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.994895][T15363] Bluetooth: hci1: command tx timeout [ 1951.117937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1951.816657][T17463] Invalid source name [ 1951.816692][T17463] UBIFS error (pid: 17463): cannot open "./file0", error -22 [ 1953.238554][T15363] Bluetooth: hci1: command tx timeout [ 1953.623613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1954.014355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1954.096124][T17440] chnl_net:caif_netlink_parms(): no params data found [ 1954.832219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1954.907418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1955.038222][ T3175] bridge_slave_1: left allmulticast mode [ 1955.038253][ T3175] bridge_slave_1: left promiscuous mode [ 1955.038517][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.053592][T17487] binder: 17486:17487 unknown command 0 [ 1955.053630][T17487] binder: 17486:17487 ioctl c0306201 200000000080 returned -22 [ 1955.061745][T17487] binder: 17486:17487 ioctl c0306201 2000000003c0 returned -14 [ 1955.156441][ T3175] bridge_slave_0: left allmulticast mode [ 1955.156473][ T3175] bridge_slave_0: left promiscuous mode [ 1955.156816][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.334417][T15363] Bluetooth: hci1: command tx timeout [ 1955.429938][ C0] vkms_vblank_simulate: vblank timer overrun [ 1955.483351][ T3175] bridge_slave_1: left allmulticast mode [ 1955.483385][ T3175] bridge_slave_1: left promiscuous mode [ 1955.487145][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.723302][T17496] Invalid source name [ 1955.723641][T17496] UBIFS error (pid: 17496): cannot open "./file0", error -22 [ 1956.838019][ T3175] bridge_slave_0: left allmulticast mode [ 1956.838054][ T3175] bridge_slave_0: left promiscuous mode [ 1956.838327][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.069936][ T38] audit: type=1400 audit(1761592918.065:520): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=17497 comm="syz.9.3046" daddr=::ffff:172.20.20.55 dest=20001 [ 1957.255773][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.326540][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.389347][ T3175] bond0 (unregistering): Released all slaves [ 1957.400622][T15363] Bluetooth: hci1: command tx timeout [ 1957.488225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1957.685234][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.775361][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.845099][ T3175] bond0 (unregistering): Released all slaves [ 1958.063370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1958.110843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1958.188181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1958.215562][T17440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.215656][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.215875][T17440] bridge_slave_0: entered allmulticast mode [ 1958.218058][T17440] bridge_slave_0: entered promiscuous mode [ 1958.576809][T17440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.577030][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.577259][T17440] bridge_slave_1: entered allmulticast mode [ 1958.579283][T17440] bridge_slave_1: entered promiscuous mode [ 1958.687347][ T38] audit: type=1400 audit(1761592919.655:521): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=17502 comm="syz.9.3047" dest=19488 [ 1959.413950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1959.667907][T17509] Invalid source name [ 1959.667921][T17509] UBIFS error (pid: 17509): cannot open "./file0", error -22 [ 1959.944713][ T3175] hsr_slave_0: left promiscuous mode [ 1959.994917][ T3175] hsr_slave_1: left promiscuous mode [ 1959.995871][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.045481][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.195002][ T3175] hsr_slave_0: left promiscuous mode [ 1960.235385][ T3175] hsr_slave_1: left promiscuous mode [ 1960.236173][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.265430][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.973137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1961.024739][ T5657] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1961.159782][ C0] vkms_vblank_simulate: vblank timer overrun [ 1961.176496][ T5657] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1961.176525][ T5657] usb 3-1: config 0 has no interface number 0 [ 1961.176577][ T5657] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.176605][ T5657] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.176631][ T5657] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1961.176674][ T5657] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1961.176698][ T5657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.180341][ T5657] usb 3-1: config 0 descriptor?? [ 1961.250660][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 1961.415572][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 1961.520380][ C0] vkms_vblank_simulate: vblank timer overrun [ 1961.810155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1961.812814][ T5657] uclogic 0003:28BD:0042.0022: failed retrieving string descriptor #100: -71 [ 1961.812871][ T5657] uclogic 0003:28BD:0042.0022: failed retrieving pen parameters: -71 [ 1961.812900][ T5657] uclogic 0003:28BD:0042.0022: pen probing failed: -71 [ 1961.812919][ T5657] uclogic 0003:28BD:0042.0022: failed probing parameters: -71 [ 1961.813035][ T5657] uclogic 0003:28BD:0042.0022: probe with driver uclogic failed with error -71 [ 1961.863478][ T5657] usb 3-1: USB disconnect, device number 72 [ 1961.920550][ C0] vkms_vblank_simulate: vblank timer overrun [ 1961.989581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1962.417114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1962.486477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1962.815734][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 1962.860840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.003685][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 1963.054999][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.204252][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.370677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.457641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.513051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.649862][T17440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1963.731692][T17440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.450541][ T38] audit: type=1400 audit(1761592925.415:522): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=17530 comm="syz.9.3056" dest=19488 [ 1965.107893][ C0] vkms_vblank_simulate: vblank timer overrun [ 1965.337231][T17440] team0: Port device team_slave_0 added [ 1965.340952][T17440] team0: Port device team_slave_1 added [ 1965.506278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1965.557763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1965.640853][T13404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1965.686252][ C0] vkms_vblank_simulate: vblank timer overrun [ 1965.686457][T13404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1965.687951][T13404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1965.702954][T13404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1965.714719][T13404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1965.871609][T17440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1965.871629][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1965.871659][T17440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1965.874980][T17440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1965.874997][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1965.875031][T17440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.945886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.095918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.264114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.774387][ C0] vkms_vblank_simulate: vblank timer overrun [ 1966.964679][ T6017] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1967.007477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.009585][T15363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1967.016466][T15363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1967.042800][T15363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1967.055577][T15363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1967.056513][T15363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1967.144682][ T6017] usb 10-1: Using ep0 maxpacket: 32 [ 1967.149160][ T6017] usb 10-1: config 3 has an invalid interface number: 161 but max is 3 [ 1967.149184][ T6017] usb 10-1: config 3 has an invalid interface number: 254 but max is 3 [ 1967.149200][ T6017] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1967.149213][ T6017] usb 10-1: config 3 has an invalid interface number: 118 but max is 3 [ 1967.149228][ T6017] usb 10-1: config 3 has an invalid interface number: 132 but max is 3 [ 1967.149242][ T6017] usb 10-1: config 3 has an invalid interface number: 254 but max is 3 [ 1967.149256][ T6017] usb 10-1: config 3 has an invalid interface number: 128 but max is 3 [ 1967.149271][ T6017] usb 10-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 1967.149287][ T6017] usb 10-1: config 3 has no interface number 0 [ 1967.149299][ T6017] usb 10-1: config 3 has no interface number 1 [ 1967.149310][ T6017] usb 10-1: config 3 has no interface number 2 [ 1967.149322][ T6017] usb 10-1: config 3 has no interface number 3 [ 1967.149334][ T6017] usb 10-1: config 3 has no interface number 4 [ 1967.149406][ T6017] usb 10-1: config 3 interface 161 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 1967.149442][ T6017] usb 10-1: config 3 interface 254 altsetting 251 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1967.149466][ T6017] usb 10-1: config 3 interface 254 altsetting 251 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1967.149495][ T6017] usb 10-1: config 3 interface 118 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1967.149527][ T6017] usb 10-1: config 3 interface 132 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1967.149546][ T6017] usb 10-1: config 3 interface 132 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1967.149567][ T6017] usb 10-1: too many endpoints for config 3 interface 254 altsetting 35: 113, using maximum allowed: 30 [ 1967.149598][ T6017] usb 10-1: config 3 interface 254 altsetting 35 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1967.149617][ T6017] usb 10-1: config 3 interface 254 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 1967.149637][ T6017] usb 10-1: too many endpoints for config 3 interface 128 altsetting 227: 34, using maximum allowed: 30 [ 1967.149668][ T6017] usb 10-1: config 3 interface 128 altsetting 227 endpoint 0x6 has invalid maxpacket 18150, setting to 64 [ 1967.149688][ T6017] usb 10-1: config 3 interface 128 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1967.149708][ T6017] usb 10-1: config 3 interface 161 has no altsetting 0 [ 1967.149721][ T6017] usb 10-1: config 3 interface 254 has no altsetting 0 [ 1967.149734][ T6017] usb 10-1: config 3 interface 254 has no altsetting 1 [ 1967.149747][ T6017] usb 10-1: config 3 interface 118 has no altsetting 0 [ 1967.149760][ T6017] usb 10-1: config 3 interface 132 has no altsetting 0 [ 1967.149773][ T6017] usb 10-1: config 3 interface 128 has no altsetting 0 [ 1967.152539][ T6017] usb 10-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice=a2.cc [ 1967.152561][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.152639][ T6017] usb 10-1: Product: ဌ [ 1967.152650][ T6017] usb 10-1: Manufacturer: Г [ 1967.152661][ T6017] usb 10-1: SerialNumber: К [ 1967.546053][T17545] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1967.611654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.794836][T15363] Bluetooth: hci5: command tx timeout [ 1967.870943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.001716][T17440] hsr_slave_0: entered promiscuous mode [ 1968.003828][T17440] hsr_slave_1: entered promiscuous mode [ 1968.099768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.668902][ T6017] usb 10-1: USB disconnect, device number 34 [ 1968.761522][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.841381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1969.088201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1969.123634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1969.358024][T15363] Bluetooth: hci2: command tx timeout [ 1973.121416][T15363] Bluetooth: hci2: command tx timeout [ 1973.121479][T15363] Bluetooth: hci5: command tx timeout [ 1975.154713][T13404] Bluetooth: hci5: command tx timeout [ 1975.154749][T13404] Bluetooth: hci2: command tx timeout [ 1977.299822][T15363] Bluetooth: hci2: command tx timeout [ 1977.299860][T15363] Bluetooth: hci5: command tx timeout [ 1979.478845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1979.826692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.657721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1981.590207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1981.869653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1982.299066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1982.841730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1982.965245][T17538] chnl_net:caif_netlink_parms(): no params data found [ 1983.117763][T17546] chnl_net:caif_netlink_parms(): no params data found [ 1983.159768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.553399][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.614594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.545288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.693144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.274386][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.523524][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.523606][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.533998][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.534197][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.534599][T17538] bridge_slave_0: entered allmulticast mode [ 1986.537849][T17538] bridge_slave_0: entered promiscuous mode [ 1986.568964][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.569106][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.569369][T17538] bridge_slave_1: entered allmulticast mode [ 1986.571505][T17538] bridge_slave_1: entered promiscuous mode [ 1986.572479][T17546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.572593][T17546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.572777][T17546] bridge_slave_0: entered allmulticast mode [ 1986.630222][T17546] bridge_slave_0: entered promiscuous mode [ 1987.044079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1987.088860][T17546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.090195][T17546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.090442][T17546] bridge_slave_1: entered allmulticast mode [ 1987.094273][T17546] bridge_slave_1: entered promiscuous mode [ 1987.206077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1987.378223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1988.351613][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1988.519879][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1988.609047][T17546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1988.826813][T17546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.125992][T17440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1989.150581][T17538] team0: Port device team_slave_0 added [ 1989.169751][T17546] team0: Port device team_slave_0 added [ 1989.181743][T17440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1989.220457][T17538] team0: Port device team_slave_1 added [ 1989.255643][T17546] team0: Port device team_slave_1 added [ 1989.355847][T17440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1989.825847][T17440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1989.990932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1990.209256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1990.236496][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1990.236517][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1990.236546][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1990.240633][T17546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1990.240648][T17546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1990.240668][T17546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1990.242332][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1990.242344][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1990.242365][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1990.247069][T17546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1990.247090][T17546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1990.247122][T17546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1991.224772][ T5657] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1991.317929][ T3175] bridge_slave_1: left allmulticast mode [ 1991.317958][ T3175] bridge_slave_1: left promiscuous mode [ 1991.318254][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1991.374904][ T5657] usb 3-1: Using ep0 maxpacket: 32 [ 1991.377615][ T3175] bridge_slave_0: left allmulticast mode [ 1991.377712][ T3175] bridge_slave_0: left promiscuous mode [ 1991.379216][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1991.382657][ T5657] usb 3-1: config 3 has an invalid interface number: 161 but max is 3 [ 1991.382684][ T5657] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 1991.382710][ T5657] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1991.382729][ T5657] usb 3-1: config 3 has an invalid interface number: 118 but max is 3 [ 1991.382750][ T5657] usb 3-1: config 3 has an invalid interface number: 132 but max is 3 [ 1991.382773][ T5657] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 1991.382795][ T5657] usb 3-1: config 3 has an invalid interface number: 128 but max is 3 [ 1991.382815][ T5657] usb 3-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 1991.382837][ T5657] usb 3-1: config 3 has no interface number 0 [ 1991.382855][ T5657] usb 3-1: config 3 has no interface number 1 [ 1991.382873][ T5657] usb 3-1: config 3 has no interface number 2 [ 1991.382891][ T5657] usb 3-1: config 3 has no interface number 3 [ 1991.382909][ T5657] usb 3-1: config 3 has no interface number 4 [ 1991.383015][ T5657] usb 3-1: config 3 interface 161 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 1991.383062][ T5657] usb 3-1: config 3 interface 254 altsetting 251 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1991.383112][ T5657] usb 3-1: config 3 interface 118 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1991.383175][ T5657] usb 3-1: config 3 interface 132 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1991.383204][ T5657] usb 3-1: config 3 interface 132 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1991.383233][ T5657] usb 3-1: too many endpoints for config 3 interface 254 altsetting 35: 113, using maximum allowed: 30 [ 1991.383276][ T5657] usb 3-1: config 3 interface 254 altsetting 35 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1991.383305][ T5657] usb 3-1: config 3 interface 254 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 1991.383343][ T5657] usb 3-1: too many endpoints for config 3 interface 128 altsetting 227: 34, using maximum allowed: 30 [ 1991.383385][ T5657] usb 3-1: config 3 interface 128 altsetting 227 endpoint 0x6 has invalid maxpacket 18150, setting to 64 [ 1991.383413][ T5657] usb 3-1: config 3 interface 128 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1991.383443][ T5657] usb 3-1: config 3 interface 161 has no altsetting 0 [ 1991.383464][ T5657] usb 3-1: config 3 interface 254 has no altsetting 0 [ 1991.383484][ T5657] usb 3-1: config 3 interface 254 has no altsetting 1 [ 1991.383503][ T5657] usb 3-1: config 3 interface 118 has no altsetting 0 [ 1991.383521][ T5657] usb 3-1: config 3 interface 132 has no altsetting 0 [ 1991.383541][ T5657] usb 3-1: config 3 interface 128 has no altsetting 0 [ 1991.390759][ T5657] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice=a2.cc [ 1991.390799][ T5657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.390825][ T5657] usb 3-1: Product: ဌ [ 1991.390843][ T5657] usb 3-1: Manufacturer: Г [ 1991.390862][ T5657] usb 3-1: SerialNumber: К [ 1991.410924][T17680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1992.176202][ T3175] bridge_slave_1: left allmulticast mode [ 1992.176237][ T3175] bridge_slave_1: left promiscuous mode [ 1992.176502][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.227736][ T3175] bridge_slave_0: left allmulticast mode [ 1992.227762][ T3175] bridge_slave_0: left promiscuous mode [ 1992.228284][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.323286][ T3175] bridge_slave_1: left allmulticast mode [ 1992.323321][ T3175] bridge_slave_1: left promiscuous mode [ 1992.323916][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.407359][ T3175] bridge_slave_0: left allmulticast mode [ 1992.407390][ T3175] bridge_slave_0: left promiscuous mode [ 1992.407637][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.441239][ T5657] usb 3-1: USB disconnect, device number 73 [ 1992.715688][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1992.795446][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1992.857873][ T3175] bond0 (unregistering): Released all slaves [ 1993.105367][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1993.196654][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.214658][T14538] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1993.257009][ T3175] bond0 (unregistering): Released all slaves [ 1993.387943][T14538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.388008][T14538] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1993.388037][T14538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.391943][T14538] usb 3-1: config 0 descriptor?? [ 1993.429519][T14538] ttusbir 3-1:0.0: cannot find expected altsetting [ 1993.575553][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1993.825988][ T6017] usb 3-1: USB disconnect, device number 74 [ 1993.895902][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.956966][ T3175] bond0 (unregistering): Released all slaves [ 1994.259201][T17538] hsr_slave_0: entered promiscuous mode [ 1994.260735][T17538] hsr_slave_1: entered promiscuous mode [ 1994.261793][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 1994.261820][T17538] Cannot create hsr debugfs directory [ 1994.297500][T17546] hsr_slave_0: entered promiscuous mode [ 1994.299159][T17546] hsr_slave_1: entered promiscuous mode [ 1994.300337][T17546] debugfs: 'hsr0' already exists in 'hsr' [ 1994.300365][T17546] Cannot create hsr debugfs directory [ 1994.674777][T14538] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1994.907707][T14538] usb 10-1: Using ep0 maxpacket: 8 [ 1995.777821][T14538] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1995.777856][T14538] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.777877][T14538] usb 10-1: Product: syz [ 1995.777893][T14538] usb 10-1: Manufacturer: syz [ 1995.777908][T14538] usb 10-1: SerialNumber: syz [ 1995.784034][T14538] usb 10-1: config 0 descriptor?? [ 1995.840865][T14538] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1996.890575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1997.449238][T14538] gspca_sonixj: reg_w1 err -110 [ 1997.449347][T14538] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1997.452197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1997.593395][T14538] usb 10-1: USB disconnect, device number 35 [ 1998.326629][ T3175] hsr_slave_0: left promiscuous mode [ 1998.652823][ T3175] hsr_slave_1: left promiscuous mode [ 1998.677200][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1998.768287][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1998.999624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.001006][ T3175] hsr_slave_0: left promiscuous mode [ 1999.021002][T17738] Invalid source name [ 1999.021015][T17738] UBIFS error (pid: 17738): cannot open "./file0", error -22 [ 1999.067301][ T3175] hsr_slave_1: left promiscuous mode [ 1999.068445][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1999.116175][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1999.294853][ T3175] hsr_slave_0: left promiscuous mode [ 1999.315065][ T3175] hsr_slave_1: left promiscuous mode [ 1999.316306][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1999.344846][ T5657] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1999.365266][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1999.404730][ T6017] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1999.495041][ T5657] usb 3-1: Using ep0 maxpacket: 8 [ 1999.497523][ T5657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1999.497572][ T5657] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1999.497598][ T5657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.513993][ T5657] usb 3-1: config 0 descriptor?? [ 1999.555178][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 1999.572216][ T6017] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1999.572250][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.572273][ T6017] usb 10-1: Product: syz [ 1999.572289][ T6017] usb 10-1: Manufacturer: syz [ 1999.572306][ T6017] usb 10-1: SerialNumber: syz [ 1999.586994][ T6017] usb 10-1: config 0 descriptor?? [ 1999.624768][ T6017] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1999.734032][ T5657] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1999.819397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.868347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.951885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.966056][ T5889] usb 3-1: USB disconnect, device number 75 [ 2000.016752][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.125757][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.188012][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.245488][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 2000.299187][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.377579][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.435385][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 2000.540531][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.788499][ C1] vkms_vblank_simulate: vblank timer overrun [ 2002.286934][ T6017] usb 10-1: USB disconnect, device number 36 [ 2005.626621][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 2005.835464][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 2007.144820][T17448] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2007.294604][T17448] usb 10-1: Using ep0 maxpacket: 16 [ 2007.297013][T17448] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.297040][T17448] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2007.300132][T17448] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2007.300163][T17448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.300186][T17448] usb 10-1: Product: syz [ 2007.300202][T17448] usb 10-1: Manufacturer: syz [ 2007.300219][T17448] usb 10-1: SerialNumber: syz [ 2007.915521][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 2008.087359][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 2010.004745][T15363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2010.037520][T15363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2010.041421][T15363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2010.048445][T15363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2010.052789][T15363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2010.362637][T17448] usb 10-1: 0:2 : does not exist [ 2010.369148][T17448] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 2010.459533][T17448] usb 10-1: USB disconnect, device number 37 [ 2011.661902][T17538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2012.200981][T13404] Bluetooth: hci0: command tx timeout [ 2013.100694][T17538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2014.275231][T13404] Bluetooth: hci0: command tx timeout [ 2016.486809][T13404] Bluetooth: hci0: command tx timeout [ 2017.093261][T17538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2017.201924][T17538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2017.971606][T17793] chnl_net:caif_netlink_parms(): no params data found [ 2018.514815][T13404] Bluetooth: hci0: command tx timeout [ 2018.640999][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.641148][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.641411][T17793] bridge_slave_0: entered allmulticast mode [ 2018.667512][T17793] bridge_slave_0: entered promiscuous mode [ 2018.876800][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.877238][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.877444][T17793] bridge_slave_1: entered allmulticast mode [ 2018.880695][T17793] bridge_slave_1: entered promiscuous mode [ 2019.277498][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2019.289022][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2019.322222][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2020.006159][T17546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2020.079586][T17793] team0: Port device team_slave_0 added [ 2020.170185][T17546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2020.197426][T17793] team0: Port device team_slave_1 added [ 2020.204261][T17546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2020.347785][T17546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2020.856281][ T38] audit: type=1400 audit(1761592981.855:523): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=17872 comm="syz.2.3138" dest=19488 [ 2020.868469][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2020.868481][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2020.868503][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2020.882764][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.078581][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2021.078601][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.078633][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2021.604435][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.606875][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.961190][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.962999][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2022.063038][ C1] vkms_vblank_simulate: vblank timer overrun [ 2022.297268][T17793] hsr_slave_0: entered promiscuous mode [ 2022.313136][T17793] hsr_slave_1: entered promiscuous mode [ 2022.314294][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 2022.314322][T17793] Cannot create hsr debugfs directory [ 2022.896159][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.219004][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.406243][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.028420][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.519326][T17546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2025.782189][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.804087][ T3175] bridge_slave_1: left allmulticast mode [ 2025.804118][ T3175] bridge_slave_1: left promiscuous mode [ 2025.804379][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.877516][ T3175] bridge_slave_0: left allmulticast mode [ 2025.877547][ T3175] bridge_slave_0: left promiscuous mode [ 2025.877810][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.985327][T15363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2026.004485][T15363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2026.006175][T15363] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2026.007370][T15363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2026.008172][T15363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2026.054720][ T6017] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2026.204633][ T6017] usb 3-1: Using ep0 maxpacket: 32 [ 2026.206695][ T6017] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2026.206722][ T6017] usb 3-1: config 0 has no interface number 0 [ 2026.209170][ T6017] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2026.209190][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.209205][ T6017] usb 3-1: Product: syz [ 2026.209215][ T6017] usb 3-1: Manufacturer: syz [ 2026.209226][ T6017] usb 3-1: SerialNumber: syz [ 2026.213431][ T6017] usb 3-1: config 0 descriptor?? [ 2026.286600][ T6017] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2026.493982][ T6017] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2026.502764][ T6017] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2026.605443][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2026.675394][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2026.697542][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2026.698058][T16560] usb 3-1: USB disconnect, device number 76 [ 2026.719658][T16560] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2026.724407][T16560] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2026.748140][T16560] quatech2 3-1:0.51: device disconnected [ 2026.777441][ T3175] bond0 (unregistering): Released all slaves [ 2027.317793][ T3175] hsr_slave_0: left promiscuous mode [ 2027.354715][ T3175] hsr_slave_1: left promiscuous mode [ 2027.355552][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2027.385645][ T3175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.054564][T15363] Bluetooth: hci1: command tx timeout [ 2029.245727][T17911] Invalid source name [ 2029.245747][T17911] UBIFS error (pid: 17911): cannot open "./file0", error -22 [ 2029.869893][T13404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2029.873116][T13404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2029.892746][T13404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2029.911849][T13404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2029.912586][T13404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2030.166194][T15363] Bluetooth: hci1: command tx timeout [ 2030.546965][ T3175] team0 (unregistering): Port device team_slave_1 removed [ 2030.910674][ T3175] team0 (unregistering): Port device team_slave_0 removed [ 2031.664657][ T5875] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2031.824615][ T5875] usb 10-1: Using ep0 maxpacket: 32 [ 2031.827264][ T5875] usb 10-1: config 3 has an invalid interface number: 161 but max is 3 [ 2031.827285][ T5875] usb 10-1: config 3 has an invalid interface number: 254 but max is 3 [ 2031.827300][ T5875] usb 10-1: config 3 has an invalid interface number: 118 but max is 3 [ 2031.827314][ T5875] usb 10-1: config 3 has an invalid interface number: 132 but max is 3 [ 2031.827329][ T5875] usb 10-1: config 3 has an invalid interface number: 254 but max is 3 [ 2031.827343][ T5875] usb 10-1: config 3 has an invalid interface number: 128 but max is 3 [ 2031.827357][ T5875] usb 10-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 2031.827373][ T5875] usb 10-1: config 3 has no interface number 0 [ 2031.827385][ T5875] usb 10-1: config 3 has no interface number 1 [ 2031.827397][ T5875] usb 10-1: config 3 has no interface number 2 [ 2031.827408][ T5875] usb 10-1: config 3 has no interface number 3 [ 2031.827420][ T5875] usb 10-1: config 3 has no interface number 4 [ 2031.827488][ T5875] usb 10-1: config 3 interface 161 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 2031.827516][ T5875] usb 10-1: config 3 interface 254 altsetting 251 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2031.827552][ T5875] usb 10-1: config 3 interface 118 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2031.827584][ T5875] usb 10-1: config 3 interface 132 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2031.827603][ T5875] usb 10-1: config 3 interface 132 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2031.827623][ T5875] usb 10-1: too many endpoints for config 3 interface 254 altsetting 35: 113, using maximum allowed: 30 [ 2031.827663][ T5875] usb 10-1: config 3 interface 254 altsetting 35 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2031.827683][ T5875] usb 10-1: config 3 interface 254 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2031.827703][ T5875] usb 10-1: too many endpoints for config 3 interface 128 altsetting 227: 34, using maximum allowed: 30 [ 2031.827733][ T5875] usb 10-1: config 3 interface 128 altsetting 227 endpoint 0x6 has invalid maxpacket 18150, setting to 64 [ 2031.827753][ T5875] usb 10-1: config 3 interface 128 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 2031.827773][ T5875] usb 10-1: config 3 interface 161 has no altsetting 0 [ 2031.827786][ T5875] usb 10-1: config 3 interface 254 has no altsetting 0 [ 2031.827799][ T5875] usb 10-1: config 3 interface 254 has no altsetting 1 [ 2031.827812][ T5875] usb 10-1: config 3 interface 118 has no altsetting 0 [ 2031.827826][ T5875] usb 10-1: config 3 interface 132 has no altsetting 0 [ 2031.827839][ T5875] usb 10-1: config 3 interface 128 has no altsetting 0 [ 2031.830388][ T5875] usb 10-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice=a2.cc [ 2031.830410][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.830425][ T5875] usb 10-1: Product: ဌ [ 2031.830436][ T5875] usb 10-1: Manufacturer: Г [ 2031.830447][ T5875] usb 10-1: SerialNumber: К [ 2032.034766][T15363] Bluetooth: hci2: command tx timeout [ 2032.148604][T17932] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2032.194787][T15363] Bluetooth: hci1: command tx timeout [ 2033.659994][T17946] Invalid ELF header type: 3 != 1 [ 2034.114783][T15363] Bluetooth: hci2: command tx timeout [ 2034.274663][T15363] Bluetooth: hci1: command tx timeout [ 2034.665217][ T5875] usb 10-1: USB disconnect, device number 38 [ 2036.195075][T15363] Bluetooth: hci2: command tx timeout [ 2036.245950][T17919] chnl_net:caif_netlink_parms(): no params data found [ 2036.311996][T17793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2036.725583][T17793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2036.824007][T17793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2036.991685][T17793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2037.075138][T17905] chnl_net:caif_netlink_parms(): no params data found [ 2038.313657][T15363] Bluetooth: hci2: command tx timeout [ 2038.747464][T17919] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.747651][T17919] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.747881][T17919] bridge_slave_0: entered allmulticast mode [ 2038.750732][T17919] bridge_slave_0: entered promiscuous mode [ 2038.804114][T17919] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.804256][T17919] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.820384][T17919] bridge_slave_1: entered allmulticast mode [ 2038.825788][T17919] bridge_slave_1: entered promiscuous mode [ 2039.064693][ T5889] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2039.214707][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 2039.218830][ T5889] usb 3-1: config 3 has an invalid interface number: 161 but max is 3 [ 2039.218859][ T5889] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 2039.218889][ T5889] usb 3-1: config 3 has an invalid interface number: 118 but max is 3 [ 2039.218911][ T5889] usb 3-1: config 3 has an invalid interface number: 132 but max is 3 [ 2039.218933][ T5889] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 2039.218954][ T5889] usb 3-1: config 3 has an invalid interface number: 128 but max is 3 [ 2039.218977][ T5889] usb 3-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 2039.219000][ T5889] usb 3-1: config 3 has no interface number 0 [ 2039.219019][ T5889] usb 3-1: config 3 has no interface number 1 [ 2039.219037][ T5889] usb 3-1: config 3 has no interface number 2 [ 2039.219054][ T5889] usb 3-1: config 3 has no interface number 3 [ 2039.219073][ T5889] usb 3-1: config 3 has no interface number 4 [ 2039.219181][ T5889] usb 3-1: config 3 interface 161 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 2039.219225][ T5889] usb 3-1: config 3 interface 254 altsetting 251 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2039.219266][ T5889] usb 3-1: config 3 interface 118 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2039.219313][ T5889] usb 3-1: config 3 interface 132 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2039.219342][ T5889] usb 3-1: config 3 interface 132 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2039.219372][ T5889] usb 3-1: too many endpoints for config 3 interface 254 altsetting 35: 113, using maximum allowed: 30 [ 2039.219422][ T5889] usb 3-1: config 3 interface 254 altsetting 35 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2039.219450][ T5889] usb 3-1: config 3 interface 254 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2039.219479][ T5889] usb 3-1: too many endpoints for config 3 interface 128 altsetting 227: 34, using maximum allowed: 30 [ 2039.219523][ T5889] usb 3-1: config 3 interface 128 altsetting 227 endpoint 0x6 has invalid maxpacket 18150, setting to 64 [ 2039.219551][ T5889] usb 3-1: config 3 interface 128 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 2039.219580][ T5889] usb 3-1: config 3 interface 161 has no altsetting 0 [ 2039.219600][ T5889] usb 3-1: config 3 interface 254 has no altsetting 0 [ 2039.219620][ T5889] usb 3-1: config 3 interface 254 has no altsetting 1 [ 2039.219639][ T5889] usb 3-1: config 3 interface 118 has no altsetting 0 [ 2039.219660][ T5889] usb 3-1: config 3 interface 132 has no altsetting 0 [ 2039.219679][ T5889] usb 3-1: config 3 interface 128 has no altsetting 0 [ 2039.222772][ T5889] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice=a2.cc [ 2039.222804][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.222827][ T5889] usb 3-1: Product: ဌ [ 2039.222844][ T5889] usb 3-1: Manufacturer: Г [ 2039.222860][ T5889] usb 3-1: SerialNumber: К [ 2039.231797][T17994] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2039.749395][ T5889] usb 3-1: USB disconnect, device number 77 [ 2039.994733][ T38] audit: type=1400 audit(1761593000.985:524): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=17996 comm="syz.9.3162" daddr=::ffff:172.20.20.55 dest=20001 [ 2040.092172][T17919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.093499][T17905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.112341][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.112555][T17905] bridge_slave_0: entered allmulticast mode [ 2040.128895][T17905] bridge_slave_0: entered promiscuous mode [ 2040.156336][T17919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2040.158792][T17905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.158895][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.159048][T17905] bridge_slave_1: entered allmulticast mode [ 2040.161150][T17905] bridge_slave_1: entered promiscuous mode [ 2041.806480][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.337050][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.540092][ C1] vkms_vblank_simulate: vblank timer overrun [ 2043.373992][ C1] vkms_vblank_simulate: vblank timer overrun [ 2043.596475][T17919] team0: Port device team_slave_0 added [ 2043.618390][T17905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2043.870158][ C1] vkms_vblank_simulate: vblank timer overrun [ 2043.903603][ C1] vkms_vblank_simulate: vblank timer overrun [ 2044.690328][ C1] vkms_vblank_simulate: vblank timer overrun [ 2044.780753][T17905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2044.783087][T17919] team0: Port device team_slave_1 added [ 2045.275081][ C1] vkms_vblank_simulate: vblank timer overrun [ 2045.432688][ C1] vkms_vblank_simulate: vblank timer overrun [ 2046.484010][T17905] team0: Port device team_slave_0 added [ 2046.549293][T17919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2046.549314][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2046.549358][T17919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2046.564138][T17905] team0: Port device team_slave_1 added [ 2046.579669][T17919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.579693][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2046.579729][T17919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2046.839748][T17905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2046.839769][T17905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2046.839800][T17905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2046.861548][T17905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.861572][T17905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2046.861608][T17905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.108618][T17919] hsr_slave_0: entered promiscuous mode [ 2047.110136][T17919] hsr_slave_1: entered promiscuous mode [ 2047.434147][T17905] hsr_slave_0: entered promiscuous mode [ 2047.448052][T17905] hsr_slave_1: entered promiscuous mode [ 2047.452043][T17905] debugfs: 'hsr0' already exists in 'hsr' [ 2047.452073][T17905] Cannot create hsr debugfs directory [ 2048.191942][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2048.192017][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2052.263772][ C1] vkms_vblank_simulate: vblank timer overrun [ 2052.802987][ C1] vkms_vblank_simulate: vblank timer overrun [ 2053.909188][ C1] vkms_vblank_simulate: vblank timer overrun [ 2054.741411][ C1] vkms_vblank_simulate: vblank timer overrun [ 2057.108868][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.310467][T18061] Invalid source name [ 2057.310498][T18061] UBIFS error (pid: 18061): cannot open "./file0", error -22 [ 2057.709138][T18063] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3178'. [ 2057.709163][T18063] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3178'. [ 2057.709203][T18063] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3178'. [ 2057.709682][T18063] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3178'. [ 2057.813299][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.938805][T15674] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.945836][T15674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2058.276742][T15674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.277132][T15674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.438944][ T3170] bridge_slave_1: left allmulticast mode [ 2058.438975][ T3170] bridge_slave_1: left promiscuous mode [ 2058.439254][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.508708][ T3170] bridge_slave_0: left allmulticast mode [ 2058.508740][ T3170] bridge_slave_0: left promiscuous mode [ 2058.509027][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.609545][ T3170] bridge_slave_1: left allmulticast mode [ 2058.609580][ T3170] bridge_slave_1: left promiscuous mode [ 2058.609833][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.956278][ T3170] bridge_slave_0: left allmulticast mode [ 2058.956313][ T3170] bridge_slave_0: left promiscuous mode [ 2058.956576][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.776165][ C0] vkms_vblank_simulate: vblank timer overrun [ 2064.810195][ C0] vkms_vblank_simulate: vblank timer overrun [ 2065.621521][ C0] vkms_vblank_simulate: vblank timer overrun [ 2065.876810][ C0] vkms_vblank_simulate: vblank timer overrun [ 2066.109479][ C0] vkms_vblank_simulate: vblank timer overrun [ 2066.666844][ C0] vkms_vblank_simulate: vblank timer overrun [ 2067.544421][ C0] vkms_vblank_simulate: vblank timer overrun [ 2067.828598][ C0] vkms_vblank_simulate: vblank timer overrun [ 2067.865951][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2067.965971][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2068.006844][ T3170] bond0 (unregistering): Released all slaves [ 2068.551969][ C0] vkms_vblank_simulate: vblank timer overrun [ 2068.932528][ C0] vkms_vblank_simulate: vblank timer overrun [ 2069.345777][ C0] vkms_vblank_simulate: vblank timer overrun [ 2069.595432][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2069.655238][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2069.677603][ T3170] bond0 (unregistering): Released all slaves [ 2070.787608][ T3170] hsr_slave_0: left promiscuous mode [ 2070.801244][T13404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2070.809456][ T3170] hsr_slave_1: left promiscuous mode [ 2070.810464][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2070.845624][T13404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2070.847021][T13404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2070.849448][T13404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2070.851117][T13404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2070.869532][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.034566][ T3170] hsr_slave_0: left promiscuous mode [ 2071.062357][ T3170] hsr_slave_1: left promiscuous mode [ 2071.063591][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.086447][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.765137][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2071.905392][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2073.567995][T13404] Bluetooth: hci0: command tx timeout [ 2074.111786][T18117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3193'. [ 2074.111811][T18117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3193'. [ 2074.111831][T18117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3193'. [ 2074.111871][T18117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3193'. [ 2074.715378][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2074.975648][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2075.650642][T13404] Bluetooth: hci0: command tx timeout [ 2076.746711][T18124] binder: 18123:18124 unknown command 0 [ 2076.746728][T18124] binder: 18123:18124 ioctl c0306201 200000000080 returned -22 [ 2076.749644][T18124] binder: 18123:18124 ioctl c0306201 2000000003c0 returned -14 [ 2076.750036][T18124] binder_alloc: 18123: binder_alloc_buf, no vma [ 2076.984809][ C0] vkms_vblank_simulate: vblank timer overrun [ 2077.007274][ C0] vkms_vblank_simulate: vblank timer overrun [ 2077.361609][T18127] Invalid source name [ 2077.361641][T18127] UBIFS error (pid: 18127): cannot open "./file0", error -22 [ 2077.438978][ C0] vkms_vblank_simulate: vblank timer overrun [ 2077.474796][ C0] vkms_vblank_simulate: vblank timer overrun [ 2077.715389][T13404] Bluetooth: hci0: command tx timeout [ 2078.549789][ C0] vkms_vblank_simulate: vblank timer overrun [ 2078.994540][ C0] vkms_vblank_simulate: vblank timer overrun [ 2079.528882][ C0] vkms_vblank_simulate: vblank timer overrun [ 2079.626491][T13695] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2079.784585][T13695] usb 10-1: Using ep0 maxpacket: 8 [ 2079.800238][T13695] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2079.800261][T13695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.800276][T13695] usb 10-1: Product: syz [ 2079.800287][T13695] usb 10-1: Manufacturer: syz [ 2079.800298][T13695] usb 10-1: SerialNumber: syz [ 2079.804042][T13695] usb 10-1: config 0 descriptor?? [ 2079.817871][T13404] Bluetooth: hci0: command tx timeout [ 2079.981333][ C0] vkms_vblank_simulate: vblank timer overrun [ 2079.998589][T13695] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2080.284850][ C0] vkms_vblank_simulate: vblank timer overrun [ 2080.906292][T13695] gspca_sonixj: reg_w1 err -110 [ 2080.906361][T13695] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 2081.421411][ C0] vkms_vblank_simulate: vblank timer overrun [ 2081.585561][ C0] vkms_vblank_simulate: vblank timer overrun [ 2081.977488][T18109] chnl_net:caif_netlink_parms(): no params data found [ 2082.002770][T17919] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2082.050571][T17919] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2082.101902][T17919] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2082.352306][T17919] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2082.428129][ T5899] usb 10-1: USB disconnect, device number 39 [ 2083.907262][T18109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.907406][T18109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.907637][T18109] bridge_slave_0: entered allmulticast mode [ 2083.910134][T18109] bridge_slave_0: entered promiscuous mode [ 2083.946667][T18109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.946821][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.947254][T18109] bridge_slave_1: entered allmulticast mode [ 2083.949357][T18109] bridge_slave_1: entered promiscuous mode [ 2084.057634][T17905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2084.241898][T17905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2084.262705][T18109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2084.267064][T17905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2084.302025][T18109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2084.302342][T17905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2084.579051][T18109] team0: Port device team_slave_0 added [ 2084.590293][T18109] team0: Port device team_slave_1 added [ 2084.742531][T18109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2084.742551][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2084.742581][T18109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2084.759576][T18109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2084.759598][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2084.759630][T18109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2085.107620][T18109] hsr_slave_0: entered promiscuous mode [ 2085.109388][T18109] hsr_slave_1: entered promiscuous mode [ 2085.110163][T18109] debugfs: 'hsr0' already exists in 'hsr' [ 2085.110186][T18109] Cannot create hsr debugfs directory [ 2089.374691][T15363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2089.393375][ T38] audit: type=1400 audit(1761593050.385:525): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=18180 comm="syz.9.3204" dest=19488 [ 2089.396640][T15363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2089.402272][T15363] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2089.411408][T15363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2089.412345][T15363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2091.057774][ T3170] bridge_slave_1: left allmulticast mode [ 2091.057803][ T3170] bridge_slave_1: left promiscuous mode [ 2091.057984][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.366548][ T3170] bridge_slave_0: left allmulticast mode [ 2091.366580][ T3170] bridge_slave_0: left promiscuous mode [ 2091.366833][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.377897][T18194] binder: 18192:18194 unknown command 0 [ 2091.377922][T18194] binder: 18192:18194 ioctl c0306201 200000000080 returned -22 [ 2091.412663][T18194] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.412679][T18194] binder: 18192:18194 ioctl 4018620d 200000000040 returned -16 [ 2091.413095][T18194] binder: 18192:18194 ioctl c0306201 2000000003c0 returned -14 [ 2091.541106][T13404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2091.560280][T13404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2091.562469][T13404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2091.564177][T13404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2091.587312][T13404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2091.905632][T18203] Invalid source name [ 2091.905652][T18203] UBIFS error (pid: 18203): cannot open "./file0", error -22 [ 2092.037250][T13404] Bluetooth: hci1: command tx timeout [ 2092.301420][ C0] vkms_vblank_simulate: vblank timer overrun [ 2093.004758][ C0] vkms_vblank_simulate: vblank timer overrun [ 2093.089454][ C0] vkms_vblank_simulate: vblank timer overrun [ 2093.631918][ C0] vkms_vblank_simulate: vblank timer overrun [ 2093.714790][T13404] Bluetooth: hci2: command tx timeout [ 2093.937819][ C0] vkms_vblank_simulate: vblank timer overrun [ 2094.003200][ C0] vkms_vblank_simulate: vblank timer overrun [ 2094.092175][ C0] vkms_vblank_simulate: vblank timer overrun [ 2094.115548][T13404] Bluetooth: hci1: command tx timeout [ 2094.572357][ C0] vkms_vblank_simulate: vblank timer overrun [ 2095.125085][ C0] vkms_vblank_simulate: vblank timer overrun [ 2097.374223][T13404] Bluetooth: hci2: command tx timeout [ 2097.374369][T13404] Bluetooth: hci1: command tx timeout [ 2097.473209][T18225] netlink: 'syz.9.3212': attribute type 5 has an invalid length. [ 2097.849837][T18228] binder_alloc: 18227: binder_alloc_buf, no vma [ 2099.475028][T15363] Bluetooth: hci1: command tx timeout [ 2099.611313][T15363] Bluetooth: hci2: command tx timeout [ 2101.098975][ T38] audit: type=1400 audit(1761593062.095:526): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=18235 comm="syz.2.3217" daddr=::ffff:172.20.20.55 dest=20001 [ 2101.671630][T15363] Bluetooth: hci2: command tx timeout [ 2101.911248][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2101.978912][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2101.999797][ T3170] bond0 (unregistering): Released all slaves [ 2103.070848][ T3170] hsr_slave_0: left promiscuous mode [ 2103.111502][ T3170] hsr_slave_1: left promiscuous mode [ 2103.117499][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.152970][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2103.184844][T17448] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2103.344746][T17448] usb 3-1: Using ep0 maxpacket: 16 [ 2103.349058][T17448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2103.349091][T17448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2103.349131][T17448] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2103.349157][T17448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.399933][T17448] usb 3-1: config 0 descriptor?? [ 2105.210523][T17448] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2105.210551][T17448] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2105.210572][T17448] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2105.210592][T17448] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2105.210611][T17448] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2105.211264][T17448] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2105.590762][T17448] usb 3-1: USB disconnect, device number 78 [ 2106.776648][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2107.368927][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2107.827761][ C0] vkms_vblank_simulate: vblank timer overrun [ 2107.996761][ C0] vkms_vblank_simulate: vblank timer overrun [ 2108.845344][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.058076][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.424192][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.424266][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.464506][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.546320][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.600270][ C0] vkms_vblank_simulate: vblank timer overrun [ 2110.210645][ C0] vkms_vblank_simulate: vblank timer overrun [ 2110.561601][ C0] vkms_vblank_simulate: vblank timer overrun [ 2110.617375][ C0] vkms_vblank_simulate: vblank timer overrun [ 2110.825256][T18187] chnl_net:caif_netlink_parms(): no params data found [ 2110.980861][ C0] vkms_vblank_simulate: vblank timer overrun [ 2111.053580][ T38] audit: type=1800 audit(1761593071.985:527): pid=18286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3228" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2113.596035][T18187] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.596176][T18187] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.596437][T18187] bridge_slave_0: entered allmulticast mode [ 2113.606340][T18187] bridge_slave_0: entered promiscuous mode [ 2113.624988][T18187] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.625161][T18187] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.625439][T18187] bridge_slave_1: entered allmulticast mode [ 2113.629025][T18187] bridge_slave_1: entered promiscuous mode [ 2114.168389][T18187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2114.215554][T18187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2117.220701][T18187] team0: Port device team_slave_0 added [ 2117.225824][T18187] team0: Port device team_slave_1 added [ 2117.348545][T18319] binder_alloc: 18318: binder_alloc_buf, no vma [ 2117.436862][ T38] audit: type=1800 audit(1761593078.435:528): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3237" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2124.388526][T18187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2124.388540][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2124.388580][T18187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2124.669334][T18187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2124.669347][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2124.669368][T18187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2125.291358][T18109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2125.721326][T18109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2125.766949][T18109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2125.995181][ T5889] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2126.661581][ T5889] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2126.661789][ T5889] usb 10-1: config 0 has no interface number 0 [ 2126.662159][ T5889] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.662214][ T5889] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.662272][ T5889] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2126.662477][ T5889] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2126.662556][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.802540][ T5889] usb 10-1: config 0 descriptor?? [ 2127.122363][ C0] vkms_vblank_simulate: vblank timer overrun [ 2127.367759][T18197] chnl_net:caif_netlink_parms(): no params data found [ 2127.383202][T18109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2127.723097][ T5889] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0024/input/input17 [ 2127.825341][T18187] hsr_slave_0: entered promiscuous mode [ 2127.828384][T18187] hsr_slave_1: entered promiscuous mode [ 2127.829488][ T5889] uclogic 0003:28BD:0042.0024: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1 [ 2127.829519][T18187] debugfs: 'hsr0' already exists in 'hsr' [ 2127.829544][T18187] Cannot create hsr debugfs directory [ 2127.930665][ T5889] usb 10-1: USB disconnect, device number 40 [ 2128.121114][ C0] vkms_vblank_simulate: vblank timer overrun [ 2128.481294][ C0] vkms_vblank_simulate: vblank timer overrun [ 2128.612723][ C0] vkms_vblank_simulate: vblank timer overrun [ 2129.009635][ C0] vkms_vblank_simulate: vblank timer overrun [ 2129.248854][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.811445][T18197] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.811586][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.811822][T18197] bridge_slave_0: entered allmulticast mode [ 2130.814826][T18197] bridge_slave_0: entered promiscuous mode [ 2130.846908][T18197] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.847112][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.847319][T18197] bridge_slave_1: entered allmulticast mode [ 2130.850856][T18197] bridge_slave_1: entered promiscuous mode [ 2131.079508][T18197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.205372][ C0] vkms_vblank_simulate: vblank timer overrun [ 2131.224724][T18197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.856321][T18197] team0: Port device team_slave_0 added [ 2131.963262][T18386] Invalid ELF header type: 3 != 1 [ 2132.876536][T18197] team0: Port device team_slave_1 added [ 2132.933459][T13404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2132.968385][T13404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2132.972798][T13404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2132.990856][T13404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2133.007432][T13404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2133.427407][T18394] Invalid ELF header type: 3 != 1 [ 2134.323761][ C0] vkms_vblank_simulate: vblank timer overrun [ 2134.579973][T18197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2134.579991][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2134.580019][T18197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2135.089190][T13404] Bluetooth: hci0: command tx timeout [ 2136.340331][T18197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2136.340350][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2136.340389][T18197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2136.536965][ C1] vkms_vblank_simulate: vblank timer overrun [ 2136.767143][ C1] vkms_vblank_simulate: vblank timer overrun [ 2136.929255][ C1] vkms_vblank_simulate: vblank timer overrun [ 2137.156183][T13404] Bluetooth: hci0: command tx timeout [ 2137.837767][T18197] hsr_slave_0: entered promiscuous mode [ 2137.838707][T18197] hsr_slave_1: entered promiscuous mode [ 2137.839496][T18197] debugfs: 'hsr0' already exists in 'hsr' [ 2137.839521][T18197] Cannot create hsr debugfs directory [ 2138.051780][ C1] vkms_vblank_simulate: vblank timer overrun [ 2138.402054][ T3170] bridge_slave_1: left allmulticast mode [ 2138.402146][ T3170] bridge_slave_1: left promiscuous mode [ 2138.402372][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.455976][ T3170] bridge_slave_0: left allmulticast mode [ 2138.456069][ T3170] bridge_slave_0: left promiscuous mode [ 2138.456367][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.518203][ T3170] bridge_slave_1: left allmulticast mode [ 2138.518228][ T3170] bridge_slave_1: left promiscuous mode [ 2138.518403][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.576485][ T3170] bridge_slave_0: left allmulticast mode [ 2138.576509][ T3170] bridge_slave_0: left promiscuous mode [ 2138.576699][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.818808][ C1] vkms_vblank_simulate: vblank timer overrun [ 2138.928258][ C1] vkms_vblank_simulate: vblank timer overrun [ 2139.234744][T13404] Bluetooth: hci0: command tx timeout [ 2139.287716][ C1] vkms_vblank_simulate: vblank timer overrun [ 2139.432049][ C1] vkms_vblank_simulate: vblank timer overrun [ 2140.308731][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.477572][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.645824][ T3170] bond0 (unregistering): Released all slaves [ 2140.985412][ C1] vkms_vblank_simulate: vblank timer overrun [ 2141.187315][ C1] vkms_vblank_simulate: vblank timer overrun [ 2141.314624][T13404] Bluetooth: hci0: command tx timeout [ 2141.315351][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.334746][T17448] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2141.435223][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.478881][ T3170] bond0 (unregistering): Released all slaves [ 2141.496338][T17448] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2141.496360][T17448] usb 3-1: config 0 has no interface number 0 [ 2141.496393][T17448] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2141.496413][T17448] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2141.496429][T17448] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2141.496459][T17448] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2141.496476][T17448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.500377][T17448] usb 3-1: config 0 descriptor?? [ 2142.212220][T17448] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0025/input/input18 [ 2142.301192][T17448] uclogic 0003:28BD:0042.0025: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 2142.414767][ T3170] hsr_slave_0: left promiscuous mode [ 2142.426927][T17448] usb 3-1: USB disconnect, device number 79 [ 2142.455745][ T3170] hsr_slave_1: left promiscuous mode [ 2142.474572][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.505014][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2143.148837][ T3170] hsr_slave_0: left promiscuous mode [ 2143.196626][ T3170] hsr_slave_1: left promiscuous mode [ 2143.197775][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2143.292684][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2146.256094][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2146.425284][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2147.835429][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2148.095915][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2149.847274][ T5889] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2150.295497][T18389] chnl_net:caif_netlink_parms(): no params data found [ 2150.374034][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 2150.388187][T15363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2150.432837][ T5889] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2150.437563][ T5889] usb 10-1: config 3 has an invalid interface number: 254 but max is 2 [ 2150.437599][ T5889] usb 10-1: config 3 has an invalid interface number: 118 but max is 2 [ 2150.437623][ T5889] usb 10-1: config 3 has an invalid interface number: 132 but max is 2 [ 2150.437649][ T5889] usb 10-1: config 3 has an invalid interface number: 254 but max is 2 [ 2150.437674][ T5889] usb 10-1: config 3 has an invalid interface number: 128 but max is 2 [ 2150.437697][ T5889] usb 10-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 2150.437723][ T5889] usb 10-1: config 3 has no interface number 0 [ 2150.437743][ T5889] usb 10-1: config 3 has no interface number 1 [ 2150.437765][ T5889] usb 10-1: config 3 has no interface number 2 [ 2150.437784][ T5889] usb 10-1: config 3 has no interface number 3 [ 2150.437905][ T5889] usb 10-1: config 3 interface 118 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2150.437963][ T5889] usb 10-1: config 3 interface 132 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2150.437996][ T5889] usb 10-1: config 3 interface 132 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2150.438031][ T5889] usb 10-1: too many endpoints for config 3 interface 254 altsetting 35: 113, using maximum allowed: 30 [ 2150.438082][ T5889] usb 10-1: config 3 interface 254 altsetting 35 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2150.438115][ T5889] usb 10-1: config 3 interface 254 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2150.438147][ T5889] usb 10-1: too many endpoints for config 3 interface 128 altsetting 227: 34, using maximum allowed: 30 [ 2150.438198][ T5889] usb 10-1: config 3 interface 128 altsetting 227 endpoint 0x6 has invalid maxpacket 18150, setting to 64 [ 2150.438232][ T5889] usb 10-1: config 3 interface 128 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 2150.438264][ T5889] usb 10-1: config 3 interface 254 has no altsetting 0 [ 2150.438287][ T5889] usb 10-1: config 3 interface 254 has no altsetting 1 [ 2150.438309][ T5889] usb 10-1: config 3 interface 118 has no altsetting 0 [ 2150.438333][ T5889] usb 10-1: config 3 interface 132 has no altsetting 0 [ 2150.438354][ T5889] usb 10-1: config 3 interface 128 has no altsetting 0 [ 2150.448043][ T5889] usb 10-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice=a2.cc [ 2150.448079][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.448102][ T5889] usb 10-1: Product: ဌ [ 2150.448118][ T5889] usb 10-1: Manufacturer: Г [ 2150.448135][ T5889] usb 10-1: SerialNumber: К [ 2150.465829][T15363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2150.467989][T15363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2150.478251][T15363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2150.481529][T15363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2150.984925][ T5889] usb 10-1: USB disconnect, device number 41 [ 2151.275057][T14538] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2151.444612][T14538] usb 3-1: Using ep0 maxpacket: 16 [ 2151.446775][T14538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.446839][T14538] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2151.446878][T14538] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 2151.446894][T14538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.450681][T14538] usb 3-1: config 0 descriptor?? [ 2151.456075][T14538] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2151.905419][T18389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.905631][T18389] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.905894][T18389] bridge_slave_0: entered allmulticast mode [ 2151.907961][T18389] bridge_slave_0: entered promiscuous mode [ 2151.934905][T18389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.935164][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.935437][T18389] bridge_slave_1: entered allmulticast mode [ 2151.938945][T18389] bridge_slave_1: entered promiscuous mode [ 2152.225728][T18389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.245199][T18389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.493709][T18389] team0: Port device team_slave_0 added [ 2152.513688][T18389] team0: Port device team_slave_1 added [ 2152.514714][T15363] Bluetooth: hci5: command tx timeout [ 2153.157895][T13404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2153.167712][T13404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2153.169316][T13404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2153.171144][T13404] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2153.172023][T13404] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2153.410601][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3284'. [ 2153.457170][T18389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2153.457195][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.457226][T18389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2153.461307][T18389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2153.461324][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.461354][T18389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2153.809041][ T38] audit: type=1400 audit(1761593114.805:529): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=18501 comm="syz.9.3284" daddr=::ffff:0.0.0.0 dest=20002 [ 2153.861697][T18389] hsr_slave_0: entered promiscuous mode [ 2153.862830][T18389] hsr_slave_1: entered promiscuous mode [ 2153.947657][T13695] usb 3-1: USB disconnect, device number 80 [ 2154.597988][T15363] Bluetooth: hci5: command tx timeout [ 2154.944085][T18477] chnl_net:caif_netlink_parms(): no params data found [ 2155.074826][ T5899] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2155.234642][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 2155.234801][T15363] Bluetooth: hci1: command tx timeout [ 2155.239874][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2155.241087][ T5899] usb 3-1: config 3 has an invalid interface number: 254 but max is 2 [ 2155.241114][ T5899] usb 3-1: config 3 has an invalid interface number: 118 but max is 2 [ 2155.241136][ T5899] usb 3-1: config 3 has an invalid interface number: 132 but max is 2 [ 2155.241158][ T5899] usb 3-1: config 3 has an invalid interface number: 254 but max is 2 [ 2155.241172][ T5899] usb 3-1: config 3 has an invalid interface number: 128 but max is 2 [ 2155.241187][ T5899] usb 3-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 2155.241203][ T5899] usb 3-1: config 3 has no interface number 0 [ 2155.241215][ T5899] usb 3-1: config 3 has no interface number 1 [ 2155.241227][ T5899] usb 3-1: config 3 has no interface number 2 [ 2155.241238][ T5899] usb 3-1: config 3 has no interface number 3 [ 2155.241309][ T5899] usb 3-1: config 3 interface 118 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2155.241341][ T5899] usb 3-1: config 3 interface 132 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2155.241360][ T5899] usb 3-1: config 3 interface 132 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2155.241380][ T5899] usb 3-1: too many endpoints for config 3 interface 254 altsetting 35: 113, using maximum allowed: 30 [ 2155.241410][ T5899] usb 3-1: config 3 interface 254 altsetting 35 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2155.241429][ T5899] usb 3-1: config 3 interface 254 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 2155.241450][ T5899] usb 3-1: too many endpoints for config 3 interface 128 altsetting 227: 34, using maximum allowed: 30 [ 2155.241478][ T5899] usb 3-1: config 3 interface 128 altsetting 227 endpoint 0x6 has invalid maxpacket 18150, setting to 64 [ 2155.241498][ T5899] usb 3-1: config 3 interface 128 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 2155.241518][ T5899] usb 3-1: config 3 interface 254 has no altsetting 0 [ 2155.241531][ T5899] usb 3-1: config 3 interface 254 has no altsetting 1 [ 2155.241545][ T5899] usb 3-1: config 3 interface 118 has no altsetting 0 [ 2155.241558][ T5899] usb 3-1: config 3 interface 132 has no altsetting 0 [ 2155.241572][ T5899] usb 3-1: config 3 interface 128 has no altsetting 0 [ 2155.243945][ T5899] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice=a2.cc [ 2155.243977][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.243992][ T5899] usb 3-1: Product: syz [ 2155.244003][ T5899] usb 3-1: Manufacturer: syz [ 2155.244014][ T5899] usb 3-1: SerialNumber: syz [ 2155.523352][T18521] Invalid source name [ 2155.523372][T18521] UBIFS error (pid: 18521): cannot open "./file0", error -22 [ 2155.807197][ T5899] usb 3-1: USB disconnect, device number 81 [ 2156.676166][T15363] Bluetooth: hci5: command tx timeout [ 2157.314743][T15363] Bluetooth: hci1: command tx timeout [ 2158.865348][T15363] Bluetooth: hci5: command tx timeout [ 2158.992186][T18537] Invalid source name [ 2158.992334][T18537] UBIFS error (pid: 18537): cannot open "./file0", error -22 [ 2159.307225][T18477] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.307381][T18477] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.307821][T18477] bridge_slave_0: entered allmulticast mode [ 2159.311961][T18477] bridge_slave_0: entered promiscuous mode [ 2159.394568][T15363] Bluetooth: hci1: command tx timeout [ 2159.490708][T18477] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.490805][T18477] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.490983][T18477] bridge_slave_1: entered allmulticast mode [ 2159.522908][T18477] bridge_slave_1: entered promiscuous mode [ 2160.417788][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 2160.578887][T18477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2161.065838][T18477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2161.508097][T15363] Bluetooth: hci1: command tx timeout [ 2161.925981][T18477] team0: Port device team_slave_0 added [ 2162.108895][ C1] vkms_vblank_simulate: vblank timer overrun [ 2162.247512][T18495] chnl_net:caif_netlink_parms(): no params data found [ 2162.304166][T18477] team0: Port device team_slave_1 added [ 2163.358939][T18477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2163.358960][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2163.358991][T18477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2163.364282][ T3170] bridge_slave_1: left allmulticast mode [ 2163.364313][ T3170] bridge_slave_1: left promiscuous mode [ 2163.420107][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.476538][ T3170] bridge_slave_0: left allmulticast mode [ 2163.476562][ T3170] bridge_slave_0: left promiscuous mode [ 2163.476770][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2163.551128][ T3170] bridge_slave_1: left allmulticast mode [ 2163.551151][ T3170] bridge_slave_1: left promiscuous mode [ 2163.551330][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.605739][ T3170] bridge_slave_0: left allmulticast mode [ 2163.605763][ T3170] bridge_slave_0: left promiscuous mode [ 2163.605949][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2163.687774][ T3170] bridge_slave_1: left allmulticast mode [ 2163.687798][ T3170] bridge_slave_1: left promiscuous mode [ 2163.687974][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.756090][ T3170] bridge_slave_0: left allmulticast mode [ 2163.756113][ T3170] bridge_slave_0: left promiscuous mode [ 2163.756327][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.296232][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2164.378946][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2164.470456][ T3170] bond0 (unregistering): Released all slaves [ 2164.556160][ C1] vkms_vblank_simulate: vblank timer overrun [ 2164.745381][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2164.865230][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2165.104450][ C1] vkms_vblank_simulate: vblank timer overrun [ 2165.157645][ T3170] bond0 (unregistering): Released all slaves [ 2165.905946][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.065864][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2166.146080][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2166.207000][ T3170] bond0 (unregistering): Released all slaves [ 2166.242787][T18477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2166.242801][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2166.242831][T18477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2166.344997][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.437404][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.570649][ T38] audit: type=1800 audit(1761593127.565:530): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3307" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2173.637780][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2173.637861][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2174.182776][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2174.182917][T18495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.183104][T18495] bridge_slave_0: entered allmulticast mode [ 2174.206438][T18495] bridge_slave_0: entered promiscuous mode [ 2174.385400][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2174.385535][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.385754][T18495] bridge_slave_1: entered allmulticast mode [ 2174.388706][T18495] bridge_slave_1: entered promiscuous mode [ 2174.397438][T18477] hsr_slave_0: entered promiscuous mode [ 2174.399051][T18477] hsr_slave_1: entered promiscuous mode [ 2174.400130][T18477] debugfs: 'hsr0' already exists in 'hsr' [ 2174.400159][T18477] Cannot create hsr debugfs directory [ 2178.149191][T18495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2178.314668][ T5899] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2178.344652][ T3170] hsr_slave_0: left promiscuous mode [ 2178.374956][ T3170] hsr_slave_1: left promiscuous mode [ 2178.375735][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2178.415633][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2178.466630][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2178.466661][ T5899] usb 3-1: config 0 has no interface number 0 [ 2178.466715][ T5899] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.466735][ T5899] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.466751][ T5899] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2178.466782][ T5899] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2178.466799][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.470749][ T5899] usb 3-1: config 0 descriptor?? [ 2178.555255][ T3170] hsr_slave_0: left promiscuous mode [ 2178.594961][ T3170] hsr_slave_1: left promiscuous mode [ 2178.596042][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2178.618917][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2179.633257][ C1] vkms_vblank_simulate: vblank timer overrun [ 2180.144559][ T3170] hsr_slave_0: left promiscuous mode [ 2180.180295][ T5899] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0026/input/input19 [ 2180.191851][ T3170] hsr_slave_1: left promiscuous mode [ 2180.192721][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2180.249831][ T5899] uclogic 0003:28BD:0042.0026: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 2180.330106][ C1] vkms_vblank_simulate: vblank timer overrun [ 2180.339306][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2180.390033][ T5899] usb 3-1: USB disconnect, device number 82 [ 2180.656941][ C1] vkms_vblank_simulate: vblank timer overrun [ 2180.955618][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.034701][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.137452][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.208924][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.350053][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.420385][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.475508][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2181.493122][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 2181.493163][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3319'. [ 2181.556635][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.628424][ C1] vkms_vblank_simulate: vblank timer overrun [ 2181.685359][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2181.740955][ C1] vkms_vblank_simulate: vblank timer overrun [ 2182.280032][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.137068][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.403310][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.526542][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2184.778214][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2185.003934][ C1] vkms_vblank_simulate: vblank timer overrun [ 2185.201889][ C1] vkms_vblank_simulate: vblank timer overrun [ 2185.524434][ C1] vkms_vblank_simulate: vblank timer overrun [ 2186.138613][T18646] Invalid source name [ 2186.138627][T18646] UBIFS error (pid: 18646): cannot open "./file0", error -22 [ 2187.182796][ C1] vkms_vblank_simulate: vblank timer overrun [ 2187.706826][ C1] vkms_vblank_simulate: vblank timer overrun [ 2187.848867][ C1] vkms_vblank_simulate: vblank timer overrun [ 2187.972667][ C1] vkms_vblank_simulate: vblank timer overrun [ 2188.022614][ C1] vkms_vblank_simulate: vblank timer overrun [ 2188.214119][ C1] vkms_vblank_simulate: vblank timer overrun [ 2188.305768][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2188.541236][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2188.552145][T18656] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3326'. [ 2188.927007][ C1] vkms_vblank_simulate: vblank timer overrun [ 2189.160674][ C1] vkms_vblank_simulate: vblank timer overrun [ 2189.229712][ C1] vkms_vblank_simulate: vblank timer overrun [ 2189.860642][T18495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2189.860728][T18389] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2189.984731][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 2189.984770][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3319'. [ 2190.077965][T18389] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2190.178045][ T3168] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2190.482655][ C1] vkms_vblank_simulate: vblank timer overrun [ 2190.512745][T18389] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2190.558611][ T38] audit: type=1800 audit(1761593151.555:531): pid=18665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3329" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2190.615652][ C1] vkms_vblank_simulate: vblank timer overrun [ 2191.627122][ T3168] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2191.629582][T18495] team0: Port device team_slave_0 added [ 2191.630382][T18389] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2191.753937][ C1] vkms_vblank_simulate: vblank timer overrun [ 2191.781147][ C1] vkms_vblank_simulate: vblank timer overrun [ 2191.896423][ C1] vkms_vblank_simulate: vblank timer overrun [ 2191.974786][T18389] netdevsim netdevsim6 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2192.007951][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.012409][ T3168] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2192.016160][T18495] team0: Port device team_slave_1 added [ 2192.136423][ T3168] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2192.325197][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.387095][T18495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2192.387115][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2192.387145][T18495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2192.440775][T18495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2192.440794][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2192.440826][T18495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2192.532418][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.578053][ T38] audit: type=1800 audit(1761593153.555:532): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3330" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 2196.742810][T13404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2196.757445][T13404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2196.760639][T13404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2196.761855][T13404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2196.762652][T13404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2197.341383][ C1] vkms_vblank_simulate: vblank timer overrun [ 2197.829256][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.146021][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.299396][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.479030][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.674469][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.859382][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.859723][T13404] Bluetooth: hci0: command tx timeout [ 2199.075706][T18495] hsr_slave_0: entered promiscuous mode [ 2199.077145][T18495] hsr_slave_1: entered promiscuous mode [ 2199.078133][T18495] debugfs: 'hsr0' already exists in 'hsr' [ 2199.078159][T18495] Cannot create hsr debugfs directory [ 2199.195215][ C1] vkms_vblank_simulate: vblank timer overrun [ 2199.684770][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.690881][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.800992][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.872436][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.917365][T13404] Bluetooth: hci0: command tx timeout [ 2201.153849][ C1] vkms_vblank_simulate: vblank timer overrun [ 2201.358594][ C1] vkms_vblank_simulate: vblank timer overrun [ 2201.459330][ C1] vkms_vblank_simulate: vblank timer overrun [ 2201.876498][ C1] vkms_vblank_simulate: vblank timer overrun [ 2202.556877][ C1] vkms_vblank_simulate: vblank timer overrun [ 2202.996385][ C1] vkms_vblank_simulate: vblank timer overrun [ 2202.996468][T15363] Bluetooth: hci0: command tx timeout [ 2203.181988][ C1] vkms_vblank_simulate: vblank timer overrun [ 2203.333055][ C1] vkms_vblank_simulate: vblank timer overrun [ 2203.366034][ C1] vkms_vblank_simulate: vblank timer overrun [ 2203.843224][ C1] vkms_vblank_simulate: vblank timer overrun [ 2204.335590][ C1] vkms_vblank_simulate: vblank timer overrun [ 2204.389712][ C1] vkms_vblank_simulate: vblank timer overrun [ 2204.536859][ C1] vkms_vblank_simulate: vblank timer overrun [ 2204.614284][ C1] vkms_vblank_simulate: vblank timer overrun [ 2204.732375][ C1] vkms_vblank_simulate: vblank timer overrun [ 2205.117751][ C1] vkms_vblank_simulate: vblank timer overrun [ 2205.117898][T15363] Bluetooth: hci0: command tx timeout [ 2205.426557][ C1] vkms_vblank_simulate: vblank timer overrun [ 2205.461926][T18677] chnl_net:caif_netlink_parms(): no params data found [ 2205.633934][ C1] vkms_vblank_simulate: vblank timer overrun [ 2206.181715][ C1] vkms_vblank_simulate: vblank timer overrun [ 2206.181997][T15674] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2206.410537][ C1] vkms_vblank_simulate: vblank timer overrun [ 2206.697817][ C1] vkms_vblank_simulate: vblank timer overrun [ 2206.759805][T18733] macsec1: entered promiscuous mode [ 2206.759835][T18733] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 2206.823045][T18733] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 2206.961269][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.823567][T18677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.823667][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.823858][T18677] bridge_slave_0: entered allmulticast mode [ 2207.827338][T18677] bridge_slave_0: entered promiscuous mode [ 2207.831833][T18677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.832045][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.832249][T18677] bridge_slave_1: entered allmulticast mode [ 2207.856805][T18677] bridge_slave_1: entered promiscuous mode [ 2207.866035][T18495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2208.262290][T18495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2209.119280][T18495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2209.171937][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2209.244996][T18495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2209.478628][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2209.818877][T18677] team0: Port device team_slave_0 added [ 2209.842689][T18677] team0: Port device team_slave_1 added [ 2210.280108][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2210.280127][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2210.280167][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2210.357523][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2210.357536][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2210.357555][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2210.612411][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3349'. [ 2211.502945][T18677] hsr_slave_0: entered promiscuous mode [ 2211.510998][T18677] hsr_slave_1: entered promiscuous mode [ 2211.512268][T18677] debugfs: 'hsr0' already exists in 'hsr' [ 2211.512296][T18677] Cannot create hsr debugfs directory [ 2211.690054][ T38] audit: type=1400 audit(1761593172.685:533): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=18752 comm="syz.9.3349" daddr=::ffff:0.0.0.0 dest=20002 [ 2211.730107][T13404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2211.738555][T13404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2211.754971][T13404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2211.779263][T13404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2211.780623][T13404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2212.047219][ T3170] bridge_slave_1: left allmulticast mode [ 2212.047249][ T3170] bridge_slave_1: left promiscuous mode [ 2212.047459][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.248545][ T3170] bridge_slave_0: left allmulticast mode [ 2212.248729][ T3170] bridge_slave_0: left promiscuous mode [ 2212.304173][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.885360][ T3170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2212.965413][ T3170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2213.036638][ T3170] bond0 (unregistering): Released all slaves [ 2213.424636][ T3170] hsr_slave_0: left promiscuous mode [ 2213.464745][ T3170] hsr_slave_1: left promiscuous mode [ 2213.465558][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2213.505792][ T3170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.794840][T15363] Bluetooth: hci2: command tx timeout [ 2214.235355][ T3170] team0 (unregistering): Port device team_slave_1 removed [ 2214.660302][T13404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2214.661689][T13404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2214.663991][T13404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2215.910510][T13404] Bluetooth: hci2: command tx timeout [ 2215.932930][T18776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2215.933036][ T3170] team0 (unregistering): Port device team_slave_0 removed [ 2215.941485][T18776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2217.036703][ T26] ================================================================== [ 2217.036721][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 2217.036873][ T26] Read of size 8 at addr ffffc9000a5c1090 by task irq_work/1/26 [ 2217.036892][ T26] [ 2217.036921][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2217.036947][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2217.036970][ T26] Call Trace: [ 2217.036984][ T26] [ 2217.036996][ T26] dump_stack_lvl+0x189/0x250 [ 2217.037051][ T26] ? run_irq_workd+0x116/0x190 [ 2217.037084][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2217.037118][ T26] ? __pfx__printk+0x10/0x10 [ 2217.037155][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 2217.037203][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 2217.037238][ T26] print_report+0xca/0x240 [ 2217.037270][ T26] ? run_irq_workd+0x116/0x190 [ 2217.037300][ T26] kasan_report+0x118/0x150 [ 2217.037366][ T26] ? run_irq_workd+0x116/0x190 [ 2217.037402][ T26] run_irq_workd+0x116/0x190 [ 2217.037432][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 2217.037463][ T26] ? schedule+0x91/0x360 [ 2217.037594][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 2217.037639][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 2217.037665][ T26] smpboot_thread_fn+0x542/0xa60 [ 2217.037693][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 2217.037726][ T26] kthread+0x711/0x8a0 [ 2217.037761][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2217.037789][ T26] ? __pfx_kthread+0x10/0x10 [ 2217.037819][ T26] ? rt_spin_unlock+0x150/0x200 [ 2217.037869][ T26] ? rt_spin_unlock+0x161/0x200 [ 2217.037891][ T26] ? __pfx_kthread+0x10/0x10 [ 2217.037924][ T26] ret_from_fork+0x4bc/0x870 [ 2217.037957][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 2217.037988][ T26] ? __switch_to_asm+0x39/0x70 [ 2217.038011][ T26] ? __switch_to_asm+0x33/0x70 [ 2217.038033][ T26] ? __pfx_kthread+0x10/0x10 [ 2217.038065][ T26] ret_from_fork_asm+0x1a/0x30 [ 2217.038097][ T26] [ 2217.038106][ T26] [ 2217.038113][ T26] The buggy address belongs to a vmalloc virtual mapping [ 2217.038141][ T26] Memory state around the buggy address: [ 2217.038154][ T26] ffffc9000a5c0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2217.038170][ T26] ffffc9000a5c1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2217.038185][ T26] >ffffc9000a5c1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2217.038199][ T26] ^ [ 2217.038212][ T26] ffffc9000a5c1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2217.038227][ T26] ffffc9000a5c1180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2217.038239][ T26] ================================================================== [ 2217.038264][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2217.038280][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2217.038305][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2217.038319][ T26] Call Trace: [ 2217.038334][ T26] [ 2217.038344][ T26] dump_stack_lvl+0x99/0x250 [ 2217.038377][ T26] ? __asan_memcpy+0x40/0x70 [ 2217.038402][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2217.038436][ T26] ? __pfx__printk+0x10/0x10 [ 2217.038469][ T26] vpanic+0x237/0x6d0 [ 2217.038491][ T26] ? __pfx_vpanic+0x10/0x10 [ 2217.038518][ T26] panic+0xb9/0xc0 [ 2217.038538][ T26] ? __pfx_panic+0x10/0x10 [ 2217.038558][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2217.038595][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2217.038632][ T26] ? run_irq_workd+0x116/0x190 [ 2217.038663][ T26] check_panic_on_warn+0x89/0xb0 [ 2217.038684][ T26] ? run_irq_workd+0x116/0x190 [ 2217.038715][ T26] end_report+0x78/0x160 [ 2217.038744][ T26] kasan_report+0x129/0x150 [ 2217.038777][ T26] ? run_irq_workd+0x116/0x190 [ 2217.038813][ T26] run_irq_workd+0x116/0x190 [ 2217.038843][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 2217.038873][ T26] ? schedule+0x91/0x360 [ 2217.038899][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 2217.038927][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 2217.038954][ T26] smpboot_thread_fn+0x542/0xa60 [ 2217.038983][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 2217.039016][ T26] kthread+0x711/0x8a0 [ 2217.039049][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2217.039078][ T26] ? __pfx_kthread+0x10/0x10 [ 2217.039108][ T26] ? rt_spin_unlock+0x150/0x200 [ 2217.039133][ T26] ? rt_spin_unlock+0x161/0x200 [ 2217.039154][ T26] ? __pfx_kthread+0x10/0x10 [ 2217.039188][ T26] ret_from_fork+0x4bc/0x870 [ 2217.039215][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 2217.039245][ T26] ? __switch_to_asm+0x39/0x70 [ 2217.039266][ T26] ? __switch_to_asm+0x33/0x70 [ 2217.039288][ T26] ? __pfx_kthread+0x10/0x10 [ 2217.039321][ T26] ret_from_fork_asm+0x1a/0x30 [ 2217.039361][ T26] [ 2217.039623][ T26] Kernel Offset: disabled