last executing test programs: 2m8.36837641s ago: executing program 1 (id=264): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xc, @string={0xc, 0x3, "4dba536b57649a70081a"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m6.185375971s ago: executing program 0 (id=267): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x1) 2m5.897474938s ago: executing program 0 (id=268): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 2m5.690213792s ago: executing program 1 (id=269): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x106, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000059c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {0x0}], 0x3) 2m4.992701613s ago: executing program 1 (id=272): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 2m4.444404067s ago: executing program 0 (id=275): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e809240300000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x2, "8325"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208402"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x0, 0x1, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0xddf4a1e266857d54, 0x3, 0x70, {0x70, 0x23, "375ce0b566dabf7404acc903b228bf4698edfdffc65808342acf2b3061776162a5b938ecb3f5e9e7c688c64cd8d0479753b638ab98410249920b60647b303f0a30836cc3d3344616074270f89630e79e7930f45c32abc43c0dd9b1ece8f81e19c3f43c170a056b99888368ae4dbf"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x17, 0x7e, "6ad276959f2201709e0d47fbe1cef8403c3049ffb1cae5c586b7f7d0af76b13209e70b4e8550b5bfea2f4bdeb564436163f09f0dee93cc8fa5c70b27c61ad0fd0016f2e597a5b8c426a8ad69ee9be6c6002609166bd91def7a9a35aa66aacd6948ab03c54737c1fa4c5d92345c1efcaa775c9d3941475577c30d9da7fe85"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x81, 0x2, "bb0b"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "aa"}, &(0x7f0000000780)={0x20, 0x83, 0x1, '\"'}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "aee669"}, &(0x7f0000000800)={0x20, 0x85, 0x3, 'Ty?'}}) 2m4.23730358s ago: executing program 1 (id=277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x4000000) close(r0) 2m3.709599757s ago: executing program 1 (id=282): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x106, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000059c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {0x0}], 0x3) 2m3.06492127s ago: executing program 1 (id=283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x3, 0x0, 0x7, 0x0}) 2m1.033953695s ago: executing program 0 (id=285): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 2m0.554377573s ago: executing program 0 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 1m59.732499774s ago: executing program 0 (id=290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x85, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000240)={0x1, "0f"}, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000900)=0x15) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=0xffff, 0x8, 0x0) 1m58.30492668s ago: executing program 2 (id=296): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 1m57.704879384s ago: executing program 2 (id=297): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$hwrng(0xffffff9c, 0x0, 0x202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88b81, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x1f, 0x800, 0xde6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x374b) 1m53.445605643s ago: executing program 2 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 1m52.985280314s ago: executing program 2 (id=301): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 1m52.216444403s ago: executing program 2 (id=303): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) 1m51.787347676s ago: executing program 2 (id=304): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/121, 0x79}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x10084890) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x501000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg1\x00', 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2, r1}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0xd0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x800) 1m48.119743535s ago: executing program 3 (id=312): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0x11, 0x3, "3e5115"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m47.243448457s ago: executing program 32 (id=283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x3, 0x0, 0x7, 0x0}) 1m44.181056146s ago: executing program 33 (id=290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x85, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000240)={0x1, "0f"}, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000900)=0x15) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=0xffff, 0x8, 0x0) 1m44.161169789s ago: executing program 3 (id=317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0x4000000) close(r0) 1m43.599930234s ago: executing program 3 (id=318): r0 = add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001900)="db7cf68c490c6bda8a", 0x9, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 1m42.665650803s ago: executing program 3 (id=320): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}) 1m41.609746802s ago: executing program 3 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 1m40.59039934s ago: executing program 3 (id=324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1m35.591442875s ago: executing program 34 (id=304): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/121, 0x79}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x10084890) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x501000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg1\x00', 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2, r1}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0xd0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x800) 1m24.859103268s ago: executing program 35 (id=324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1m20.530877763s ago: executing program 4 (id=334): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0x11, 0x3, "3e5115"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m15.804075349s ago: executing program 4 (id=335): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) 1m12.064340953s ago: executing program 4 (id=336): r0 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000001900)="db7cf68c490c6bda8a", 0x9, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 1m11.059320753s ago: executing program 4 (id=337): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x106, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000059c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) 1m10.040847613s ago: executing program 4 (id=338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000009bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009c00)={0x24, r2, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) 1m9.261535281s ago: executing program 4 (id=339): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x40080c1) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1e00000008000000ffffffff081000000000000049094350852a2be8bfb9a52c615861056fd259554c", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000d00"/28], 0x50) close(0x3) 4.657575199s ago: executing program 5 (id=463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4040) 4.553892009s ago: executing program 6 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f7"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 4.515403421s ago: executing program 7 (id=465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0x8000081, "58c7050000000000000055b8a580f105689700"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000007c0)={0x81, "7ad3dd1fc2423dff92fa199fb64951078c533f7bd1bbca78dbff4ed99b2caf14"}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002"]) 3.632833347s ago: executing program 5 (id=466): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) 3.615177591s ago: executing program 9 (id=467): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 3.577292428s ago: executing program 6 (id=468): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x110003, 0x0, [0x7, 0x1, 0x7, 0x2d5, 0x9, 0x3, 0x7, 0x4000000002279]}) 3.464860965s ago: executing program 8 (id=469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000009bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009c00)={0x1c, r2, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) 3.43762452s ago: executing program 7 (id=470): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) 3.001077297s ago: executing program 6 (id=471): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}], 0x1, 0x40001023, 0x0) 2.904923756s ago: executing program 8 (id=472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f00000002c0)="1a000000020000", 0x7) 2.833575971s ago: executing program 9 (id=473): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0x80000000, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0xd7}) 2.553187327s ago: executing program 5 (id=474): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 2.086183155s ago: executing program 8 (id=475): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 1.83315415s ago: executing program 7 (id=476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4040) 1.736759002s ago: executing program 9 (id=477): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 1.588772463s ago: executing program 5 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f7"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 1.588176855s ago: executing program 6 (id=479): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x8, 0x7, 0x10, 0x1}, 0x50) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x420000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @any, 0x5}, 0xa) r6 = socket(0x2, 0x80805, 0xf) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, 0x0, 0x0) shutdown(r4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1e00000008000000ffffffff081000000000000049094350852a2be8bfb9a52c615861056fd259554c", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000d00"/28], 0x50) close(0x3) 1.186403465s ago: executing program 8 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0x8000081, "58c7050000000000000055b8a580f105689700"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000007c0)={0x81, "7ad3dd1fc2423dff92fa199fb64951078c533f7bd1bbca78dbff4ed99b2caf14"}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002"]) 1.186188617s ago: executing program 9 (id=481): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x110003, 0x0, [0x7, 0x1, 0x7, 0x2d5, 0x9, 0x3, 0x7, 0x4000000002279]}) 1.029684947s ago: executing program 7 (id=482): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000009bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009c00)={0x1c, r2, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) 851.823487ms ago: executing program 5 (id=483): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 524.285038ms ago: executing program 9 (id=484): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) 335.277947ms ago: executing program 7 (id=485): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x11c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xec, 0x2, [@TCA_FLOW_EMATCHES={0xcc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd"}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x7fff, 0x9, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_POLICE={0x4}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x240080cb) 297.315824ms ago: executing program 8 (id=486): mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2808008, &(0x7f00000000c0)='\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x6, 0x2a2442) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f00006c6000/0x4000)=nil, 0x4000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3fce, 0x0, 0x0, &(0x7f00000002c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 49.590081ms ago: executing program 5 (id=487): r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001900), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 0s ago: executing program 6 (id=488): r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15 1 [ 295.874282][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.888611][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.915561][ T11] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 295.936307][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.953861][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.134283][ T11] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 296.143415][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.156151][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.273812][ T11] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 296.283392][ T11] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 296.291719][ T11] usb 5-1: Manufacturer: syz [ 296.321456][ T11] usb 5-1: config 0 descriptor?? [ 296.346458][ T11] igorplugusb 5-1:0.0: incorrect number of endpoints [ 296.733781][ T6796] chnl_net:caif_netlink_parms(): no params data found [ 297.705735][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.713168][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.720666][ T6796] bridge_slave_0: entered allmulticast mode [ 297.728919][ T6796] bridge_slave_0: entered promiscuous mode [ 297.761155][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.769813][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.777383][ T6796] bridge_slave_1: entered allmulticast mode [ 297.788259][ T6796] bridge_slave_1: entered promiscuous mode [ 297.929238][ T11] usb 4-1: USB disconnect, device number 29 [ 298.055583][ T5813] Bluetooth: hci5: command tx timeout [ 298.227627][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.527722][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.928364][ T6796] team0: Port device team_slave_0 added [ 298.986397][ T11] usb 5-1: USB disconnect, device number 32 [ 299.052894][ T6796] team0: Port device team_slave_1 added [ 299.478328][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.485683][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.512850][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.605782][ T5108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.614766][ T5108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.627540][ T5108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.640179][ T5108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.653274][ T5108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.667585][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.674621][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.701697][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.135737][ T5108] Bluetooth: hci5: command tx timeout [ 300.232165][ T6796] hsr_slave_0: entered promiscuous mode [ 300.243972][ T6796] hsr_slave_1: entered promiscuous mode [ 300.251607][ T6796] debugfs: 'hsr0' already exists in 'hsr' [ 300.257519][ T6796] Cannot create hsr debugfs directory [ 301.178655][ T11] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 301.421743][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 301.474360][ T11] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 301.483300][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.493669][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.561301][ T6796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.629788][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.639367][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.647933][ T11] usb 5-1: Product: syz [ 301.652251][ T11] usb 5-1: Manufacturer: syz [ 301.657378][ T11] usb 5-1: SerialNumber: syz [ 301.825356][ T5108] Bluetooth: hci6: command tx timeout [ 301.918191][ T6796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.183634][ T6796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.219170][ T5108] Bluetooth: hci5: command tx timeout [ 302.367589][ T6796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.394716][ T11] usb 5-1: 0:2 : does not exist [ 302.450103][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 302.478759][ T11] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 302.692019][ T11] usb 5-1: USB disconnect, device number 33 [ 302.842509][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.675706][ T11] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 303.911480][ T5108] Bluetooth: hci6: command tx timeout [ 303.911574][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 303.992421][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.002926][ T11] usb 5-1: config 0 has no interfaces? [ 304.008727][ T11] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 304.017977][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.172460][ T11] usb 5-1: config 0 descriptor?? [ 304.295682][ T5108] Bluetooth: hci5: command tx timeout [ 304.609924][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.873607][ T6796] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.885613][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.893012][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.900518][ T6817] bridge_slave_0: entered allmulticast mode [ 304.909003][ T6817] bridge_slave_0: entered promiscuous mode [ 304.945174][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.954787][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.962995][ T6817] bridge_slave_1: entered allmulticast mode [ 304.971201][ T6817] bridge_slave_1: entered promiscuous mode [ 305.117188][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.147028][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.223822][ T6817] team0: Port device team_slave_0 added [ 305.276830][ T6817] team0: Port device team_slave_1 added [ 305.445655][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.453040][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.478551][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.485797][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.512088][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.609116][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.616501][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.642713][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.709427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.717013][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.978087][ T5108] Bluetooth: hci6: command tx timeout [ 306.033917][ T6796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.044583][ T6796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.234487][ T6817] hsr_slave_0: entered promiscuous mode [ 306.243035][ T6817] hsr_slave_1: entered promiscuous mode [ 306.250755][ T6817] debugfs: 'hsr0' already exists in 'hsr' [ 306.256739][ T6817] Cannot create hsr debugfs directory [ 307.455906][ T2046] usb 5-1: USB disconnect, device number 34 [ 308.094677][ T49] Bluetooth: hci6: command tx timeout [ 308.110707][ T6817] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.137057][ T2046] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 308.166472][ T6817] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.187656][ T6817] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.209171][ T6817] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.322897][ T2046] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 308.333656][ T2046] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.344424][ T2046] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.459780][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 308.469327][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 308.478537][ T5824] Bluetooth: hci0: command 0x1407 tx timeout [ 308.484684][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 308.492000][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 308.501453][ T2046] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 308.510833][ T2046] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 308.519715][ T2046] usb 5-1: Manufacturer: syz [ 308.588703][ T2046] usb 5-1: config 0 descriptor?? [ 308.604616][ T2046] igorplugusb 5-1:0.0: incorrect number of endpoints [ 308.915737][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.924311][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.933689][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.950348][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.961399][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.232965][ T5098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.404328][ T5098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.519656][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.723751][ T5098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.097187][ T5098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.597218][ T5098] bridge_slave_1: left allmulticast mode [ 310.603069][ T5098] bridge_slave_1: left promiscuous mode [ 310.609550][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.634413][ T5098] bridge_slave_0: left allmulticast mode [ 310.640369][ T5098] bridge_slave_0: left promiscuous mode [ 310.646699][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.928518][ T5896] usb 5-1: USB disconnect, device number 35 [ 311.025854][ T5108] Bluetooth: hci3: command tx timeout [ 311.320003][ T5098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.372475][ T5098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.427968][ T5098] bond0 (unregistering): Released all slaves [ 312.182358][ T5098] hsr_slave_0: left promiscuous mode [ 312.222120][ T5098] hsr_slave_1: left promiscuous mode [ 312.229232][ T5098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.236834][ T5098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.327788][ T5098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.335963][ T5098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.457346][ T5098] veth1_macvtap: left promiscuous mode [ 312.462954][ T5098] veth0_macvtap: left promiscuous mode [ 312.468785][ T5098] veth1_vlan: left promiscuous mode [ 312.474171][ T5098] veth0_vlan: left promiscuous mode [ 313.105845][ T5108] Bluetooth: hci3: command tx timeout [ 313.451544][ T5098] team0 (unregistering): Port device team_slave_1 removed [ 313.517822][ T5098] team0 (unregistering): Port device team_slave_0 removed [ 313.949719][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 314.167802][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.403783][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.564727][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.572150][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.757482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.764816][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.179352][ T5108] Bluetooth: hci3: command tx timeout [ 315.872475][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.880081][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.887656][ T6854] bridge_slave_0: entered allmulticast mode [ 315.896135][ T6854] bridge_slave_0: entered promiscuous mode [ 316.114778][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.122374][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.129994][ T6854] bridge_slave_1: entered allmulticast mode [ 316.138383][ T6854] bridge_slave_1: entered promiscuous mode [ 316.604529][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.713001][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.264298][ T5108] Bluetooth: hci3: command tx timeout [ 317.359596][ T6854] team0: Port device team_slave_0 added [ 317.810138][ T6854] team0: Port device team_slave_1 added [ 317.961967][ T6796] veth0_vlan: entered promiscuous mode [ 318.280880][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.311909][ T6796] veth1_vlan: entered promiscuous mode [ 318.349212][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.357022][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.386135][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.620585][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.628199][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.654616][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.964257][ T6796] veth0_macvtap: entered promiscuous mode [ 319.179978][ T11] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 319.233358][ T6796] veth1_macvtap: entered promiscuous mode [ 319.272933][ T6854] hsr_slave_0: entered promiscuous mode [ 319.281880][ T6854] hsr_slave_1: entered promiscuous mode [ 319.292470][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 319.298358][ T6854] Cannot create hsr debugfs directory [ 319.385647][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 319.463964][ T11] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 319.473603][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.483927][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.514438][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.670081][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.679413][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.687666][ T11] usb 5-1: Product: syz [ 319.691925][ T11] usb 5-1: Manufacturer: syz [ 319.698529][ T11] usb 5-1: SerialNumber: syz [ 319.738227][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.973529][ T5098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.061755][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.121827][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.196182][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.746236][ T11] usb 5-1: 0:2 : does not exist [ 321.193103][ T11] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 321.427119][ T11] usb 5-1: USB disconnect, device number 36 [ 321.568268][ T6897] udevd[6897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.295348][ T6817] veth0_vlan: entered promiscuous mode [ 322.487688][ T2038] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 322.521675][ T6817] veth1_vlan: entered promiscuous mode [ 322.823040][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.832967][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.847213][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.865221][ T2038] usb 5-1: Using ep0 maxpacket: 8 [ 322.884203][ T6854] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.908955][ T6854] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.009502][ T6817] veth0_macvtap: entered promiscuous mode [ 323.036435][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.066569][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.101138][ T6817] veth1_macvtap: entered promiscuous mode [ 323.151523][ T2038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.161961][ T2038] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.171321][ T2038] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 323.181653][ T2038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.191747][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.287980][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.322758][ T3852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.332650][ T6854] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.391673][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.426858][ T6854] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.854210][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.168348][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.188430][ T2038] usb 5-1: config 0 descriptor?? [ 325.223369][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 325.486198][ T5826] Bluetooth: hci7: command tx timeout [ 326.425912][ T2038] usb 5-1: USB disconnect, device number 37 [ 326.612328][ T3487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.902712][ T3487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.138080][ T3487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.178481][ T11] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 327.385987][ T3487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.465788][ T11] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 327.474307][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.488483][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.507040][ T5826] Bluetooth: hci7: command tx timeout [ 327.640727][ T11] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 327.650238][ T11] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 327.658604][ T11] usb 5-1: Manufacturer: syz [ 327.828621][ T11] usb 5-1: config 0 descriptor?? [ 327.864283][ T11] igorplugusb 5-1:0.0: incorrect number of endpoints [ 328.050555][ T3487] bridge_slave_1: left allmulticast mode [ 328.058504][ T3487] bridge_slave_1: left promiscuous mode [ 328.064738][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.266450][ T3487] bridge_slave_0: left allmulticast mode [ 328.272326][ T3487] bridge_slave_0: left promiscuous mode [ 328.278701][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.851429][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.891740][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.910563][ T3487] bond0 (unregistering): Released all slaves [ 329.178831][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.580796][ T5826] Bluetooth: hci7: command tx timeout [ 329.737168][ T3487] hsr_slave_0: left promiscuous mode [ 329.790174][ T3487] hsr_slave_1: left promiscuous mode [ 329.797954][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.805698][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.861777][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.870280][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.957206][ T3487] veth1_macvtap: left promiscuous mode [ 329.962880][ T3487] veth0_macvtap: left promiscuous mode [ 330.259726][ T11] usb 5-1: USB disconnect, device number 38 [ 330.547211][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 330.584525][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 331.281591][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.342791][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.350260][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.357943][ T6913] bridge_slave_0: entered allmulticast mode [ 331.366624][ T6913] bridge_slave_0: entered promiscuous mode [ 331.439425][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.447850][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.456714][ T6913] bridge_slave_1: entered allmulticast mode [ 331.467373][ T6913] bridge_slave_1: entered promiscuous mode [ 331.677271][ T5826] Bluetooth: hci7: command tx timeout [ 331.858997][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.941301][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.948842][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.970321][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.727064][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.734602][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.784634][ T6913] team0: Port device team_slave_0 added [ 332.904153][ T6913] team0: Port device team_slave_1 added [ 333.596087][ T2046] libceph: connect (1)[c::]:6789 error -101 [ 333.602316][ T2046] libceph: mon0 (1)[c::]:6789 connect error [ 333.670207][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.677534][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.704421][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.783904][ T6978] ceph: No mds server is up or the cluster is laggy [ 333.821583][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.832520][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.859552][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.906261][ T2046] libceph: connect (1)[c::]:6789 error -101 [ 333.912426][ T2046] libceph: mon0 (1)[c::]:6789 connect error [ 333.964621][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.973353][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.873821][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.882443][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.918730][ T6913] hsr_slave_0: entered promiscuous mode [ 334.927672][ T6913] hsr_slave_1: entered promiscuous mode [ 334.935537][ T6913] debugfs: 'hsr0' already exists in 'hsr' [ 334.941364][ T6913] Cannot create hsr debugfs directory [ 336.987235][ T2046] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 337.014156][ T6913] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 337.245577][ T2046] usb 6-1: Using ep0 maxpacket: 16 [ 337.269071][ T2046] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 337.279169][ T2046] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.289598][ T2046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.441459][ T6913] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 337.467893][ T2046] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.477230][ T2046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.485524][ T2046] usb 6-1: Product: syz [ 337.489792][ T2046] usb 6-1: Manufacturer: syz [ 337.494483][ T2046] usb 6-1: SerialNumber: syz [ 337.817701][ T6913] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 337.911037][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.948617][ T6913] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 338.368547][ T2046] usb 6-1: 0:2 : does not exist [ 338.444680][ T2046] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 338.666908][ T2046] usb 6-1: USB disconnect, device number 2 [ 338.828008][ T6897] udevd[6897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.635881][ T2046] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 339.748767][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.756891][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.886384][ T2046] usb 6-1: Using ep0 maxpacket: 8 [ 339.922558][ T2046] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.933886][ T2046] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.943243][ T2046] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 339.952535][ T2046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.079391][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.087452][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.169962][ T2046] usb 6-1: config 0 descriptor?? [ 340.906434][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.108150][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.186244][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.350949][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.536359][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.826647][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.943136][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.950742][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.966340][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.973665][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.148572][ T6854] veth0_vlan: entered promiscuous mode [ 342.404884][ T6854] veth1_vlan: entered promiscuous mode [ 342.928502][ T12] bridge_slave_1: left allmulticast mode [ 342.934344][ T12] bridge_slave_1: left promiscuous mode [ 342.946882][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.037969][ T12] bridge_slave_0: left allmulticast mode [ 343.050428][ T12] bridge_slave_0: left promiscuous mode [ 343.056852][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.395188][ T2038] usb 6-1: USB disconnect, device number 3 [ 343.641743][ T2046] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 343.900735][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.940941][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.957280][ T2046] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 343.970097][ T2046] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.013630][ T12] bond0 (unregistering): Released all slaves [ 344.038136][ T2046] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 344.047508][ T2046] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 344.056365][ T2046] usb 7-1: Manufacturer: syz [ 344.161020][ T6854] veth0_macvtap: entered promiscuous mode [ 344.222510][ T2046] usb 7-1: config 0 descriptor?? [ 344.256488][ T2046] igorplugusb 7-1:0.0: incorrect number of endpoints [ 344.327815][ T6854] veth1_macvtap: entered promiscuous mode [ 345.172874][ T12] hsr_slave_0: left promiscuous mode [ 345.236280][ T12] hsr_slave_1: left promiscuous mode [ 345.244542][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.252730][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.363850][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.371962][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.468205][ T12] veth1_macvtap: left promiscuous mode [ 345.474187][ T12] veth0_macvtap: left promiscuous mode [ 345.480177][ T12] veth1_vlan: left promiscuous mode [ 345.485688][ T12] veth0_vlan: left promiscuous mode [ 346.397273][ T12] team0 (unregistering): Port device team_slave_1 removed [ 346.417579][ T12] team0 (unregistering): Port device team_slave_0 removed [ 346.734327][ T7051] loop7: detected capacity change from 0 to 16384 [ 346.873012][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.996942][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.033214][ T2038] usb 7-1: USB disconnect, device number 2 [ 347.222797][ T6913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.247746][ T3539] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.280031][ T3539] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.296593][ T7053] loop7: detected capacity change from 16384 to 0 [ 347.313833][ C1] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 347.399109][ C0] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 347.430648][ T3811] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.564849][ T3487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.396256][ T2046] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 348.613380][ T2046] usb 6-1: Using ep0 maxpacket: 16 [ 348.653542][ T2046] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 348.662666][ T2046] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.673048][ T2046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.832292][ T2046] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.841778][ T2046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.850587][ T2046] usb 6-1: Product: syz [ 348.854869][ T2046] usb 6-1: Manufacturer: syz [ 348.861795][ T2046] usb 6-1: SerialNumber: syz [ 349.793934][ T2046] usb 6-1: 0:2 : does not exist [ 349.901233][ T2046] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 350.197258][ T2046] usb 6-1: USB disconnect, device number 4 [ 350.413471][ T6897] udevd[6897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.570963][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.593710][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.628241][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.668070][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.688989][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.789721][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.008512][ T2046] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 351.099052][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.406660][ T2046] usb 7-1: Using ep0 maxpacket: 8 [ 351.502243][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.508319][ T2046] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.523859][ T2046] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.537055][ T2046] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 351.551399][ T2046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.600331][ T2046] usb 7-1: config 0 descriptor?? [ 351.810730][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.489681][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.496886][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.787663][ T5108] Bluetooth: hci0: command tx timeout [ 352.914580][ T12] bond0 (unregistering): Released all slaves [ 353.818864][ T12] hsr_slave_0: left promiscuous mode [ 353.860719][ T12] hsr_slave_1: left promiscuous mode [ 353.960257][ T12] veth1_macvtap: left promiscuous mode [ 353.966306][ T12] veth0_macvtap: left promiscuous mode [ 353.972219][ T12] veth1_vlan: left promiscuous mode [ 353.978341][ T12] veth0_vlan: left promiscuous mode [ 354.500491][ T5869] usb 7-1: USB disconnect, device number 3 [ 355.083412][ T5108] Bluetooth: hci0: command tx timeout [ 355.398506][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 355.567253][ T6913] veth0_vlan: entered promiscuous mode [ 355.876566][ T6913] veth1_vlan: entered promiscuous mode [ 356.167598][ T2038] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 356.293544][ T6913] veth0_macvtap: entered promiscuous mode [ 356.372674][ T6913] veth1_macvtap: entered promiscuous mode [ 356.431742][ T2038] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 356.440421][ T2038] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.548748][ T2038] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 356.560599][ T2038] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 356.569978][ T2038] usb 7-1: Manufacturer: syz [ 356.648079][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.689852][ T2038] usb 7-1: config 0 descriptor?? [ 356.778758][ T2038] igorplugusb 7-1:0.0: incorrect number of endpoints [ 356.801579][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.961171][ T163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.029650][ T163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.097285][ T5108] Bluetooth: hci0: command tx timeout [ 357.103010][ T163] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.225944][ T163] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.819730][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.829260][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.836955][ T7077] bridge_slave_0: entered allmulticast mode [ 357.845559][ T7077] bridge_slave_0: entered promiscuous mode [ 358.079414][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.087057][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.094724][ T7077] bridge_slave_1: entered allmulticast mode [ 358.108238][ T7077] bridge_slave_1: entered promiscuous mode [ 358.572936][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.577541][ T5869] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 358.746803][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.829855][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 358.841757][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 358.854182][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 358.871162][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 359.157344][ T5869] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 359.166909][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.176380][ T5869] usb 6-1: Product: syz [ 359.180662][ T5869] usb 6-1: Manufacturer: syz [ 359.185488][ T5869] usb 6-1: SerialNumber: syz [ 359.235262][ T5108] Bluetooth: hci0: command tx timeout [ 359.268432][ T5869] usb 6-1: config 0 descriptor?? [ 359.287023][ T7125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 359.294889][ T7125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 359.312113][ T5869] usb 6-1: ucan: probing device on interface #0 [ 359.332567][ T5864] usb 7-1: USB disconnect, device number 4 [ 359.384441][ T7077] team0: Port device team_slave_0 added [ 359.490703][ T7077] team0: Port device team_slave_1 added [ 360.155860][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.162925][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.189278][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.436785][ T5869] usb 6-1: ucan: could not read protocol version, ret=-110 [ 360.444291][ T5869] usb 6-1: ucan: probe failed; try to update the device firmware [ 360.490088][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.498012][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.524200][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.713793][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.721863][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.486800][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.495710][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.513466][ T7077] hsr_slave_0: entered promiscuous mode [ 361.522002][ T7077] hsr_slave_1: entered promiscuous mode [ 361.529817][ T7077] debugfs: 'hsr0' already exists in 'hsr' [ 361.535736][ T7077] Cannot create hsr debugfs directory [ 363.792413][ T7077] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 363.894820][ T7077] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 364.009453][ T7077] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 364.124750][ T7077] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 365.779364][ T5864] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 366.041301][ T5864] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 366.050000][ T5864] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.144173][ T5864] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 366.154001][ T5864] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.162359][ T5864] usb 7-1: Manufacturer: syz [ 366.178157][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.358688][ T5864] usb 7-1: config 0 descriptor?? [ 366.412776][ T5864] igorplugusb 7-1:0.0: incorrect number of endpoints [ 366.507497][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.731352][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.738887][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.915367][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.923008][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.917314][ T9] usb 7-1: USB disconnect, device number 5 [ 369.780303][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.788488][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.030985][ T5098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.095373][ T5864] usb 6-1: USB disconnect, device number 5 [ 370.227975][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.236329][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.397273][ T5098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.540892][ T5098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.780946][ T5098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.877317][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.422238][ T7231] netlink: 40 bytes leftover after parsing attributes in process `syz.8.332'. [ 371.455829][ T5098] bridge_slave_1: left allmulticast mode [ 371.461689][ T5098] bridge_slave_1: left promiscuous mode [ 371.468878][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.619954][ T5098] bridge_slave_0: left allmulticast mode [ 371.626057][ T5098] bridge_slave_0: left promiscuous mode [ 371.632621][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.175540][ T7234] binder: BINDER_SET_CONTEXT_MGR already set [ 372.181724][ T7234] binder: 7233:7234 ioctl 4018620d 80000040 returned -16 [ 372.627407][ T5098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.639185][ T5864] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 372.748996][ T5098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.780965][ T5098] bond0 (unregistering): Released all slaves [ 372.862463][ T5864] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 372.871435][ T5864] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.982320][ T5864] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 372.992720][ T5864] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 373.001015][ T5864] usb 9-1: Manufacturer: syz [ 373.081397][ T5864] usb 9-1: config 0 descriptor?? [ 373.104478][ T5864] igorplugusb 9-1:0.0: incorrect number of endpoints [ 373.165512][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 373.375751][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 373.392172][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 373.400878][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.411234][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.421328][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.431605][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.445966][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 373.459097][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.918879][ T5098] hsr_slave_0: left promiscuous mode [ 374.032090][ T5098] hsr_slave_1: left promiscuous mode [ 374.041174][ T5098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.049061][ T5098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.091377][ T9] usb 6-1: usb_control_msg returned -32 [ 374.098128][ T9] usbtmc 6-1:16.0: can't read capabilities [ 374.195412][ T5098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.202980][ T5098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.223897][ T9] usb 6-1: USB disconnect, device number 6 [ 374.399653][ T5098] veth1_macvtap: left promiscuous mode [ 374.405842][ T5098] veth0_macvtap: left promiscuous mode [ 374.411699][ T5098] veth1_vlan: left promiscuous mode [ 374.417450][ T5098] veth0_vlan: left promiscuous mode [ 375.547830][ T5098] team0 (unregistering): Port device team_slave_1 removed [ 375.628561][ T5864] usb 9-1: USB disconnect, device number 2 [ 375.717117][ T5098] team0 (unregistering): Port device team_slave_0 removed [ 376.725269][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.385'. [ 376.857333][ T7077] veth0_vlan: entered promiscuous mode [ 376.974164][ T7077] veth1_vlan: entered promiscuous mode [ 377.267494][ T7077] veth0_macvtap: entered promiscuous mode [ 377.328878][ T7077] veth1_macvtap: entered promiscuous mode [ 377.585455][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.742653][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.863566][ T3852] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.910674][ T3852] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.948045][ T5098] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.998774][ T5098] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.143260][ T5864] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 379.325814][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 379.419613][ T5864] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 379.429164][ T5864] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.439255][ T5864] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.449300][ T5864] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.459614][ T5864] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.473006][ T5864] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 379.482338][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.585348][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 379.768447][ T5873] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 379.777354][ T5873] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.838358][ T5864] usb 6-1: usb_control_msg returned -32 [ 379.844199][ T5864] usbtmc 6-1:16.0: can't read capabilities [ 379.894473][ T5873] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 379.905517][ T5873] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 379.917109][ T5873] usb 8-1: Manufacturer: syz [ 379.940612][ T5864] usb 6-1: USB disconnect, device number 7 [ 380.038434][ T5873] usb 8-1: config 0 descriptor?? [ 380.068508][ T5873] igorplugusb 8-1:0.0: incorrect number of endpoints [ 381.156622][ T7317] netlink: 40 bytes leftover after parsing attributes in process `syz.6.397'. [ 382.534371][ T9] usb 8-1: USB disconnect, device number 2 [ 384.238135][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.408'. [ 385.014371][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 385.195960][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.204005][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.225939][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 385.237251][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.381430][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 385.391727][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 385.400537][ T9] usb 8-1: Manufacturer: syz [ 385.569353][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.577715][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.628897][ T9] usb 8-1: config 0 descriptor?? [ 385.682945][ T9] igorplugusb 8-1:0.0: incorrect number of endpoints [ 386.786717][ T7380] syz.8.414 (7380): drop_caches: 2 [ 388.038560][ T9] usb 8-1: USB disconnect, device number 3 [ 388.392826][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.5.421'. [ 389.568801][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 389.805854][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 389.863191][ T9] usb 6-1: config 252 interface 0 has no altsetting 0 [ 389.871049][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 389.880372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.091117][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 390.098446][ T9] pvrusb2: ********** [ 390.102563][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 390.113009][ T9] pvrusb2: Important functionality might not be entirely working. [ 390.121259][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 390.132876][ T9] pvrusb2: ********** [ 390.138925][ T9] usb 6-1: selecting invalid altsetting 0 [ 390.231731][ T2329] pvrusb2: Invalid write control endpoint [ 390.281641][ T7419] pvrusb2: Invalid write control endpoint [ 390.703696][ T9] usb 6-1: USB disconnect, device number 8 [ 390.987845][ T2329] pvrusb2: Invalid write control endpoint [ 390.993910][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 391.003702][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 391.011575][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 391.021888][ T2329] pvrusb2: Device being rendered inoperable [ 391.028118][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 391.035551][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 391.045250][ T2329] pvrusb2: Attached sub-driver cx25840 [ 391.050874][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 391.061320][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 391.073984][ T2046] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 391.295386][ T2046] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 391.304096][ T2046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.392162][ T2046] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 391.409213][ T2046] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 391.417583][ T2046] usb 9-1: Manufacturer: syz [ 391.476768][ T2046] usb 9-1: config 0 descriptor?? [ 391.754009][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.436'. [ 392.046561][ T2046] rc_core: IR keymap rc-hauppauge not found [ 392.052808][ T2046] Registered IR keymap rc-empty [ 392.060734][ T2046] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 392.074637][ T2046] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input5 [ 392.156390][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 392.217247][ T2046] usb 9-1: USB disconnect, device number 3 [ 394.847049][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.449'. [ 395.415915][ T2046] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 395.644742][ T2046] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 395.653794][ T2046] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.861602][ T2046] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 395.871286][ T2046] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 395.879624][ T2046] usb 7-1: Manufacturer: syz [ 395.974636][ T2046] usb 7-1: config 0 descriptor?? [ 396.568379][ T2046] rc_core: IR keymap rc-hauppauge not found [ 396.574455][ T2046] Registered IR keymap rc-empty [ 396.582228][ T2046] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 396.596548][ T2046] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 396.888680][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 396.947581][ T2046] usb 7-1: USB disconnect, device number 6 [ 398.190320][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.464'. [ 401.013907][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 402.275103][ T7604] ===================================================== [ 402.282341][ T7604] BUG: KMSAN: uninit-value in pptp_xmit+0xc9a/0x2780 [ 402.289453][ T7604] pptp_xmit+0xc9a/0x2780 [ 402.293971][ T7604] ppp_input+0x1d9/0xe60 [ 402.298500][ T7604] pppoe_rcv_core+0x166/0x6d0 [ 402.303364][ T7604] sk_backlog_rcv+0x13f/0x420 [ 402.308312][ T7604] __release_sock+0x1d3/0x330 [ 402.313193][ T7604] release_sock+0x6b/0x270 [ 402.317895][ T7604] pppoe_sendmsg+0x15d/0xcb0 [ 402.322677][ T7604] __sock_sendmsg+0x330/0x3d0 [ 402.327662][ T7604] ____sys_sendmsg+0x893/0xd80 [ 402.332625][ T7604] ___sys_sendmsg+0x271/0x3b0 [ 402.337581][ T7604] __sys_sendmmsg+0x3bf/0x7c0 [ 402.342449][ T7604] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 402.348380][ T7604] ia32_sys_call+0x39e0/0x4310 [ 402.353289][ T7604] __do_fast_syscall_32+0xb0/0x150 [ 402.358648][ T7604] do_fast_syscall_32+0x38/0x80 [ 402.363634][ T7604] do_SYSENTER_32+0x1f/0x30 [ 402.368372][ T7604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.375007][ T7604] [ 402.377421][ T7604] Uninit was created at: [ 402.381904][ T7604] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 402.388708][ T7604] kmalloc_reserve+0x22f/0x4b0 [ 402.393773][ T7604] pskb_expand_head+0x1fc/0x1610 [ 402.399035][ T7604] skb_realloc_headroom+0x152/0x2d0 [ 402.404433][ T7604] pptp_xmit+0xa0d/0x2780 [ 402.409047][ T7604] ppp_input+0x1d9/0xe60 [ 402.413461][ T7604] pppoe_rcv_core+0x166/0x6d0 [ 402.418427][ T7604] sk_backlog_rcv+0x13f/0x420 [ 402.423262][ T7604] __release_sock+0x1d3/0x330 [ 402.428320][ T7604] release_sock+0x6b/0x270 [ 402.432891][ T7604] pppoe_sendmsg+0x15d/0xcb0 [ 402.437764][ T7604] __sock_sendmsg+0x330/0x3d0 [ 402.442603][ T7604] ____sys_sendmsg+0x893/0xd80 [ 402.447655][ T7604] ___sys_sendmsg+0x271/0x3b0 [ 402.452513][ T7604] __sys_sendmmsg+0x3bf/0x7c0 [ 402.457459][ T7604] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 402.463294][ T7604] ia32_sys_call+0x39e0/0x4310 [ 402.468307][ T7604] __do_fast_syscall_32+0xb0/0x150 [ 402.473564][ T7604] do_fast_syscall_32+0x38/0x80 [ 402.478673][ T7604] do_SYSENTER_32+0x1f/0x30 [ 402.483317][ T7604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.489918][ T7604] [ 402.492365][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.7.485 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 402.504166][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.514457][ T7604] ===================================================== [ 402.521605][ T7604] Disabling lock debugging due to kernel taint [ 402.527942][ T7604] Kernel panic - not syncing: kmsan.panic set ... [ 402.534489][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.7.485 Tainted: G B 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 402.547787][ T7604] Tainted: [B]=BAD_PAGE [ 402.552022][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.562205][ T7604] Call Trace: [ 402.565592][ T7604] [ 402.568633][ T7604] __dump_stack+0x26/0x30 [ 402.573145][ T7604] dump_stack_lvl+0x53/0x270 [ 402.577925][ T7604] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 402.583949][ T7604] dump_stack+0x1e/0x25 [ 402.588290][ T7604] vpanic+0x361/0xbc0 [ 402.592472][ T7604] panic+0x15d/0x160 [ 402.596590][ T7604] kmsan_report+0x31c/0x320 [ 402.601266][ T7604] ? __msan_warning+0x1b/0x30 [ 402.606114][ T7604] ? pptp_xmit+0xc9a/0x2780 [ 402.610853][ T7604] ? ppp_input+0x1d9/0xe60 [ 402.615455][ T7604] ? pppoe_rcv_core+0x166/0x6d0 [ 402.620527][ T7604] ? sk_backlog_rcv+0x13f/0x420 [ 402.625552][ T7604] ? __release_sock+0x1d3/0x330 [ 402.630643][ T7604] ? release_sock+0x6b/0x270 [ 402.635402][ T7604] ? pppoe_sendmsg+0x15d/0xcb0 [ 402.640391][ T7604] ? __sock_sendmsg+0x330/0x3d0 [ 402.645401][ T7604] ? ____sys_sendmsg+0x893/0xd80 [ 402.650566][ T7604] ? ___sys_sendmsg+0x271/0x3b0 [ 402.655617][ T7604] ? __sys_sendmmsg+0x3bf/0x7c0 [ 402.660697][ T7604] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 402.666713][ T7604] ? ia32_sys_call+0x39e0/0x4310 [ 402.671808][ T7604] ? __do_fast_syscall_32+0xb0/0x150 [ 402.677247][ T7604] ? do_fast_syscall_32+0x38/0x80 [ 402.682419][ T7604] ? do_SYSENTER_32+0x1f/0x30 [ 402.687243][ T7604] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.693931][ T7604] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 402.700462][ T7604] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 402.706726][ T7604] ? kmem_cache_free+0x3ef/0xec0 [ 402.711833][ T7604] ? __kfree_skb+0x20b/0x260 [ 402.716641][ T7604] ? kmsan_get_metadata+0xfb/0x160 [ 402.721921][ T7604] __msan_warning+0x1b/0x30 [ 402.726553][ T7604] pptp_xmit+0xc9a/0x2780 [ 402.731083][ T7604] ? __pfx_pptp_xmit+0x10/0x10 [ 402.736009][ T7604] ppp_input+0x1d9/0xe60 [ 402.740428][ T7604] ? kmsan_get_metadata+0xfb/0x160 [ 402.745718][ T7604] pppoe_rcv_core+0x166/0x6d0 [ 402.750605][ T7604] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 402.755979][ T7604] sk_backlog_rcv+0x13f/0x420 [ 402.760858][ T7604] __release_sock+0x1d3/0x330 [ 402.765781][ T7604] release_sock+0x6b/0x270 [ 402.770388][ T7604] pppoe_sendmsg+0x15d/0xcb0 [ 402.775195][ T7604] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 402.780501][ T7604] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 402.785773][ T7604] __sock_sendmsg+0x330/0x3d0 [ 402.790621][ T7604] ____sys_sendmsg+0x893/0xd80 [ 402.795584][ T7604] ___sys_sendmsg+0x271/0x3b0 [ 402.800465][ T7604] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 402.806427][ T7604] ? __rcu_read_unlock+0x6d/0xd0 [ 402.811490][ T7604] ? __fget_files+0x3b4/0x4a0 [ 402.816335][ T7604] ? __fget_files+0x3b9/0x4a0 [ 402.821171][ T7604] ? kmsan_get_metadata+0xfb/0x160 [ 402.826436][ T7604] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 402.832393][ T7604] __sys_sendmmsg+0x3bf/0x7c0 [ 402.837234][ T7604] ? do_futex+0x416/0x480 [ 402.841714][ T7604] ? kmsan_get_metadata+0xfb/0x160 [ 402.847043][ T7604] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 402.852865][ T7604] ia32_sys_call+0x39e0/0x4310 [ 402.857762][ T7604] __do_fast_syscall_32+0xb0/0x150 [ 402.863003][ T7604] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 402.868898][ T7604] do_fast_syscall_32+0x38/0x80 [ 402.873868][ T7604] do_SYSENTER_32+0x1f/0x30 [ 402.878499][ T7604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.885021][ T7604] RIP: 0023:0xf7f77539 [ 402.889242][ T7604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 402.908983][ T7604] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 402.917539][ T7604] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000a00 [ 402.925619][ T7604] RDX: 0000000000000001 RSI: 00000000240080cb RDI: 0000000000000000 [ 402.933707][ T7604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.941764][ T7604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.949859][ T7604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.957956][ T7604] [ 402.961387][ T7604] Kernel Offset: disabled [ 402.965774][ T7604] Rebooting in 86400 seconds..