last executing test programs: 11m38.714784782s ago: executing program 32 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x8000000, 0x0, 0x4004}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, 0x0, 0x0) shutdown(r3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x1f40) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$NFC_CMD_GET_SE(r0, 0x0, 0x40) 11m27.15071429s ago: executing program 33 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11m5.53956352s ago: executing program 34 (id=49): socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet(0x2b, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, '.(\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) 6m28.928862496s ago: executing program 4 (id=252): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) write(r0, &(0x7f0000000340), 0x0) 6m28.454297408s ago: executing program 4 (id=253): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0x9}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000ffdbdf25180000001800308014000400c1c6fcb751a3b5f4691be9f7cf7882bb08000300", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x20040080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 6m26.670051066s ago: executing program 4 (id=256): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x128, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xd8, 0x84, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffff8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb7}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="753813da6264"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="ef1d8b46cd31"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="602a886ad1bff04b740d952186"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="8d1f3a1f5d61d5a07dc06ad97e69"}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x51}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r0, &(0x7f00000002c0)=@known='user.syz\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 6m25.700954893s ago: executing program 4 (id=258): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x3) r8 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x2}) ioctl$TCXONC(r7, 0x540a, 0x3) 6m21.24907253s ago: executing program 4 (id=260): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="93") 6m17.788535899s ago: executing program 4 (id=264): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x45) close_range(0xffffffffffffffff, r0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee62726f6164636173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40000) 6m1.059652141s ago: executing program 35 (id=264): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x45) close_range(0xffffffffffffffff, r0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee62726f6164636173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40000) 4m53.149310063s ago: executing program 0 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x5, 0x0, 0x0, @msi={0x3, 0x40, 0x5ed5e3c, 0x4e32cf73}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 4m49.779842497s ago: executing program 0 (id=317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) geteuid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) 4m46.227510798s ago: executing program 0 (id=318): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) r7 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x2}) ioctl$TCXONC(r6, 0x540a, 0x3) 4m44.695009351s ago: executing program 0 (id=319): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000029c0)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40004) 4m44.034874554s ago: executing program 0 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 4m43.70420825s ago: executing program 0 (id=321): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x110, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8b8, 0x30000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16}]}, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x1b, 0xf, 0x47, 0x0}) 4m27.70760151s ago: executing program 36 (id=321): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x110, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8b8, 0x30000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16}]}, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x1b, 0xf, 0x47, 0x0}) 4m20.56192068s ago: executing program 8 (id=277): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000950000000000fdff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m19.224793506s ago: executing program 8 (id=336): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) 4m14.013405214s ago: executing program 8 (id=339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setuid(0xee00) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 4m7.113604358s ago: executing program 5 (id=344): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000950000000000fdff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m4.445278101s ago: executing program 5 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000008005a8004"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 4m3.394262527s ago: executing program 5 (id=350): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0xc800) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 3m59.700747108s ago: executing program 5 (id=352): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000006c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000280), &(0x7f0000000240)=""/12, 0x2}, 0x20) 3m58.227230428s ago: executing program 37 (id=339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setuid(0xee00) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 3m58.154800547s ago: executing program 5 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = geteuid() r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, 0x0, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}}, 0x40) mount$fuseblk(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x2040000, &(0x7f0000000380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 3m54.782490693s ago: executing program 5 (id=359): syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd01220500090581"], 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000280)) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) 3m53.350961146s ago: executing program 7 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0xa, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d000d606712e9000d2f8db0049d", 0x1d}, {&(0x7f0000000240)="24f8", 0x2}], 0x2) statx(r3, 0x0, 0x1000, 0x10, &(0x7f0000000340)) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) socket$netlink(0x10, 0x3, 0x0) 3m49.507092571s ago: executing program 7 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/123, 0x7b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 3m46.723280374s ago: executing program 7 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = geteuid() r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, 0x0, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}}, 0x40) mount$fuseblk(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x2040000, &(0x7f0000000380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 3m44.224576662s ago: executing program 7 (id=368): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000950000000000fdff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m42.837116543s ago: executing program 7 (id=370): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x1, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x9}, {"c03274ac57b7322edacc2ec9d2ef14f1fad842cf9250df5940a343dc81344bd124b68b7aeff9200ce0896a9f36fd231be081837aab804ad9405f8b9e475905a471c6d59e09963933c99900915f7b6ce890b4aa75be7f5ec23a5bf4966f688bb1957cdaf11fbc8ee3ea50bcfdc571b89cfe94ddcb861157a47784a090e638c6f9209c15e097df8a5ea611c892cdd442fe82c0391d0b51ef8497bc1b17fea437b14e5258690df4752a3c270556a7ba0ccf45023c578b7bfce31c95d184087cc0ad17f776839554d35c96b53c01efac601edd57d95cdc9eb2e291fd188c514731038efbd9277609ad7372b1dcb4301126a99329aa26663634c17a43dcdc17b40a8c7cf7f80a579ac86752a08db06936cc08e285f1e36706640f124cdbef36cfe1a61ec16bb130d0a91a53e61c795915b7b59f4f3fbf70b9f7c397bb3c3f36d7f5e7b9c15c79ca3fbff8a10b9e4067fdbf5589a430b70003ce4bcfe6a611e83e7abc18df424116922baa212024f222e2befdad10ec3ea2a4c35fbf86be236bd11b636dfee48b75054a9cd3920b687df7b00aec77d562c8123d81238f1c1b2ce2c2224bbc49c1f6ae1e1b63e8848a50234230ae0eeb46af438d70319f8bf158fe12f5f4ac5ba499d082e36ae0706029bf2f37ab55b6d5b76dedff1f6fd228705320fb01ce788f53b5931f447a260f06ea43db2cf874a5aba7ed540c16dbf9b37a44ed197522cca8b4fdc02d558a3c44417ff4c512f9469a5193240f9c266a4546ec247e1fbb2fca898650c160b2e2f41dff9137f4691f4dc5114f4d7ec75c727017a6e8cfa567f064daffd9bce73986903ce53e04b073cf054c3aaa557bf532fce37f87fe50886f3231a917feaf7901fc2f74955bafd592f6eb6b4e65fda5266db3e3b3398bdb38c3b0a4e82926f5218eecfce4f179900cc0df8afc5e3153c2839b21d0c116dff80146061b24217c9799ca52d6f631074154715977587ef3f2dbd5d8ad88000a033e2777c0ee9d5062119a118ad177e1b6f175fa680b705799f0b84fd4c1354eb441cb9410e802a0fcb351a2bc3beb84e043392bdb5f9225b43e9b922e8462819a20d22a7c126d82b3c04989ef56cdae47a5981956ffd993b904ee96ec3c958f9a6eae29da4c9e1617a564ca7b577b98ce7c6c184edaec042a26218e8d111be028fa3883002932f76e991aaad092f60b9d24255442b599feee901cb9dc360e070d976c9fdb3705e52bfe04c50579e2b88ed44243f5f3ede549e3a34e35000ce0a63b103f516bdf56bbde225333f3f8fc952f87486025695ccd1776a6be416b43cfcbb880969a9f995182d825c5017916e2c74d15edc23609ba1156e232193847996cff927a9c4aa0d6b1d882e999c7a3afc69de7fe7e1208217e7408106f5dede7008d488d7373ed4e49faa5c7a923fe60f2c3ef232d032f82bed59d5e05fde133ff5e9d135feae248f66f4aa119cb12c5279004c90703c580c6b53d354bfa667eca8802fac65f0352e83c9aeba3114dfc886dcd99ac740e6937a06698f4e7cf4e619cb09274e9f3ee6d024d8601b6c688164f449adc22e671b2863320f35e9fbf9ae553a9cdf2dd406d84e2cbd67da959a0bc7b3b01a24a2b172383e4c1a8ac42152404a4a8d6e2034874da429e1f59a5b78b5dbd19c751c6d2850a23d85ae9606f2e6005475fefec09fcb5aa6eb43a481c0662d6118fd195340160241689e849147164149c3c3706ea85eb3de1eeca3d85d74ef87741710d89958cbb7475ff66606b8610247434970e7a59fa89ff69adc68a8aa7bec63670ea6bcb66dd881c00a7f9de1344a99ac84c11ab938f0c3e36a458d6f69153dcbe1ece1cd2a224ce50ec9e51f2675765d61bd7400ead2db057f4c4f00e6a1df8f30b38105b21f1c68ec81c7eb59b4d71c1bbd95ca18378c812878d771024999e328a0030d2e98250e75a41cb57075fd6a6bb3b7689eda1a54458b43b528360abe22e04711f6166181807ca96c7d918b9f090e19fda60597629ae2d72de91ac000924d601eb5e7f4854dd3b8c86f01035eae07d559c19e3f70d86c371169e464d7f09c3d9ecb976c2d2b5bbe19adbf6bbd09afa07d906cf18bc8b5867570182851ba939baeb4ac195064ec429b9d7cefd5030ddc880b4700a2feea9cbab7a80414b0eb4389a65cdcf3566472024475817b8490f31cce0f46be34dbce6a1494d64ab1f2f44c4ccd7a6aa3537d2724132298e97a1b7b69a45d495eed39ccf057079e44b24e8af6c9b15b1e53c526482586b42edb1ffba7f2052b852b73facb9cacf30965937619e65abc77025a0d7fb07e294a1d4a14a9dfb4777785e0ad35acde09d5cf971c284542070cc5baf01b286b3941ec9f01531ae63a086d563433ce881f091f67993c12fa8d8c65fbfe7c8849b6d0b725d03a225075ea322d568a9d682e771149d48fbb8a392f3da6d3e087c86bb04ec8eaf6963cf628e30f7e33c2622d2f41edfc882b3112ee18ffc0f2ee486cd8f837c590ba4674c91ab8142802894d0d53a00a0da9dd17a5d4eaf120b696d4b48c35fa74fa016eb3bc91d32b419ee4cbaa9344856c93d8054b2d083dd81544f310a6d26b396152b82832f4ab4b23fb323245c2c2c99ac350074e4c0443907885fa41e71aed548dc3c6fe3112ab8c956aeb817dd439b20f9b131cb845653931c4142edc76edd9c4f20471b322ad7c50063bda7436e6c4c3415c951722bc0a3fc759c081fef35ab1435bd69191fab79bfcc2f251207f73d2bbd048aff90ada93dcaed98fd0b8a422f653d70e48066b6256d3c444685f20d619f6f7addc8807d3e23e89e8beaa0fdfb472e2cf09fb45eb5c0760bef15827bd72d25f8d1fbf517b2b493f83f22f8ddc05b546e8dbc2eedaaa3916fdad853f845881d327153b613754e2ad71983d2ab583dcf654d5959e9760e21af181d1172cba71d63f9296fe98846c1823a176f86c9d8bb0ad206629dfd88ebf6b8e7489c63efac3d0618b1026f90eba4119d37c89adecb205e418684153d973f843e7e0aaf235d932a6942711266df85f8d1ae7e6eb698d215d2baffb24c8606b99e1487d187f3b95c6454665da11b74418843013b08b29957e2a4a4ee205d4b74ba04e691508721ec718bee6670cce9a43259b08fe3fdb143c960dd4096024f3762b751b35506156beb62fb58fa0f86e242cd6a85c0aa42d4aaa81dd93794aa22df0a11c957f630df7753487c7eb08b3c9d782301ac906834b97de6a8a92d26ba6fcad1a3201b3b3611579bf91c01941200dfb29c685d86db48d69e858aeb73d2d226659e32ab0e6dcadf15ed629dd1197bec7401fb9f01a0204c41dea6258a04ed299d6759d4cb38b78c302d810445015c4f952e0f70eebe2fad82d8aa908b7faf6fb126e98ede2bc8aed1cdd99c3e8e24546a4678418f4743578e2bbb9a27dbc10f2fd320871bb097260a30bcbaacb950b43f0a55b63d6d0fa4078981fe47a0da347802afed73dd90ea2d03923ecefa4a03e0220034984ca53be19c1f88a92c3f535361c0ae8107975c7d1f8383cabe14ff0771fa71384043b0635e16a152f54e8f02804e121d6d944da492763fb49a578b1f4687c010508bf01315aca3c29233dba4e006378ff9e263bab196422b3244b1fa37e191ffbb9dc87d093561471a040d41520ce23b4e5cc514c16d28775e73cf22adcd5f9bae222895d5636e8ce69bf7c3a127f470fc9637fff5719f65acfdcaeaf8bcc7628866a437d4bef0df1d5455941d4b41e242744323d00282aa0f515ac7eef64edc3885b125e0ee88b45ca0971f1264dc3bb9b62de0d5ed3ed43f4b47d8078f2b5a21123423921cb3729402ec172eb693bc561f12149875250fe5d7a3cf57ced04cb56315006a9bd1c30d7954b2047f945e028f164d477ca4817bdbbdc20afa93c353c1970fc9a5893c69d39cd08e64b3cd9d94a90d047a8ae2db3850ca0b32e8690012393cc4f0c1b36e9e3d1c70cea9ad82db7a5784e19547f5ece36a87ddb87a595ac0a451b3e57a8ee996644f3ef6fcea1e98207719bb438ae86e9302fd4fb6e5f6799f4c56184a5668859979a4fd3f13026ba51386efaa2a5fbff96f3290292a7a7ddfa923975ad477cf6e0b13f7fe74df029e54d55302dffd07f2fc7bd11d2b1813c8adbc76557d36b7f9f99a04bca6179a9f887dbfa1304814981bb1657c5b06f80b86fa7743c269e8af31dc5a6311ae4261a49762b4cee3971b269fa551ec03a1eabe2900a4be5489cab8e5adfc156335e2d906da60e761e39b2b460fdca2591e4109e1a380428a0a91e39215435a79ccc7cc8452438c1d12a62644a220dd419b338f02c12bbd10b15379f9a6c6f9ea3f3dcf03bfbcfd727f5f1da467f552bdbc16770d8bc2874940452b355fbf12b6d7e027d47da48f8df0085fc076363f9b81f737186cb09219ebefe2141abd4b339b0c158b0ab2a2e288cb213ab44dca03158051b74981de05039f00a7c2890b8d342e75eb4ec99f8671064f9c13b39b3d5d0cd3b51c6e07ed3f59fedfb61f7af12dd436d633d4c94d5964c65836b2deceac6f03f60aa63d280cb6bf0f2262139305ee7c266024408d53e06bf83fe2cab6e51720957680092478b5666882e8c62f2671ed41d310f6191b78c006c1e581c68916d061bb36007e81f5000781c893cf39f32e48b6e3cb8a6212200eec37568f9c5ee47ff6e6457934415dba01f83fef5534a8b512a60360df092249455b290feaaad8a1c6cc35522484dfb2036985680b04921b8e069d450b4a3fbef9b281a9c5a186b111e6772c5e7e6c128e14cae9a98571c1fa48e9e2e3f621ca7d1acf847060fdd73f7951dffef89acae73729445b9962e6ff3e6ec1708b7db8221ce4cc3285e25b66ddb235ebc1454598fdd1345ed4258ef9a656768041564d969c16f490792b4e218a3d4ee7d208c49849b44973c0f5f2a03506fc217ce94f384cdc9072ae121481359b10fb5ef462f6b3c2cd5439ec7498567d101675303886ad01d9f8d42e64965146ad121512c4c268fd1b6612939003ec7f15179ca66584ddcf8cdac0eea68b784cb33a94ef7a72fde599f041f54633c5c9dd945be0030bedfce1d9145da95ad1fa8c2b97eecf465bbf5ff1c3b0b301ae2e19ee4fcaee8fa5c2a3aa14e5369bd191a8d6eedc5502542b4d719125d8f49d038ad384c20f336b55661c388833edb8589a365defc89077040fc13f64bc943debd03f1c9d01c03af5e55bd2a6eea88687ae079bc1dc7734d2bbac595a60fff56aa33d4a82bb7bd898532c95ec923f8bc041656255700be1d0b100a6053601c36cc51a080dbd12624ccacac4773e747e3b0a9c2223abd943da11bfe89a61dd20bb0c174afb071692f01fd927ef09e2a043bd691554e757009e2eae2fab61385f9f9f12d96e4877a036aa8b69089e3741148bcbd6abc8c79770d47a57e74ecacb05a094a58c2e5d3cb3cbb010d76cc73dea4292fbc463ebd21d2353c75531b950eb1604eb9eb0b5c7214875c2256cea022caf0eee574bb72275fc97d85c9c19665bf4bbf6fcc88c58e3c8ac56101cbe3a1738cb303fc407725bab9ac5ed9bdaf01838a358a63523ba86eeba9ae12b88ca9010551ecea16b45a200eaeeee35f546cb93f84759ba8ff9dd985d320b6b477721c821aa5c10cf46c241d99e56e7da296da338872cd38bda664012fe7e44b052a36bbeb4d3f5f53ba7a8642dab777de240ab951ada45c7bd100c97a143003e9055a6ce5c8f9405e8c74ef3ffb6e8b03917c3febf63ea836ef42fa8da7eccec76", "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"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m41.775901792s ago: executing program 7 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2500, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 3m35.827929995s ago: executing program 38 (id=359): syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd01220500090581"], 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000280)) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) 3m26.148093815s ago: executing program 39 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2500, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 1m4.119080248s ago: executing program 3 (id=487): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) readv(r0, &(0x7f00000023c0), 0x0) 1m3.457224149s ago: executing program 3 (id=490): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m0.671387377s ago: executing program 3 (id=495): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r0 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1m0.378713483s ago: executing program 3 (id=496): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000029c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40004) 59.862196033s ago: executing program 3 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x5, 0x3}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x68}}, 0x20000804) 59.043113586s ago: executing program 3 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x5, 0x0, 0x0, @msi={0x3, 0x40, 0x5ed5e3c, 0x4e32cf73}}]}) 55.805078411s ago: executing program 2 (id=513): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0xa, @string={0xa, 0x3, "1527b9787e961a08"}}, 0x0, 0x0, 0x0}, 0x0) 49.457119413s ago: executing program 2 (id=518): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000192c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019300), 0x0, 0x5, 0x0, 0x0, r2}) 48.900821768s ago: executing program 2 (id=519): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r0 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 48.564725363s ago: executing program 2 (id=520): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 47.728170296s ago: executing program 2 (id=522): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0x4) 45.978320124s ago: executing program 2 (id=523): syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x22}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res(0x0, 0x9801, 0x4e8dc768) 43.659132055s ago: executing program 40 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x5, 0x0, 0x0, @msi={0x3, 0x40, 0x5ed5e3c, 0x4e32cf73}}]}) 30.066525666s ago: executing program 41 (id=523): syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x22}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res(0x0, 0x9801, 0x4e8dc768) 20.907649506s ago: executing program 6 (id=555): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 19.23309986s ago: executing program 6 (id=561): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000180)={0x0, 0x0}) 18.524201989s ago: executing program 6 (id=562): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 18.080137476s ago: executing program 6 (id=563): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400084, 0x81, &(0x7f0000000180)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbb00019078ac1e0004ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="0e0087ed03028700"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x2c048010) ftruncate(0xffffffffffffffff, 0xe8) 17.397958036s ago: executing program 6 (id=564): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x7a3242, 0xe8796c9f14511b70) fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r4, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r8 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, r8, &(0x7f0000000180)) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000140)={0x20, r9, 0x2, 0x0, &(0x7f0000000100)=[{}, {}]}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r10, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.403371351s ago: executing program 1 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.707194376s ago: executing program 1 (id=573): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400084, 0x81, &(0x7f0000000180)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbb00019078ac1e0004ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="0e0087ed03028700"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x2c048010) ftruncate(0xffffffffffffffff, 0xe8) 9.722120383s ago: executing program 1 (id=574): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x5f}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r1, 0x5e5a, 0xb1e3, 0xa, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 9.509565685s ago: executing program 9 (id=575): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x4, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x40040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.774360282s ago: executing program 9 (id=576): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[]) 8.38146009s ago: executing program 9 (id=577): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x5f}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r1, 0x5e5a, 0xb1e3, 0xa, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 7.06204484s ago: executing program 1 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r3, 0x801070cf, 0x0) 6.295166588s ago: executing program 6 (id=579): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653ea5d7bf9f0c681ab60972ee153d2dc8075849330ac6f6dbe898337e36b9615cb2ba2cb963a138737b3d17c36613d51e93e3ce7fab2b169fe6bb938ca04e0af4cecf6018bea", 0xb9}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x8) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x800005}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) syz_emit_vhci(&(0x7f00000039c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7f, 0x0, 0x401}}}, 0x7) 6.045643606s ago: executing program 9 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 5.739775684s ago: executing program 9 (id=581): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000040) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, 0x0) 1.752253385s ago: executing program 9 (id=582): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0x9}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000ffdbdf25180000001800308014000400c1c6fcb751a3b5f4691be9f7cf7882bb08000300", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x40, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x20040080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 387.317326ms ago: executing program 1 (id=583): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400084, 0x81, &(0x7f0000000180)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbb00019078ac1e0004ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="0e0087ed03028700"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x2c048010) ftruncate(0xffffffffffffffff, 0xe8) 0s ago: executing program 1 (id=584): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x4, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x40040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): adv_slave_0 [ 606.225158][ T7879] dummy0: entered allmulticast mode [ 606.233211][ T7879] dummy0: left allmulticast mode [ 606.321451][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.340304][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.393159][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.433225][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.442874][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.471832][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.508185][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.835922][ T6076] bridge_slave_1: left allmulticast mode [ 606.864721][ T6076] bridge_slave_1: left promiscuous mode [ 606.883492][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.925641][ T6076] bridge_slave_0: left allmulticast mode [ 606.938054][ T6076] bridge_slave_0: left promiscuous mode [ 606.963672][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.951457][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.994503][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.009629][ T6076] bond0 (unregistering): Released all slaves [ 608.074115][ T7640] veth1_vlan: entered promiscuous mode [ 608.192611][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.222190][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.486830][ T6076] hsr_slave_0: left promiscuous mode [ 608.509022][ T6076] hsr_slave_1: left promiscuous mode [ 608.526932][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.548496][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.559757][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.568397][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.620912][ T6076] veth1_macvtap: left promiscuous mode [ 608.626577][ T6076] veth0_macvtap: left promiscuous mode [ 608.638790][ T6076] veth1_vlan: left promiscuous mode [ 608.644797][ T6076] veth0_vlan: left promiscuous mode [ 609.612977][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 609.671624][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 609.996448][ T7905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.510585][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.536916][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.699529][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.797500][ T7820] hsr_slave_0: entered promiscuous mode [ 610.872116][ T7820] hsr_slave_1: entered promiscuous mode [ 612.173554][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.194169][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.210425][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.229018][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.249879][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.565846][ T5075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.592530][ T5075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.601923][ T5075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.631188][ T5075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.643432][ T5075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 612.827417][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.163382][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.170969][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.187361][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.194913][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.354011][ T5791] Bluetooth: hci3: command tx timeout [ 614.734107][ T5791] Bluetooth: hci5: command tx timeout [ 616.422059][ T5791] Bluetooth: hci3: command tx timeout [ 616.533473][ T12] bridge_slave_1: left allmulticast mode [ 616.539299][ T12] bridge_slave_1: left promiscuous mode [ 616.567061][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.627272][ T12] bridge_slave_0: left allmulticast mode [ 616.640386][ T12] bridge_slave_0: left promiscuous mode [ 616.662692][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.811410][ T5791] Bluetooth: hci5: command tx timeout [ 617.265029][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.315704][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.332213][ T12] bond0 (unregistering): Released all slaves [ 617.359638][ T7820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 617.461544][ T7820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 617.508948][ T7820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 617.575435][ T7911] chnl_net:caif_netlink_parms(): no params data found [ 617.609677][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 617.661976][ T12] hsr_slave_0: left promiscuous mode [ 617.669823][ T12] hsr_slave_1: left promiscuous mode [ 617.677668][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.694287][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.716909][ T12] veth1_vlan: left promiscuous mode [ 617.723092][ T12] veth0_vlan: left promiscuous mode [ 618.308665][ T12] team0 (unregistering): Port device team_slave_1 removed [ 618.380551][ T12] team0 (unregistering): Port device team_slave_0 removed [ 618.490155][ T5791] Bluetooth: hci3: command tx timeout [ 618.595543][ T7966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.316'. [ 618.666496][ T7820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 618.981278][ T5791] Bluetooth: hci5: command tx timeout [ 620.569457][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.584593][ T5791] Bluetooth: hci3: command tx timeout [ 621.057209][ T5791] Bluetooth: hci5: command tx timeout [ 621.352228][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.368716][ T7996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.707295][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.879341][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.902482][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.926473][ T7914] bridge_slave_0: entered allmulticast mode [ 622.949754][ T7914] bridge_slave_0: entered promiscuous mode [ 622.992793][ T7911] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.021712][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.055665][ T7911] bridge_slave_0: entered allmulticast mode [ 623.125756][ T7911] bridge_slave_0: entered promiscuous mode [ 623.209153][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.229412][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.278036][ T7914] bridge_slave_1: entered allmulticast mode [ 623.331023][ T7914] bridge_slave_1: entered promiscuous mode [ 623.542721][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.584841][ T7911] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.606037][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.628842][ T7911] bridge_slave_1: entered allmulticast mode [ 623.671748][ T7911] bridge_slave_1: entered promiscuous mode [ 623.808752][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.853066][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.073715][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.127492][ T7911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.339095][ T7914] team0: Port device team_slave_0 added [ 624.428181][ T7911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.587118][ T7914] team0: Port device team_slave_1 added [ 624.672016][ T7911] team0: Port device team_slave_0 added [ 624.948117][ T7911] team0: Port device team_slave_1 added [ 625.388095][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.424493][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.455443][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.472910][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.486030][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.531533][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.694993][ T7914] hsr_slave_0: entered promiscuous mode [ 625.705365][ T7914] hsr_slave_1: entered promiscuous mode [ 625.719816][ T7914] debugfs: 'hsr0' already exists in 'hsr' [ 625.726772][ T7914] Cannot create hsr debugfs directory [ 626.145977][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.154336][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.191301][ T7911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.215601][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.230209][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.257361][ T7911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.347314][ T12] bridge_slave_1: left allmulticast mode [ 626.353491][ T12] bridge_slave_1: left promiscuous mode [ 626.359912][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.384509][ T12] bridge_slave_0: left allmulticast mode [ 626.390759][ T12] bridge_slave_0: left promiscuous mode [ 626.397202][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.952283][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.966144][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.986632][ T12] bond0 (unregistering): Released all slaves [ 627.248301][ T12] hsr_slave_0: left promiscuous mode [ 627.257288][ T12] hsr_slave_1: left promiscuous mode [ 627.264584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.272263][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.281860][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.289374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.318303][ T12] veth1_macvtap: left promiscuous mode [ 627.325093][ T12] veth0_macvtap: left promiscuous mode [ 627.331459][ T12] veth1_vlan: left promiscuous mode [ 627.337983][ T12] veth0_vlan: left promiscuous mode [ 627.984659][ T12] team0 (unregistering): Port device team_slave_1 removed [ 628.012475][ T12] team0 (unregistering): Port device team_slave_0 removed [ 628.358139][ T7911] hsr_slave_0: entered promiscuous mode [ 628.384345][ T7911] hsr_slave_1: entered promiscuous mode [ 628.393333][ T7911] debugfs: 'hsr0' already exists in 'hsr' [ 628.399190][ T7911] Cannot create hsr debugfs directory [ 628.556540][ T7743] veth0_vlan: entered promiscuous mode [ 628.929559][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.977625][ T7743] veth1_vlan: entered promiscuous mode [ 629.545801][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.726810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.734324][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.806230][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.813583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.027167][ T7743] veth0_macvtap: entered promiscuous mode [ 630.196386][ T7914] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 630.231356][ T7914] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 630.266880][ T7743] veth1_macvtap: entered promiscuous mode [ 630.359741][ T7914] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 630.397103][ T7914] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 630.748626][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.868374][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.193622][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.220572][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.229552][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.347949][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.559063][ T7911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 631.612844][ T7911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 631.715195][ T7911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 631.744572][ T7911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 632.167484][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.401603][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.437426][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.548865][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.556407][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.686912][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.694454][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.474718][ T7911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.789219][ T7911] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.918927][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.926473][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.034768][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.041595][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.162314][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.169754][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.081672][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.089769][ T7820] veth0_vlan: entered promiscuous mode [ 635.277530][ T7820] veth1_vlan: entered promiscuous mode [ 635.686673][ T7820] veth0_macvtap: entered promiscuous mode [ 635.830327][ T7820] veth1_macvtap: entered promiscuous mode [ 636.092806][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.164536][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.322611][ T5976] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.336258][ T5976] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.392623][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.431132][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.627349][ T7911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.012054][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.086079][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.326172][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.350962][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.717048][ T7914] veth0_vlan: entered promiscuous mode [ 637.923235][ T7914] veth1_vlan: entered promiscuous mode [ 638.556399][ T7914] veth0_macvtap: entered promiscuous mode [ 638.748731][ T7914] veth1_macvtap: entered promiscuous mode [ 638.995453][ T8140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.614766][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.737237][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.938109][ T1095] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.956494][ T1095] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.120213][ T1095] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.154088][ T1154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.313895][ T7911] veth0_vlan: entered promiscuous mode [ 641.418709][ T7911] veth1_vlan: entered promiscuous mode [ 641.543225][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 641.771933][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.800412][ T5838] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.878553][ T5838] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 641.898587][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.920589][ T5838] usb 6-1: Product: syz [ 641.926533][ T5838] usb 6-1: Manufacturer: syz [ 641.945819][ T5838] usb 6-1: SerialNumber: syz [ 641.994445][ T5838] usb 6-1: config 0 descriptor?? [ 642.041426][ T7911] veth0_macvtap: entered promiscuous mode [ 642.149658][ T7911] veth1_macvtap: entered promiscuous mode [ 642.267591][ T5838] usb 6-1: USB disconnect, device number 2 [ 642.502831][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.608050][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.735944][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.781781][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.884480][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.951153][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.911009][ T5075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.939681][ T5075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.984787][ T5075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.997755][ T5075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.008942][ T5075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.840254][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.848243][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.311691][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.340807][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.037257][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.6.41'. [ 647.051117][ T5791] Bluetooth: hci2: command tx timeout [ 647.187200][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 648.270330][ T7474] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 648.470266][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.475441][ T7474] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.478231][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.530168][ T7474] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.592510][ T7474] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 648.620750][ T7474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.660405][ T7474] usb 7-1: Product: syz [ 648.664741][ T7474] usb 7-1: Manufacturer: syz [ 648.690809][ T7474] usb 7-1: SerialNumber: syz [ 648.714647][ T7474] usb 7-1: config 0 descriptor?? [ 648.886157][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.906883][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.922362][ T8190] bridge_slave_0: entered allmulticast mode [ 648.942655][ T8190] bridge_slave_0: entered promiscuous mode [ 648.973774][ T5451] usb 7-1: USB disconnect, device number 2 [ 648.978750][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.007984][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.055389][ T8190] bridge_slave_1: entered allmulticast mode [ 649.079222][ T8190] bridge_slave_1: entered promiscuous mode [ 649.138441][ T5791] Bluetooth: hci2: command tx timeout [ 649.269535][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.289650][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.316140][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.407749][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.833537][ T8190] team0: Port device team_slave_0 added [ 649.868492][ T8190] team0: Port device team_slave_1 added [ 651.137906][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.160673][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.221225][ T5791] Bluetooth: hci2: command tx timeout [ 651.280151][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.357956][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.420462][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.536451][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.492026][ T8273] ======================================================= [ 652.492026][ T8273] WARNING: The mand mount option has been deprecated and [ 652.492026][ T8273] and is ignored by this kernel. Remove the mand [ 652.492026][ T8273] option from the mount to silence this warning. [ 652.492026][ T8273] ======================================================= [ 653.040380][ T8273] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 655.530592][ T5791] Bluetooth: hci2: command tx timeout [ 660.108052][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.162438][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.216500][ T8190] hsr_slave_0: entered promiscuous mode [ 660.288253][ T8190] hsr_slave_1: entered promiscuous mode [ 660.343867][ T8190] debugfs: 'hsr0' already exists in 'hsr' [ 660.349755][ T8190] Cannot create hsr debugfs directory [ 660.760187][ T5451] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 660.949912][ T5451] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.980165][ T5451] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.076974][ T5451] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 661.110372][ T5451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.160141][ T5451] usb 6-1: Product: syz [ 661.180346][ T5451] usb 6-1: Manufacturer: syz [ 661.185182][ T5451] usb 6-1: SerialNumber: syz [ 661.228572][ T5451] usb 6-1: config 0 descriptor?? [ 661.263618][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.295062][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.515769][ T7474] usb 6-1: USB disconnect, device number 3 [ 666.495246][ T8190] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 666.627667][ T8190] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 666.801763][ T8190] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 666.997124][ T8190] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 667.851376][ T8330] mmap: syz.6.349 (8330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 671.550240][ T38] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 672.479232][ T38] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 672.524953][ T38] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.555552][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.582480][ T38] usb 7-1: config 0 has no interface number 0 [ 672.625488][ T38] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 672.860620][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.027774][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.035387][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.320443][ T38] usb 7-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.342597][ T38] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 673.353165][ T38] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.335126][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.342688][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.355125][ T38] usb 7-1: Product: syz [ 674.359458][ T38] usb 7-1: Manufacturer: syz [ 674.456883][ T38] usb 7-1: SerialNumber: syz [ 674.595133][ T38] usb 7-1: config 0 descriptor?? [ 674.937789][ T38] usb 7-1: can't set config #0, error -71 [ 675.753833][ T38] usb 7-1: USB disconnect, device number 3 [ 676.337720][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 676.351867][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 676.368123][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 676.390509][ T5451] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 676.391037][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 676.421807][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 676.631640][ T5451] usb 6-1: Using ep0 maxpacket: 16 [ 676.700231][ T5451] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.744287][ T5451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.787690][ T5451] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 676.859457][ T5451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.942432][ T5451] usb 6-1: config 0 descriptor?? [ 677.063651][ T5451] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 678.370524][ T8382] autofs: Unknown parameter 'fd00000000000000000000' [ 678.570632][ T5075] Bluetooth: hci6: command tx timeout [ 680.710234][ T5075] Bluetooth: hci6: command tx timeout [ 682.344734][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.840870][ T5075] Bluetooth: hci6: command tx timeout [ 684.954100][ T5075] Bluetooth: hci6: command tx timeout [ 685.047924][ T8406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.851937][ T38] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 686.550572][ T38] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 686.558861][ T38] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.680154][ T38] usb 7-1: config 0 has no interface number 0 [ 686.726794][ T38] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 686.805210][ T38] usb 7-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.878463][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 686.907739][ T38] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 686.964257][ T38] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.020274][ T38] usb 7-1: Product: syz [ 687.071582][ T38] usb 7-1: Manufacturer: syz [ 687.076357][ T38] usb 7-1: SerialNumber: syz [ 687.175864][ T38] usb 7-1: config 0 descriptor?? [ 687.317855][ T38] usb 7-1: can't set config #0, error -71 [ 687.361712][ T38] usb 7-1: USB disconnect, device number 4 [ 690.144817][ T6076] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.556346][ T6076] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.621297][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.655801][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.721311][ T8366] bridge_slave_0: entered allmulticast mode [ 690.746764][ T8366] bridge_slave_0: entered promiscuous mode [ 692.225338][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.302272][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.609775][ T8366] bridge_slave_1: entered allmulticast mode [ 695.594286][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.594911][ T8366] bridge_slave_1: entered promiscuous mode [ 695.600941][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.157694][ T8190] veth0_vlan: entered promiscuous mode [ 697.415910][ T6076] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.168724][ T6076] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.663082][ T8450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.246421][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.306232][ T8190] veth1_vlan: entered promiscuous mode [ 700.902237][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.005779][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 701.017098][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 701.026423][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 701.041761][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 701.071160][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 701.220293][ T8042] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 701.409837][ T8042] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 701.470618][ T8042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.478819][ T8366] team0: Port device team_slave_0 added [ 701.551475][ T8042] usb 7-1: config 0 has no interface number 0 [ 701.578358][ T8042] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 701.591580][ T8366] team0: Port device team_slave_1 added [ 701.598835][ T8042] usb 7-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.662279][ T8042] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 701.710147][ T8042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.730261][ T8042] usb 7-1: Product: syz [ 701.740418][ T8042] usb 7-1: Manufacturer: syz [ 701.750184][ T8042] usb 7-1: SerialNumber: syz [ 701.828985][ T8042] usb 7-1: config 0 descriptor?? [ 701.917300][ T8042] cyberjack 7-1:0.69: required endpoints missing [ 702.166534][ T5451] usb 7-1: USB disconnect, device number 5 [ 702.751219][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.784918][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.920382][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.008156][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.090147][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.170740][ T5075] Bluetooth: hci5: command tx timeout [ 703.274428][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.585790][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.604744][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.614787][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.664965][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.688332][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.706646][ T5451] usb 6-1: USB disconnect, device number 4 [ 704.763910][ T6076] bridge_slave_1: left allmulticast mode [ 704.820215][ T6076] bridge_slave_1: left promiscuous mode [ 704.826646][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.914931][ T6076] bridge_slave_0: left allmulticast mode [ 704.922341][ T6076] bridge_slave_0: left promiscuous mode [ 704.928812][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.211198][ T5791] Bluetooth: hci5: command tx timeout [ 705.699481][ T5075] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 705.715959][ T5075] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 705.741200][ T5075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 705.771021][ T5075] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 705.831448][ T5075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 706.160861][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.197435][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.217454][ T6076] bond0 (unregistering): Released all slaves [ 706.745654][ T8366] hsr_slave_0: entered promiscuous mode [ 706.793470][ T8366] hsr_slave_1: entered promiscuous mode [ 706.811151][ T5075] Bluetooth: hci0: command tx timeout [ 706.823841][ T8366] debugfs: 'hsr0' already exists in 'hsr' [ 706.829707][ T8366] Cannot create hsr debugfs directory [ 707.290745][ T5075] Bluetooth: hci5: command tx timeout [ 707.930317][ T5075] Bluetooth: hci7: command tx timeout [ 708.026176][ T6076] hsr_slave_0: left promiscuous mode [ 708.037535][ T6076] hsr_slave_1: left promiscuous mode [ 708.055747][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.070243][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.082952][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.092045][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.136500][ T6076] veth1_macvtap: left promiscuous mode [ 708.142180][ T6076] veth0_macvtap: left promiscuous mode [ 708.147896][ T6076] veth1_vlan: left promiscuous mode [ 708.153589][ T6076] veth0_vlan: left promiscuous mode [ 708.706481][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 708.768315][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 708.891283][ T5075] Bluetooth: hci0: command tx timeout [ 709.370722][ T5075] Bluetooth: hci5: command tx timeout [ 709.760273][ T7474] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 709.852224][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 709.932278][ T7474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.951908][ T7474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.984905][ T7474] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 709.999390][ T7474] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.011149][ T5075] Bluetooth: hci7: command tx timeout [ 710.011981][ T7474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.060595][ T7474] usb 7-1: config 0 descriptor?? [ 710.135078][ T6076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.417772][ T6076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.555858][ T7474] usbhid 7-1:0.0: can't add hid device: -71 [ 710.613347][ T7474] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 710.656870][ T7474] usb 7-1: USB disconnect, device number 6 [ 710.809075][ T6076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.928198][ T8474] chnl_net:caif_netlink_parms(): no params data found [ 710.975633][ T5075] Bluetooth: hci0: command tx timeout [ 710.997110][ T6076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.100935][ T8472] chnl_net:caif_netlink_parms(): no params data found [ 711.380660][ T8498] binder: 8497:8498 unknown command 0 [ 711.386217][ T8498] binder: 8497:8498 ioctl c0306201 2000000007c0 returned -22 [ 711.720920][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.743542][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.874501][ T8454] bridge_slave_0: entered allmulticast mode [ 711.887525][ T8454] bridge_slave_0: entered promiscuous mode [ 712.124303][ T5075] Bluetooth: hci7: command tx timeout [ 712.296700][ T8366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 712.383899][ T8366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 712.448524][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.675380][ T8509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.051073][ T5075] Bluetooth: hci0: command tx timeout [ 713.100562][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.108361][ T8454] bridge_slave_1: entered allmulticast mode [ 713.127920][ T8454] bridge_slave_1: entered promiscuous mode [ 713.416878][ T6076] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.526345][ T8366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.709470][ T6076] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.798631][ T8366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.939132][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.990725][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.998425][ T8472] bridge_slave_0: entered allmulticast mode [ 714.044246][ T8472] bridge_slave_0: entered promiscuous mode [ 714.128027][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.143176][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.153742][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.170436][ T5075] Bluetooth: hci7: command tx timeout [ 714.177943][ T8474] bridge_slave_0: entered allmulticast mode [ 714.198739][ T8474] bridge_slave_0: entered promiscuous mode [ 714.229001][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.249012][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.268462][ T8472] bridge_slave_1: entered allmulticast mode [ 714.279847][ T8472] bridge_slave_1: entered promiscuous mode [ 714.326086][ T6076] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.376349][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.387291][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.434693][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.448782][ T8474] bridge_slave_1: entered allmulticast mode [ 714.476997][ T8474] bridge_slave_1: entered promiscuous mode [ 714.691423][ T6076] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.845264][ T8515] syz.6.386: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 714.861635][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.6.386 Not tainted syzkaller #0 PREEMPT(full) [ 714.861767][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.861858][ T8515] Call Trace: [ 714.861905][ T8515] [ 714.861954][ T8515] __dump_stack+0x26/0x30 [ 714.862181][ T8515] dump_stack_lvl+0x14c/0x1c0 [ 714.862337][ T8515] dump_stack+0x1e/0x25 [ 714.862479][ T8515] warn_alloc+0x46f/0x6a0 [ 714.862748][ T8515] ? kmsan_get_metadata+0xf1/0x160 [ 714.862969][ T8515] __vmalloc_node_range_noprof+0x142/0x2d80 [ 714.863147][ T8515] ? should_fail_ex+0x45/0x8c0 [ 714.863347][ T8515] ? kmsan_get_metadata+0xf1/0x160 [ 714.863526][ T8515] ? kmsan_get_metadata+0xf1/0x160 [ 714.863702][ T8515] ? kmsan_get_metadata+0xf1/0x160 [ 714.863887][ T8515] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 714.864079][ T8515] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 714.864243][ T8515] ? kmsan_get_metadata+0xf1/0x160 [ 714.864431][ T8515] vmalloc_user_noprof+0xce/0x140 [ 714.864582][ T8515] ? xskq_create+0x11d/0x290 [ 714.864836][ T8515] xskq_create+0x11d/0x290 [ 714.865002][ T8515] xsk_init_queue+0xce/0x180 [ 714.865160][ T8515] xsk_setsockopt+0x7f6/0xfe0 [ 714.865342][ T8515] ? __pfx_xsk_setsockopt+0x10/0x10 [ 714.865503][ T8515] __sys_setsockopt+0x43e/0x580 [ 714.865732][ T8515] __x64_sys_setsockopt+0xf4/0x1a0 [ 714.865842][ T8515] x64_sys_call+0x2a65/0x3ea0 [ 714.865958][ T8515] do_syscall_64+0x134/0xf80 [ 714.866091][ T8515] ? clear_bhb_loop+0x50/0xa0 [ 714.866184][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.866303][ T8515] RIP: 0033:0x7f4b0bb9c799 [ 714.866417][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.866524][ T8515] RSP: 002b:00007f4b0ca8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 714.866605][ T8515] RAX: ffffffffffffffda RBX: 00007f4b0be16090 RCX: 00007f4b0bb9c799 [ 714.866665][ T8515] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 714.866716][ T8515] RBP: 00007f4b0bc32c99 R08: 0000000000000004 R09: 0000000000000000 [ 714.866768][ T8515] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.866822][ T8515] R13: 00007f4b0be16128 R14: 00007f4b0be16090 R15: 00007ffc30326528 [ 714.866905][ T8515] [ 714.868056][ T8515] Mem-Info: [ 714.897426][ T8472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.918019][ T8515] active_anon:7408 inactive_anon:0 isolated_anon:0 [ 714.918019][ T8515] active_file:12997 inactive_file:40171 isolated_file:0 [ 714.918019][ T8515] unevictable:768 dirty:43 writeback:0 [ 714.918019][ T8515] slab_reclaimable:5540 slab_unreclaimable:23762 [ 714.918019][ T8515] mapped:29854 shmem:1395 pagetables:1800 [ 714.918019][ T8515] sec_pagetables:0 bounce:0 [ 714.918019][ T8515] kernel_misc_reclaimable:0 [ 714.918019][ T8515] free:342877 free_pcp:21698 free_cma:0 [ 715.137481][ T8472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.172481][ T8515] Node 0 active_anon:29632kB inactive_anon:0kB active_file:51988kB inactive_file:160484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:37532kB dirty:168kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5776kB pagetables:6852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 715.218081][ T8515] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90112kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 715.250286][ T8515] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 715.281960][ T8515] lowmem_reserve[]: 0 927 1240 1240 1240 [ 715.298696][ T8515] Node 0 DMA32 free:656744kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8004kB inactive_anon:0kB active_file:47876kB inactive_file:84544kB unevictable:0kB writepending:28kB zspages:0kB present:3129332kB managed:949724kB mlocked:0kB bounce:0kB free_pcp:36524kB local_pcp:15644kB free_cma:0kB [ 715.304600][ T8454] team0: Port device team_slave_0 added [ 715.350470][ T8515] lowmem_reserve[]: 0 0 313 313 313 [ 715.356529][ T8515] Node 0 Normal free:19336kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21576kB inactive_anon:0kB active_file:4112kB inactive_file:75940kB unevictable:1536kB writepending:132kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:12680kB local_pcp:5020kB free_cma:0kB [ 715.366817][ T8474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.401057][ T8515] lowmem_reserve[]: 0 0 0 0 0 [ 715.414977][ T8515] Node 1 Normal free:691440kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:37048kB local_pcp:19832kB free_cma:0kB [ 715.475118][ T8515] lowmem_reserve[]: 0 0 0 0 0 [ 715.480399][ T8515] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 715.496163][ T8454] team0: Port device team_slave_1 added [ 715.507535][ T8515] Node 0 DMA32: 1168*4kB (UME) 761*8kB (UME) 818*16kB (UME) 580*32kB (UME) 671*64kB (UME) 508*128kB (UME) 408*256kB (UM) 253*512kB (UM) 154*1024kB (UM) 42*2048kB (UM) 7*4096kB (U) = 656744kB [ 715.528790][ T8515] Node 0 Normal: 552*4kB (UME) 168*8kB (UME) 33*16kB (UME) 15*32kB (UME) 16*64kB (UME) 5*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 19280kB [ 715.555566][ T8515] Node 1 Normal: 4*4kB (UM) 14*8kB (UM) 12*16kB (U) 11*32kB (UM) 12*64kB (UM) 9*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 166*4096kB (UM) = 691488kB [ 715.561024][ T8474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.576583][ T8515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 715.598693][ T8515] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 715.616614][ T8515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 715.627683][ T8515] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 715.638679][ T8515] 54543 total pagecache pages [ 715.644511][ T8515] 0 pages in swap cache [ 715.648997][ T8515] Free swap = 124996kB [ 715.659803][ T8472] team0: Port device team_slave_0 added [ 715.669616][ T8515] Total swap = 124996kB [ 715.675701][ T8515] 2097051 pages RAM [ 715.677652][ T8472] team0: Port device team_slave_1 added [ 715.679816][ T8515] 0 pages HighMem/MovableOnly [ 715.715239][ T8515] 1531883 pages reserved [ 715.719603][ T8515] 0 pages cma reserved [ 715.833453][ T8474] team0: Port device team_slave_0 added [ 716.012261][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.035583][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.074131][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.577273][ T8474] team0: Port device team_slave_1 added [ 716.885779][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.910400][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.953693][ T8472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.997399][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.020276][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.074356][ T8472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.146907][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.169881][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.237649][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.307399][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.340102][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.430390][ T8474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.652168][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.659517][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.710338][ T8474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.010259][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 718.333888][ T8472] hsr_slave_0: entered promiscuous mode [ 718.352525][ T8472] hsr_slave_1: entered promiscuous mode [ 718.386742][ T8472] debugfs: 'hsr0' already exists in 'hsr' [ 718.400564][ T8472] Cannot create hsr debugfs directory [ 718.514876][ T8454] hsr_slave_0: entered promiscuous mode [ 718.568390][ T8454] hsr_slave_1: entered promiscuous mode [ 718.583272][ T8454] debugfs: 'hsr0' already exists in 'hsr' [ 718.599529][ T8454] Cannot create hsr debugfs directory [ 718.678776][ T8474] hsr_slave_0: entered promiscuous mode [ 718.722543][ T8474] hsr_slave_1: entered promiscuous mode [ 718.773090][ T8474] debugfs: 'hsr0' already exists in 'hsr' [ 718.778949][ T8474] Cannot create hsr debugfs directory [ 719.515823][ T8529] binder: 8528:8529 unknown command 0 [ 719.530864][ T8529] binder: 8528:8529 ioctl c0306201 2000000007c0 returned -22 [ 735.468521][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.477273][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.487636][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.502240][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.526907][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.631967][ T6076] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.836153][ T6076] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.134617][ T6076] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.355475][ T6076] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.620292][ T5075] Bluetooth: hci2: command tx timeout [ 738.073560][ T8454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.130310][ T8562] binder_alloc: 8561: binder_alloc_buf, no vma [ 738.158816][ T8562] binder: 8561:8562 unknown command 0 [ 738.188097][ T8562] binder: 8561:8562 ioctl c0306201 2000000007c0 returned -22 [ 738.279352][ T8454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.615189][ T8454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.879344][ T8454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 739.410429][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 739.631809][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 739.665426][ T6076] bridge_slave_1: left allmulticast mode [ 739.672008][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 739.690452][ T6076] bridge_slave_1: left promiscuous mode [ 739.700464][ T5075] Bluetooth: hci2: command tx timeout [ 739.711511][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.723676][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.742392][ T9] usb 7-1: config 0 has no interface number 0 [ 739.748653][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 739.796185][ T6076] bridge_slave_0: left allmulticast mode [ 739.802761][ T6076] bridge_slave_0: left promiscuous mode [ 739.808886][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 739.831329][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.852134][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.877015][ T6076] bridge_slave_1: left allmulticast mode [ 739.911199][ T9] usb 7-1: config 0 descriptor?? [ 739.916516][ T6076] bridge_slave_1: left promiscuous mode [ 739.935805][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.978320][ T6076] bridge_slave_0: left allmulticast mode [ 739.998237][ T6076] bridge_slave_0: left promiscuous mode [ 740.003108][ T9] ldusb 7-1:0.55: Interrupt in endpoint not found [ 740.006746][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.094692][ T6076] bridge_slave_1: left allmulticast mode [ 740.110387][ T6076] bridge_slave_1: left promiscuous mode [ 740.124277][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.150956][ T6076] bridge_slave_0: left allmulticast mode [ 740.160272][ T6076] bridge_slave_0: left promiscuous mode [ 740.179614][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.209353][ T6076] bridge_slave_1: left allmulticast mode [ 740.230525][ T6076] bridge_slave_1: left promiscuous mode [ 740.235776][ T9] usb 7-1: USB disconnect, device number 7 [ 740.238789][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.304210][ T6076] bridge_slave_0: left allmulticast mode [ 740.318043][ T6076] bridge_slave_0: left promiscuous mode [ 740.326887][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.090484][ T5791] Bluetooth: hci2: command tx timeout [ 744.190850][ T5791] Bluetooth: hci2: command tx timeout [ 747.992760][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.041213][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.093393][ T6076] bond0 (unregistering): Released all slaves [ 748.594006][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.641612][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.678644][ T6076] bond0 (unregistering): Released all slaves [ 749.011569][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.088397][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.116816][ T6076] bond0 (unregistering): Released all slaves [ 749.562033][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.627841][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.646486][ T6076] bond0 (unregistering): Released all slaves [ 751.661368][ T8474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 751.723890][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 751.899227][ T8474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 751.923230][ T8604] capability: warning: `syz.6.404' uses deprecated v2 capabilities in a way that may be insecure [ 752.243471][ T8474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 752.457057][ T8474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 753.384633][ T8619] binder_alloc: 8617: binder_alloc_buf, no vma [ 753.419502][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.453311][ T8619] binder: 8617:8619 unknown command 0 [ 753.474144][ T8472] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 753.498192][ T8619] binder: 8617:8619 ioctl c0306201 2000000007c0 returned -22 [ 753.656804][ T6076] hsr_slave_0: left promiscuous mode [ 753.682179][ T6076] hsr_slave_1: left promiscuous mode [ 753.710807][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.718324][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.806210][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.836099][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.918105][ T6076] hsr_slave_0: left promiscuous mode [ 753.945146][ T6076] hsr_slave_1: left promiscuous mode [ 753.961909][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.971109][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.992069][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.999836][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.076929][ T6076] hsr_slave_0: left promiscuous mode [ 754.099809][ T6076] hsr_slave_1: left promiscuous mode [ 754.122764][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.145240][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.302035][ T6076] hsr_slave_0: left promiscuous mode [ 754.331870][ T6076] hsr_slave_1: left promiscuous mode [ 754.770329][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.777872][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.822630][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.850423][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.095499][ T6076] veth1_macvtap: left promiscuous mode [ 755.114099][ T6076] veth0_macvtap: left promiscuous mode [ 755.137214][ T6076] veth1_vlan: left promiscuous mode [ 755.170392][ T6076] veth0_vlan: left promiscuous mode [ 755.204548][ T6076] veth1_macvtap: left promiscuous mode [ 755.220365][ T6076] veth0_macvtap: left promiscuous mode [ 755.226182][ T6076] veth1_vlan: left promiscuous mode [ 755.257264][ T6076] veth0_vlan: left promiscuous mode [ 755.288642][ T6076] veth1_vlan: left promiscuous mode [ 755.310497][ T6076] veth0_vlan: left promiscuous mode [ 755.330329][ T6076] veth1_macvtap: left promiscuous mode [ 755.335983][ T6076] veth0_macvtap: left promiscuous mode [ 755.365846][ T6076] veth1_vlan: left promiscuous mode [ 755.400343][ T6076] veth0_vlan: left promiscuous mode [ 756.912251][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.918824][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.310770][ T5075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.334484][ T5075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.350957][ T5075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.383970][ T5075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.393880][ T5075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.854180][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 758.908997][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 759.709175][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 759.754883][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 760.399872][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 760.439836][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 760.500183][ T5791] Bluetooth: hci3: command tx timeout [ 760.886286][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 760.906686][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 761.086067][ T8472] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 761.199533][ T8472] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 761.286080][ T8472] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 761.673830][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.722857][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.736925][ T8553] bridge_slave_0: entered allmulticast mode [ 761.757366][ T8553] bridge_slave_0: entered promiscuous mode [ 761.916800][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.941731][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.960985][ T8553] bridge_slave_1: entered allmulticast mode [ 761.994464][ T8553] bridge_slave_1: entered promiscuous mode [ 762.572632][ T5791] Bluetooth: hci3: command tx timeout [ 762.769723][ T8659] hugetlbfs: syz.6.411 (8659): Using mlock ulimits for SHM_HUGETLB is obsolete [ 764.321720][ T5075] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 764.343901][ T5075] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 764.353564][ T5075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 764.367991][ T5075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 764.390571][ T5075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 764.650275][ T5791] Bluetooth: hci3: command tx timeout [ 764.861913][ T8671] binder_alloc: 8670: binder_alloc_buf, no vma [ 764.885015][ T8671] binder: 8670:8671 unknown command 0 [ 764.910544][ T8671] binder: 8670:8671 ioctl c0306201 2000000007c0 returned -22 [ 764.945482][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.345876][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.384464][ T6076] IPVS: stop unused estimator thread 0... [ 765.727800][ T8553] team0: Port device team_slave_0 added [ 765.848335][ T8553] team0: Port device team_slave_1 added [ 766.132167][ T5075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 766.168633][ T5075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 766.178868][ T5075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 766.194392][ T5075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.205700][ T5075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.415190][ T5791] Bluetooth: hci4: command tx timeout [ 766.736360][ T5791] Bluetooth: hci3: command tx timeout [ 766.820832][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.830124][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.930202][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.986529][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.024253][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.110261][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.849513][ T8553] hsr_slave_0: entered promiscuous mode [ 767.873991][ T8553] hsr_slave_1: entered promiscuous mode [ 767.903394][ T8553] debugfs: 'hsr0' already exists in 'hsr' [ 767.909268][ T8553] Cannot create hsr debugfs directory [ 768.255305][ T5791] Bluetooth: hci5: command tx timeout [ 768.490184][ T5791] Bluetooth: hci4: command tx timeout [ 769.418129][ T8640] chnl_net:caif_netlink_parms(): no params data found [ 770.335611][ T5791] Bluetooth: hci5: command tx timeout [ 770.373137][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 770.580292][ T5791] Bluetooth: hci4: command tx timeout [ 770.746144][ T8679] chnl_net:caif_netlink_parms(): no params data found [ 771.005581][ T6076] bridge_slave_1: left allmulticast mode [ 771.030390][ T6076] bridge_slave_1: left promiscuous mode [ 771.036857][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.091367][ T6076] bridge_slave_0: left allmulticast mode [ 771.097173][ T6076] bridge_slave_0: left promiscuous mode [ 771.110984][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.133545][ T6076] bridge_slave_1: left allmulticast mode [ 771.139348][ T6076] bridge_slave_1: left promiscuous mode [ 771.171664][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.199265][ T6076] bridge_slave_0: left allmulticast mode [ 771.220156][ T6076] bridge_slave_0: left promiscuous mode [ 771.226568][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.195582][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.246543][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.294517][ T6076] bond0 (unregistering): Released all slaves [ 772.412940][ T5791] Bluetooth: hci5: command tx timeout [ 772.658976][ T5791] Bluetooth: hci4: command tx timeout [ 772.783478][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.828576][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.866264][ T6076] bond0 (unregistering): Released all slaves [ 773.508770][ T6076] hsr_slave_0: left promiscuous mode [ 773.520764][ T6076] hsr_slave_1: left promiscuous mode [ 773.528481][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.546744][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.569867][ T6076] hsr_slave_0: left promiscuous mode [ 773.579035][ T6076] hsr_slave_1: left promiscuous mode [ 773.587529][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.607564][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.001977][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 774.061493][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 774.491237][ T5791] Bluetooth: hci5: command tx timeout [ 774.609761][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 774.678021][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 774.678916][ T8746] netlink: 56 bytes leftover after parsing attributes in process `syz.6.416'. [ 774.835715][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.862521][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.875375][ T8640] bridge_slave_0: entered allmulticast mode [ 775.474617][ T8640] bridge_slave_0: entered promiscuous mode [ 775.941497][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.988044][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.043864][ T8640] bridge_slave_1: entered allmulticast mode [ 776.093775][ T8640] bridge_slave_1: entered promiscuous mode [ 776.529134][ T8640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.664537][ T8640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.006829][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.015876][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.034727][ T8679] bridge_slave_0: entered allmulticast mode [ 777.046222][ T8679] bridge_slave_0: entered promiscuous mode [ 777.062585][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.070951][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.078493][ T8679] bridge_slave_1: entered allmulticast mode [ 777.089386][ T8679] bridge_slave_1: entered promiscuous mode [ 777.217007][ T8640] team0: Port device team_slave_0 added [ 777.279372][ T8640] team0: Port device team_slave_1 added [ 777.429860][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.477946][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.510716][ T8665] bridge_slave_0: entered allmulticast mode [ 777.547417][ T8665] bridge_slave_0: entered promiscuous mode [ 777.592957][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.626396][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.684148][ T8665] bridge_slave_1: entered allmulticast mode [ 777.704459][ T8665] bridge_slave_1: entered promiscuous mode [ 778.727248][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.753408][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.816489][ T8640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.008770][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.055378][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.099779][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.180926][ T8640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.317851][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.423698][ T8553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 779.596609][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.649265][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.717683][ T8553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 779.756271][ T8553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 780.019714][ T8679] team0: Port device team_slave_0 added [ 780.085942][ T8553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 780.197073][ T8665] team0: Port device team_slave_0 added [ 780.244018][ T8679] team0: Port device team_slave_1 added [ 780.386060][ T8640] hsr_slave_0: entered promiscuous mode [ 780.397725][ T8640] hsr_slave_1: entered promiscuous mode [ 780.407871][ T8640] debugfs: 'hsr0' already exists in 'hsr' [ 780.417931][ T8640] Cannot create hsr debugfs directory [ 780.467773][ T8665] team0: Port device team_slave_1 added [ 780.670773][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.677858][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.722077][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.741916][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.749001][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.788004][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.981648][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.988749][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.027834][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.106529][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.116745][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.162387][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.994003][ T8679] hsr_slave_0: entered promiscuous mode [ 782.005966][ T8679] hsr_slave_1: entered promiscuous mode [ 782.017496][ T8679] debugfs: 'hsr0' already exists in 'hsr' [ 782.027938][ T8679] Cannot create hsr debugfs directory [ 782.315660][ T8665] hsr_slave_0: entered promiscuous mode [ 782.326282][ T8665] hsr_slave_1: entered promiscuous mode [ 782.337559][ T8665] debugfs: 'hsr0' already exists in 'hsr' [ 782.345649][ T8665] Cannot create hsr debugfs directory [ 783.626933][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.449042][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.534206][ T6076] bridge_slave_1: left allmulticast mode [ 784.548988][ T6076] bridge_slave_1: left promiscuous mode [ 784.562598][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.581993][ T6076] bridge_slave_0: left allmulticast mode [ 784.587815][ T6076] bridge_slave_0: left promiscuous mode [ 784.595950][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.616213][ T6076] bridge_slave_1: left allmulticast mode [ 784.622379][ T6076] bridge_slave_1: left promiscuous mode [ 784.628765][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.649838][ T6076] bridge_slave_0: left allmulticast mode [ 784.655932][ T6076] bridge_slave_0: left promiscuous mode [ 784.662424][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.694989][ T8774] netlink: 'syz.6.418': attribute type 11 has an invalid length. [ 784.883883][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.898752][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.914990][ T6076] bond0 (unregistering): Released all slaves [ 785.047375][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.065549][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.078023][ T6076] bond0 (unregistering): Released all slaves [ 785.093861][ T8640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.115775][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.123139][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.172752][ T8640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.232634][ T8640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.266342][ T8640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 785.369274][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.376763][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.454818][ T6076] hsr_slave_0: left promiscuous mode [ 785.483314][ T6076] hsr_slave_1: left promiscuous mode [ 785.492894][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.510570][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.537365][ T6076] hsr_slave_0: left promiscuous mode [ 785.550167][ T6076] hsr_slave_1: left promiscuous mode [ 785.557059][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.573217][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.975890][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 786.016592][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 786.667658][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 786.712785][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 787.685538][ T8665] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 787.746925][ T8665] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 787.828724][ T8665] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 787.909188][ T8665] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 788.083847][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.144454][ T8784] netlink: 56 bytes leftover after parsing attributes in process `syz.6.422'. [ 789.504881][ T8640] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.589708][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.597222][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.789117][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.796647][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.976324][ T8553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.209815][ T8679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.318443][ T8679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 790.416297][ T8679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 790.481888][ T8679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.212054][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.280227][ T8553] veth0_vlan: entered promiscuous mode [ 792.540897][ T8553] veth1_vlan: entered promiscuous mode [ 792.686795][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.928647][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.936196][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.099193][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.106710][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.271806][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.338181][ T8553] veth0_macvtap: entered promiscuous mode [ 793.448828][ T8553] veth1_macvtap: entered promiscuous mode [ 793.483885][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.616770][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.725854][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.733359][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.816312][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.864200][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.871727][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.940280][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.054259][ T8443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.097186][ T8443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.123240][ T8443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.189434][ T8443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.605409][ T8640] veth0_vlan: entered promiscuous mode [ 794.838171][ T8640] veth1_vlan: entered promiscuous mode [ 795.148612][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.534286][ T8640] veth0_macvtap: entered promiscuous mode [ 795.674794][ T8640] veth1_macvtap: entered promiscuous mode [ 795.860829][ T5075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 795.875776][ T5075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 795.886161][ T5075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 795.911482][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.923281][ T5075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 795.937938][ T5075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 796.069079][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.246164][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.271475][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.323927][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.426197][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.445262][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.464507][ T8679] veth0_vlan: entered promiscuous mode [ 797.494191][ T8679] veth1_vlan: entered promiscuous mode [ 797.594416][ T8679] veth0_macvtap: entered promiscuous mode [ 797.755324][ T1095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.939445][ T8679] veth1_macvtap: entered promiscuous mode [ 798.014836][ T1095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.131068][ T5791] Bluetooth: hci0: command tx timeout [ 798.927445][ T1095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.996959][ T8823] chnl_net:caif_netlink_parms(): no params data found [ 799.248524][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.372140][ T1095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.571956][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.820685][ T8665] veth0_vlan: entered promiscuous mode [ 799.979095][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.030709][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.039668][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.174806][ T5791] Bluetooth: hci0: command tx timeout [ 800.210337][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.316543][ T8665] veth1_vlan: entered promiscuous mode [ 801.078186][ T8862] affs: No valid root block on device nullb0 [ 801.271551][ T1095] bridge_slave_1: left allmulticast mode [ 801.299694][ T1095] bridge_slave_1: left promiscuous mode [ 801.347224][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.401841][ T1095] bridge_slave_0: left allmulticast mode [ 801.425779][ T1095] bridge_slave_0: left promiscuous mode [ 801.475305][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.262499][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.293713][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.309263][ T1095] bond0 (unregistering): Released all slaves [ 802.321287][ T5791] Bluetooth: hci0: command tx timeout [ 802.941638][ T1095] hsr_slave_0: left promiscuous mode [ 802.949426][ T1095] hsr_slave_1: left promiscuous mode [ 802.996469][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.008701][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.040655][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.060494][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.130409][ T1095] veth1_macvtap: left promiscuous mode [ 803.136143][ T1095] veth0_macvtap: left promiscuous mode [ 803.149324][ T1095] veth1_vlan: left promiscuous mode [ 803.154953][ T1095] veth0_vlan: left promiscuous mode [ 803.655305][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 803.675393][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 803.855897][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.868133][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.876115][ T8823] bridge_slave_0: entered allmulticast mode [ 803.886422][ T8823] bridge_slave_0: entered promiscuous mode [ 803.947500][ T8665] veth0_macvtap: entered promiscuous mode [ 803.992423][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.024474][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.055707][ T8823] bridge_slave_1: entered allmulticast mode [ 804.084460][ T8823] bridge_slave_1: entered promiscuous mode [ 804.209418][ T8665] veth1_macvtap: entered promiscuous mode [ 804.330338][ T5791] Bluetooth: hci0: command tx timeout [ 804.442240][ T8823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.468066][ T8823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.763734][ T8823] team0: Port device team_slave_0 added [ 804.804986][ T8823] team0: Port device team_slave_1 added [ 804.827701][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.850688][ T5838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 804.997665][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.008011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.021366][ T5838] usb 7-1: Using ep0 maxpacket: 16 [ 805.021868][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.043012][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.056291][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.070454][ T5838] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.094658][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.095786][ T8823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.101660][ T5838] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 805.123317][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.123666][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.144957][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.147374][ T5838] usb 7-1: config 0 descriptor?? [ 805.173027][ T8823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.409596][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.444766][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.511621][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.519647][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.532335][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.543955][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.787717][ T8823] hsr_slave_0: entered promiscuous mode [ 805.834700][ T8823] hsr_slave_1: entered promiscuous mode [ 805.852751][ T8823] debugfs: 'hsr0' already exists in 'hsr' [ 805.858625][ T8823] Cannot create hsr debugfs directory [ 807.554364][ T5838] usbhid 7-1:0.0: can't add hid device: -71 [ 807.647812][ T5838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 807.878989][ T5838] usb 7-1: USB disconnect, device number 8 [ 809.987908][ T8439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.016015][ T8439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.229429][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.266001][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.957111][ T8823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 811.115427][ T8823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 811.201552][ T8823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 811.306557][ T8823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 812.705890][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.849917][ T8823] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.907636][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.915211][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.025114][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.032774][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.478870][ T8941] netlink: 56 bytes leftover after parsing attributes in process `syz.2.434'. [ 814.272357][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.345129][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.558189][ T8443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.608516][ T8443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.555495][ T7418] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 815.787684][ T8823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.849333][ T7418] usb 7-1: Using ep0 maxpacket: 16 [ 815.941881][ T7418] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.794288][ T8823] veth0_vlan: entered promiscuous mode [ 816.930181][ T7418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 816.937093][ T7418] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 816.960105][ T7418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.087734][ T8823] veth1_vlan: entered promiscuous mode [ 817.791663][ T8823] veth0_macvtap: entered promiscuous mode [ 817.848065][ T7418] usb 7-1: config 0 descriptor?? [ 817.957291][ T8823] veth1_macvtap: entered promiscuous mode [ 818.357635][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.365184][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.444259][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.566611][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.774812][ T8439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.800650][ T8439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.809604][ T8439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.886635][ T8439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.588977][ T7418] usbhid 7-1:0.0: can't add hid device: -71 [ 819.620575][ T7418] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 819.721656][ T7418] usb 7-1: USB disconnect, device number 9 [ 823.760189][ T5451] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 823.949776][ T5451] usb 3-1: Using ep0 maxpacket: 16 [ 823.991920][ T5451] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.036999][ T5451] usb 3-1: config 0 interface 0 has no altsetting 0 [ 824.067167][ T5451] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 824.138701][ T5451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.197372][ T5451] usb 3-1: config 0 descriptor?? [ 825.193173][ T5451] usbhid 3-1:0.0: can't add hid device: -71 [ 825.199706][ T5451] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 825.311276][ T5451] usb 3-1: USB disconnect, device number 3 [ 826.230910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.238900][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.585785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.638047][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.700310][ T5451] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 832.777756][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 832.936413][ T5451] usb 3-1: device descriptor read/64, error -32 [ 833.210358][ T5451] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 833.245149][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 833.400629][ T5451] usb 3-1: device descriptor read/64, error -32 [ 833.511014][ T5451] usb usb3-port1: attempt power cycle [ 833.911292][ T5451] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 833.989733][ T5451] usb 3-1: Using ep0 maxpacket: 8 [ 834.013969][ T5451] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.044337][ T5451] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 834.074842][ T5451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.105896][ T5451] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 834.144347][ T5451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.210940][ T5451] hub 3-1:1.0: bad descriptor, ignoring hub [ 834.266205][ T5451] hub 3-1:1.0: probe with driver hub failed with error -5 [ 834.288184][ T5451] cdc_wdm 3-1:1.0: skipping garbage [ 834.325034][ T5451] cdc_wdm 3-1:1.0: skipping garbage [ 834.392968][ T5451] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 834.741060][ T5451] usb 3-1: USB disconnect, device number 6 [ 835.111070][ T5451] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 839.815350][ T9154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.545954][ T5451] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 847.795838][ T5451] usb 3-1: Using ep0 maxpacket: 16 [ 847.834209][ T5451] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.880800][ T5451] usb 3-1: config 0 interface 0 has no altsetting 0 [ 847.887640][ T5451] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 847.946979][ T5451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.067345][ T5451] usb 3-1: config 0 descriptor?? [ 848.143115][ T5451] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 850.104390][ T5451] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 850.290168][ T5451] usb 2-1: Using ep0 maxpacket: 32 [ 850.354689][ T5451] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 850.392826][ T5451] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 850.458027][ T5451] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 850.524818][ T5451] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 850.568099][ T9220] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 850.571304][ T7050] usb 3-1: USB disconnect, device number 8 [ 850.607883][ T5451] usb 2-1: config 0 interface 0 has no altsetting 0 [ 850.684569][ T5451] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 850.724307][ T5451] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 850.780961][ T5451] usb 2-1: Product: syz [ 850.788512][ T5451] usb 2-1: Manufacturer: syz [ 850.796069][ T5451] usb 2-1: SerialNumber: syz [ 850.806660][ T5451] usb 2-1: config 0 descriptor?? [ 850.856009][ T5451] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 850.898129][ T5451] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 851.132655][ T5451] usb 2-1: USB disconnect, device number 3 [ 851.183916][ T5451] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 853.460316][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'. [ 853.688855][ T9260] netlink: 56 bytes leftover after parsing attributes in process `syz.3.503'. [ 854.107579][ T5451] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 854.330439][ T5451] usb 10-1: Using ep0 maxpacket: 16 [ 854.375516][ T5451] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.414630][ T5451] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.468337][ T5451] usb 10-1: config 0 interface 0 has no altsetting 0 [ 854.500343][ T5451] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 854.537064][ T5451] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.620604][ T5451] usb 10-1: config 0 descriptor?? [ 857.015524][ T5451] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 857.070933][ T7418] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 857.611391][ T7418] usb 3-1: Using ep0 maxpacket: 16 [ 858.013352][ T7418] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.038226][ T7418] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 858.072585][ T7418] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 858.100338][ T7418] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 858.151897][ T5451] usb 10-1: USB disconnect, device number 2 [ 858.161141][ T7418] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.185674][ T7418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 858.218160][ T7418] usb 3-1: SerialNumber: syz [ 858.315958][ T9284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 858.370715][ T9284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 858.424846][ T7418] hub 3-1:1.0: bad descriptor, ignoring hub [ 858.469765][ T7418] hub 3-1:1.0: probe with driver hub failed with error -5 [ 858.664407][ T9284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 858.697867][ T9284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 859.210380][ T9295] xt_hashlimit: size too large, truncated to 1048576 [ 859.390221][ T7418] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 860.084535][ T9286] fido_id[9286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 860.991784][ T7418] usb 3-1: USB disconnect, device number 9 [ 862.110351][ T5451] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 862.175672][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.520'. [ 862.310300][ T5451] usb 7-1: Using ep0 maxpacket: 16 [ 863.950943][ T5451] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.000544][ T5451] usb 7-1: config 0 interface 0 has no altsetting 0 [ 864.028721][ T5451] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 864.101937][ T5451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.137530][ T5451] usb 7-1: config 0 descriptor?? [ 865.281292][ T5451] usbhid 7-1:0.0: can't add hid device: -71 [ 865.287584][ T5451] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 865.400410][ T5451] usb 7-1: USB disconnect, device number 10 [ 865.474601][ T7050] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 865.660214][ T7050] usb 10-1: Using ep0 maxpacket: 16 [ 865.683329][ T7050] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.723426][ T7050] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.741614][ T7050] usb 10-1: config 0 interface 0 has no altsetting 0 [ 865.749060][ T7050] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 865.759812][ T7050] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.760477][ T7418] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 865.775026][ T7050] usb 10-1: config 0 descriptor?? [ 865.970349][ T7418] usb 2-1: Using ep0 maxpacket: 16 [ 865.986725][ T7418] usb 2-1: config 0 has no interfaces? [ 866.005156][ T7418] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 866.055016][ T7418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.078497][ T7418] usb 2-1: Product: syz [ 866.088696][ T7418] usb 2-1: Manufacturer: syz [ 866.109119][ T7418] usb 2-1: SerialNumber: syz [ 866.147782][ T7418] usb 2-1: config 0 descriptor?? [ 866.312386][ T7050] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 866.495556][ T7418] usb 2-1: USB disconnect, device number 4 [ 866.497699][ T7050] usb 10-1: USB disconnect, device number 3 [ 866.832181][ T9339] fido_id[9339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 868.114819][ T9357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 868.166914][ T9357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 868.187901][ T9357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 868.206165][ T9357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 868.230875][ T9357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.305960][ T9355] chnl_net:caif_netlink_parms(): no params data found [ 870.331467][ T9357] Bluetooth: hci2: command tx timeout [ 870.342526][ T9377] netlink: 40 bytes leftover after parsing attributes in process `syz.9.532'. [ 872.400607][ T7418] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 872.413296][ T9357] Bluetooth: hci2: command tx timeout [ 872.630193][ T7418] usb 10-1: Using ep0 maxpacket: 16 [ 872.687723][ T7418] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.785730][ T7418] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.840267][ T7418] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 872.916999][ T7418] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.031236][ T7418] usb 10-1: config 0 descriptor?? [ 873.865578][ T7418] usbhid 10-1:0.0: can't add hid device: -71 [ 873.877593][ T7418] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 873.952962][ T7418] usb 10-1: USB disconnect, device number 4 [ 873.995884][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.044566][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.061457][ T9355] bridge_slave_0: entered allmulticast mode [ 874.077942][ T9355] bridge_slave_0: entered promiscuous mode [ 874.106130][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.134917][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.143653][ T9355] bridge_slave_1: entered allmulticast mode [ 874.154188][ T9355] bridge_slave_1: entered promiscuous mode [ 874.160507][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 874.230256][ T5856] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 874.297462][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.347494][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.356971][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 874.386886][ T5835] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 874.421624][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 874.456402][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 874.472199][ T5856] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.490864][ T9357] Bluetooth: hci2: command tx timeout [ 874.500289][ T5835] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 874.509522][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.523039][ T5856] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.534877][ T5856] usb 7-1: config 0 interface 0 has no altsetting 0 [ 874.542769][ T5856] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 874.557088][ T5835] usb 2-1: config 0 descriptor?? [ 874.570749][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.635422][ T5856] usb 7-1: config 0 descriptor?? [ 874.816280][ T9355] team0: Port device team_slave_0 added [ 874.935666][ T9355] team0: Port device team_slave_1 added [ 875.058135][ T5835] hid_parser_main: 4007 callbacks suppressed [ 875.058287][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.181046][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.263970][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.333468][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.398144][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.450637][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.485662][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.515863][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.572987][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.620396][ T5835] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 875.675824][ T9413] affs: No valid root block on device nullb0 [ 875.912381][ T5835] lenovo 0003:17EF:60EE.0009: hidraw0: USB HID v0.0b Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 875.995730][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.005790][ T5856] nzxt-smart2 0003:1E71:2009.000A: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 876.041478][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.083094][ T5835] usb 2-1: USB disconnect, device number 5 [ 876.351078][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.499763][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.548651][ T7050] usb 7-1: USB disconnect, device number 11 [ 876.560583][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.636006][ T9357] Bluetooth: hci2: command tx timeout [ 876.697098][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.122906][ T9416] fido_id[9416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 879.454039][ T9418] fido_id[9418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 879.790288][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.796890][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.965588][ T9355] hsr_slave_0: entered promiscuous mode [ 880.132646][ T9355] hsr_slave_1: entered promiscuous mode [ 880.171023][ T9355] debugfs: 'hsr0' already exists in 'hsr' [ 880.176901][ T9355] Cannot create hsr debugfs directory [ 880.883344][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.544'. [ 881.850898][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 883.535137][ T5835] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 883.770530][ T5835] usb 10-1: Using ep0 maxpacket: 16 [ 883.821198][ T5835] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.889201][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 883.908972][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 883.923657][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 883.954952][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 883.970989][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 884.059153][ T5835] usb 10-1: config 0 interface 0 has no altsetting 0 [ 884.100811][ T5835] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 884.168717][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.697121][ T9355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 884.850152][ T7050] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 884.861861][ T9355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 884.908575][ T5835] usb 10-1: config 0 descriptor?? [ 885.100574][ T7050] usb 2-1: Using ep0 maxpacket: 16 [ 885.256908][ T7050] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.330192][ T7050] usb 2-1: config 0 interface 0 has no altsetting 0 [ 885.372754][ T7050] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 885.418284][ T7050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.501223][ T7050] usb 2-1: config 0 descriptor?? [ 885.945215][ T9355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.045948][ T7050] hid_parser_main: 28 callbacks suppressed [ 886.046043][ T7050] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 886.121083][ T9357] Bluetooth: hci6: command tx timeout [ 886.143436][ T7050] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 886.196535][ T9355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.254003][ T7050] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 886.347611][ T7050] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 886.506344][ T7050] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 886.917976][ T5835] usbhid 10-1:0.0: can't add hid device: -71 [ 886.924875][ T5835] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 886.938639][ T5835] usb 10-1: USB disconnect, device number 5 [ 886.961462][ T7050] usb 2-1: USB disconnect, device number 6 [ 886.970218][ T9357] Bluetooth: hci4: command 0x0406 tx timeout [ 887.852217][ T9470] fido_id[9470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 888.172410][ T5791] Bluetooth: hci6: command tx timeout [ 888.507146][ T5835] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 888.760152][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 888.785719][ T5835] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.850950][ T9483] affs: No valid root block on device nullb0 [ 888.886334][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 888.910289][ T5835] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 888.935779][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.013116][ T5835] usb 2-1: config 0 descriptor?? [ 889.447091][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.870463][ T5835] usbhid 2-1:0.0: can't add hid device: -71 [ 889.920790][ T5835] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 889.961264][ T5835] usb 2-1: USB disconnect, device number 7 [ 890.056706][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.248413][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.266451][ T5791] Bluetooth: hci6: command tx timeout [ 890.469040][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.625886][ T9456] chnl_net:caif_netlink_parms(): no params data found [ 890.709821][ T9501] netlink: 40 bytes leftover after parsing attributes in process `syz.6.555'. [ 891.314291][ T7418] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 891.374245][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.401156][ T5835] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 891.500383][ T7418] usb 10-1: Using ep0 maxpacket: 16 [ 891.523664][ T7418] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.538420][ T7418] usb 10-1: config 0 interface 0 has no altsetting 0 [ 891.547531][ T7418] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 891.590382][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 891.600790][ T7418] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.611122][ T53] bridge_slave_1: left allmulticast mode [ 891.616912][ T53] bridge_slave_1: left promiscuous mode [ 891.671199][ T5835] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.683675][ T7418] usb 10-1: config 0 descriptor?? [ 891.695700][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.710632][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 891.717464][ T5835] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 891.751685][ T53] bridge_slave_0: left allmulticast mode [ 891.757595][ T53] bridge_slave_0: left promiscuous mode [ 891.779797][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.792588][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.809740][ T5835] usb 2-1: config 0 descriptor?? [ 892.204385][ T7418] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 892.220328][ T7418] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 892.228122][ T7418] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 892.295763][ T7418] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 892.340223][ T5791] Bluetooth: hci6: command tx timeout [ 892.430298][ C0] usb 10-1: input irq status -75 received [ 892.475659][ T5835] usbhid 2-1:0.0: can't add hid device: -71 [ 892.520962][ T5835] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 892.606187][ T5835] usb 2-1: USB disconnect, device number 8 [ 892.659597][ T7050] usb 10-1: USB disconnect, device number 6 [ 892.757089][ T9523] affs: No valid root block on device nullb0 [ 892.786662][ T9519] fido_id[9519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 892.806792][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.875923][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.907791][ T53] bond0 (unregistering): Released all slaves [ 893.212369][ T9355] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.492873][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.510985][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.548134][ T9456] bridge_slave_0: entered allmulticast mode [ 893.609359][ T9456] bridge_slave_0: entered promiscuous mode [ 893.675808][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.676140][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.676591][ T9456] bridge_slave_1: entered allmulticast mode [ 893.686383][ T9456] bridge_slave_1: entered promiscuous mode [ 893.817703][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 893.990325][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 894.013164][ T10] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.013324][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 894.013481][ T10] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 894.013611][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.021607][ T10] usb 10-1: config 0 descriptor?? [ 897.194157][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.194481][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.210409][ T5835] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 897.302089][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 897.302611][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 897.337539][ T10] usb 10-1: USB disconnect, device number 7 [ 897.387623][ T5835] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 897.388002][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.412915][ T5835] usb 7-1: config 0 descriptor?? [ 897.608168][ T9456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.648664][ T9456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.708550][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.708872][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.812837][ T53] hsr_slave_0: left promiscuous mode [ 897.861799][ T53] hsr_slave_1: left promiscuous mode [ 897.908510][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.908592][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.926219][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.926298][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.055070][ T53] veth1_macvtap: left promiscuous mode [ 898.055204][ T53] veth0_macvtap: left promiscuous mode [ 898.055485][ T53] veth1_vlan: left promiscuous mode [ 898.055691][ T53] veth0_vlan: left promiscuous mode [ 898.208765][ T9553] netlink: 32 bytes leftover after parsing attributes in process `syz.9.569'. [ 899.711167][ T53] team0 (unregistering): Port device team_slave_1 removed [ 899.756149][ T5835] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 899.782767][ T5835] [drm:udl_init] *ERROR* Selecting channel failed [ 899.787269][ T53] team0 (unregistering): Port device team_slave_0 removed [ 899.946740][ T5835] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 899.997718][ T5835] [drm] Initialized udl on minor 2 [ 900.026996][ T9571] affs: No valid root block on device nullb0 [ 900.058585][ T5835] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 900.080837][ T5835] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 900.142378][ T7474] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 900.194436][ T7474] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 900.228348][ T5835] usb 7-1: USB disconnect, device number 12 [ 900.926505][ T9456] team0: Port device team_slave_0 added [ 901.106524][ T9456] team0: Port device team_slave_1 added [ 901.270412][ T5835] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 901.458871][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.470627][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 901.488535][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.518902][ T5835] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.534389][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.542074][ T5835] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 901.557682][ T9456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.574898][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.590540][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.610471][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.640676][ T5835] usb 2-1: config 0 descriptor?? [ 901.722821][ T9456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.196872][ T5835] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 902.229087][ T9456] hsr_slave_0: entered promiscuous mode [ 902.235530][ T5835] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 902.235718][ T5835] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 902.297051][ T5835] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 902.307465][ T9456] hsr_slave_1: entered promiscuous mode [ 902.326450][ T9456] debugfs: 'hsr0' already exists in 'hsr' [ 902.371371][ T9456] Cannot create hsr debugfs directory [ 902.416910][ C0] usb 2-1: input irq status -75 received [ 902.580379][ T5838] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 902.639762][ T5835] usb 2-1: USB disconnect, device number 9 [ 902.705151][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.750268][ T5838] usb 10-1: Using ep0 maxpacket: 16 [ 902.778455][ T5838] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.835169][ T5838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 902.838576][ T9593] fido_id[9593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 902.863120][ T5838] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 902.893782][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.930651][ T5838] usb 10-1: config 0 descriptor?? [ 902.967006][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.231118][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.625380][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.669270][ T5838] usbhid 10-1:0.0: can't add hid device: -71 [ 903.698152][ T5838] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 903.743437][ T5838] usb 10-1: USB disconnect, device number 8 [ 904.866936][ T53] bridge_slave_1: left allmulticast mode [ 904.874238][ T53] bridge_slave_1: left promiscuous mode [ 904.921116][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.457613][ T53] bridge_slave_0: left allmulticast mode [ 905.594204][ T53] bridge_slave_0: left promiscuous mode [ 905.738022][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.585083][ T5791] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 908.606468][ T29] audit: type=1326 audit(1774694155.801:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 908.954566][ T29] audit: type=1326 audit(1774694155.801:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.048838][ T29] audit: type=1326 audit(1774694155.801:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.100267][ T29] audit: type=1326 audit(1774694155.801:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.178111][ T29] audit: type=1326 audit(1774694155.801:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.237019][ T29] audit: type=1326 audit(1774694155.801:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.300313][ T29] audit: type=1326 audit(1774694155.801:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.360446][ T29] audit: type=1326 audit(1774694155.801:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.456844][ T29] audit: type=1326 audit(1774694155.811:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.585140][ T29] audit: type=1326 audit(1774694155.811:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bb9c799 code=0x7ffc0000 [ 909.921378][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.978848][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.044805][ T53] bond0 (unregistering): Released all slaves [ 910.281426][ T9629] affs: No valid root block on device nullb0 [ 910.308947][ T9623] vxcan1 speed is unknown, defaulting to 1000 [ 910.319185][ T9623] vxcan1 speed is unknown, defaulting to 1000 [ 910.328130][ T9623] vxcan1 speed is unknown, defaulting to 1000 [ 910.494629][ C1] ===================================================== [ 910.501990][ C1] BUG: KMSAN: uninit-value in ax25_transmit_buffer+0x328/0x410 [ 910.509694][ C1] ax25_transmit_buffer+0x328/0x410 [ 910.515160][ C1] ax25_send_control+0x62b/0x7c0 [ 910.520316][ C1] ax25_std_t1timer_expiry+0x5c4/0x660 [ 910.525941][ C1] ax25_t1timer_expiry+0x152/0x180 [ 910.531259][ C1] call_timer_fn+0x4c/0x590 [ 910.536013][ C1] __run_timer_base+0x82f/0xdf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 910.541075][ C1] run_timer_softirq+0x3a/0x70 [ 910.545996][ C1] handle_softirqs+0x171/0x7e0 [ 910.551029][ C1] __irq_exit_rcu+0x65/0x170 [ 910.555764][ C1] irq_exit_rcu+0x12/0x20 [ 910.560350][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 910.566183][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 910.572362][ C1] memset_orig+0x8d/0xb0 [ 910.576755][ C1] ib_setup_port_attrs+0x2555/0x3ee0 [ 910.582339][ C1] ib_register_device+0x1d3d/0x1ff0 [ 910.587710][ C1] rxe_register_device+0x268/0x2f0 [ 910.593131][ C1] rxe_add+0xa9d/0xb50 [ 910.597324][ C1] rxe_net_add+0xe3/0x1f0 [ 910.601880][ C1] rxe_newlink+0x28e/0x480 [ 910.606424][ C1] nldev_newlink+0xa12/0xb70 [ 910.611323][ C1] rdma_nl_rcv+0xefa/0x11c0 [ 910.616015][ C1] netlink_unicast+0xf04/0x12b0 [ 910.621197][ C1] netlink_sendmsg+0x10b2/0x1250 [ 910.626278][ C1] ____sys_sendmsg+0xf37/0xfd0 [ 910.631306][ C1] ___sys_sendmsg+0x271/0x3b0 [ 910.636142][ C1] __x64_sys_sendmsg+0x211/0x3e0 [ 910.641275][ C1] x64_sys_call+0x1e20/0x3ea0 [ 910.646101][ C1] do_syscall_64+0x134/0xf80 [ 910.650937][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.656964][ C1] [ 910.659343][ C1] Uninit was stored to memory at: [ 910.664707][ C1] kmemdup_noprof+0xb0/0x100 [ 910.669454][ C1] ax25_send_frame+0x272/0x8a0 [ 910.674463][ C1] rose_t0timer_expiry+0x342/0x830 [ 910.679770][ C1] call_timer_fn+0x4c/0x590 [ 910.684513][ C1] __run_timer_base+0x82f/0xdf0 [ 910.689542][ C1] run_timer_softirq+0x3a/0x70 [ 910.694589][ C1] handle_softirqs+0x171/0x7e0 [ 910.699499][ C1] __irq_exit_rcu+0x65/0x170 [ 910.704286][ C1] irq_exit_rcu+0x12/0x20 [ 910.708755][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 910.714606][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 910.720856][ C1] [ 910.723228][ C1] Uninit was stored to memory at: [ 910.728498][ C1] kmemdup_noprof+0xb0/0x100 [ 910.733359][ C1] ax25_send_frame+0x272/0x8a0 [ 910.738253][ C1] rose_t0timer_expiry+0x342/0x830 [ 910.743629][ C1] call_timer_fn+0x4c/0x590 [ 910.748302][ C1] __run_timer_base+0x82f/0xdf0 [ 910.753427][ C1] run_timer_softirq+0x3a/0x70 [ 910.758350][ C1] handle_softirqs+0x171/0x7e0 [ 910.763367][ C1] __irq_exit_rcu+0x65/0x170 [ 910.768105][ C1] irq_exit_rcu+0x12/0x20 [ 910.772679][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 910.778469][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 910.784693][ C1] [ 910.787072][ C1] Uninit was created at: [ 910.791620][ C1] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 910.798271][ C1] kmemdup_noprof+0x48/0x100 [ 910.803069][ C1] ax25_send_frame+0x272/0x8a0 [ 910.807966][ C1] rose_t0timer_expiry+0x342/0x830 [ 910.813333][ C1] call_timer_fn+0x4c/0x590 [ 910.818006][ C1] __run_timer_base+0x82f/0xdf0 [ 910.823123][ C1] run_timer_softirq+0x3a/0x70 [ 910.828052][ C1] handle_softirqs+0x171/0x7e0 [ 910.833088][ C1] __irq_exit_rcu+0x65/0x170 [ 910.837833][ C1] irq_exit_rcu+0x12/0x20 [ 910.842365][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 910.848152][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 910.854412][ C1] [ 910.856820][ C1] CPU: 1 UID: 0 PID: 9623 Comm: syz.6.579 Not tainted syzkaller #0 PREEMPT(full) [ 910.866201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.876406][ C1] ===================================================== [ 910.883524][ C1] Disabling lock debugging due to kernel taint [ 910.889753][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 910.896284][ C1] CPU: 1 UID: 0 PID: 9623 Comm: syz.6.579 Tainted: G B syzkaller #0 PREEMPT(full) [ 910.907218][ C1] Tainted: [B]=BAD_PAGE [ 910.911439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.921587][ C1] Call Trace: [ 910.924932][ C1] [ 910.927835][ C1] __dump_stack+0x26/0x30 [ 910.932298][ C1] dump_stack_lvl+0x50/0x1c0 [ 910.937014][ C1] ? dump_stack+0x12/0x25 [ 910.941474][ C1] dump_stack+0x1e/0x25 [ 910.945756][ C1] vpanic+0x7b4/0x1430 [ 910.949988][ C1] panic+0x15d/0x160 [ 910.954067][ C1] kmsan_report+0x31a/0x320 [ 910.958733][ C1] ? __msan_warning+0x1b/0x30 [ 910.963548][ C1] ? ax25_transmit_buffer+0x328/0x410 [ 910.969052][ C1] ? ax25_send_control+0x62b/0x7c0 [ 910.974296][ C1] ? ax25_std_t1timer_expiry+0x5c4/0x660 [ 910.980083][ C1] ? ax25_t1timer_expiry+0x152/0x180 [ 910.985519][ C1] ? call_timer_fn+0x4c/0x590 [ 910.990349][ C1] ? __run_timer_base+0x82f/0xdf0 [ 910.995518][ C1] ? run_timer_softirq+0x3a/0x70 [ 911.000602][ C1] ? handle_softirqs+0x171/0x7e0 [ 911.005678][ C1] ? __irq_exit_rcu+0x65/0x170 [ 911.010584][ C1] ? irq_exit_rcu+0x12/0x20 [ 911.015218][ C1] ? sysvec_apic_timer_interrupt+0x84/0x90 [ 911.021165][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 911.027453][ C1] ? memset_orig+0x8d/0xb0 [ 911.032003][ C1] ? ib_setup_port_attrs+0x2555/0x3ee0 [ 911.037606][ C1] ? ib_register_device+0x1d3d/0x1ff0 [ 911.043136][ C1] ? rxe_register_device+0x268/0x2f0 [ 911.048557][ C1] ? rxe_add+0xa9d/0xb50 [ 911.052895][ C1] ? rxe_net_add+0xe3/0x1f0 [ 911.057520][ C1] ? rxe_newlink+0x28e/0x480 [ 911.062211][ C1] ? nldev_newlink+0xa12/0xb70 [ 911.067112][ C1] ? rdma_nl_rcv+0xefa/0x11c0 [ 911.071933][ C1] ? netlink_unicast+0xf04/0x12b0 [ 911.077081][ C1] ? netlink_sendmsg+0x10b2/0x1250 [ 911.082340][ C1] ? ____sys_sendmsg+0xf37/0xfd0 [ 911.087409][ C1] ? ___sys_sendmsg+0x271/0x3b0 [ 911.092383][ C1] ? __x64_sys_sendmsg+0x211/0x3e0 [ 911.097627][ C1] ? x64_sys_call+0x1e20/0x3ea0 [ 911.102628][ C1] ? do_syscall_64+0x134/0xf80 [ 911.107532][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.113726][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 911.119717][ C1] ? kmem_cache_alloc_node_noprof+0x3f6/0x12d0 [ 911.125997][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.131265][ C1] ? __alloc_skb+0x855/0x1190 [ 911.136120][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.141394][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 911.147874][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.153141][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.158409][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.163690][ C1] __msan_warning+0x1b/0x30 [ 911.168334][ C1] ax25_transmit_buffer+0x328/0x410 [ 911.173683][ C1] ax25_send_control+0x62b/0x7c0 [ 911.178788][ C1] ax25_std_t1timer_expiry+0x5c4/0x660 [ 911.184418][ C1] ax25_t1timer_expiry+0x152/0x180 [ 911.189677][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 911.195457][ C1] call_timer_fn+0x4c/0x590 [ 911.200133][ C1] __run_timer_base+0x82f/0xdf0 [ 911.205130][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 911.210922][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.216201][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.221471][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 911.227440][ C1] ? __pfx_run_timer_softirq+0x10/0x10 [ 911.233058][ C1] run_timer_softirq+0x3a/0x70 [ 911.237968][ C1] handle_softirqs+0x171/0x7e0 [ 911.242887][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 911.249114][ C1] __irq_exit_rcu+0x65/0x170 [ 911.253842][ C1] irq_exit_rcu+0x12/0x20 [ 911.258299][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 911.264072][ C1] [ 911.267058][ C1] [ 911.270050][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 911.276163][ C1] RIP: 0010:memset_orig+0x8d/0xb0 [ 911.281339][ C1] Code: e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c 89 d0 cc cc cc cc 48 83 fa 07 76 e3 48 89 07 49 c7 c0 08 00 00 00 4d [ 911.301081][ C1] RSP: 0018:ffff888107d5ee88 EFLAGS: 00000246 [ 911.307264][ C1] RAX: ffff888107d5ee90 RBX: ffff888107d5eec0 RCX: 0000000000000000 [ 911.315333][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888107d5eec0 [ 911.323388][ C1] RBP: ffff888107d5ef80 R08: 00000000000003da R09: 0000000000000000 [ 911.331445][ C1] R10: ffff888107d5ee90 R11: 0000000000000002 R12: ffff888107d5ee90 [ 911.339507][ C1] R13: 0000000000000030 R14: 0000000000000030 R15: ffff8881187fce48 [ 911.347600][ C1] ? snprintf+0x83/0x210 [ 911.352034][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.357305][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 911.363283][ C1] ib_setup_port_attrs+0x2555/0x3ee0 [ 911.368718][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.374077][ C1] ib_register_device+0x1d3d/0x1ff0 [ 911.379452][ C1] ? ib_device_set_netdev+0xa90/0xc40 [ 911.384970][ C1] rxe_register_device+0x268/0x2f0 [ 911.390248][ C1] rxe_add+0xa9d/0xb50 [ 911.394435][ C1] rxe_net_add+0xe3/0x1f0 [ 911.398903][ C1] rxe_newlink+0x28e/0x480 [ 911.403439][ C1] ? __pfx_rxe_newlink+0x10/0x10 [ 911.408486][ C1] nldev_newlink+0xa12/0xb70 [ 911.413423][ C1] ? __pfx_nldev_newlink+0x10/0x10 [ 911.418682][ C1] rdma_nl_rcv+0xefa/0x11c0 [ 911.423394][ C1] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 911.428480][ C1] netlink_unicast+0xf04/0x12b0 [ 911.433482][ C1] netlink_sendmsg+0x10b2/0x1250 [ 911.438586][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.444008][ C1] ____sys_sendmsg+0xf37/0xfd0 [ 911.448939][ C1] ___sys_sendmsg+0x271/0x3b0 [ 911.453740][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.459039][ C1] ? __rcu_read_unlock+0x6c/0xd0 [ 911.464216][ C1] ? __fget_files+0x3b4/0x4a0 [ 911.469056][ C1] ? __fget_files+0x3b9/0x4a0 [ 911.473861][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.479132][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 911.485114][ C1] __x64_sys_sendmsg+0x211/0x3e0 [ 911.490221][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 911.495519][ C1] x64_sys_call+0x1e20/0x3ea0 [ 911.500347][ C1] do_syscall_64+0x134/0xf80 [ 911.505075][ C1] ? clear_bhb_loop+0x50/0xa0 [ 911.509880][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.515900][ C1] RIP: 0033:0x7f4b0bb9c799 [ 911.520405][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.540137][ C1] RSP: 002b:00007f4b0ca6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.548670][ C1] RAX: ffffffffffffffda RBX: 00007f4b0be16180 RCX: 00007f4b0bb9c799 [ 911.556738][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 911.564799][ C1] RBP: 00007f4b0bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 911.572851][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.580903][ C1] R13: 00007f4b0be16218 R14: 00007f4b0be16180 R15: 00007ffc30326528 [ 911.589009][ C1] [ 911.592595][ C1] Kernel Offset: disabled [ 911.596975][ C1] Rebooting in 86400 seconds..