last executing test programs: 25.61373623s ago: executing program 3 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r0, 0x0, 0x0) unshare(0x8000400) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) set_mempolicy(0x3, &(0x7f0000000180)=0x8001, 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdir(0x0, 0x2) 25.311548321s ago: executing program 3 (id=86): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 24.432236172s ago: executing program 0 (id=87): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 24.087734577s ago: executing program 1 (id=89): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280), 0x4) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'pim6reg0\x00', 0x1}, 0x18) 24.022929491s ago: executing program 3 (id=90): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 21.253500573s ago: executing program 0 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x6, @vifc_lcl_ifindex=r5, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r7, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaac0ffffff86dd6446083100200600fe8000000000000000000000000000aafe880000000000000000000000000001000000000000000000000000006c000100004e23004b4e2400"/86], 0x0) 19.932181722s ago: executing program 0 (id=98): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 15.297118763s ago: executing program 4 (id=100): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setrlimit(0xd, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) 14.951551466s ago: executing program 3 (id=101): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x6, 0x2, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 13.68029476s ago: executing program 2 (id=102): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1000000) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 12.464972696s ago: executing program 2 (id=103): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 11.987892573s ago: executing program 1 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 11.713836066s ago: executing program 1 (id=105): syz_clone(0xb10129b89592fc54, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000440)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000940)="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", &(0x7f00000004c0)="a6e7dc2fc1d6353fd630f29e6b1da71d386afdd2d6a1edf94fc8b7cee786bd376330438543a4b8135113d42e074527944439efa9b3fb01e18af3b808e0d0e361cb80087f80d5d579c23adbe0c8f37551ccee14a3c4820f8ea35e835d31621ddd1f0ac40e6c8fb2fd817eb8a1790353a38cd76a51c3898cdc894d727a8131621201bc8d6205a4873d5ec1f8d88b5e7fba0dbc868cd86f49e2731cc9e2219c538f275caec78b3ac4bc6195bbf6d362820d4ccabbd26d6638d54c61d6a81d3f0e4d6a65e5e9f3b7af75304b07188a6ca636151cdc929412d5324361b5a095c59abfa192067356baf711152090aba31c"}}, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 10.071200944s ago: executing program 1 (id=106): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 9.875304695s ago: executing program 2 (id=107): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005000f08270f0a04d6df30000000000600000000000000000000000000000000000000000fee4c0c3912560f12139981722650d9c2f0757236e29b03c7f8489da0b6f1c7b58b287fd6ef69c78bf92cc86e2f9e5edaaa6641ba9f9f6ab8c3d1d761baaee266509803164d483f1a8a23533125105b74d67c5d913f0c0be90e1eb4e47cd88e59ab068ae7d2bf8115aec97eda1601925cacf9f9b3a03872c8444b0e0c435e5c07f4f9bec2d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r2, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) unshare(0x26020480) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) 8.701131909s ago: executing program 1 (id=108): socket(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) clock_getres(0x7ffffffff000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r4, 0x1, 0x20, 0x6, @local}, 0x14) recvfrom$packet(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 8.624585139s ago: executing program 2 (id=109): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x3, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffef, 0x294, 0x40, 0x1dd, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2, 0x9}, [{0x3, 0x83, 0x1, 0x2000000000d, 0x1c8, 0xe6, 0x1004, 0x3}], "48a3098bee2e48bf6ec92d63a09d4f88"}, 0x88) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) dup(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r2, &(0x7f00000008c0)}, 0x20) 8.528794602s ago: executing program 0 (id=110): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f640094000500", 0x2c}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x29d, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0xfff, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gre0\x00'}) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 6.770778259s ago: executing program 3 (id=111): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x10, 0x0, 0x1, 0x0, 0xffffffff, 0xcc8, 0x9, 0xaab, 0xa, 0x100, 0x3, 0x1, 0x8, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x20000089, 0x7, 0xf27, 0x6, 0x800b, 0xca8, 0x5, 0x4, 0x400, 0x10000, 0xd]}) 6.650217789s ago: executing program 4 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6", 0x5b}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2", 0x11}], 0x1, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x28, 0x117, 0x2, 0xf, "bd2dfdf3a35167789d1e86eb11d3da"}, @iv={0x18}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x1e8, 0x4044044}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x18}, @op={0x18}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x78, 0x4000010}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 4.650889359s ago: executing program 1 (id=113): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0xa5, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x3, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000200)={0x20, 0xf, 0x6, {0x6, 0x22, "2af03c9c"}}, 0x0}, 0x0) 3.643272071s ago: executing program 2 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 2.723448762s ago: executing program 0 (id=115): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7f, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x80, 0x2, 0x2, 0x2, 0x7, 0x1, 0x5, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x19, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.555386742s ago: executing program 3 (id=116): keyctl$read(0x2, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x62, 0xfb, 0x27, 0x8, 0x71d, 0x1005, 0xaac3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0xb0, 0x6, "", [{{0x9, 0x4, 0xc2, 0x1, 0x0, 0xeb, 0xb3, 0xa4, 0xfe}}]}}]}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) 2.143161312s ago: executing program 4 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.519612353s ago: executing program 4 (id=118): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) 683.795369ms ago: executing program 2 (id=119): syz_usb_connect(0x0, 0x36, 0x0, 0x0) 514.465968ms ago: executing program 0 (id=120): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 115.360307ms ago: executing program 4 (id=121): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 4 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x6, 0x2, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 84.864184][ T5784] cgroup: Unknown subsys name 'net' [ 85.096566][ T5784] cgroup: Unknown subsys name 'cpuset' [ 85.160777][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.196993][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.585037][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.587864][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.607783][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.619417][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.630397][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.632661][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.633129][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.634194][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.634732][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.635680][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.647285][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.687611][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.688656][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.689462][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.712862][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.713044][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.713573][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.714452][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.714595][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.720177][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.724641][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.724876][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.727323][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.727767][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.729066][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.659264][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 91.864942][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 91.879022][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 91.924080][ T811] cfg80211: failed to load regulatory.db [ 91.965619][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 91.990418][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 92.176852][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.177802][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.177956][ T5805] bridge_slave_0: entered allmulticast mode [ 92.179897][ T5805] bridge_slave_0: entered promiscuous mode [ 92.242864][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.242971][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.243110][ T5805] bridge_slave_1: entered allmulticast mode [ 92.245052][ T5805] bridge_slave_1: entered promiscuous mode [ 92.397026][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.397150][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.397317][ T5801] bridge_slave_0: entered allmulticast mode [ 92.399422][ T5801] bridge_slave_0: entered promiscuous mode [ 92.445291][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.445436][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.445620][ T5799] bridge_slave_0: entered allmulticast mode [ 92.447479][ T5799] bridge_slave_0: entered promiscuous mode [ 92.492028][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.492952][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.493076][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.493260][ T5801] bridge_slave_1: entered allmulticast mode [ 92.495351][ T5801] bridge_slave_1: entered promiscuous mode [ 92.542844][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.542970][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.543163][ T5799] bridge_slave_1: entered allmulticast mode [ 92.545278][ T5799] bridge_slave_1: entered promiscuous mode [ 92.609038][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.631832][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.631957][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.632104][ T5798] bridge_slave_0: entered allmulticast mode [ 92.633977][ T5798] bridge_slave_0: entered promiscuous mode [ 92.675501][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.675608][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.675973][ T5797] bridge_slave_0: entered allmulticast mode [ 92.677788][ T5797] bridge_slave_0: entered promiscuous mode [ 92.713705][ T5813] Bluetooth: hci4: command tx timeout [ 92.741585][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.741709][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.742283][ T5798] bridge_slave_1: entered allmulticast mode [ 92.745083][ T5798] bridge_slave_1: entered promiscuous mode [ 92.781841][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.781986][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.782198][ T5797] bridge_slave_1: entered allmulticast mode [ 92.784370][ T5797] bridge_slave_1: entered promiscuous mode [ 92.790240][ T5813] Bluetooth: hci0: command tx timeout [ 92.827102][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.853682][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.870216][ T5813] Bluetooth: hci3: command tx timeout [ 92.871505][ T5813] Bluetooth: hci2: command tx timeout [ 92.871586][ T5813] Bluetooth: hci1: command tx timeout [ 92.883695][ T5805] team0: Port device team_slave_0 added [ 92.897262][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.924612][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.948315][ T5805] team0: Port device team_slave_1 added [ 92.993609][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.996451][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.060719][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.063765][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.095337][ T5801] team0: Port device team_slave_0 added [ 93.097630][ T5799] team0: Port device team_slave_0 added [ 93.137895][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.137909][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.137929][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.148457][ T5801] team0: Port device team_slave_1 added [ 93.157042][ T5799] team0: Port device team_slave_1 added [ 93.246644][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.246663][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.246683][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.248998][ T5798] team0: Port device team_slave_0 added [ 93.257066][ T5797] team0: Port device team_slave_0 added [ 93.334424][ T5798] team0: Port device team_slave_1 added [ 93.336434][ T5797] team0: Port device team_slave_1 added [ 93.337155][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.337166][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.337186][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.338313][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.338328][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.338357][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.454274][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.454288][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.454308][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.455513][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.455524][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.455550][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.592980][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.592994][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.593016][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.594232][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.594247][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.594276][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.344928][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.344959][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.344988][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.346771][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.346783][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.346803][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.375021][ T5805] hsr_slave_0: entered promiscuous mode [ 94.379800][ T5805] hsr_slave_1: entered promiscuous mode [ 94.527510][ T5801] hsr_slave_0: entered promiscuous mode [ 94.528583][ T5801] hsr_slave_1: entered promiscuous mode [ 94.529485][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 94.529576][ T5801] Cannot create hsr debugfs directory [ 94.568140][ T5799] hsr_slave_0: entered promiscuous mode [ 94.569198][ T5799] hsr_slave_1: entered promiscuous mode [ 94.569899][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 94.569919][ T5799] Cannot create hsr debugfs directory [ 94.755680][ T5798] hsr_slave_0: entered promiscuous mode [ 94.756711][ T5798] hsr_slave_1: entered promiscuous mode [ 94.757380][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 94.757398][ T5798] Cannot create hsr debugfs directory [ 94.790389][ T60] Bluetooth: hci4: command tx timeout [ 94.795382][ T5797] hsr_slave_0: entered promiscuous mode [ 94.796410][ T5797] hsr_slave_1: entered promiscuous mode [ 94.797130][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 94.797154][ T5797] Cannot create hsr debugfs directory [ 94.870846][ T60] Bluetooth: hci0: command tx timeout [ 94.950324][ T60] Bluetooth: hci1: command tx timeout [ 94.950357][ T60] Bluetooth: hci2: command tx timeout [ 94.950380][ T60] Bluetooth: hci3: command tx timeout [ 95.614436][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.660733][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.731505][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.767734][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.882461][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.925960][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.952686][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.001725][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.131432][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.179646][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.200694][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.255122][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.378037][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.410852][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.465352][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.515714][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.645713][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.664483][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.696891][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.724120][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.768746][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.847994][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.880866][ T5813] Bluetooth: hci4: command tx timeout [ 96.886339][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.905977][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.906792][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.950260][ T5813] Bluetooth: hci0: command tx timeout [ 96.976485][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.976724][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.039274][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.041060][ T5813] Bluetooth: hci3: command tx timeout [ 97.041090][ T5813] Bluetooth: hci2: command tx timeout [ 97.041110][ T5813] Bluetooth: hci1: command tx timeout [ 97.099659][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.107756][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.129757][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.182071][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.182320][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.252140][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.296548][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.297282][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.316270][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.370964][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.371762][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.447868][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.465642][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.515590][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.515734][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.579348][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.579481][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.626933][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.702879][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.703016][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.737172][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.738126][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.919683][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.034230][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.262187][ T5805] veth0_vlan: entered promiscuous mode [ 98.287604][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.336852][ T5801] veth0_vlan: entered promiscuous mode [ 98.338073][ T5805] veth1_vlan: entered promiscuous mode [ 98.401492][ T5801] veth1_vlan: entered promiscuous mode [ 98.427158][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.556617][ T5805] veth0_macvtap: entered promiscuous mode [ 98.616174][ T5805] veth1_macvtap: entered promiscuous mode [ 98.633553][ T5801] veth0_macvtap: entered promiscuous mode [ 98.665808][ T5801] veth1_macvtap: entered promiscuous mode [ 98.682325][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.727468][ T5798] veth0_vlan: entered promiscuous mode [ 98.736363][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.769976][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.795651][ T5798] veth1_vlan: entered promiscuous mode [ 98.806802][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.835610][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.849020][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.866303][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.879842][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.895180][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.951328][ T60] Bluetooth: hci4: command tx timeout [ 98.966860][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981047][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.984061][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.014184][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.030256][ T60] Bluetooth: hci0: command tx timeout [ 99.110386][ T60] Bluetooth: hci1: command tx timeout [ 99.110423][ T60] Bluetooth: hci2: command tx timeout [ 99.110446][ T5813] Bluetooth: hci3: command tx timeout [ 99.199911][ T5797] veth0_vlan: entered promiscuous mode [ 99.312846][ T5798] veth0_macvtap: entered promiscuous mode [ 99.402333][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.402364][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.403367][ T5797] veth1_vlan: entered promiscuous mode [ 99.442146][ T5798] veth1_macvtap: entered promiscuous mode [ 99.459585][ T5799] veth0_vlan: entered promiscuous mode [ 99.501613][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.501634][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.548396][ T5799] veth1_vlan: entered promiscuous mode [ 99.581537][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.581556][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.607724][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.684184][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.684207][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.708543][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.759292][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.762701][ T5797] veth0_macvtap: entered promiscuous mode [ 99.778465][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.793964][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.796798][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.811645][ T5797] veth1_macvtap: entered promiscuous mode [ 99.917159][ T5799] veth0_macvtap: entered promiscuous mode [ 100.033878][ T5799] veth1_macvtap: entered promiscuous mode [ 100.253585][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.378883][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.401217][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.401238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.433285][ T179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.436700][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.439634][ T179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.496035][ T179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.526672][ T179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.551501][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.684174][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.698946][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.726958][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.740891][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.740913][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.746738][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.939937][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.193123][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.193146][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.618457][ T5929] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 102.349481][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.349504][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.510273][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.587732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.587755][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.720599][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 102.726635][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.757749][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.757771][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.770160][ T36] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 102.770254][ T36] usb 4-1: config 1 has no interface number 0 [ 102.770362][ T36] usb 4-1: config 1 interface 83 has no altsetting 0 [ 102.824529][ T36] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=36.68 [ 102.824562][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.824582][ T36] usb 4-1: Product: syz [ 102.824597][ T36] usb 4-1: Manufacturer: syz [ 102.824612][ T36] usb 4-1: SerialNumber: syz [ 102.892730][ T5936] usb usb1: usbfs: process 5936 (syz.2.10) did not claim interface 0 before use [ 103.234690][ T36] kaweth 4-1:1.83: couldn't find required endpoints [ 103.334835][ T36] usb 4-1: USB disconnect, device number 2 [ 103.625640][ T5791] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.645558][ T5887] IPVS: starting estimator thread 0... [ 103.902586][ T5945] IPVS: using max 8 ests per chain, 19200 per kthread [ 104.323814][ T5950] futex_wake_op: syz.0.13 tries to shift op by 32; fix this program [ 104.460133][ T5791] usb 3-1: Using ep0 maxpacket: 32 [ 104.468391][ T5791] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.468420][ T5791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.468441][ T5791] usb 3-1: config 0 has no interface number 0 [ 104.468490][ T5791] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 104.468515][ T5791] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.468542][ T5791] usb 3-1: config 0 interface 184 has no altsetting 0 [ 104.540647][ T5791] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.540679][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.540702][ T5791] usb 3-1: Product: syz [ 104.540718][ T5791] usb 3-1: Manufacturer: syz [ 104.540733][ T5791] usb 3-1: SerialNumber: syz [ 104.645747][ T5791] usb 3-1: config 0 descriptor?? [ 104.734567][ T5791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 104.736019][ T5791] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 104.950797][ T5954] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.290069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.701039][ T810] usb 3-1: USB disconnect, device number 2 [ 108.810861][ T5985] openvswitch: netlink: Message has 592 unknown bytes. [ 108.810907][ T5985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.714299][ T5981] IPVS: starting estimator thread 0... [ 110.835699][ T6002] IPVS: using max 7 ests per chain, 16800 per kthread [ 111.380078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.322870][ T5886] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.508857][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 112.519346][ T5886] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.519375][ T5886] usb 2-1: config 0 has no interface number 0 [ 112.554315][ T5886] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.554359][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.554384][ T5886] usb 2-1: Product: syz [ 112.554401][ T5886] usb 2-1: Manufacturer: syz [ 112.554420][ T5886] usb 2-1: SerialNumber: syz [ 112.628559][ T5886] usb 2-1: config 0 descriptor?? [ 112.682322][ T5886] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.019729][ T5886] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.319793][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 113.379773][ T5886] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.610058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.698106][ T5886] usb 2-1: USB disconnect, device number 2 [ 113.741454][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 113.803959][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 113.805063][ T5886] quatech2 2-1:0.51: device disconnected [ 114.263034][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 114.349589][ T6030] netlink: 104 bytes leftover after parsing attributes in process `syz.4.33'. [ 114.395847][ T6030] Set syz1 is full, maxelem 768 reached [ 115.210051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.386514][ T6045] futex_wake_op: syz.2.38 tries to shift op by 32; fix this program [ 116.011437][ T6048] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.580079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.512687][ T810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.850176][ T810] usb 4-1: Using ep0 maxpacket: 16 [ 128.855764][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.867952][ T810] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 128.867983][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.868003][ T810] usb 4-1: Product: syz [ 128.868018][ T810] usb 4-1: Manufacturer: syz [ 128.868038][ T810] usb 4-1: SerialNumber: syz [ 128.951892][ T810] usb 4-1: config 0 descriptor?? [ 129.258983][ T810] usb 4-1: USB disconnect, device number 3 [ 129.902150][ T810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.286039][ T810] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 130.286097][ T810] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 130.286123][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.360189][ T5981] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.401657][ T810] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 130.700031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.710026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.720027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.730026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.740028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.074066][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 131.427304][ T5981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.492439][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 131.492493][ T5981] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.492518][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.551851][ T5981] usb 4-1: config 0 descriptor?? [ 131.870763][ T5981] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 132.212126][ T810] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 132.212183][ T810] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 132.278287][ T810] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 132.278346][ T810] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 132.491903][ T810] usb 4-1: USB disconnect, device number 4 [ 132.901957][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902052][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.685854][ T9] usb 3-1: USB disconnect, device number 3 [ 136.912414][ T6205] syz.3.70 (6205) used greatest stack depth: 17264 bytes left [ 138.298269][ T6226] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.282326][ T6279] IPVS: Unknown mcast interface: pim6reg0 [ 147.008834][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 149.086478][ T5117] Bluetooth: hci2: command 0x2016 tx timeout [ 151.104466][ T6290] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.195821][ T5117] Bluetooth: hci2: command 0x2016 tx timeout [ 151.615219][ T37] audit: type=1804 audit(1774223919.193:2): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.100" name="bus" dev="ramfs" ino=9438 res=1 errno=0 [ 151.616745][ T37] audit: type=1804 audit(1774223919.203:3): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.100" name="bus" dev="ramfs" ino=9438 res=1 errno=0 [ 152.846314][ T6022] udevd[6022]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.690169][ T5800] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.885349][ T5800] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.885373][ T5800] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.903637][ T5800] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.903722][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.903782][ T5800] usb 3-1: Product: syz [ 154.903823][ T5800] usb 3-1: Manufacturer: syz [ 154.903858][ T5800] usb 3-1: SerialNumber: syz [ 154.962620][ T5800] usb 3-1: config 0 descriptor?? [ 155.005350][ T5800] usb 3-1: selecting invalid altsetting 0 [ 155.327140][ T5800] usb 3-1: USB disconnect, device number 4 [ 155.447205][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.476083][ T6328] Invalid option length (57448) for dns_resolver key [ 159.644840][ T5117] Bluetooth: hci0: command 0x206a tx timeout [ 159.645071][ T60] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 163.952350][ T6358] comedi comedi3: dt2817: I/O port conflict (0x10,5) [ 164.150415][ T5117] Bluetooth: hci3: command 0x2016 tx timeout [ 164.460145][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.630225][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 164.633336][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 164.639025][ T9] usb 2-1: string descriptor 0 read error: -22 [ 164.639165][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 164.639191][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.691254][ T5861] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 166.039627][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 166.041053][ T5861] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 166.041089][ T5861] usb 4-1: can't read configurations, error -71 [ 166.082823][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 166.116365][ T9] usb 2-1: USB disconnect, device number 3 [ 166.232193][ T60] Bluetooth: hci3: command 0x2016 tx timeout [ 166.778646][ T6369] ------------[ cut here ]------------ [ 166.778661][ T6369] kcov->t != t [ 166.778676][ T6369] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.3.116/6369 [ 166.778728][ T6369] Modules linked in: [ 166.778775][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.778801][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.778816][ T6369] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 166.778847][ T6369] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 55 54 00 48 89 df 5b 41 5e 41 5f e9 a9 2d 5a 00 7c 1c 5b 41 5e 41 5f e9 bd 82 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 1b 1c 61 09 48 89 df be 03 00 [ 166.778866][ T6369] RSP: 0018:ffffc90005d7fae0 EFLAGS: 00010287 [ 166.778882][ T6369] RAX: 9e8d90b53f81e700 RBX: ffff8880370d5200 RCX: 0000000000000000 [ 166.778897][ T6369] RDX: 000000004f210036 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 166.778911][ T6369] RBP: ffffc90005d7fc28 R08: ffffffff8b2591d0 R09: ffffffff8ddcba40 [ 166.778926][ T6369] R10: dffffc0000000000 R11: fffffbfff1ed4b97 R12: dffffc0000000000 [ 166.778942][ T6369] R13: 0000000000000000 R14: ffff8880370d5208 R15: ffff888030099e80 [ 166.778954][ T6369] FS: 00007fa4227fd6c0(0000) GS:ffff888126339000(0000) knlGS:0000000000000000 [ 166.778973][ T6369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.778986][ T6369] CR2: 00007f2655933ff8 CR3: 0000000025064000 CR4: 00000000003526f0 [ 166.779010][ T6369] Call Trace: [ 166.779019][ T6369] [ 166.779030][ T6369] do_exit+0x150/0x23c0 [ 166.779058][ T6369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.779091][ T6369] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.779123][ T6369] ? __pfx_do_exit+0x10/0x10 [ 166.779146][ T6369] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 166.779175][ T6369] ? reacquire_held_locks+0x104/0x190 [ 166.779203][ T6369] ? rt_spin_lock+0x1e0/0x400 [ 166.779235][ T6369] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 166.779272][ T6369] do_group_exit+0x21b/0x2d0 [ 166.779299][ T6369] ? rt_spin_unlock+0x160/0x200 [ 166.779332][ T6369] get_signal+0x125c/0x1310 [ 166.779386][ T6369] arch_do_signal_or_restart+0xbc/0x830 [ 166.779432][ T6369] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.779486][ T6369] exit_to_user_mode_loop+0x86/0x480 [ 166.779521][ T6369] ? rcu_is_watching+0x15/0xb0 [ 166.779551][ T6369] do_syscall_64+0x32d/0xf80 [ 166.779572][ T6369] ? trace_irq_disable+0x3b/0x150 [ 166.779599][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.779623][ T6369] ? clear_bhb_loop+0x40/0x90 [ 166.779652][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.779676][ T6369] RIP: 0033:0x7fa4245cc799 [ 166.779706][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.779726][ T6369] RSP: 002b:00007fa4227fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.779750][ T6369] RAX: fffffffffffffe00 RBX: 00007fa424846098 RCX: 00007fa4245cc799 [ 166.779768][ T6369] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa424846098 [ 166.779782][ T6369] RBP: 00007fa424846090 R08: 0000000000000000 R09: 0000000000000000 [ 166.779796][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.779809][ T6369] R13: 00007fa424846128 R14: 00007ffc24b609b0 R15: 00007ffc24b60a98 [ 166.779845][ T6369] [ 166.779862][ T6369] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.779879][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.779911][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.779925][ T6369] Call Trace: [ 166.779935][ T6369] [ 166.779944][ T6369] vpanic+0x56c/0xa60 [ 166.779985][ T6369] ? __pfx__printk+0x10/0x10 [ 166.780010][ T6369] ? __pfx_vpanic+0x10/0x10 [ 166.780044][ T6369] ? is_bpf_text_address+0x292/0x2b0 [ 166.780077][ T6369] ? is_bpf_text_address+0x26/0x2b0 [ 166.780117][ T6369] panic+0xc5/0xd0 [ 166.780153][ T6369] ? __pfx_panic+0x10/0x10 [ 166.780208][ T6369] __warn+0x315/0x4f0 [ 166.780242][ T6369] ? kcov_task_exit+0xf5/0x160 [ 166.780271][ T6369] ? kcov_task_exit+0xf5/0x160 [ 166.780300][ T6369] __report_bug+0x29a/0x540 [ 166.780344][ T6369] ? kcov_task_exit+0xf5/0x160 [ 166.780373][ T6369] ? __pfx___report_bug+0x10/0x10 [ 166.780407][ T6369] ? try_to_take_rt_mutex+0x840/0xb00 [ 166.780448][ T6369] ? reacquire_held_locks+0x104/0x190 [ 166.780478][ T6369] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 166.780513][ T6369] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.780555][ T6369] ? kcov_task_exit+0xf5/0x160 [ 166.780591][ T6369] report_bug+0x16a/0x220 [ 166.780628][ T6369] ? kcov_task_exit+0xf5/0x160 [ 166.780654][ T6369] ? kcov_task_exit+0xf7/0x160 [ 166.780680][ T6369] handle_bug+0x9c/0x200 [ 166.780707][ T6369] exc_invalid_op+0x1a/0x50 [ 166.780732][ T6369] asm_exc_invalid_op+0x1a/0x20 [ 166.780755][ T6369] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 166.780782][ T6369] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 55 54 00 48 89 df 5b 41 5e 41 5f e9 a9 2d 5a 00 7c 1c 5b 41 5e 41 5f e9 bd 82 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 1b 1c 61 09 48 89 df be 03 00 [ 166.780802][ T6369] RSP: 0018:ffffc90005d7fae0 EFLAGS: 00010287 [ 166.780822][ T6369] RAX: 9e8d90b53f81e700 RBX: ffff8880370d5200 RCX: 0000000000000000 [ 166.780839][ T6369] RDX: 000000004f210036 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 166.780856][ T6369] RBP: ffffc90005d7fc28 R08: ffffffff8b2591d0 R09: ffffffff8ddcba40 [ 166.780874][ T6369] R10: dffffc0000000000 R11: fffffbfff1ed4b97 R12: dffffc0000000000 [ 166.780892][ T6369] R13: 0000000000000000 R14: ffff8880370d5208 R15: ffff888030099e80 [ 166.780916][ T6369] ? rt_spin_lock+0x1e0/0x400 [ 166.780956][ T6369] do_exit+0x150/0x23c0 [ 166.780985][ T6369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.781023][ T6369] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.781060][ T6369] ? __pfx_do_exit+0x10/0x10 [ 166.781083][ T6369] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 166.781114][ T6369] ? reacquire_held_locks+0x104/0x190 [ 166.781141][ T6369] ? rt_spin_lock+0x1e0/0x400 [ 166.781175][ T6369] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 166.781214][ T6369] do_group_exit+0x21b/0x2d0 [ 166.781242][ T6369] ? rt_spin_unlock+0x160/0x200 [ 166.781276][ T6369] get_signal+0x125c/0x1310 [ 166.781332][ T6369] arch_do_signal_or_restart+0xbc/0x830 [ 166.781367][ T6369] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.781429][ T6369] exit_to_user_mode_loop+0x86/0x480 [ 166.781465][ T6369] ? rcu_is_watching+0x15/0xb0 [ 166.781498][ T6369] do_syscall_64+0x32d/0xf80 [ 166.781520][ T6369] ? trace_irq_disable+0x3b/0x150 [ 166.781548][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.781573][ T6369] ? clear_bhb_loop+0x40/0x90 [ 166.781602][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.781626][ T6369] RIP: 0033:0x7fa4245cc799 [ 166.781647][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.781666][ T6369] RSP: 002b:00007fa4227fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.781689][ T6369] RAX: fffffffffffffe00 RBX: 00007fa424846098 RCX: 00007fa4245cc799 [ 166.781707][ T6369] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa424846098 [ 166.781721][ T6369] RBP: 00007fa424846090 R08: 0000000000000000 R09: 0000000000000000 [ 166.781743][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.781758][ T6369] R13: 00007fa424846128 R14: 00007ffc24b609b0 R15: 00007ffc24b60a98 [ 166.781793][ T6369] [ 166.782396][ T6369] Kernel Offset: disabled