last executing test programs: 13.917266228s ago: executing program 2 (id=273): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x42, 0x0, "af4f"}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x74, 0x0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) syz_usb_connect(0x1, 0x6e3, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xb9, 0x17, 0xc5, 0x20, 0x499, 0x101f, 0x2a2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d1, 0x3, 0x1, 0xe0, 0x80, 0x3, [{{0x9, 0x4, 0x3, 0x0, 0x4, 0x17, 0x23, 0x31, 0x4, [@hid_hid={0x9, 0x21, 0x3, 0x7f, 0x1, {0x22, 0x7a7}}], [{{0x9, 0x5, 0x6, 0x10, 0xd561e66961e3d492, 0x2c, 0x1, 0x4, [@generic={0xac, 0x6, "b88ba9a1be3594a04f76bc10d376bc93ff4a2a2d86079639ad7bd6728df7a67a6e2e9bcfd2569e1a6b0f2c31e6758617dc6b40751a6dbe983cef246d65db0633971fc5854e860814c4b857b6a9e83e41e644e23e8312987f392594e99e732ddcfe921191ab0a79b9879b093e3de342dcd063abbcf97b79cb3e507a6b82fc19ff4cc4aed62e43eec06b41f1a80f29640c790cc69b08f73868f187ee4bbae3413a62f88d9efaeca73edc4f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x3, 0x2d, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x18, 0x6d}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x6, 0x77, 0xf3, [@generic={0xb1, 0xf, "9b8b8506c5569d6d5025b145a97a37d5681ad82b2ee8c1111cd12760d527c9ec802952c7fe133aeb93f2f9ff7116ee995900b9d4d9f9134a72fd5e4292c3a7b84fe2d3701af64fca5266e4652fb40a036b7211f7e540ced00a0e5d6175e0a98e0c7cb6794a6080cf928e1220adde1bda4750ac87f9743ad51c2d95f5d0ea391520cc033d8a6152a8aeff00653b6041367ad6e4e2104dbad6998eba4cfad02dc1db67613c018a58a603cf736f016e0c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xc}]}}]}}, {{0x9, 0x4, 0x79, 0x81, 0xb, 0xff, 0xff, 0x0, 0x3, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfffb, 0x0, 0x1, "fefa7f5f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x2, 0x7c, 0x6, "f7"}]}], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x7e, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf3, 0xb}, @generic={0x50, 0x6, "f67b9086df6b822c2d7ad7cfbfd36c126bb5ba11f4b0410d57b2dd3e6f46133b3594a51e4f4a873fc2593e9e68e7d592dddef3320dba5fbbba8aafa66eb4e946195174e12343a69dd1797b32f9a6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x418, 0x3, 0x3, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xab, 0x2a73}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xe, 0x1, 0x4, [@generic={0x82, 0x2e98b7f756112846, "96eb38a8e3d459981c6f06c427014f30091acedd717dd1dccf017da44d2053505f82f4c4e69e955e1487d490441458dc222758cc2534a3bcd13aad15358095687871e4cad89dae81b2f82aaf3f374a6191edc9e4a10e2366dc3c8ae65dcb358aa483c261ba35cdb786bff39b35a9ce7b3a7ddf7c0fac9353be34eb121c3f309c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x69, 0xff, 0x4, [@generic={0x77, 0x21, "d906487fa14a5b821124dafb29e139b884acf671af451e8b9556aa1c7679d841c7fe0bc9a95383284755427fe0b6f50b747c1ce8f772ed35dfc4fb19aad21fc3bfec79de05f8517cf560de01283c15aedc66ff31a9bd30597cc38d63985c1246f0a63856167a1e30d52a17e1461bcdda355078bf9e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x7b9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x8, 0xca}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0xd5, 0xf3, 0x6, [@generic={0xb4, 0x31, "3b9c45b5a369756251fed99f9048e7edebb6fddd2b6d6f7167107a73724e4390efb4857eb7c30c9a8e08d3620b50d2e4497d3ae88df1111409642d0f029c58e6e1a677e6c36789acb7348b9174d48506fd3ed07e0b3200deef180bcd122ef2984c0918a7c554ee66f0e54ba56922a9ec2d83384b1a08b8d63473c5a4da3e032579916009f8a94f3f87186efe86ba9d2fdd4da87ff2a43557b8483a3422b1c0f2ca2f11e55135ebf65a2a66ba1e61147e0a74"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x1, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x9, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x669}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x5, 0x1, 0x3, [@generic={0x65, 0x8, "4efb6e97b51e4d1ec75db7f7398464d23e4f402b42cdf4c7ee613dddde336fccfccd58e8dbe0d181af3cc316acd93dec501fa4559029f7dcbd6a28d72074af2617ba07d12f1cdba0d64dcf1e91aa352fb19882098e13f03da49a3ce3fef2cfe1d174f1"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0x9f, 0x6, 0xb, 0xe, 0x1, 0x0, 0x9, [], [{{0x9, 0x5, 0xd, 0x10, 0x30, 0x1, 0x8, 0xff, [@generic={0xca, 0x5, "dcd3ef288ac01cdca2d41385a71b3f3203ce345a131455612f615c7cc97e41b10ab9b41bcdb69522f135f1efc102919375bd4812bb57bffb299319a6613b6cc63eeb26518d639ecd12968c67052f316094d649539d6bc1efb9dde6976278094e5f0f17c3e2d8ae2f0b687093368dc598e6a808910ca304a65241846da69c5da0cfc9cc877f8d6730861d404e66c492f3982119ab623c22ece4ba03b7f979c657a4136659dbbedac12fa6b3995cc09b1f6175f497b58a5ea36caaa9036d62e9c594b192d7293d9292"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x270, 0x3, 0x7, 0xb, [@generic={0xd, 0x21, "bf1860c5c14ece9e1e3a70"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0x3c, 0x3, 0x3}}, {{0x9, 0x5, 0x86, 0x0, 0x5ff, 0x4, 0x5, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x0, 0x9d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4f3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xe}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x1, 0x8, 0x1, [@generic={0xa4, 0x7, "a665334213ed543f6c416adadeb7200a1fb3ee6652aac3ee1c4bdc4955f22547ce8600a764672a16be37c0f0c798e2fd63d718d71d209eda62bbb27fa952ce18d3e42a8f92491ded143d52c926de2a3e1e2c37e2278d1d60937d38deeb7a63ad44dae19a1264340e4ef0d958986ab125ba79674b5be546eb687cd1be6d7b2ae49a0cceb5ea11a1dae5b7392e2e6dff2f8441f6a4944455010f9f066aa5b5960cb6e7"}, @generic={0x8, 0x4, "13ac4180e6f1"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x3, 0x9, 0xe7}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0x9, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0xf0e9ca3d756f33ae, 0x80, 0x8}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x0, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x80, 0x8, 0x39}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x6, 0x9, 0xd}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x0, 0x9, 0x0, 0x7}, 0x122, &(0x7f0000000200)={0x5, 0xf, 0x122, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x40, 0xf0f, 0x9, [0x3fc0, 0xf0]}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0x7, 0x7, [0xf, 0xff0000, 0x0]}, @generic={0xc0, 0x10, 0xa, "3e7417c4458715980c9de54d9660936abcdd0caaf965b9425504d62ae04cbf539a32d519f514dd1cdf36c89278993441221f81c58199188414518471b63dd496c1ba8d62966e1c536def3564b9ba9d40a39aaf3b67c0c9b99ae6fcb28fe52c57bfc9fca8d04121644962d579db1db5aaf29b3e2c666393e35104f30e6d15564afa930ebd55e0d1ad366f607ee68714051f7118c51a6ca511b8ee6e955b854cf28d5ae0faa901ec26a17679799c30b9314d7a360587bf31062b9ad11dc8"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x81, 0xf00, 0x8, [0xc0, 0x0]}, @generic={0x1a, 0x10, 0x1, "0890bc2b8d39897fcec1d5a36af059a6657ef0692bb9c2"}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x410}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "0149690fe697a41ce48bfa4db8cb7d141b2cf58f34e3427963f39caa239b43"}}]}) 13.189673091s ago: executing program 0 (id=276): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x6dd093f1a65bcfd9, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r6 = socket(0x2, 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000040), &(0x7f0000000100)=@md5={0x1, "307c8c7c3630420dbf513c54ab2e8d05"}, 0x11, 0x2) 12.116479415s ago: executing program 0 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = dup(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x44, r8, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "315d1b96c6"}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1fc, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4294}, @device_a, @device_b, @random="b0a14fd3e0e4", {0x0, 0x1}}, 0x32, @val={0x8c, 0x10, {0xbef, "74ce0a6b9e91", @short="2d2265aca01467e9"}}}}, @NL80211_ATTR_FRAME={0x1b0, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@device_b, {0x6}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x400, 0x1, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x4}, {0x1, 0x1}]}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x1, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x1, 0x3}}, [{0xdd, 0xd0, "38087c4cee5b5a010a1805583f49fa65bb27a73987131321212914478f340dd57718d9dbc5d230424a5a088adbba4bd5fedaa8e5b7127adb78804fdbcbdcc090c2c013f404f4cf1c648789025315082be32c95033cde1742188ac14ec9161e37bb475a81b7e7d43c84d2554dab4d9eb74ae88ad5ee979218a5108cf75cc22dd9cd660f974aa3f644b547a83a7eb081a96d72a022583bf09b6c874dad586657cf5308423a2eb2f9ffd0f837962bb329cbfa02c62a1047604ea81d97667e1d1b14b394436a37269734cd8dbe1cef8ab3f4"}, {0xdd, 0x90, "233fe10a69ddcde7866d1b89cd93485cc46b2743028203d9951e073d2072b29af258298c8eefa20f677db3deb27316bfc2fb143921b0435ea4210542e008c93959a9cd925f571d6a842eb490154012609e20b78dc878dc255a5e95f6b8c20f6fd7d449c8d02494a325eb84e872edc0e0985af77c138515f552808f1a11c488ee18636aa0127725ccd8c3402ae515659b"}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61"], 0x58}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 11.871251224s ago: executing program 4 (id=280): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000810) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50014000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005405e7d15"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000002", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) 11.019755076s ago: executing program 0 (id=281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa10000000034c1f639509f5b18000007013fdf88dbffffb702000008000000b703000001000000850000007b00000095000000000000000503e50df38864a241c4b2521e249610598afddb41a1a7e0e6a31f280439964ff60bc037f4fe9c9afcd08426672858f476b9963ba4b7895b54464c8dc4eafa0c9b471721862ce327d8f8f1625d074a5e7e61cd6fc1001ddb32"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x20, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x107f, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x1b, 0x5, 0xd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0xc}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.528631108s ago: executing program 2 (id=282): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000084000001"], 0x48) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x190, 0x40, 0x1000, 0x0, 0xf, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffe}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x36, 0x4, 0x0, 0x8}) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000, 0x4}, 0x20) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x280) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) 9.886891669s ago: executing program 4 (id=283): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x6, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000400)={0x5d14, r1, r2, 0xcccccccc}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x1400c0, 0x0) sendmmsg$alg(r3, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)="7cef37f2d929ad42b48d188521cd306dd1cecd55fd770d698414dfdc5810bc72f33b7fcb03c27e7f14cd26a986831b4321978750a113f71571cc949bb616509a0cd4e37556fb05cd8b5c3c07aa67abd263c5762e46245df015a42c259340607ad4e1fe461ccc9ef324ac5b27afea90c226de0ce22eb6916e47a945a6255ee5ac9ce1b7acbbbae78a34947d7e964a70d580195ead3a8fe12e2aa960cc2825433b526847a272203510b3e12b5edccc2e222b5065f4c8c5bf04f2ed5fd1575e3b9eb3adde3cbdbcc4c5ee9f417876c57ab852647031d2d11e1925169ad753", 0xdd}, {&(0x7f0000000580)="e97c9b30c3a654b192fc9d90f47ad1e1954fc5346fd2021156ae975768ba594bf2661a3876864b0ba28d3dd742fe8530ad02cfd24c3de929dc33e628c15d103606446e75193f430e54f4d07d372735fb7046bb5f703258ac66d3a897395f5b4a13e32f4e7e5a5534e080cdc02dd7332a7ec27c58", 0x74}, {&(0x7f0000000600)="a009d243d00095202d103fe937fdb90879046c153e3a70933da5e5a963cb15451798c26292de0cf2161e9924225d08a500a33a89c9a3e38b70137b621d7ac56860b6f32a038876b822276cf2754fe0ec5110c75da7aabd787ecea4281ff44b05f3ce25", 0x63}, {&(0x7f0000000680)="a4ef245ff14f4156600eb893d22eeb3bb2a39d783045f38a45a4f5b04e10872899e5abac7b5b79c0dd83721af57684599d8bf1e7a59153c7cb0c341016f57faa05c504639c4e22220431eeb2bc95ad00bc17926669d5c3414f7d2c72377f839485946b9c4647a9ccff44292a17fe1b961f68d742581bcb14800c1eae4d5b1367985e5010622c741b00a7b7f0faff61bf5cb5096b58801cee26e73adf300383a7efb5af1ab6b45582be85172e2158659d3103f1fcdd95e6ae0b228c8de3486d", 0xbf}, {&(0x7f0000000740)="877825b1ad25499459e4be6be916fa4f13aea5e9c535551e17cd37d540e0f37e9844f6f0b8197f93f3bcf2fad46a34481be89d9a3899acd002f53cedf0e70a374c60cdea44ec933f29a0294d6fc84f6615036bd47ef7e7cf5561d879544a205f407e30dc01ae71cfd9892ecda7d1986e65c50b289509a20cad1b7bc29eaa9cd9de5a2f470473fcdcc0163b74d14bd828f055c89017e7e20923dc118eed0c3c5aca4045a6937f06146bcbb3b0f5490f3de7cf0c78197aeb186a40c4ef5260f1935154de89de7169329e1b4cdd508e3879f3a0d6979b471e11fd658852681b18a7a870", 0xe2}, {&(0x7f0000000840)="a339318ac81d0746822d2063b2e98800936ce8614b144a1ac3ae670a366a53ae26f21976815e61809583f252cd348421e07ef6fb2d8c56a548714463f7def4671f8b89ff979bf80218131efc5ac14f01fb7c209dc600c3fa6a8a62595ad1d598f1a226d56e0b7a28617b48dd320930b65932aad7ec02bc2c7bba6684ae278d31879ce8728feba21c37d59072bbe14d56c716d286ccb331551e8aba95d2b8817875f5f41c7578226c5b221ba882824f3c5078f0abe6d61934753bfd88e2a40ae778f59a9df60bfdc99fafd9d3fb853931d824fbc5b9dc3bd98e2fbaea622b8639f7fe5d3360b64948f0ece37bf7e63151aa7e9e42b410cc", 0xf7}, {&(0x7f0000000940)="3ddd90eff8baa0780cc4bafb36522433ab0e114549d2462065a4c247a09bcb1699bda9f9925500d89513794a2fe1392b86a9635135682f3210c8c3dd71c818f3d403b5f9a8a0228735e7f52dee1602fd7bb0bc", 0x53}, {&(0x7f00000009c0)="8e07c6692f9b1ea0f2cdc338b30e17d1c080944ebe1f66612b6e7c5e37efb783a3132fb4b9b678c91f4302c002e3b75600ee8b8e9657ecd326cbce152a98ecc386a6b3b5a9642c8210b66dd568ab9966d65a0a8f78c6889b8967a5a2336cf01b2446f7e95963690a77936f7b756dc73bcf8fa290d43346e284dc5000f3b62301cf474bfc756f5f47eafff05804d887e7a2a8fd84f387840d71fd9580f58bc090db03ac79af2355f3e4c9cb3eaa3feaa54d873fb47e29e218617e4392a52106df9caa9be8d649e8428f7ffeeb54b8d9c8d95a8b3157723de9aa09fe69ca21130d4019", 0xe2}], 0x8, 0x0, 0x0, 0x20000800}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b40)="62d02c15a12dff0192e774d94c95f0be34849b6f4795092faaa5eb364d6f9e1bc0918f8637e2a0cd123075213c0faa3ea8e2e0630939290f9278b2c98a9ede76bd8ab0121a370d4d1196d0f5870597d4f6eab91becfd34456b2fc6f31eff0c4f10a54b50a26744952eb3c896b8ad95e3f6f8d1903cc0f226ecc0ff740804e2bd4a1b66f4d48cca85bf70a285a523206d7a668e939160c29cea60ff2881e8ab9eb8b9dae7178c971d7b71ab39522f4efe752eca3825dca2972c92673877033585cf1f22f2d18fb116ff724dc0f97c3a1e3d32", 0xd2}, {&(0x7f0000000c40)="5d58535e072637b0087ed5364792f3d41388f26953f9718de9b1edd41f450e934bcc1865f46094515a0b0b9e4da38c21b18d7db64874c0b93ddb2570a5853ce22a83533f6f7764d1063669caf83f96a59aba3ddbb8b7317f20b6bf816453d726d3aeb667d0da6fb3911082d4bc5b2b93eb7354963cdb04fef3ce1087864d8d83e34f0121144cc99d27281f0adddfe60903ff32c01beb3eee", 0x98}, {&(0x7f0000000d00)="1579d5e76f425912586766d6ad896e157844b6", 0x13}, {&(0x7f0000000d40)="ec61a24af7ef2c8ca7f6ecfed51d6d9dab0e888072863cfc230ef908fde67f64868e6b008b9815446f51526e633f139a9c4d8b50da57d3b905a90904a790c0c166093ccfc6d32992287c7db979865bdb0744867ae7bb88354ccac1ce0759d17ae134a45ffadd5bb1d8c52033bc01531bfd87e2c257d2f9748c59eb5913cd92a0bdc9ade6e9ec54e1350eb817fcc6e215955748f4f2b4aa5f8b62642423", 0x9d}], 0x4, &(0x7f0000000e40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc8, 0x117, 0x2, 0xb1, "a3e005b3cf887fe72a3a3bc60c700a48f9114bb2bcc614107eb7b5d09afb83c1d22ac5aa94c4c823be40d170c4c835a6c530e1b39befbb83e5e2e996ee985f8ee55ca4a54c277b1332a9d8ac5138ad8d1b4ea5a4ff0dc90f106c43ce89a2e658c817f758a7c02b20ad7ed95513828e0a0265809d10f0547bebbda45875fa8bd4d11af8b224e9e3b4a9f1bd31f3aa98219380f69dbf05a7582fcb0053e79204689cfba1da95e351b3e753ca3c43ced70b4f"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x61, "c6b528008ddea8a3c6314f6298b99417cc95a4877bc60650907ffb1ad48dea3978f98efca90147730288b59138aa3537e95c151f61ef8a66052edb09ce56932c95c996b5ec30e57ec9958ab0bb0c764eea09bd09c5a1e986da2797a7a39b07da93"}, @op={0x18}, @iv={0xe8, 0x117, 0x2, 0xcd, "3191c14f12e128e4ab1664eb568ecc70776936b57556a1758846307d0610cb35d566ef7d193ed6245260fabf9f95f7b055e33cf2c236510d6190ded159634c9cb2f97c25e078c6773c1d3d3d34f6da9cd353843aac9e7543bab55912755d1a89ebce2b94d3a37d0cd2f0221321b3f3dbf7d8992eece2e6690da96fe2aa2635a9f9cb852e48006a8733672a941c737e154058cc8b803d148a9dc12b6f5a7f023c726d011bebbe34e94728ae3c8902b79dcf2e36e1fc402282cc203c9cc03657a2fee33a2e6e2a37c5c8d3e5cf62"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x343f083}, @assoc={0x18}], 0x2d0, 0x20000004}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001140)="afa70de499fabf998fbd55e507310fe7162027445e54efcfaad6cb9502b9cc8c9d8587732f18ca0badea6a7bfadbdd9173305af9150e78a5416df668f965704276fc64246cbbdaed708cd46e01e9195274974f6ebf90355f2f7b47d618c1fe06209f4667174c5e6bde46b47e7d8eb93a8efb3d86bde617b986", 0x79}, {&(0x7f00000011c0)="8981a107109781440014421f8bbf165fe11c6fc674da4df8d84f3d586dad55bc0a10ece48a766de819f7ab2dbceddfb144ba795de482d9835d5597d67bd842bc223a105a1cb04ff3171996a532dfb3c0cbd4be54b64d3fbde9e1869ef63818af66ea38ff0293579c129705e16409b0fbf0c055438b9fc86df5748a0b248ddb103e30e6c443e18ef9349d164db94097d180606ac7092ea227b926e4f811884b518e097982e99ed6b97d088927b807ebeaf6f2433391cc60914186acf7a0778020", 0xc0}, {&(0x7f0000001280)="5b5b08ba0ab52285c68f4a2b002e9a4ef71c9d940cc707c3b480fec20d095ba54f20a52811bdd1715e44db91abc26f4fcb7698087d1c8ca200e0678de5fc849f847063622d04d725eeded9c69e7f281699b7657bbe36c34b932ced50f4303a80bb6326d4ca1eb9c704d0aaca93f93e07c7815dc9f223c596207177a339c4b91794e6cf50051731f914e34dc964d043ee04361489e82104fc7d0f3f8822a275faf3fdaf19c5eb31e2f025299f4344825db71443eb232793d5196b01cbdc6b4b4057", 0xc1}, {&(0x7f0000001380)="c989e132bff56bb58a4dc733", 0xc}, {&(0x7f00000013c0)="0fc4db30de38cf8661d46d4096c2690712dc", 0x12}], 0x5, &(0x7f0000001480)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9b, "7129d434ea0a4a175074c2f6ece384a9b128d25e89a8719bf3a59e8ceb0f30b9d94ec564a613fd9e29822d0687a05271d6e3ca3e1843bb6f47ea8765ada01c350f7193658efbed50fe0b3896e79750ea4be288c0da1612b5ca5d783b7c7c665cd441c003f06a8d961c8ae77a10b0bc20005c51dd498df553b395935a5319f77f1781e354f7442867c8c4e03e8231756725f521c77df3a58f24560e"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9c, "b85989fd6423883c259e6a3f113c6fce4ba7f2142989509e7be6a9543167e72d822c051bd3c192074bb31096e5a824d95981691e20b7ae973728d8c55e22504eb10527de71d6101882462ca92b944c10a9c5fbbedcc54854d68ac21a5af012fe568ce0b411577dd34b6d1a95892d96e9e0bd693681f7071285c26603444eeb522aedda3ca238c97150aacf26cf6d1c2c40503b54eb7fb2dabd2772d3"}], 0x1d8, 0x4000001}, {0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001680)="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", 0xfa}], 0x1, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)="ca4df52e5291f3d9dd2e738639a2c788eaf03dcad35cf4d164c10e62feaaf2fbe5004d39166d4e86b0ac572fd9908f36079dad4d7ff03f08f5850329ff05e9e76d43a528d14d9213bacca8dcc904326d5dbf7ecbccbb79b72f666a8dd66278799d9a02287de689a11eeffff1a0fd0517", 0x70}, {&(0x7f0000001840)="f71832b521532a357019c4d3ad717b4c64d62d8460b109d7b2d3fc275c57ffcc4bf4bd5309b34a384bc88597b02209b4806a67b2fe11be60988b4f632b0aef0be3fadf13eddda31b83dab6f16a67579e6e00ad5f3f8782ef9688341b330e31afbebd0ef9ba071660c8670217d8249ba0d56e518630620388cd3ae12bf38a96ffce44a40aa181ea39dc8228ed5d1417f908a354f521f1a908161e35258cbb38678ab88027ddba9a98aa0731aad90eac57400f214746fb519b4b053774644c90cf7308848a7ac701e7ab1a59426af42f1080051a1c994ef6ed9219d45f0c", 0xdd}, {&(0x7f0000001940)="2bd193da4bc44a1a671fa83cf9d9c909324e022d95270479054e196e2901720b5c79656db4cb4641ee2e652ebffa5f398b7ab1e0509d187d9a3ccb22a6be35be9e0999e944d0f8eb4494560e035262f171b2f6215dfb05a41e5de64ef0f247962f7d76691716884dade1839fd9b724beb0a3c77fa990f269c7600810ecd3773786caf996a436fbd3ba487d6725de92a9786c379eede566affae09c9d1339c093bc88d0aaeb07fc2bb4a829", 0xab}], 0x3, &(0x7f0000001a40)=[@iv={0xb8, 0x117, 0x2, 0xa2, "72633706cbf09b657d4f145f512ee63f80b5594b0b6c5d7c9f4af9a42be310cd5f992ebcd364e1e313481e1da21ebc8577f2d144a8ea1aa666e13fc43771a9df309a5bafb8e4a84a512397cfa1e178736329b539c1b003cb3bd1442a5afe96febcc56db77a37d15309e73126ea1793dc8e42d39156366778af411553294eac21cac8eb1d6023751b7fbe9c365da7acb87bbab9d5d6a1427da025b38fe9635d90ec9b"}, @iv={0x28, 0x117, 0x2, 0x11, "79d5b448c6c46bc2d02dbe2d2cad50c466"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x100, 0x117, 0x2, 0xe7, "9bf0ac951bd6e358e9d3d4c662828c33b582671fdb0eb44f5a48ae0eaea6b66fdabf24aade9d35c04052381db27780784dbf1ced41fe233bcfbba96895b7040c54d16a9f137981855114aae674761c6fba7cb7f09ce6ecdff4e1cefa03e6b1bb7d07d6daa1cedc595435d2332d48e52a2043b842f32ad6fd22334731b8558791d4ca5b3640ed843b3bdc9af2c12a733f80abe69bea1cc8584ba7e3cac72201615d0062c1884f7ee4a3285212e2d985b4c13fd34158a3fed589cee3f2816daf24a561e4f9c1b5a55543b31e48ce9075c22990656d28b2d3985307cbc3335b510032bbf7958e2f24"}], 0x228, 0x4004000}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001c80)="3e6be194eeff615e9751e97982bae3cf4903a853daa69550e6209687c3a986eb51619f4eaed973b726bee4a79d932b40995243fdc4732c21161c9194571d3b57dd3b0f5dce693f07b31cbe758d53e543f716773aa3", 0x55}, {&(0x7f0000001d00)="284fb741012fe20713aed47e2c5c8ef3ef7767e083842bdda1b44b6318e05b9a7f530e057b47399c812e0ee5833e59034cfe7cfb80e82a3073e6607e4e0c68fadad9b251bb4106cd35573f7a889ed2d9cdda6ad121a456144146676cfa0589e3738fe8e8ada1778c33f5f521a3d1635e8fc6cf95cf1a32b8fd98e74eefe8dcd38dd8f24f0105fc97c7931fb40c91ca72dee18bdb89d115b8cf8f6f2c962b8cb98d944bf5927e61a9c07febdc8facaab5c9a891bd94ec190bbcb61b23aa4229af0ab81cb2659f1b0745658266f010043dfc9f9c50409880282dcf02c5023dc3d615b7ab805441a4a4164e9b09c13035fd4ed44abe41a7", 0xf6}, {&(0x7f0000001e00)="59bce5bdb9f53477c732c48d155bfabde5c25ed59492a212ff32102ad403a869963a0734aec3adcffd2bb63bcb32398c486bbb3dd70506791d89ce45cd7f574ff9af8632435b47444a22b8cb3c9293c62aea6cd32077070d545b38a3cfebed41ac74ae340456c276b4c74ac60373511727f722e902dc6385416c413de273abba7cdb2041e789a651ba9dcdb80362637053207822ba4313137b5c2d8ade9fee59f1065e34b878665cfaa9e42631b4df7ff190d08a968e4e42dd132f98bad0738b99049f9ecf7fec0d6ca6674762cf0b8c29663fc80b262270bf5e72f518be63d5d6da448f81757165af73", 0xea}, {&(0x7f0000001f00)="63435c882103f7bd34596545db7267c530d0850bab21ca5f660100ca95a48017fc1f0dcbeeaae51e188c866041b47f71e5a4fe65399c056be579c3a886f6b9b1bf550a08e5e8e1a7", 0x48}, {&(0x7f0000001f80)="b3a5c84a660ccb8ccf45302e6af81b230ab1e0eb81255d935f567df0724a0f6402bfaf0bb08089aa3d648d52e0169f57c5955c6785d6ff9b152ba00bc2f74639de954acef1e01506638a1003459d5cb79347e889767ff5d9c9625e5e9bead6a5cdb61eb6e334d549d1d26f85", 0x6c}, {&(0x7f0000002000)="edc6cc186f91abd546986c8efd07914540c6cccb897d45f526e65e8bd613", 0x1e}, {&(0x7f0000002040)="2bc5c0d00f47046980baa870022d0fb2dd017681791bcda474775528a5dfb3fa630e6077f1b085f7f58ae6d65af35453f08afc06b90133d3cbb5b72e8477c2edb03a6ef0c86ef04f70e83bcd75152faa928829909a22b9d629ee98ec0ecd2244a313a7549b782a0980cc29ac09a8e1185ff9c78e3ad9ed240ccee726a47e7ba11733f909ef0b231a28d90761646747ef6dc9f388cd230fb64f441437e5a7c2d796c74dc566ab3d6e6c9c3a22e582289e8ad5c0306a2e4096d61d5f4fce70c7436595d016002b6c5d711ec8e8084c167940628cb608cdceee895094a2bae3", 0xde}, {&(0x7f0000002140)="85815b4877faff343ea58ffd92c27248fe70e75b7fed81ba47a19354ca08f9071092cefcce5d1d1e09478eb27700434b6c02a244ba028144a1fc8ffaa87fc950aaba7ae4dd8c20c4ed9a106cb8f32e5791993e16e00977fe53bf9e4fc04f4efcd5b12dba998124639b3f4ebcd2ba9f00e0d228c13cf98a5310870a4c61239b51f9cf8b60a5afe23c69b7a312303ee2a31508bf13fe4d00e4c55baa227b0e908b949e10f27e3575450fc5a55bfde3c07d8a9bbf3abf902ec549a367c76667128412490a84ed31db", 0xc7}], 0x8, 0x0, 0x0, 0x20008040}, {0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000022c0)="25808f71f0bf39497bbffe06b5b9dd7ae92ddf3722ccb73ca3a24d32e1236f202a214e0edb66602d45064007edc94730e0779132dbd1213864c29186a69ce98707a465f6be5b1b03ac5b52638a9a03e78e52df84af11d4c0a82e0d8d2b0e2e938a33f579223994cbe3a3ff9879d04d4c806f609daeb9265ef2337225c48aa6b9fb6f012beaeb26a1e48c51c6309401161bc85e2e73b0bf6882ef7153c8bdb1e565c1b0e270c6a57a45fc8089375b14009dc87b48a72d4a235a92915c83c62ba2f0038cfa7099f6428bcb9cb69d76cfff1b", 0xd1}, {&(0x7f00000023c0)="122551002afd3e4a1d1deb93faeb7a632d2a0f01170016187cf611f99aada3e42d3ec35aca3ce5370071b6d136bf9fe236d6152a6fd0b5ac4ee976a6caec0ec94bdde3451763e5a385315af5aee337cf4245e6e015ab03b1", 0x58}, {&(0x7f0000002440)="dcea1da91b31eb1caf72593e25aeafa0def82e", 0x13}, {&(0x7f0000002480)="193f8dd59ee47609ce3b745cc8d4d025fff1f1200baa21d451de697c5f68e0af1c6f46df701615d941876ff617e9fe46f0281d1b7845ba7ba8f115d201caa814a9b95b9c98c36fb786fceeb76b575caad76de0e88520a590398e0927ad975afdd1cedd71ca7d24cac801fc526864f59c7247e91b418c7a31b62564ab57425f25334e0f11f4a2fd1576f582338a42a3da7911f4964b69eb76edc4cbd4ccb655f1934ab59c6a4bfa1dd7bdec73cd143c9f27b562119e0b62799f9262f36a39038adc2000c382e0f8683f5359e63f7fb2e183d7f9f0ca7bd7275d7a023a69", 0xdd}, {&(0x7f0000002580)="80522955dd0841a068f2d87f4aa2728ed374ac29b812ca17013b98ef34282e0863c7c1a89b8b8d96dcd2b9283fece80486bce6967744ecd54fa061f4eb3ac5905e486db01f1260", 0x47}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="500e2c8f1bebe996475bdeda9965c7ce1eac55c03226e196", 0x18}, {&(0x7f0000003640)="f7ae7563129f55141b894d39927ebbcff67ec2ada1a77d70d792e2d6e2e87983ff423985f83ea28d4ead35c096d985fc2743d344135de54d935516b78c023b6e5a68e81610fca7ba5a999a0b889f5a186f327138de4e06a60516f150dfcf5f2d77b80ddb892731dee31e88af66546df75d7a6acbc04ab10533f452f21210ad6807af2806648dd2523cfa688dfbe486363418e13f2b71fb365e8e9489196a2c979adaeca4ec2d5186dbb15cdfdf80f1beb3bf49ffd36bdcd21d72c34be3", 0xbd}, {&(0x7f0000003700)="936ad2993782ecdb154ac2aced09a9ae1b35b693e4d32057dd307ced224ed239541221c5ccab450c469ef47a", 0x2c}], 0x9, &(0x7f0000003800)=[@assoc={0x18, 0x117, 0x4, 0xfff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x4000841}, {0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003880)="f803e3272d2d6786d8bd3ac7182741d2b74072e9eec3f8f52eb17d42b2b4b8510dd487794624f23a03d339b52956b741e4fd9a35dfd8b303e9f062304eaa327b19db3e209a086edadbed0bdbb248f99e1c1dd0296bbbb7ceeeabc5e20d2d9a997f086dd88c1c0c87cae09e32c3da64c13131076d857e807d6d5f484b3ea2d0fe4367bed6864b1ae26c5a27a9c9ce32af0dd9c9f76fb5bf2f4b347c1330d0", 0x9e}, {&(0x7f0000003940)="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", 0xfc}, {&(0x7f0000003a40)="00eca82825e66ecd0ad45cadf214ee4220633f01e756d83262c5ab9665ee393fe21638", 0x23}], 0x3, &(0x7f0000003ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20044010}, {0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003b00)="ade8fd8bc97049a27a19c9b18c3a2a9408ff86194218232fef99b3edb33abb41c272a90e9fffd515", 0x28}, {&(0x7f0000003b40)="dc4d56e7fed331453acfa222957efcddf808e9b56f5c8c4f8b1651ebb6efb414beaa53d9b7cee50e4a40780209bef49915ac1b4f7fc8dd1ebb5377d24ce8768061e70bfd5ccc04fa0b0a73809f6a082c8398d3882657185fefc244aeb18c5b921ce7e9f30ea55f2da2d1299d1c29ace8a4e18f2818c7ee63b2069467db36", 0x7e}, {&(0x7f0000003bc0)="13f3121b8fe3d058f6aeaa9a3814554648eca1215ed1587926265a76496e0140d11614e4ddb55c78cfb66adb8cae6e4a8e3bcb1ef3dea31201f76e70cab06a70ea83bdd53ef05e461d83f34889cebea520c39cd9a7e8d97b1483e3c3f24d9e888dc9795de8dc343207dca1195ceb15b4457b33885ca004e7", 0x78}, {&(0x7f0000003c40)="681be09ddb9607a4fcfe8f45d1e1059356ead40aafe4a3283c3d81e0ed3459e025afbab57d7399fcc37f426a928332f15324c161cef780a918f3e754bb919d4a29fa60c3bbf5c14956563d459ba48d62a00718d6cda036c3f9ea74f0c90d48144c0175efc767cedb02551d6205956cedc3d1d0e5ba11e442011024b675a45d98dfeccee78dc1c4e648d61fef35a4ec9f516414bb8d3c7fe5e8a2b74acce8aef214ceb8c901a041dc33a98f59d50fb072e45125e300461bc37ee3cd0942633727c6b65c08842c81107f7ed2aa81508677c69f46", 0xd3}, {&(0x7f0000003d40)="2c609dbca684dca20d898c84f4d88bac39b292573303252342d3b3a8164d8b31b6ef60cbb5e7088fb5cfb5089f0c78f4476289618f03ca929408c1a15ac2b314edc517eee5647c8686bd62d22836f7c572312eaa5d6eba0729197db75e7f86871ac1aaac7dce3302ccd46b6ced73ed082214b1177a0096d3b5cc3ac3ae4d76f5b0030cc9ff4ce49b7aa262b886f424248735962a2fafbf6c30de9349df6df8b01c3d388f", 0xa4}, {&(0x7f0000003e00)="578123dd78e58f8f0deb9b10e61f6ff6eda66757d386e393a81044af25f4db43ad763887c7e475a2993adcb2ed9dc35440684e5d1cfb3c62d52867344b087f1c1abd61ff40e441caea3a2a69dd1070da6c005350729f00e914559ad86ee284b115b861ad5fb3be3c1cb748ef808cff7b8a4ca7c2a0da3a20", 0x78}, {&(0x7f0000003e80)="1064b0ad294b7eb81c21a9571ea1459bcc15272eb7bff9905b6476ea9ab3bf65556804a205c10104d3720ccbac37d1c303074c2b81ff7ace473191cd57ba614cd81783d8823debec0cca55e70d500177a987e0b0d510a4e5315781", 0x5b}], 0x7, 0x0, 0x0, 0x20008010}], 0x9, 0x4002001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000004180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x8010, r5, 0x31475000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000041c0)={{0x1, 0x1, 0x18, r5, {0x947ba8d}}, './file0\x00'}) recvmmsg(r4, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004200)=""/64, 0x40}, {&(0x7f0000004240)=""/45, 0x2d}, {&(0x7f0000004280)=""/250, 0xfa}, {&(0x7f0000004380)=""/247, 0xf7}, {&(0x7f0000004480)=""/41, 0x29}], 0x5, &(0x7f0000004540)=""/198, 0xc6}, 0xe253}, {{&(0x7f0000004640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004740)=[{&(0x7f00000046c0)=""/123, 0x7b}], 0x1, &(0x7f0000004780)=""/97, 0x61}, 0x7}, {{&(0x7f0000004800)=@phonet, 0x80, &(0x7f0000004980)=[{&(0x7f0000004880)=""/4, 0x4}, {&(0x7f00000048c0)=""/58, 0x3a}, {&(0x7f0000004900)=""/126, 0x7e}], 0x3, &(0x7f00000049c0)=""/145, 0x91}, 0x6}, {{&(0x7f0000004a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000006040)=[{&(0x7f0000004b00)=""/242, 0xf2}, {&(0x7f0000004c00)=""/199, 0xc7}, {&(0x7f0000004d00)=""/155, 0x9b}, {&(0x7f0000004dc0)=""/217, 0xd9}, {&(0x7f0000004ec0)=""/127, 0x7f}, {&(0x7f0000004f40)=""/41, 0x29}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/59, 0x3b}, {&(0x7f0000005fc0)=""/122, 0x7a}], 0x9, &(0x7f0000006100)=""/163, 0xa3}, 0xa}], 0x4, 0x100, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) sendfile(r0, r7, 0x0, 0x4efe) ioctl$TCSETS(r3, 0x5402, &(0x7f00000062c0)={0x6, 0x3, 0x7, 0x6, 0x12, "413512c7bca924681b0af8d1aeb66072930f05"}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000006300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000006340), &(0x7f0000006380)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000063c0)=@base={0xc, 0x6, 0xc, 0x4, 0x20, r6, 0x0, '\x00', 0x0, r3, 0x3, 0x3}, 0x50) write$evdev(r3, &(0x7f0000006440)=[{{0x0, 0xea60}, 0xe, 0xffff, 0x10001}, {{0x77359400}, 0x14, 0x3}, {{0x77359400}, 0x5, 0xa, 0xffff}, {{0x0, 0x2710}, 0x4, 0x5, 0x1}], 0x60) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000064c0), 0x440, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2d) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f0000006500)=0x9) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000065c0)={&(0x7f0000006540)=[0x0, 0x0], &(0x7f0000006580)=[0x0, 0x0, 0x0, 0x0], 0x2, r2, 0xe0e0e0e0}) sendto(r7, &(0x7f0000006600)="b49825d1ae6bf483d3cce7c46442da345d35fe1eab8cff144909db43c8398d982ff55371d5b616db705d4d9537695fdc6cf03dbcef06c9ae89335bfc623086db7b1c3563a7fc6d8cc88ed67dc0139f5c35151f30db7183568c137b040a0a27930cdfd661", 0x64, 0x10, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000006680)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x2, 0x9, 0x8, 0x9, 0x8, 0x4}, &(0x7f0000006740)=0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000006780)={r12, 0x3, 0xffff, 0xb104}, &(0x7f00000067c0)=0x10) readv(r9, &(0x7f0000006ac0)=[{&(0x7f0000006800)=""/188, 0xbc}, {&(0x7f00000068c0)=""/211, 0xd3}, {&(0x7f00000069c0)=""/203, 0xcb}], 0x3) ioctl$F2FS_IOC_DECOMPRESS_FILE(r11, 0xf517, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000006b00)='\x00', &(0x7f0000006b40)='./file0\x00', r3) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000006b80)) 6.720221012s ago: executing program 3 (id=284): move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil], 0x0, &(0x7f0000000380), 0x2) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil], 0x0, &(0x7f0000000380), 0x2) (async) 5.261988705s ago: executing program 4 (id=285): socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_emit_ethernet(0x288, 0x0, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x7, 0x0, 0xff, 0xffffffff, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8000007, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r2) 5.179480289s ago: executing program 3 (id=286): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3a, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) 5.165553335s ago: executing program 2 (id=287): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) 5.042702353s ago: executing program 1 (id=288): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) 4.839335684s ago: executing program 3 (id=289): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) r0 = socket(0x1, 0x2, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc0}, 0xa) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) (async) socket(0x1, 0x2, 0x0) (async) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc0}, 0xa) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) (async) 4.25312911s ago: executing program 0 (id=290): socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffff476, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffff476, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000500)="4af5356c7d5636c96e4ceba293d84e95fcddb95f9b7b352cd60524013f336eedc0e927845e5ba7f92fcc93b8a4056dec3c763bc469e70d20fb9c23cf9f4791327c226edbe4d45e1ddbba9d7cf147140131e04251e9624e41c063b6f8543ea8e7e35af4fcc9ee99e8f388c47650d5a7c85e415b358ca7bb3ce61b5cd9aa5e71d4519b92f7eadcc0a3afae5fbc15dacc55d648f5ead64080f978b128f4b06c61d57553c4becd1a3b686d96bfd5e52c6f6499117764c0a0447d9dccdab7b93aab35f0d37dc8244bb6430e0a3843b9aeb7b85aa4562703d2b301167b74fa00dfbe517ee7a8be53d6a467a5", 0xe9}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000500)="4af5356c7d5636c96e4ceba293d84e95fcddb95f9b7b352cd60524013f336eedc0e927845e5ba7f92fcc93b8a4056dec3c763bc469e70d20fb9c23cf9f4791327c226edbe4d45e1ddbba9d7cf147140131e04251e9624e41c063b6f8543ea8e7e35af4fcc9ee99e8f388c47650d5a7c85e415b358ca7bb3ce61b5cd9aa5e71d4519b92f7eadcc0a3afae5fbc15dacc55d648f5ead64080f978b128f4b06c61d57553c4becd1a3b686d96bfd5e52c6f6499117764c0a0447d9dccdab7b93aab35f0d37dc8244bb6430e0a3843b9aeb7b85aa4562703d2b301167b74fa00dfbe517ee7a8be53d6a467a5", 0xe9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000001c0)={r2}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20840, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x52}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000003c0)) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000003c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) ptrace(0x4207, r3) 4.09473847s ago: executing program 3 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = dup(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x44, r8, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "315d1b96c6"}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1fc, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4294}, @device_a, @device_b, @random="b0a14fd3e0e4", {0x0, 0x1}}, 0x32, @val={0x8c, 0x10, {0xbef, "74ce0a6b9e91", @short="2d2265aca01467e9"}}}}, @NL80211_ATTR_FRAME={0x1b0, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@device_b, {0x6}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x400, 0x1, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x4}, {0x1, 0x1}]}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x1, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x1, 0x3}}, [{0xdd, 0xd0, "38087c4cee5b5a010a1805583f49fa65bb27a73987131321212914478f340dd57718d9dbc5d230424a5a088adbba4bd5fedaa8e5b7127adb78804fdbcbdcc090c2c013f404f4cf1c648789025315082be32c95033cde1742188ac14ec9161e37bb475a81b7e7d43c84d2554dab4d9eb74ae88ad5ee979218a5108cf75cc22dd9cd660f974aa3f644b547a83a7eb081a96d72a022583bf09b6c874dad586657cf5308423a2eb2f9ffd0f837962bb329cbfa02c62a1047604ea81d97667e1d1b14b394436a37269734cd8dbe1cef8ab3f4"}, {0xdd, 0x90, "233fe10a69ddcde7866d1b89cd93485cc46b2743028203d9951e073d2072b29af258298c8eefa20f677db3deb27316bfc2fb143921b0435ea4210542e008c93959a9cd925f571d6a842eb490154012609e20b78dc878dc255a5e95f6b8c20f6fd7d449c8d02494a325eb84e872edc0e0985af77c138515f552808f1a11c488ee18636aa0127725ccd8c3402ae515659b"}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61"], 0x58}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.957142395s ago: executing program 1 (id=292): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_clone(0x4802c400, &(0x7f0000002100)="bc081adec0d6249b90a738508931bcddc73ab065bb96babdae3486a26ea3263b2a2405a7ab941ce9e7ffed8962704c66794c07fa812124af971bcff9fb63800915cd1c7ea2dd9e01c27737b3b402dcad38a0ebdc8a3cd570714f18dfcc4664e8a06ac4468f05d0bc7d0ceda49e356cf34743b65bc28a75361a9511f4b2a9d054ce544b9288e79b95bca9706611c261d1671a7d42d3e31afbd733afcac83589b2bb7b32cb91a15226", 0xfffffeba, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)="9da55a5ae8843175bd9951c854c304c878a14c39ef095a924ccb8aa42ebf817dff7a1a4448fbb26b0f0b6a763c4c79a499f3cbc77478d1c52ff95a8e67e400d86fc1dc9e743cc8c31472f8fcad75f1f3dea67d4c912064e3eb9329483e7064cfa2018097eb6817da7698545dd471cf30c8f4fd5efc9816c75db6588b5482fc61bf23e8334286d0416b343433f1996293c69ff05aee51d824632f725e1320e4dcc641551bc3cc99d15232c517b244a59c") sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002080), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x5453, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000380)={{0x3, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={0x0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14060c9a", @ANYRES16=r6, @ANYBLOB="010326bd7000fcdbdf2524000000"], 0x14}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r8 = dup3(r7, r4, 0x80000) read$hidraw(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r9, &(0x7f0000002400)={0x90, 0x0, r10, {0x3, 0x2, 0x7fff, 0x4, 0xffff32f4, 0x9, {0x2, 0x4, 0xf, 0x1, 0x0, 0x200000000000, 0x7, 0xbb, 0x2, 0xc000, 0x50, r11, r12, 0x2, 0x3}}}, 0x90) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 3.754242217s ago: executing program 0 (id=293): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 3.007155656s ago: executing program 3 (id=294): r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = inotify_init1(0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x42000665) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800001f7b14df15ee067bb11500009500"/36], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x18) lseek(0xffffffffffffffff, 0x9, 0x0) r7 = syz_io_uring_setup(0x1d9e, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x0, 0x2d4}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = epoll_create(0x7) r9 = epoll_create1(0x0) r10 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 2.243429035s ago: executing program 2 (id=295): futex(&(0x7f0000000000)=0x1, 0xb, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1.729214817s ago: executing program 0 (id=296): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) (async) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101200, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x1010, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000180)=0x751, 0x0, 0x4) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0x20, 0x9, 0x8, 0xea}, 0x6) (async, rerun: 32) sendto$inet6(r3, &(0x7f0000000040)="d0759aaecf3bfe0304717f3ab3b2fdc1787435616cbc30eed31e24174c12ec55b342bb7085c0530f9797be6ec7ecb3f0f4c826558b8a3c332347d6ac6b605d98d4f5659bf7ad4517de8d3a2a42cd90692e8f4189074e3c312bc90d000000000000ead43b17628971685209bd9d5d2497b43c3219ccd9df8c7200a2ab8780e0fe6fcf7539d32473f50000e9ab1ab9f8500cd75d316cc2f6a825f3678cc59f00000006000000", 0xa5, 0x0, 0x0, 0x0) (rerun: 32) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES8], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.612602082s ago: executing program 1 (id=297): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000084000001"], 0x48) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x190, 0x40, 0x1000, 0x0, 0xf, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffe}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x36, 0x4, 0x0, 0x8}) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000, 0x4}, 0x20) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x280) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) 1.279439292s ago: executing program 4 (id=298): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.080661403s ago: executing program 4 (id=299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000900)=""/256, 0x100}], 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000400)={@my=0x0}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) semget$private(0x0, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000005c0)='mm_shrink_slab_end\x00', r4}, 0x18) (async) rt_sigprocmask(0x1, &(0x7f0000000140)={[0x4]}, 0x0, 0x8) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000600)={r7, 0xfffffffb, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0xa, 0x0, 0x1c, "fee8a2ab70fc5e3e06e00f9607208100a607000000002000e60080b8785d96000100", "2809e8dbe108598948224ad500fac11d875397bdb22d0000b420a1a02c5240f45f819e01177d3d458dd4990761ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x6]}}) setpriority(0x0, 0x0, 0xacf0165) (async) setfsgid(0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r8, 0x1000) (async) fsync(r8) (async) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000400)) fstat(r4, &(0x7f00000004c0)) (async) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) (async) r9 = syz_clone(0x0, &(0x7f0000000800)="530f95d0b9b6ca681786f49abcc1797c8d20eb83a7deb97a1f03d8db12ec8144742b34cd667e0e40dc1551c0c0e8110adb6d93aeac3153247246d621664601cf70cc128c6e0f6400c67fdfdb74a7afcf428a0e35ffffffffffffffff70e3c4b5e22224f86940289185ab860ac9d66c4f514f2e99b487f9f28589030f9e3b43c9f3485def89b14e7f72f268969ed793abc267d6c0c2033ca1f73a1136d830f1881b86f68c947c7dc1ea3e821d36398080ccb82683f3d78489379c19d37f1c2c9c1b1256ccb54bdb5c491c3f", 0xcb, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000000c0)="e008a573d6517f4fa8e8cf92ef9e7f000000831bda5aa244cabd4ac812860cb8d4982793760fc9f16fd379") prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000480), &(0x7f0000000580)=r7}, 0x20) (async) recvmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/1, 0x1}, 0x8}], 0x40001b0, 0x2, 0x0) 863.038473ms ago: executing program 3 (id=300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000016000000080023"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, &(0x7f0000000200)={0x20, 0x11, 0x9, {0x9, 0x30, "1087572579b364"}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x15, 0x0, &(0x7f0000000280)) syz_usb_connect$uac1(0x0, 0xef, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x2, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0xf, "9cc8"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x3, 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0xd, 0x5, "4e3c44f5222a"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x6]}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0xb, '\'ef<'}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x3, 'p'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x100, 0x7, 0x7, "d2194ff6761e"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xd, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xa24, 0x1, 0xa, "cadaed4fe868c733"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xb, 0x3, 0x80, "a20e"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x20, 0x3, "5a0145be8eaab780"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0x4, {0x7, 0x25, 0x1, 0x83, 0x32, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xff, 0x2, 0x85, {0x7, 0x25, 0x1, 0x83, 0x7, 0x5}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x4e, 0x1, 0x4, 0x10, 0x2}, 0x17, &(0x7f00000004c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe, 0x5, 0xd3, 0x7ff, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0xf, 0x8}]}, 0x4, [{0x8e, &(0x7f0000000540)=@string={0x8e, 0x3, "b459e6e8d2f888299c934531fd283a77e2b64803e18c4333327d07f903603556825d593bf1dbf1d1089beecc99442e889bc514a978764d24c193a12da511ade5fbcd8cfa3b76332a3da93bf4fa4686e256dd651e1878096139a3179e8f57a2b621b0abd3d73318cf56635aff6ca248cdc19c98f8be0ab46e0ace229110cb817154ece0f9fb49593dc5057a4a"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x816}}, {0xc1, &(0x7f0000000680)=@string={0xc1, 0x3, "fbf4b5bdca23bfdda1ad6ff260feb2dbcbcbd727154f649504fbb1adcb1df43892dcb241fee061f5cbe323c79b7b128449a075db12a421db89a58123a71fadea8675d631fd265663015ec0a95e4164a9abc85465aba6d44ed698e48828db496d3ecd1408e4debaf616c72a35598103426164921b5a209beca412d82013b2864e63fda8be74580d62573bee0f3ce888bc86d6828273477dd66c8dc414baaee85a2131f8638814fd1140aa4c3d1aefed6df420b061a9459ada196a1e40131fdd"}}]}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r6, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020044}, 0x4c041) 709.933205ms ago: executing program 2 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3680c000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mlock2(&(0x7f0000f98000/0x3000)=nil, 0x3000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000004000), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 579.184088ms ago: executing program 2 (id=302): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12f88d49ca09010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x11, 0x80a, 0x0) sendto$x25(r1, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) r2 = socket$nl_crypto(0x10, 0x3, 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871282d28280a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r4 = semget$private(0x0, 0x4000000009, 0x208) semop(r4, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r4, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f00000000c0)=[0xa8f, 0x8]) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000008c0)={0x0, "d2d6fbc8f63465e9ef18da9100f8a997"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000018c0)={r5, "f3ec2db742b250bccf0ae9412826bf70"}) 495.243775ms ago: executing program 1 (id=303): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000540)={'bridge_slave_1\x00', {0x2, 0x4e22, @loopback}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x1, 0x2003) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000300)={0xf0f029, 0x6}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x27) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="f7f9b9684ce61ffeb52f870d77042a53ac3c703f3351d11964c33eb78199a2dd5e77c249bd51f918775925c6fbd365e047dfe859073ef0db096275d904621d0a67e10ce2a0e0354cd1c23106735f8c15f9dbc4c1e7772ce0ba10db57390c143b241824ba0f751792611a1e5aadecb750b492829b8e5c47e55e77b13208d5ef8138e16b4f269f0f823c1f20c33b4bfb1bc557c4c8e909ce780f0666b381206cea17bc545e6b82ba528dafb48efdc8a40845afa8c23999e50e8eb01c2b207f3f6a4f1b95688d", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002580)="190c218ae5dbe3f19ed551bc1bd925cdd044e4baee0bd865f1ef13a601a1577ba231315b17b03dca49190a5f807de4ad9e643a3ecba5a3e8f2d837ad75e132cba7e5dea4e87006b42608059d5cd6a865195837482da4cb5dddf45073aa790761a7540460e31ea15a591033acd22a84bd4875c1e5c430d29c3f94c21a983356b70ce106da2623616cc22d6665c79fdead7cb416d3cac4bdf6f3b50085a033f3a5672bf63aa9f79d4738ab34a25706f095ced7e487f962be44672938425778cb42e1d09978c1", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="0f", 0x1}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2c0000000000000000000000070000000007b27f00000183133dac1414bbac1e010164010102e00000020000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002ac1414aa000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0001ac1414360000000014"], 0x88}}], 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast}, [@null, @bcast, @remote, @remote, @default, @rose, @default]}, &(0x7f0000000000)=0x48) accept4$netrom(r3, &(0x7f0000000600)={{0x3, @netrom}, [@default, @netrom, @default, @bcast, @bcast, @default, @bcast, @netrom]}, &(0x7f00000000c0)=0x48, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0x40806685, &(0x7f0000000480)={{0x8, 0xfe}, 'port0\x00', 0x93, 0x61006, 0x7a0, 0xff, 0x10, 0x81, 0x8, 0x0, 0x5, 0xf}) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="7000000004060300000000000000000000000000050001000700000005e301000700000005000100070000000900020073797a32000000000900020073797a310000000005000100070000000900020073797a3200000000050001000700000005000100070000000500010007000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) remap_file_pages(&(0x7f00002d0000/0x4000)=nil, 0x4000, 0xc, 0x4, 0x800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @private1, 0x6}, 0x1c, 0x0}}], 0x2, 0x4004000) 155.678026ms ago: executing program 1 (id=304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b18000680140004002001000000000000000000000000000153c9aa0c53510b4abbcad7d7b0678c141e8594"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000040)={0x20071026, r5}, &(0x7f0000000180)={0xb, 0x9, 0x5, 0xe, 0x8001, 0xa}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) open(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6, @ANYRES16=r8], 0x4c}}, 0x40000) 15.46211ms ago: executing program 4 (id=305): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 1 (id=306): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b8e42d08da05990082d50102030109022d00010007000009040200030456fb00090502000000000000090506c200000000000905"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81002e00000c000000a003000000e0aceadef28a78aaeaf500ea06ccda576db86813a676d25d9897f880503b1c4c119df91da0a82467f72e5e1e13f090b71e8e8adfb58386734902883130fbf49970f516dd1eebfb092bd1e8d633d6d56a1b0b8d94efd282f6"], 0x0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0xe00, 0x181080) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 76.035571][ T5822] cgroup: Unknown subsys name 'net' [ 76.163410][ T5822] cgroup: Unknown subsys name 'cpuset' [ 76.171998][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.585307][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.526319][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.538265][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.546953][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.554935][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.562780][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.571251][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.579957][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.580179][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.587861][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.595386][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.601798][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.609248][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.616713][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.632715][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.647592][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.648556][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.656747][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.685115][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.692237][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.701522][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.708920][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.716041][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.723934][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.733318][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.764154][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.386919][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.511715][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.629048][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 83.725511][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.734202][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.744506][ T5837] bridge_slave_0: entered allmulticast mode [ 83.753712][ T5837] bridge_slave_0: entered promiscuous mode [ 83.766551][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.773994][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.782482][ T5837] bridge_slave_1: entered allmulticast mode [ 83.789477][ T5837] bridge_slave_1: entered promiscuous mode [ 83.815045][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 83.908230][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 83.918940][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.927312][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.934902][ T5832] bridge_slave_0: entered allmulticast mode [ 83.943590][ T5832] bridge_slave_0: entered promiscuous mode [ 83.968122][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.981616][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.009247][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.016483][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.024036][ T5832] bridge_slave_1: entered allmulticast mode [ 84.031417][ T5832] bridge_slave_1: entered promiscuous mode [ 84.118289][ T5837] team0: Port device team_slave_0 added [ 84.160236][ T5837] team0: Port device team_slave_1 added [ 84.166581][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.174092][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.182789][ T5838] bridge_slave_0: entered allmulticast mode [ 84.190085][ T5838] bridge_slave_0: entered promiscuous mode [ 84.206562][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.256126][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.263993][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.271479][ T5838] bridge_slave_1: entered allmulticast mode [ 84.278490][ T5838] bridge_slave_1: entered promiscuous mode [ 84.305045][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.339742][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.346729][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.373098][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.386933][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.396235][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.422471][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.498904][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.506426][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.514053][ T5836] bridge_slave_0: entered allmulticast mode [ 84.521266][ T5836] bridge_slave_0: entered promiscuous mode [ 84.539299][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.552781][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.562230][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569371][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.576931][ T5839] bridge_slave_0: entered allmulticast mode [ 84.584103][ T5839] bridge_slave_0: entered promiscuous mode [ 84.592875][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.600330][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.607536][ T5839] bridge_slave_1: entered allmulticast mode [ 84.615955][ T5839] bridge_slave_1: entered promiscuous mode [ 84.625520][ T5832] team0: Port device team_slave_0 added [ 84.632464][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.643897][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.651223][ T5836] bridge_slave_1: entered allmulticast mode [ 84.658643][ T5836] bridge_slave_1: entered promiscuous mode [ 84.702958][ T5832] team0: Port device team_slave_1 added [ 84.710612][ T5847] Bluetooth: hci1: command tx timeout [ 84.716348][ T5847] Bluetooth: hci3: command tx timeout [ 84.765831][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.789773][ T5847] Bluetooth: hci2: command tx timeout [ 84.789808][ T5848] Bluetooth: hci0: command tx timeout [ 84.800126][ T5847] Bluetooth: hci4: command tx timeout [ 84.830181][ T5837] hsr_slave_0: entered promiscuous mode [ 84.836514][ T5837] hsr_slave_1: entered promiscuous mode [ 84.847556][ T5838] team0: Port device team_slave_0 added [ 84.855495][ T5838] team0: Port device team_slave_1 added [ 84.864435][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.875193][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.882527][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.908744][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.921606][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.928593][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.954793][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.968360][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.981146][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.095928][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.103443][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.129695][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.142965][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.150083][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.176283][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.192023][ T5839] team0: Port device team_slave_0 added [ 85.227686][ T5836] team0: Port device team_slave_0 added [ 85.262047][ T5839] team0: Port device team_slave_1 added [ 85.286749][ T5836] team0: Port device team_slave_1 added [ 85.334074][ T5832] hsr_slave_0: entered promiscuous mode [ 85.340606][ T5832] hsr_slave_1: entered promiscuous mode [ 85.346665][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.354479][ T5832] Cannot create hsr debugfs directory [ 85.402744][ T5838] hsr_slave_0: entered promiscuous mode [ 85.409320][ T5838] hsr_slave_1: entered promiscuous mode [ 85.415804][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.423557][ T5838] Cannot create hsr debugfs directory [ 85.432077][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.439308][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.465729][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.510761][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.517735][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.543819][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.556877][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.564136][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.590536][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.643593][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.651253][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.678242][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.841433][ T5839] hsr_slave_0: entered promiscuous mode [ 85.847913][ T5839] hsr_slave_1: entered promiscuous mode [ 85.854662][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.862539][ T5839] Cannot create hsr debugfs directory [ 85.921938][ T5836] hsr_slave_0: entered promiscuous mode [ 85.928293][ T5836] hsr_slave_1: entered promiscuous mode [ 85.935442][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.943908][ T5836] Cannot create hsr debugfs directory [ 86.284161][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.326292][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.358620][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.369092][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.460026][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.478551][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.499053][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.509436][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.583110][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.596401][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.608091][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.618832][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.709488][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.745981][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.757898][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.772554][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.791778][ T5847] Bluetooth: hci3: command tx timeout [ 86.791799][ T5848] Bluetooth: hci1: command tx timeout [ 86.870065][ T5848] Bluetooth: hci0: command tx timeout [ 86.873554][ T5847] Bluetooth: hci4: command tx timeout [ 86.875513][ T5849] Bluetooth: hci2: command tx timeout [ 86.884794][ T978] cfg80211: failed to load regulatory.db [ 86.896090][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.932370][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.961989][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.977873][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.992572][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.051119][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.094003][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.101479][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.145282][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.152592][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.236522][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.266551][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.306277][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.353930][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.385667][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.414688][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.423662][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.430873][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.467979][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.475504][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.492637][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.500513][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.531532][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.538804][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.548730][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.555994][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.599225][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.627712][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.634943][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.709302][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.754761][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.829417][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.836663][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.874403][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.881612][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.905584][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.929195][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.167664][ T5837] veth0_vlan: entered promiscuous mode [ 88.207057][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.255712][ T5837] veth1_vlan: entered promiscuous mode [ 88.382094][ T5837] veth0_macvtap: entered promiscuous mode [ 88.451835][ T5837] veth1_macvtap: entered promiscuous mode [ 88.478905][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.531305][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.546984][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.595086][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.632026][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.645698][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.654870][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.664963][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.793112][ T5832] veth0_vlan: entered promiscuous mode [ 88.865607][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.875291][ T5849] Bluetooth: hci3: command tx timeout [ 88.880936][ T5848] Bluetooth: hci1: command tx timeout [ 88.913420][ T5836] veth0_vlan: entered promiscuous mode [ 88.924388][ T5832] veth1_vlan: entered promiscuous mode [ 88.933535][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.951505][ T5849] Bluetooth: hci4: command tx timeout [ 88.956972][ T5849] Bluetooth: hci2: command tx timeout [ 88.959181][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.962497][ T5848] Bluetooth: hci0: command tx timeout [ 88.966026][ T5836] veth1_vlan: entered promiscuous mode [ 89.076166][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.076197][ T5836] veth0_macvtap: entered promiscuous mode [ 89.095877][ T5836] veth1_macvtap: entered promiscuous mode [ 89.103440][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.115384][ T5832] veth0_macvtap: entered promiscuous mode [ 89.148308][ T5832] veth1_macvtap: entered promiscuous mode [ 89.201981][ T5838] veth0_vlan: entered promiscuous mode [ 89.207468][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.229196][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.245875][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.265361][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.299036][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.326777][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.348153][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.362772][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.371660][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.389939][ T5839] veth0_vlan: entered promiscuous mode [ 89.437567][ T5838] veth1_vlan: entered promiscuous mode [ 89.456863][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.467005][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.476814][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.485585][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565136][ T5839] veth1_vlan: entered promiscuous mode [ 89.646335][ T5838] veth0_macvtap: entered promiscuous mode [ 89.717158][ T5838] veth1_macvtap: entered promiscuous mode [ 89.776330][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.793947][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.814269][ T5839] veth0_macvtap: entered promiscuous mode [ 89.824764][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.827742][ T5839] veth1_macvtap: entered promiscuous mode [ 89.840190][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.894530][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.903831][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.913839][ T5840] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 89.932968][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.947578][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.961858][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.976494][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.996500][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.036444][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.048106][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.062219][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073752][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.086286][ T5840] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 90.096267][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.105535][ T5840] usb 3-1: config 0 has no interface number 0 [ 90.123987][ T5840] usb 3-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 90.140162][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.163891][ T5840] usb 3-1: Product: syz [ 90.170836][ T5840] usb 3-1: Manufacturer: syz [ 90.177184][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.189432][ T5840] usb 3-1: SerialNumber: syz [ 90.194852][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211833][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.223046][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.234349][ T5840] usb 3-1: config 0 descriptor?? [ 90.373077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.670550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.728258][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.736846][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.784252][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.797218][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.810050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.839975][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.869531][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.882492][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.919369][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.937790][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.951280][ T5847] Bluetooth: hci3: command tx timeout [ 90.951356][ T5849] Bluetooth: hci1: command tx timeout [ 90.992763][ T5906] usb 4-1: device descriptor read/64, error -71 [ 91.030739][ T5849] Bluetooth: hci2: command tx timeout [ 91.030754][ T5847] Bluetooth: hci0: command tx timeout [ 91.030796][ T5847] Bluetooth: hci4: command tx timeout [ 91.250096][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.402446][ T5906] usb 4-1: device descriptor read/64, error -71 [ 91.418947][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 91.439179][ T30] audit: type=1326 audit(1755963476.812:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 91.465573][ T5981] sctp: [Deprecated]: syz.4.5 (pid 5981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.465573][ T5981] Use struct sctp_sack_info instead [ 91.499667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 91.508776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.509707][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.539204][ T5906] usb usb4-port1: attempt power cycle [ 91.600525][ T30] audit: type=1326 audit(1755963476.812:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983758d550 code=0x7ffc0000 [ 91.625029][ T30] audit: type=1326 audit(1755963476.812:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9837590417 code=0x7ffc0000 [ 91.658598][ T30] audit: type=1326 audit(1755963476.812:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 91.692036][ T30] audit: type=1326 audit(1755963476.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9837590417 code=0x7ffc0000 [ 91.715353][ T30] audit: type=1326 audit(1755963476.812:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f983758d84a code=0x7ffc0000 [ 91.749177][ T30] audit: type=1326 audit(1755963476.812:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 91.781114][ T30] audit: type=1326 audit(1755963476.842:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 91.807932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.844033][ T30] audit: type=1326 audit(1755963476.842:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 91.869769][ T30] audit: type=1326 audit(1755963476.842:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 91.899752][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.932991][ T5906] usb 4-1: device descriptor read/8, error -71 [ 92.201335][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.230155][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.249911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.260843][ T5906] usb 4-1: device descriptor read/8, error -71 [ 92.329281][ T5986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.389927][ T9] usb 2-1: device descriptor read/64, error -71 [ 92.410340][ T5906] usb usb4-port1: unable to enumerate USB device [ 92.466690][ T24] usb 3-1: USB disconnect, device number 2 [ 92.643012][ T5989] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11'. [ 92.676244][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.691781][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 92.734505][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 92.747654][ T5992] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 92.839675][ T9] usb 2-1: device descriptor read/64, error -71 [ 92.996611][ T9] usb usb2-port1: attempt power cycle [ 93.130840][ T5906] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.329811][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 93.360933][ T5906] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 93.369320][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.390483][ T5906] usb 3-1: config 0 has no interface number 0 [ 93.403879][ T5906] usb 3-1: config 0 interface 63 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.423366][ T9] usb 2-1: device descriptor read/8, error -71 [ 93.434440][ T5906] usb 3-1: New USB device found, idVendor=0df6, idProduct=0029, bcdDevice=13.0d [ 93.447199][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.455696][ T5906] usb 3-1: Product: syz [ 93.461064][ T5906] usb 3-1: Manufacturer: syz [ 93.465794][ T5906] usb 3-1: SerialNumber: syz [ 93.472391][ T6015] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 93.504656][ T5906] usb 3-1: config 0 descriptor?? [ 93.670166][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.702651][ T9] usb 2-1: device descriptor read/8, error -71 [ 93.740998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.753014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.753024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.832857][ T9] usb usb2-port1: unable to enumerate USB device [ 94.231411][ T978] usb 3-1: USB disconnect, device number 3 [ 95.117017][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.239909][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.354386][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 95.445372][ T10] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 95.463586][ T6049] netlink: 'syz.1.26': attribute type 3 has an invalid length. [ 95.471331][ T6049] netlink: 'syz.1.26': attribute type 3 has an invalid length. [ 95.529316][ T10] usb 3-1: config 1 has no interface number 0 [ 95.652195][ T9] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 95.684952][ T10] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 95.750287][ T9] usb 5-1: config 0 has no interface number 0 [ 95.812828][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 95.855170][ T9] usb 5-1: config 0 interface 88 has no altsetting 0 [ 95.915767][ T10] usb 3-1: Product: syz [ 95.950175][ T6048] geneve2: entered allmulticast mode [ 95.976380][ T10] usb 3-1: Manufacturer: syz [ 96.017467][ T10] usb 3-1: SerialNumber: syz [ 96.111657][ T9] usb 5-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=53.6a [ 96.167077][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.200844][ T9] usb 5-1: Product: syz [ 96.221044][ T9] usb 5-1: Manufacturer: syz [ 96.244869][ T9] usb 5-1: SerialNumber: syz [ 96.453572][ T9] usb 5-1: config 0 descriptor?? [ 96.775177][ T6057] vlan2: entered promiscuous mode [ 96.799086][ T5847] block nbd0: Receive control failed (result -32) [ 96.807616][ T6057] bond0: entered promiscuous mode [ 96.842094][ T6057] bond_slave_0: entered promiscuous mode [ 96.859925][ T6057] bond_slave_1: entered promiscuous mode [ 96.997969][ T9] cdc_acm 5-1:0.88: Zero length descriptor references [ 97.010294][ T9] cdc_acm 5-1:0.88: probe with driver cdc_acm failed with error -22 [ 97.054356][ T9] usb 5-1: USB disconnect, device number 2 [ 98.216341][ T6075] tipc: Started in network mode [ 98.221495][ T6075] tipc: Node identity d26fc4157e45, cluster identity 4711 [ 98.228917][ T6075] tipc: Enabled bearer , priority 0 [ 98.236658][ T6075] syzkaller0: entered promiscuous mode [ 98.242272][ T6075] syzkaller0: entered allmulticast mode [ 99.015381][ T6063] tipc: Resetting bearer [ 99.039052][ T6063] tipc: Disabling bearer [ 100.071019][ T6092] Bluetooth: MGMT ver 1.23 [ 100.693021][ T10] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 101.252528][ T10] usb 3-1: USB disconnect, device number 4 [ 101.307177][ T6099] netlink: 'syz.4.40': attribute type 3 has an invalid length. [ 101.314903][ T6099] netlink: 'syz.4.40': attribute type 3 has an invalid length. [ 101.324724][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 101.360597][ T6101] overlay: Unknown parameter 'obj_role' [ 101.719720][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.899912][ T978] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 101.939704][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 101.970074][ T10] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 42, changing to 9 [ 101.995171][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.008096][ T10] usb 3-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.40 [ 102.021520][ T6133] netlink: 300 bytes leftover after parsing attributes in process `syz.4.44'. [ 102.023342][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.053129][ T10] usb 3-1: Product: á™è ãž¶î”†Ð´á”¥ã¿«ã– ì°Šî…«î—”税थ⇱뺹㲹쎙噅ꎆỨ赡ꩋ鬿ê³ê³—뱋à´ï¡ºé¾˜î”ºä°›äˆœæŸ°è”¸ã¥‚⠩빪ﶀê˜îº§åœ¥Ý€í„¼ç¡¥ë†“ﻯ⺠舫훾槰â¸á•é—‘äŠîž—豱亾뇎࿛ï¢ãž¥î©°ä—¶á™¡í´ë­» [ 102.097958][ T10] usb 3-1: Manufacturer: 蓺쇕棽榤ޔè’ç…㵥Ȯ间 [ 102.127397][ T10] usb 3-1: SerialNumber: 욅츻髰â‰ëˆ“é°î¥·ë††êºŸä´•å‡½Æ¤ã¥ ï†³ã™ë¶µæ´šè¨…á·ì‹âŒŠé´¯æº¹àºî¬™é€šç°”䎩쯳ì‘ස敡éºë‰ºë´£ï‘¬å¼šéµªÛ¦å°¾ï¨˜ëŠœæ§€ä‘槷㼳湆䕈뭠啒 [ 102.152024][ T6133] ntfs3(nullb0): Primary boot signature is not NTFS. [ 102.163027][ T6133] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 102.178906][ T978] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.226360][ T978] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.266385][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.315868][ T978] usb 4-1: string descriptor 0 read error: -22 [ 102.439349][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.486844][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.582209][ T978] usb 4-1: 0:2 : does not exist [ 102.681944][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 102.687952][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 102.765430][ T10] usb 3-1: USB disconnect, device number 5 [ 102.801332][ T890] usb 4-1: USB disconnect, device number 6 [ 104.920458][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.52'. [ 104.984609][ T6182] fuse: Unknown parameter 'ò' [ 105.164187][ T6187] netlink: 'syz.3.55': attribute type 13 has an invalid length. [ 105.253934][ T1099] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.263499][ T6190] capability: warning: `syz.0.56' uses deprecated v2 capabilities in a way that may be insecure [ 106.135924][ T6207] random: crng reseeded on system resumption [ 106.829185][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.838157][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.068382][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.084425][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.163521][ T6187] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.174941][ T6187] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.185010][ T6187] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.194253][ T6187] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.230304][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.270855][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 107.297745][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 107.480051][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 107.535042][ T24] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 107.599136][ T24] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.649657][ T24] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.759169][ T24] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.856270][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.936945][ T24] usb 2-1: config 0 has no interface number 0 [ 107.962973][ T24] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 108.242226][ T24] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 108.355049][ T6229] netlink: 'syz.2.64': attribute type 3 has an invalid length. [ 108.363491][ T6229] netlink: 'syz.2.64': attribute type 3 has an invalid length. [ 108.377961][ T24] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.406150][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.64'. [ 108.634916][ T24] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.989497][ T24] usb 2-1: config 0 interface 125 has no altsetting 2 [ 109.008271][ T24] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 109.018729][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.027273][ T24] usb 2-1: Product: syz [ 109.032682][ T24] usb 2-1: Manufacturer: syz [ 109.038013][ T24] usb 2-1: SerialNumber: syz [ 109.048273][ T24] usb 2-1: config 0 descriptor?? [ 109.058275][ T24] usb 2-1: selecting invalid altsetting 2 [ 109.212086][ T6240] ======================================================= [ 109.212086][ T6240] WARNING: The mand mount option has been deprecated and [ 109.212086][ T6240] and is ignored by this kernel. Remove the mand [ 109.212086][ T6240] option from the mount to silence this warning. [ 109.212086][ T6240] ======================================================= [ 109.259390][ T24] usb 2-1: USB disconnect, device number 6 [ 109.289018][ T6240] overlayfs: missing 'lowerdir' [ 109.512225][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.611987][ T5907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.803299][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 109.866857][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 109.879678][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 109.884955][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.906098][ T5907] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 109.915117][ T9] usb 5-1: Product: syz [ 109.919304][ T9] usb 5-1: Manufacturer: syz [ 109.948839][ T5907] usb 4-1: can't read configurations, error -22 [ 109.984420][ T9] usb 5-1: SerialNumber: syz [ 110.023808][ T6255] netlink: 64 bytes leftover after parsing attributes in process `syz.1.71'. [ 110.036817][ T9] usb 5-1: config 0 descriptor?? [ 110.087440][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 110.143229][ T5907] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.319916][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 110.335889][ T5907] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 110.347930][ T5907] usb 4-1: can't read configurations, error -22 [ 110.355068][ T5907] usb usb4-port1: attempt power cycle [ 110.464752][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.478947][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.504867][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 110.519436][ T9] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 110.531943][ T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 110.542985][ T9] usb 5-1: USB disconnect, device number 3 [ 110.699749][ T5907] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.713000][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.722753][ T10] usb 3-1: config 0 has no interface number 0 [ 110.729049][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 110.734513][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 110.747757][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 110.760854][ T5907] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 110.769625][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.778930][ T5907] usb 4-1: can't read configurations, error -22 [ 110.785942][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.799137][ T10] usb 3-1: config 0 descriptor?? [ 110.805730][ T6262] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 110.850548][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 110.919695][ T5907] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.962724][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 110.973259][ T5907] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 110.986101][ T5907] usb 4-1: can't read configurations, error -22 [ 110.994990][ T5907] usb usb4-port1: unable to enumerate USB device [ 111.026073][ T5907] usb 3-1: USB disconnect, device number 6 [ 112.860702][ T6281] netlink: 'syz.3.78': attribute type 3 has an invalid length. [ 112.869118][ T6281] netlink: 'syz.3.78': attribute type 3 has an invalid length. [ 112.891104][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'. [ 114.550693][ T890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.614165][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 114.624929][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 114.663701][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.762504][ T890] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 114.779789][ T890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.797979][ T890] usb 1-1: Product: syz [ 114.805171][ T890] usb 1-1: Manufacturer: syz [ 114.810027][ T890] usb 1-1: SerialNumber: syz [ 114.825501][ T890] usb 1-1: config 0 descriptor?? [ 114.837523][ T890] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 114.845725][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.868083][ T5840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.892702][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.919901][ T5840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.947696][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.966299][ T5840] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 114.985758][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.001039][ T5840] usb 2-1: Product: syz [ 115.005424][ T5840] usb 2-1: Manufacturer: syz [ 115.013861][ T5840] usb 2-1: SerialNumber: syz [ 115.014047][ T6322] netlink: 'syz.2.91': attribute type 18 has an invalid length. [ 115.027845][ T5840] usb 2-1: config 0 descriptor?? [ 115.050685][ T5840] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 115.073638][ T6322] mkiss: ax0: crc mode is auto. [ 115.090852][ T5840] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card [ 115.101724][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.104158][ T5840] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90 [ 115.112431][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.164378][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.192426][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.228093][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.236563][ T10] usb 4-1: Product: syz [ 115.246329][ T10] usb 4-1: Manufacturer: syz [ 115.251818][ T10] usb 4-1: SerialNumber: syz [ 115.306517][ T890] usb 1-1: USB disconnect, device number 3 [ 115.329515][ T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 115.354801][ T10] cdc_ncm 4-1:1.0: bind() failure [ 115.449786][ T5840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.579341][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 115.601493][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 115.601511][ T30] audit: type=1800 audit(1755963500.972:22): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.89" name="bus" dev="overlay" ino=130 res=0 errno=0 [ 115.635219][ T5840] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 115.664876][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.684808][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.708407][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.102646][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 116.102993][ T10] usb 4-1: USB disconnect, device number 11 [ 116.181257][ T5840] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 116.190973][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.199155][ T5840] usb 5-1: Product: syz [ 116.203868][ T5840] usb 5-1: Manufacturer: syz [ 116.208472][ T5840] usb 5-1: SerialNumber: syz [ 116.218743][ T5840] usb 5-1: config 0 descriptor?? [ 116.228160][ T5840] usb-storage 5-1:0.0: USB Mass Storage device detected [ 116.245117][ T5840] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 116.349788][ T978] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 116.709594][ T6351] netlink: 'syz.0.96': attribute type 3 has an invalid length. [ 116.718538][ T6351] netlink: 'syz.0.96': attribute type 3 has an invalid length. [ 116.736421][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.96'. [ 116.754822][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.841801][ T978] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 116.868497][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.911283][ T978] usb 3-1: config 0 descriptor?? [ 117.184377][ T6361] pimreg: tun_chr_ioctl cmd 1074025673 [ 117.195503][ T10] usb 5-1: USB disconnect, device number 4 [ 117.308892][ T5840] usb 2-1: USB disconnect, device number 7 [ 117.353136][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.399244][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.432649][ T978] asus 0003:0B05:17E0.0001: item fetching failed at offset 2/5 [ 117.443645][ T978] asus 0003:0B05:17E0.0001: Asus hid parse failed: -22 [ 117.451803][ T978] asus 0003:0B05:17E0.0001: probe with driver asus failed with error -22 [ 117.727917][ T6371] Zero length message leads to an empty skb [ 117.802671][ T10] usb 3-1: USB disconnect, device number 7 [ 118.827776][ T6426] loop2: detected capacity change from 0 to 14 [ 118.859733][ T5892] loop2: [ 118.875990][ T6426] loop2: [ 118.997429][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.155415][ T10] usb 1-1: device descriptor read/64, error -71 [ 119.643168][ T890] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 119.708533][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.885744][ T890] usb 2-1: No LPM exit latency info found, disabling LPM. [ 119.931953][ T10] usb 1-1: device descriptor read/64, error -71 [ 120.026295][ T890] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.036976][ T890] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.048002][ T890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.160666][ T10] usb usb1-port1: attempt power cycle [ 120.191533][ T890] usb 2-1: string descriptor 0 read error: -22 [ 120.197885][ T890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.270206][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.333541][ T890] usb 2-1: 0:2 : does not exist [ 120.493395][ T6450] netlink: 'syz.2.108': attribute type 3 has an invalid length. [ 120.502063][ T6450] netlink: 'syz.2.108': attribute type 3 has an invalid length. [ 120.533499][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.108'. [ 120.683834][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.882554][ T890] usb 2-1: USB disconnect, device number 8 [ 120.895666][ T10] usb 1-1: device descriptor read/8, error -71 [ 121.098432][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 121.129952][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.149818][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.158436][ T10] usb 1-1: device descriptor read/8, error -71 [ 121.275205][ T10] usb usb1-port1: unable to enumerate USB device [ 121.331778][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.341754][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 121.355234][ T5906] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.365574][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.374735][ T5906] usb 5-1: Product: syz [ 121.379172][ T5906] usb 5-1: Manufacturer: syz [ 121.391886][ T5906] usb 5-1: SerialNumber: syz [ 121.406727][ T5906] usb 5-1: config 0 descriptor?? [ 121.443743][ T5906] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 121.491200][ T6470] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.549892][ T6472] sp0: Synchronizing with TNC [ 121.615298][ T6474] netlink: 200 bytes leftover after parsing attributes in process `syz.3.115'. [ 121.629498][ T6451] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.109'. [ 121.641478][ T6451] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.109'. [ 121.650777][ T6451] netlink: 584 bytes leftover after parsing attributes in process `syz.4.109'. [ 121.664219][ T6474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.115'. [ 121.685949][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.698126][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.724594][ T6474] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 121.752157][ T6474] netlink: 224 bytes leftover after parsing attributes in process `syz.3.115'. [ 121.854055][ T5906] usb 5-1: USB disconnect, device number 5 [ 121.920876][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.186727][ T6489] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.119'. [ 122.204932][ T6489] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.119'. [ 122.279658][ T978] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.472110][ T978] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.485569][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.560652][ T6500] can0: slcan on ttyS3. [ 123.454062][ T6501] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 123.462281][ T6501] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 124.220770][ T978] usb 1-1: config 0 descriptor?? [ 124.228592][ T978] cp210x 1-1:0.0: cp210x converter detected [ 124.952930][ T978] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 125.004813][ T978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 125.122050][ T6496] can0 (unregistered): slcan off ttyS3. [ 125.158663][ T6506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.182560][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.196833][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.345714][ T5906] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 125.642411][ T5847] Bluetooth: to_multiplier 0 < 10 [ 125.644005][ T6516] __nla_validate_parse: 2 callbacks suppressed [ 125.644020][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 125.666222][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.830252][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.937389][ T5906] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.946727][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.967075][ T5906] usb 4-1: SerialNumber: syz [ 126.026637][ T6516] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 126.252988][ T5906] usb 4-1: 0:2 : does not exist [ 126.321955][ T5906] usb 4-1: USB disconnect, device number 12 [ 126.427393][ T6468] usb 1-1: USB disconnect, device number 8 [ 126.464909][ T6468] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.804516][ T6468] cp210x 1-1:0.0: device disconnected [ 126.878014][ T6528] tipc: Started in network mode [ 126.884092][ T6528] tipc: Node identity 4, cluster identity 4711 [ 126.890525][ T6528] tipc: Node number set to 4 [ 127.636296][ T6542] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 127.680037][ T5847] Bluetooth: hci2: command tx timeout [ 127.873712][ T5906] IPVS: starting estimator thread 0... [ 127.979849][ T6547] IPVS: using max 30 ests per chain, 72000 per kthread [ 128.209889][ T6468] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.249732][ T6466] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.369705][ T6468] usb 1-1: Using ep0 maxpacket: 8 [ 128.376635][ T6468] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 128.407992][ T6468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.471529][ T6466] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.524187][ T6466] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.649985][ T6466] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 128.953221][ T6558] Can't find ip_set type ha [ 129.000167][ T6468] pvrusb2: Hardware description: Terratec Grabster AV400 [ 129.011094][ T6466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.045273][ T6468] pvrusb2: ********** [ 129.049313][ T6468] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 129.090415][ T6466] usb 5-1: config 0 descriptor?? [ 129.172239][ T6468] pvrusb2: Important functionality might not be entirely working. [ 129.196170][ T6468] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 129.223670][ T6468] pvrusb2: ********** [ 129.239697][ T2343] pvrusb2: Invalid write control endpoint [ 129.404044][ T6571] pvrusb2: Invalid write control endpoint [ 129.449528][ T978] usb 1-1: USB disconnect, device number 9 [ 129.507326][ T2343] pvrusb2: Invalid write control endpoint [ 129.526641][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.573635][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.600156][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.629629][ T2343] pvrusb2: Device being rendered inoperable [ 129.635963][ T6466] apple 0003:05AC:027A.0002: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 129.661834][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 129.709518][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 129.731211][ T2343] pvrusb2: Attached sub-driver cx25840 [ 129.750255][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.766104][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 129.809724][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 129.940100][ T6468] usb 5-1: USB disconnect, device number 6 [ 129.996358][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 130.102089][ T6582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.119084][ T6590] sp0: Synchronizing with TNC [ 130.194990][ T6589] [U] è [ 130.357668][ T5907] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.697793][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 130.704792][ T5907] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 130.713374][ T5907] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 130.794271][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.849665][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.892513][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.931762][ T5907] usbtmc 4-1:16.0: bulk endpoints not found [ 131.095584][ T6607] loop2: detected capacity change from 0 to 7 [ 131.113053][ T6607] Dev loop2: unable to read RDB block 7 [ 131.176770][ T5907] usb 4-1: USB disconnect, device number 13 [ 131.259772][ T6607] loop2: AHDI p1 p2 p3 [ 131.285704][ T6607] loop2: partition table partially beyond EOD, truncated [ 131.374935][ T6599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.413400][ T6607] loop2: p1 start 3233191936 is beyond EOD, truncated [ 131.663185][ T6599] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.874034][ T6607] loop2: p2 start 3786425150 is beyond EOD, truncated [ 131.964994][ T6615] Can't find ip_set type ha [ 132.089977][ T6599] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.169232][ T5205] Dev loop2: unable to read RDB block 7 [ 132.202749][ T6599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.208955][ T6599] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.215150][ T5205] loop2: AHDI p1 p2 p3 [ 132.227633][ T5205] loop2: partition table partially beyond EOD, truncated [ 132.235604][ T5205] loop2: p1 start 3233191936 is beyond EOD, truncated [ 132.242635][ T5205] loop2: p2 start 3786425150 is beyond EOD, truncated [ 132.259217][ T6599] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.312301][ T6626] fuse: Bad value for 'fd' [ 132.312386][ T6599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.385137][ T6599] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.393735][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.153'. [ 132.501358][ T6599] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.527890][ T6599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.543636][ T6599] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.555815][ T6599] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.578416][ T6599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.598408][ T6599] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.631094][ T6599] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.954350][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.969722][ T5906] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.979346][ T5907] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.109902][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.150028][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 133.163615][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.178885][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.191771][ T5907] usb 2-1: too many configurations: 124, using maximum allowed: 8 [ 133.206444][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.220091][ T5906] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 133.230186][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.238387][ T5907] usb 2-1: config index 0 descriptor too short (expected 65435, got 72) [ 133.249843][ T5906] usb 5-1: config 0 descriptor?? [ 133.264691][ T5907] usb 2-1: config index 1 descriptor too short (expected 65435, got 72) [ 133.290443][ T5907] usb 2-1: config index 2 descriptor too short (expected 65435, got 72) [ 133.305900][ T5907] usb 2-1: config index 3 descriptor too short (expected 65435, got 72) [ 133.326504][ T5907] usb 2-1: config index 4 descriptor too short (expected 65435, got 72) [ 133.486403][ T5907] usb 2-1: config index 5 descriptor too short (expected 65435, got 72) [ 133.532782][ T5907] usb 2-1: config index 6 descriptor too short (expected 65435, got 72) [ 133.577020][ T5907] usb 2-1: config index 7 descriptor too short (expected 65435, got 72) [ 133.602478][ T5907] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.636732][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.698839][ T5907] usb 2-1: Product: syz [ 133.719829][ T5907] usb 2-1: Manufacturer: syz [ 133.781829][ T5907] usb 2-1: SerialNumber: syz [ 134.060347][ T5907] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.091449][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.120355][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.231190][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.540288][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.550412][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.629734][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 134.632434][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 134.666483][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 134.795181][ T5906] usb 5-1: USB disconnect, device number 7 [ 134.888623][ T6466] usb 2-1: USB disconnect, device number 9 [ 134.909682][ T10] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 135.199711][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.251203][ T6659] trusted_key: encrypted_key: key trusted:syz not found [ 135.762689][ T6466] usb 2-1: ath9k_htc: USB layer deinitialized [ 136.011938][ T30] audit: type=1326 audit(1755963521.392:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.048258][ T30] audit: type=1326 audit(1755963521.392:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.158783][ T30] audit: type=1326 audit(1755963521.452:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.239550][ T30] audit: type=1326 audit(1755963521.452:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.310609][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.343158][ T30] audit: type=1326 audit(1755963521.452:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.382368][ T30] audit: type=1326 audit(1755963521.452:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.390519][ T6670] netlink: 'syz.4.164': attribute type 3 has an invalid length. [ 136.404405][ T30] audit: type=1326 audit(1755963521.452:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.463604][ T30] audit: type=1326 audit(1755963521.452:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.502271][ T30] audit: type=1326 audit(1755963521.452:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.528105][ T30] audit: type=1326 audit(1755963521.452:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 136.543086][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 136.559364][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.649109][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.709733][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 136.941537][ T6676] netlink: 'syz.1.165': attribute type 3 has an invalid length. [ 136.951142][ T6676] netlink: 'syz.1.165': attribute type 3 has an invalid length. [ 137.003150][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'. [ 137.289936][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.380535][ T6681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.410216][ T6680] syzkaller1: entered promiscuous mode [ 137.415733][ T6680] syzkaller1: entered allmulticast mode [ 137.505591][ T6680] Bluetooth: MGMT ver 1.23 [ 138.269341][ T6694] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 138.401962][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.612127][ T6700] trusted_key: encrypted_key: key trusted:syz not found [ 138.629660][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.644487][ T5847] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 138.725408][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.800041][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 138.896392][ T6694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.241023][ T6701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.310163][ T6701] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.397205][ T6701] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 139.732998][ T6717] batman_adv: batadv0: Adding interface: dummy0 [ 139.739288][ T6717] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.042213][ T6717] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 140.294609][ T6717] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 140.468145][ T6717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.491651][ T6717] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 140.670117][ T6466] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.712045][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.899928][ T6466] usb 3-1: Using ep0 maxpacket: 16 [ 140.910958][ T6466] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.300027][ T6466] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.319695][ T6734] program syz.3.183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.418674][ T6466] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.433337][ T5906] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.439699][ T6466] usb 3-1: config 1 has no interface number 1 [ 141.447250][ T6740] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 141.466275][ T6466] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.466640][ T6731] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 141.524635][ T6466] usb 3-1: New USB device found, idVendor=9f6b, idProduct=c643, bcdDevice= 0.9d [ 141.553901][ T6466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.572250][ T6466] usb 3-1: Product: syz [ 141.579910][ T6466] usb 3-1: Manufacturer: syz [ 141.590047][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 141.590137][ T6466] usb 3-1: SerialNumber: syz [ 141.603836][ T5906] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 141.621413][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.632268][ T5906] usb 5-1: Product: syz [ 141.636466][ T5906] usb 5-1: Manufacturer: syz [ 141.643237][ T5906] usb 5-1: SerialNumber: syz [ 141.654670][ T5906] usb 5-1: config 0 descriptor?? [ 141.799867][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.877628][ T6466] usb 3-1: cannot find UAC_HEADER [ 141.901012][ T5906] usb 5-1: USB disconnect, device number 8 [ 141.942205][ T6466] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 141.980280][ T6466] usb 3-1: USB disconnect, device number 8 [ 142.002539][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.040958][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.081896][ T10] usb 2-1: config 1 has no interface number 1 [ 142.105403][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.107407][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.124821][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.144073][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.154001][ T10] usb 2-1: Product: syz [ 142.158548][ T10] usb 2-1: Manufacturer: syz [ 142.163751][ T10] usb 2-1: SerialNumber: syz [ 142.339496][ T6752] binder: 6751:6752 ioctl c0306201 200000000080 returned -14 [ 142.794049][ T6759] netlink: 'syz.4.193': attribute type 2 has an invalid length. [ 142.834612][ T6759] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 142.860282][ T6759] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 143.151018][ T6468] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.321665][ T6468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.335359][ T6468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.355183][ T6468] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 143.458204][ T6468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.499844][ T6466] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.796669][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 143.800566][ T6468] usb 3-1: config 0 descriptor?? [ 143.824396][ T10] usb 2-1: 2:1 : unsupported sample bitwidth 8 in 5 bytes [ 143.933344][ T6466] usb 5-1: Using ep0 maxpacket: 32 [ 143.970481][ T10] usb 2-1: USB disconnect, device number 10 [ 143.989816][ T6466] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 144.000501][ T6466] usb 5-1: config 0 has no interface number 0 [ 144.036566][ T6466] usb 5-1: config 0 interface 89 has no altsetting 0 [ 144.097218][ T6466] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 144.124043][ T6466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.219888][ T6466] usb 5-1: Product: syz [ 144.244282][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.274843][ T6466] usb 5-1: Manufacturer: syz [ 144.304395][ T6468] samsung 0003:0419:0600.0003: item fetching failed at offset 5/7 [ 144.319848][ T6466] usb 5-1: SerialNumber: syz [ 144.346344][ T6468] samsung 0003:0419:0600.0003: parse failed [ 144.366061][ T6466] usb 5-1: config 0 descriptor?? [ 144.390505][ T6468] samsung 0003:0419:0600.0003: probe with driver samsung failed with error -22 [ 144.434943][ T6466] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 144.497361][ T6466] em28xx 5-1:0.89: Video interface 89 found: bulk [ 144.517630][ T6468] usb 3-1: USB disconnect, device number 9 [ 145.090734][ T6466] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 145.747864][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 145.769495][ T6466] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 145.929670][ T6466] em28xx 5-1:0.89: board has no eeprom [ 146.418406][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.063854][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.110187][ T6784] batman_adv: batadv0: Interface activated: dummy0 [ 147.127981][ T6784] batadv0: mtu less than device minimum [ 147.129716][ T6466] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 147.143232][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.154969][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.166144][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.177533][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.188754][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.200034][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.211576][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.222829][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.234075][ T6784] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.266564][ T6466] em28xx 5-1:0.89: analog set to bulk mode. [ 147.376720][ T6798] netlink: 'syz.1.202': attribute type 3 has an invalid length. [ 147.385245][ T6798] netlink: 'syz.1.202': attribute type 3 has an invalid length. [ 147.390899][ T6468] em28xx 5-1:0.89: Registering V4L2 extension [ 147.394244][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 147.480078][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.823737][ T6466] usb 5-1: USB disconnect, device number 9 [ 147.847566][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 147.861258][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 147.893132][ T6466] em28xx 5-1:0.89: Disconnecting em28xx [ 147.915577][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.960070][ T6468] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 148.013596][ T6468] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 148.013611][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.037430][ T6468] em28xx 5-1:0.89: No AC97 audio processor [ 148.100229][ T6468] usb 5-1: Decoder not found [ 148.101732][ T10] usb 1-1: config 1 has no interface number 1 [ 148.119370][ T6468] em28xx 5-1:0.89: failed to create media graph [ 148.231743][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.259979][ T6468] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 148.350529][ T6808] trusted_key: encrypted_key: key trusted:syz not found [ 148.965763][ T10] usb 1-1: New USB device found, idVendor=9f6b, idProduct=c643, bcdDevice= 0.9d [ 149.229286][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.374438][ T6468] em28xx 5-1:0.89: Registering snapshot button... [ 149.391582][ T10] usb 1-1: Product: syz [ 149.427452][ T10] usb 1-1: Manufacturer: syz [ 149.446364][ T10] usb 1-1: SerialNumber: syz [ 149.468716][ T6468] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 149.542649][ T6468] em28xx 5-1:0.89: Remote control support is not available for this card. [ 149.606491][ T6466] em28xx 5-1:0.89: Closing input extension [ 149.627675][ T6466] em28xx 5-1:0.89: Deregistering snapshot button [ 149.992330][ T6819] fuseblk: Bad value for 'fd' [ 150.144906][ T10] usb 1-1: cannot find UAC_HEADER [ 150.218319][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 150.375754][ T6466] em28xx 5-1:0.89: Freeing device [ 150.409855][ T10] usb 1-1: USB disconnect, device number 10 [ 150.755142][ T6836] process 'syz.1.212' launched '/dev/fd/3' with NULL argv: empty string added [ 150.896386][ T6837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.019735][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.139950][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.207463][ T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 151.242891][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.281562][ T10] usb 1-1: config 0 has no interface number 0 [ 151.297087][ T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 151.305474][ T6466] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.333282][ T10] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.378466][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 151.401622][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.451743][ T10] usb 1-1: Product: syz [ 151.468955][ T6851] netlink: 'syz.4.215': attribute type 3 has an invalid length. [ 151.476888][ T6851] netlink: 'syz.4.215': attribute type 3 has an invalid length. [ 151.477814][ T6466] usb 3-1: device descriptor read/64, error -71 [ 151.504643][ T10] usb 1-1: Manufacturer: syz [ 151.512648][ T10] usb 1-1: SerialNumber: syz [ 151.521002][ T10] usb 1-1: config 0 descriptor?? [ 151.550032][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'. [ 151.870682][ T6466] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.059739][ T6466] usb 3-1: device descriptor read/64, error -71 [ 152.170038][ T6466] usb usb3-port1: attempt power cycle [ 152.771181][ T6861] xt_hashlimit: size too large, truncated to 1048576 [ 153.019762][ T6466] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 153.060342][ T6466] usb 3-1: device descriptor read/8, error -71 [ 153.088075][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 153.310011][ T6466] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.350878][ T6466] usb 3-1: device descriptor read/8, error -71 [ 153.470213][ T6466] usb usb3-port1: unable to enumerate USB device [ 153.724726][ T6466] usb 1-1: USB disconnect, device number 11 [ 153.985187][ T6890] netlink: 56 bytes leftover after parsing attributes in process `syz.0.224'. [ 153.994536][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'. [ 155.299700][ T5907] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.462750][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 156.493550][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.556501][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.294163][ T6912] netlink: 84 bytes leftover after parsing attributes in process `syz.2.231'. [ 157.745551][ T6933] sg_write: data in/out 268435420/98 bytes for SCSI command 0x0-- guessing data in; [ 157.745551][ T6933] program syz.4.238 not setting count and/or reply_len properly [ 157.950045][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 158.166385][ T10] usb 2-1: config index 0 descriptor too short (expected 897, got 27) [ 158.174947][ T10] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 158.207013][ T10] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 158.215461][ T6935] net_ratelimit: 11 callbacks suppressed [ 158.215471][ T6935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.265576][ T10] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 158.291414][ T10] usb 2-1: config 2 has no interface number 0 [ 158.310660][ T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 158.328473][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.348418][ T10] usb 2-1: Product: syz [ 158.354005][ T10] usb 2-1: Manufacturer: syz [ 158.368930][ T10] usb 2-1: SerialNumber: syz [ 158.600333][ T10] cdc_ncm 2-1:2.1: CDC Union missing and no IAD found [ 158.612223][ T6946] overlayfs: failed to resolve './file1': -2 [ 159.223335][ T10] cdc_ncm 2-1:2.1: bind() failure [ 159.252641][ T10] usb 2-1: no audio or video endpoints found [ 159.263554][ T10] usb 2-1: USB disconnect, device number 11 [ 160.659680][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 160.825737][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.839710][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.859815][ T10] usb 2-1: Product: syz [ 160.864368][ T10] usb 2-1: Manufacturer: syz [ 160.868968][ T10] usb 2-1: SerialNumber: syz [ 160.884621][ T10] usb 2-1: config 0 descriptor?? [ 161.121815][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 161.169708][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.325968][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.348402][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 161.360368][ T5907] usb 1-1: string descriptor 0 read error: -71 [ 161.370096][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.387726][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.400211][ T5907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 161.419966][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.431781][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 161.455130][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 161.470358][ T5907] usb 1-1: can't set config #1, error -71 [ 161.479407][ T5906] usb 3-1: SerialNumber: syz [ 161.488926][ T5907] usb 1-1: USB disconnect, device number 12 [ 161.520876][ T5906] usb 3-1: config 0 descriptor?? [ 161.578542][ T5906] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 161.603726][ T5906] usb 3-1: No valid video chain found. [ 161.684485][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 162.434356][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 162.647922][ T10] usb 2-1: USB disconnect, device number 12 [ 163.618276][ T6989] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.626591][ T6989] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.636674][ T6989] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.644601][ T6989] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 164.018806][ T5907] usb 3-1: USB disconnect, device number 14 [ 165.002468][ T7009] netlink: 332 bytes leftover after parsing attributes in process `syz.1.257'. [ 165.025027][ T7009] netlink: 'syz.1.257': attribute type 9 has an invalid length. [ 165.033654][ T7009] netlink: 108 bytes leftover after parsing attributes in process `syz.1.257'. [ 165.042855][ T7009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.257'. [ 165.978419][ T7020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.011399][ T7020] bond0: (slave bond1): Enslaving as an active interface with an up link [ 166.089686][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 166.699870][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 166.717068][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.730317][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.751197][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.069672][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.174300][ T10] usb 2-1: Product: syz [ 167.189411][ T10] usb 2-1: Manufacturer: syz [ 167.199809][ T10] usb 2-1: SerialNumber: syz [ 168.116957][ T7049] syz.3.269 (7049) used greatest stack depth: 18016 bytes left [ 168.608401][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 168.608419][ T30] audit: type=1326 audit(1755963553.982:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 168.635898][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.663542][ T30] audit: type=1326 audit(1755963553.982:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 168.684848][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.699733][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.707465][ T30] audit: type=1326 audit(1755963554.032:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 168.864528][ T30] audit: type=1326 audit(1755963554.032:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 168.885832][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.940022][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 168.967045][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.989644][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.013232][ T30] audit: type=1326 audit(1755963554.032:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 169.034565][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.078209][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 169.112856][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.140381][ T30] audit: type=1326 audit(1755963554.032:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983758d550 code=0x7ffc0000 [ 169.149610][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.228048][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.237973][ T5907] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.266349][ T5907] usb 3-1: Manufacturer: syz [ 169.377849][ T5907] usb 3-1: config 0 descriptor?? [ 169.381172][ T30] audit: type=1326 audit(1755963554.032:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983758d550 code=0x7ffc0000 [ 169.405056][ T30] audit: type=1326 audit(1755963554.032:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 169.453720][ T30] audit: type=1326 audit(1755963554.032:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 169.489260][ T30] audit: type=1326 audit(1755963554.032:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983758ebe9 code=0x7ffc0000 [ 169.504326][ T10] usb 2-1: 0:2 : does not exist [ 169.592303][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 169.716689][ T10] usb 2-1: USB disconnect, device number 13 [ 170.153056][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.236707][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.314063][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.401477][ T5907] rc_core: IR keymap rc-hauppauge not found [ 170.413767][ T5907] Registered IR keymap rc-empty [ 170.454801][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.111179][ T7080] Can't find ip_set type hash:ip,ma [ 171.379389][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.634098][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 171.832801][ T7087] can0: slcan on ptm1. [ 172.242301][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 176.376448][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.410389][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.429753][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.905595][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.929788][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.949938][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.987631][ T7083] can0 (unregistered): slcan off ptm1. [ 176.999225][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.047551][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.119795][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.145353][ T7103] PKCS8: Unsupported PKCS#8 version [ 177.175788][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.212148][ T5907] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 177.231973][ T5907] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 177.248177][ T7107] netlink: 10 bytes leftover after parsing attributes in process `syz.3.286'. [ 177.280874][ T5907] usb 3-1: USB disconnect, device number 15 [ 178.170064][ T7118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.132397][ T7126] Can't find ip_set type hash:ip,ma [ 179.568639][ T7133] input: syz0 as /devices/virtual/input/input9 [ 181.021756][ T5907] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 181.213748][ T5907] usb 1-1: device descriptor read/64, error -71 [ 181.541052][ T5907] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 181.679701][ T6466] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.679744][ T5907] usb 1-1: device descriptor read/64, error -71 [ 181.790531][ T5907] usb usb1-port1: attempt power cycle [ 181.829675][ T6466] usb 4-1: Using ep0 maxpacket: 32 [ 181.839269][ T6466] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.891665][ T6466] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.904086][ T6466] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.913837][ T6466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.929855][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.931955][ T6466] hub 4-1:4.0: USB hub found [ 182.035339][ T7172] mmap: syz.1.303 (7172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.130139][ T10] usb 3-1: device descriptor read/64, error -71 [ 182.132499][ T6466] hub 4-1:4.0: config failed, can't read hub descriptor (err -90) [ 182.159668][ T5907] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 182.200289][ T5907] usb 1-1: device descriptor read/8, error -71 [ 182.257160][ T7181] netlink: 332 bytes leftover after parsing attributes in process `syz.4.305'. [ 182.266655][ T7183] [ 182.266959][ T7181] netlink: 'syz.4.305': attribute type 9 has an invalid length. [ 182.268986][ T7183] ====================================================== [ 182.268997][ T7183] WARNING: possible circular locking dependency detected [ 182.269021][ T7183] 6.16.0-syzkaller #0 Not tainted [ 182.278837][ T7181] netlink: 108 bytes leftover after parsing attributes in process `syz.4.305'. [ 182.283624][ T7183] ------------------------------------------------------ [ 182.283634][ T7183] syz.1.306/7183 is trying to acquire lock: [ 182.283645][ T7183] ffff8881427d7358 (&disk->open_mutex){+.+.}-{4:4} [ 182.291196][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.4.305'. [ 182.295694][ T7183] , at: __del_gendisk+0x129/0x9e0 [ 182.337899][ T7183] [ 182.337899][ T7183] but task is already holding lock: [ 182.345291][ T7183] ffff8881427d6368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 182.354856][ T7183] [ 182.354856][ T7183] which lock already depends on the new lock. [ 182.354856][ T7183] [ 182.365251][ T7183] [ 182.365251][ T7183] the existing dependency chain (in reverse order) is: [ 182.374258][ T7183] [ 182.374258][ T7183] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 182.382757][ T7183] lock_acquire+0x120/0x360 [ 182.387769][ T7183] down_write+0x96/0x1f0 [ 182.392520][ T7183] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 182.398839][ T7183] nbd_start_device+0x16c/0xac0 [ 182.404221][ T7183] nbd_genl_connect+0x135b/0x18f0 [ 182.409765][ T7183] genl_family_rcv_msg_doit+0x215/0x300 [ 182.410109][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.415828][ T7183] genl_rcv_msg+0x60e/0x790 [ 182.415852][ T7183] netlink_rcv_skb+0x205/0x470 [ 182.433697][ T7183] genl_rcv+0x28/0x40 [ 182.438198][ T7183] netlink_unicast+0x75c/0x8e0 [ 182.443576][ T7183] netlink_sendmsg+0x805/0xb30 [ 182.448896][ T7183] __sock_sendmsg+0x21c/0x270 [ 182.454104][ T7183] ____sys_sendmsg+0x505/0x830 [ 182.459457][ T7183] ___sys_sendmsg+0x21f/0x2a0 [ 182.464684][ T7183] __x64_sys_sendmsg+0x19b/0x260 [ 182.470153][ T7183] do_syscall_64+0xfa/0x3b0 [ 182.475190][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.481605][ T7183] [ 182.481605][ T7183] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 182.489452][ T7183] lock_acquire+0x120/0x360 [ 182.494484][ T7183] __mutex_lock+0x182/0xe80 [ 182.499528][ T7183] refcount_dec_and_mutex_lock+0x30/0xa0 [ 182.505715][ T7183] nbd_config_put+0x2c/0x790 [ 182.509968][ T5907] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 182.510828][ T7183] nbd_release+0xfe/0x140 [ 182.510857][ T7183] bdev_release+0x533/0x650 [ 182.528242][ T7183] blkdev_release+0x15/0x20 [ 182.533269][ T7183] __fput+0x449/0xa70 [ 182.537882][ T7183] fput_close_sync+0x119/0x200 [ 182.543199][ T7183] __x64_sys_close+0x7f/0x110 [ 182.548448][ T7183] do_syscall_64+0xfa/0x3b0 [ 182.553490][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.559915][ T7183] [ 182.559915][ T7183] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 182.560460][ T5907] usb 1-1: device descriptor read/8, error -71 [ 182.567761][ T7183] validate_chain+0xb9b/0x2140 [ 182.567791][ T7183] __lock_acquire+0xab9/0xd20 [ 182.567806][ T7183] lock_acquire+0x120/0x360 [ 182.567820][ T7183] __mutex_lock+0x182/0xe80 [ 182.594465][ T7183] __del_gendisk+0x129/0x9e0 [ 182.599583][ T7183] del_gendisk+0xe8/0x160 [ 182.604447][ T7183] loop_remove+0x42/0xc0 [ 182.609208][ T7183] loop_control_ioctl+0x4ac/0x5a0 [ 182.614788][ T7183] __se_sys_ioctl+0xfc/0x170 [ 182.619931][ T7183] do_syscall_64+0xfa/0x3b0 [ 182.624974][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.631402][ T7183] [ 182.631402][ T7183] other info that might help us debug this: [ 182.631402][ T7183] [ 182.641632][ T7183] Chain exists of: [ 182.641632][ T7183] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 182.641632][ T7183] [ 182.655848][ T7183] Possible unsafe locking scenario: [ 182.655848][ T7183] [ 182.663311][ T7183] CPU0 CPU1 [ 182.668690][ T7183] ---- ---- [ 182.674055][ T7183] rlock(&set->update_nr_hwq_lock); [ 182.679356][ T7183] lock(&nbd->config_lock); [ 182.686478][ T7183] lock(&set->update_nr_hwq_lock); [ 182.694190][ T7183] lock(&disk->open_mutex); [ 182.698814][ T7183] [ 182.698814][ T7183] *** DEADLOCK *** [ 182.698814][ T7183] [ 182.706963][ T7183] 1 lock held by syz.1.306/7183: [ 182.711904][ T7183] #0: ffff8881427d6368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 182.718327][ T5907] usb usb1-port1: unable to enumerate USB device [ 182.721938][ T7183] [ 182.721938][ T7183] stack backtrace: [ 182.721969][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.1.306 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 182.721989][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.722007][ T7183] Call Trace: [ 182.722018][ T7183] [ 182.722025][ T7183] dump_stack_lvl+0x189/0x250 [ 182.722052][ T7183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.722072][ T7183] ? __pfx__printk+0x10/0x10 [ 182.722096][ T7183] ? print_lock_name+0xde/0x100 [ 182.722120][ T7183] print_circular_bug+0x2ee/0x310 [ 182.722143][ T7183] check_noncircular+0x134/0x160 [ 182.722167][ T7183] validate_chain+0xb9b/0x2140 [ 182.722189][ T7183] ? stack_depot_save_flags+0x40/0x900 [ 182.722217][ T7183] __lock_acquire+0xab9/0xd20 [ 182.722237][ T7183] ? __del_gendisk+0x129/0x9e0 [ 182.722259][ T7183] lock_acquire+0x120/0x360 [ 182.722275][ T7183] ? __del_gendisk+0x129/0x9e0 [ 182.722299][ T7183] ? lockdep_unlock+0x89/0x120 [ 182.722328][ T7183] __mutex_lock+0x182/0xe80 [ 182.722348][ T7183] ? __del_gendisk+0x129/0x9e0 [ 182.722375][ T7183] ? __del_gendisk+0x129/0x9e0 [ 182.722397][ T7183] ? __pfx___mutex_lock+0x10/0x10 [ 182.722417][ T7183] ? __pfx___might_resched+0x10/0x10 [ 182.722440][ T7183] ? __lock_acquire+0xab9/0xd20 [ 182.722457][ T7183] ? disk_del_events+0xb5/0x210 [ 182.722480][ T7183] ? __del_gendisk+0xc1/0x9e0 [ 182.722503][ T7183] __del_gendisk+0x129/0x9e0 [ 182.722527][ T7183] ? del_gendisk+0xe0/0x160 [ 182.722551][ T7183] ? __pfx___del_gendisk+0x10/0x10 [ 182.722576][ T7183] ? down_read+0x1ad/0x2e0 [ 182.722598][ T7183] del_gendisk+0xe8/0x160 [ 182.722628][ T7183] loop_remove+0x42/0xc0 [ 182.722657][ T7183] loop_control_ioctl+0x4ac/0x5a0 [ 182.722676][ T7183] ? __pfx_loop_control_ioctl+0x10/0x10 [ 182.722691][ T7183] ? __fget_files+0x2a/0x420 [ 182.722714][ T7183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.722735][ T7183] ? __pfx_loop_control_ioctl+0x10/0x10 [ 182.722752][ T7183] __se_sys_ioctl+0xfc/0x170 [ 182.722779][ T7183] do_syscall_64+0xfa/0x3b0 [ 182.722799][ T7183] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.722818][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.722836][ T7183] ? clear_bhb_loop+0x60/0xb0 [ 182.722856][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.722874][ T7183] RIP: 0033:0x7f0f7b78ebe9 [ 182.722894][ T7183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.722910][ T7183] RSP: 002b:00007f0f7c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.722929][ T7183] RAX: ffffffffffffffda RBX: 00007f0f7b9b5fa0 RCX: 00007f0f7b78ebe9 [ 182.722943][ T7183] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 182.722955][ T7183] RBP: 00007f0f7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 182.722966][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.722977][ T7183] R13: 00007f0f7b9b6038 R14: 00007f0f7b9b5fa0 R15: 00007ffec9fa7268 [ 182.722998][ T7183] [ 182.734087][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.752358][ T7181] gretap0: entered promiscuous mode [ 182.756973][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.043841][ T7181] vlan2: entered promiscuous mode [ 183.100425][ T10] usb 3-1: device descriptor read/64, error -71 [ 183.170288][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 183.209794][ T10] usb usb3-port1: attempt power cycle [ 183.229726][ T6467] usb 4-1: USB disconnect, device number 14 [ 183.319660][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 183.326134][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.334269][ T9] usb 2-1: config 0 has no interface number 0 [ 183.340421][ T9] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.350137][ T9] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 183.360540][ T9] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 183.370380][ T9] usb 2-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 183.381961][ T9] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 28271, setting to 1024 [ 183.393074][ T9] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 183.404858][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 183.414102][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.422166][ T9] usb 2-1: Product: syz [ 183.426335][ T9] usb 2-1: Manufacturer: syz [ 183.430991][ T9] usb 2-1: SerialNumber: syz [ 183.436614][ T9] usb 2-1: config 0 descriptor?? [ 183.442461][ T7184] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 183.559599][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 183.581052][ T10] usb 3-1: device descriptor read/8, error -71 [ 183.665383][ T7147] base_sock_release(ffff888050747800) sk=ffff888024843000 [ 183.689387][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.701038][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.715280][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 183.725248][ T9] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 183.730187][ T9] usb 2-1: USB disconnect, device number 14 [ 183.829966][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 183.850066][ T10] usb 3-1: device descriptor read/8, error -71 [ 183.960159][ T10] usb usb3-port1: unable to enumerate USB device