last executing test programs: 3m45.352509213s ago: executing program 4 (id=5): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x163}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) 3m45.058369121s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') rmdir(&(0x7f0000000240)='./bus\x00') 3m43.691263867s ago: executing program 4 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/192, 0xc0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) brk(0x55d55ede6004) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xc, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, 0x0) 3m42.216739374s ago: executing program 4 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d903"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m41.1887989s ago: executing program 4 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m26.041062826s ago: executing program 32 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 14.017199835s ago: executing program 1 (id=658): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) 12.80203053s ago: executing program 1 (id=664): syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) 12.721056108s ago: executing program 1 (id=665): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x1}}, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x2, 0x24, 0x66, 0x0, 0x4, 0x1, 0x0, @multicast1, @rand_addr=0x64010101, {[@noop, @noop, @ra={0x94, 0x4, 0x1}]}}, @address_reply}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) set_mempolicy(0x2002, 0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x20048080) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0x3350, 0x800, 0x1, 0x316}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$bt_hci(r5, &(0x7f0000000380)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2}}}, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x187100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.802765986s ago: executing program 3 (id=668): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.096784958s ago: executing program 3 (id=673): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="189500"/17], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x11, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0xc4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x9, 0x9, 0x6, 0x7a2b, 0x9}, @map_fd={0x18, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x8, 0x9}, 0x10, 0x5599, r0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x181c06, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0xfffffe9a}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 9.809247476s ago: executing program 5 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000300)="66b877000f00d067f266433c21c482f9236606b956030000b808000000ba000000000f300fc71f450f01d1c462390a12b8010000000f01d966baf80cb8f0824384ef66bafc0cb03deec4023d29a334c1afed", 0x52}], 0x1, 0x14, &(0x7f0000000680)=[@cr4={0x1, 0x140245}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x77, 0x0, 0x0) 9.397659124s ago: executing program 3 (id=677): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x20000000000a00, 0x4000a00}) 9.011543811s ago: executing program 3 (id=678): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) chdir(0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 8.925145339s ago: executing program 2 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x44, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}}, 0x20000000) 8.891351063s ago: executing program 5 (id=681): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40002017}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 8.740157597s ago: executing program 2 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) getdents64(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000100)={0x0, 0xe734, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave:7-0:N']) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x104, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.965272081s ago: executing program 5 (id=684): syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x88100) epoll_create(0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x100) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000140)={0x9, 0x378, 0x8001, 0x3, 0x6, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xed0}], 0x1}}], 0x8, 0x0, 0x0) 5.965107211s ago: executing program 0 (id=685): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x14, 0x2, 0xe, 0x12, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bbf, 0xa, {0x6, 0x33, 0x0, 0x5, 0x0, 0x2, 0x0, @in6=@local, @in=@broadcast}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bb7, 0x7, {0x6, 0x33, 0x5, 0x3, 0x0, 0x6, 0x0, @in6=@loopback, @in6=@mcast2}}]}, 0x90}}, 0x4000000) 5.964828182s ago: executing program 2 (id=686): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$can_raw(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "000136ff90bfaee763294b15e18b510fcb7c19551f2be293df844756478ec61a5b0ed902f99b954b1eeef4abc1c81c7ae636efdb7368ccb67e667368470eb781"}, 0x48}, 0x1, 0x0, 0x0, 0xc804}, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) mkdir(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(0x0, 0x0) 5.905072267s ago: executing program 3 (id=687): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x2151a, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x5, {0x5, 0xa, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 4.983900585s ago: executing program 5 (id=689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r5, &(0x7f0000000180), 0x100000000000003c) write$FUSE_NOTIFY_RESEND(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x6382c1, 0x0) socket$kcm(0x2, 0xa, 0x2) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001b700)=""/102392, 0x18ff8) 4.40118515s ago: executing program 5 (id=690): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') r1 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000440)={0x0, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617daa1d7", 0x5, 0x40, 0x4, 0x4, 0x2, 0x0, 0xfffffff9, 0x8}) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000180100002020702520000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000100)='erofs_fill_inode\x00', r7}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xb) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0\x00', 0x950009ba) 4.248546465s ago: executing program 0 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) mprotect(&(0x7f000000c000/0x7000)=nil, 0x7000, 0x1000003) 4.120611057s ago: executing program 0 (id=692): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0/file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') lchown(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) stat(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 3.3623355s ago: executing program 5 (id=693): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x20, 0x10, 0x403, 0x300}, 0x20}}, 0x8000) syz_emit_ethernet(0xe5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @rand_addr, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x200000, 0x2, 0x0, 0x1, 0x3, 0xfd6}, 0xfe5a) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r8, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 2.365267754s ago: executing program 1 (id=694): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92018"], 0x1d) syz_emit_vhci(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 2.365052404s ago: executing program 0 (id=695): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40002017}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 2.352663436s ago: executing program 1 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x21c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000000080)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x70bd25, 0xfffffffd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) accept4(r5, 0x0, 0x0, 0x80800) 1.733030625s ago: executing program 3 (id=697): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0xc402, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000140)={0x1d, r8}, 0x4e) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@ocfs2_parent={0x18, 0x2, {{0x3, 0x80, 0x3}, {0x8001, 0x8001, 0x8}}}, &(0x7f00000002c0), 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00'}) socket$netlink(0x10, 0x3, 0x0) shutdown(r9, 0x1) 1.532743464s ago: executing program 2 (id=698): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) read$FUSE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.46280284s ago: executing program 0 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071102c00000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r3, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='udf\x00', 0x2008087, 0x0) 1.206689035s ago: executing program 1 (id=700): socket(0x2c, 0xa, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x1c62, 0x2, 0x7}, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = gettid() rt_sigqueueinfo(r2, 0x21, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x154) r3 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001480)={r3}) prlimit64(0x0, 0xe, 0x0, 0x0) 769.581737ms ago: executing program 2 (id=701): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffff, 0x8002) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000280)=0x6) 49.995045ms ago: executing program 0 (id=702): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x8303, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0xfffffffc, 0x5, 0x7, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0x0, 0x1, 0x7, 0x101, 0x0, 0x2, 0x3, 0x8000, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x5, 0xb, 0xfffffffe, 0x0, 0xfffffff8]}) 0s ago: executing program 2 (id=703): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x20, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x3a) r5 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14, priority 0 [ 103.460317][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.467722][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.515637][ T4831] device syzkaller0 entered promiscuous mode [ 103.521414][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.533266][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.560137][ T4550] device veth0_macvtap entered promiscuous mode [ 103.572775][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.598581][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.617152][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.652155][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.661173][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.670421][ T4542] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 103.699443][ T4542] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 103.755600][ T4542] usb 2-1: USB disconnect, device number 2 [ 103.854615][ T4840] fido_id[4840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 104.002252][ T4823] tipc: Resetting bearer [ 104.171570][ T4823] tipc: Disabling bearer [ 104.219319][ T4846] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 104.231694][ T4550] device veth1_macvtap entered promiscuous mode [ 104.318757][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.375872][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.425205][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.468825][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.517241][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.533723][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.567817][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.736802][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.896206][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.989124][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.026472][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.088826][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.162663][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.220105][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.300516][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.347365][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.529237][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.585507][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.637224][ T4550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.822112][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.859614][ T4550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.900308][ T4550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.926981][ T4550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.938979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.955517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.969296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.637950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.652559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.860255][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 107.006326][ T1111] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 107.016981][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.031829][ T4844] orangefs_mount: mount request failed with -4 [ 107.055813][ T1111] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.067074][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.099835][ T1111] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.121123][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.134484][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.142008][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.156634][ T1111] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.197589][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.207571][ T1111] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.239847][ T1111] usb 1-1: config 0 has no interface number 0 [ 107.258193][ T1111] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 107.305395][ T1111] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.386509][ T1111] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.407091][ T1111] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.494009][ T1111] usb 1-1: config 0 interface 125 has no altsetting 0 [ 107.870505][ T1111] usb 1-1: config 0 interface 125 has no altsetting 2 [ 108.020603][ T1111] usb 1-1: string descriptor 0 read error: -71 [ 108.027404][ T1111] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 108.038383][ T4898] ERROR: device name not specified. [ 108.167548][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.187101][ T1111] usb 1-1: config 0 descriptor?? [ 108.215863][ T1111] usb 1-1: can't set config #0, error -71 [ 108.287514][ T1111] usb 1-1: USB disconnect, device number 5 [ 110.031565][ T1111] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 111.510536][ T1111] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 111.721137][ T1111] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.798003][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.830401][ T4172] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.010658][ T1111] usb 2-1: Product: syz [ 112.099825][ T1111] usb 2-1: Manufacturer: syz [ 112.196145][ T1111] usb 2-1: SerialNumber: syz [ 112.521753][ T4961] capability: warning: `syz.0.159' uses 32-bit capabilities (legacy support in use) [ 112.781011][ T4172] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 112.791410][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.800003][ T4172] usb 6-1: Product: syz [ 112.806875][ T4172] usb 6-1: Manufacturer: syz [ 112.811893][ T4172] usb 6-1: SerialNumber: syz [ 112.880518][ T1111] cdc_ncm 2-1:1.0: bind() failure [ 112.985468][ T1111] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 113.002270][ T1111] cdc_ncm 2-1:1.1: bind() failure [ 113.035165][ T1111] usb 2-1: USB disconnect, device number 3 [ 113.091922][ T4172] mdc800 6-1:39.0: probe fails -> wrong Number of Configuration [ 113.120990][ T4172] usb 6-1: USB disconnect, device number 2 [ 116.642030][ T5032] capability: warning: `syz.3.171' uses deprecated v2 capabilities in a way that may be insecure [ 116.980260][ T4172] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.508541][ T5042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.175'. [ 117.800476][ T4172] usb 2-1: Using ep0 maxpacket: 8 [ 118.910320][ T4172] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 119.306544][ T4172] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 121.034278][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.084720][ T4172] usb 2-1: config 0 descriptor?? [ 121.111000][ T4172] usb 2-1: can't set config #0, error -71 [ 121.117873][ T4172] usb 2-1: USB disconnect, device number 4 [ 125.523001][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 125.581432][ T5110] IPVS: Error joining to the multicast group [ 126.849636][ T5129] Zero length message leads to an empty skb [ 127.040430][ T4172] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.290308][ T1108] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.350287][ T4172] usb 2-1: Using ep0 maxpacket: 16 [ 127.470484][ T4172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.530335][ T4172] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 127.539400][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.589081][ T4172] usb 2-1: config 0 descriptor?? [ 127.720378][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.955089][ T5159] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.985952][ T5159] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 129.011129][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 129.124486][ T4172] logitech 0003:046D:CA04.0003: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 129.160575][ T1108] usb 4-1: config 0 has no interfaces? [ 129.175803][ T4172] logitech 0003:046D:CA04.0003: no inputs found [ 129.374523][ T4294] usb 2-1: USB disconnect, device number 5 [ 129.490596][ T1108] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 129.515912][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.537062][ T5178] fido_id[5178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.547557][ T1108] usb 4-1: Product: syz [ 129.556119][ T1108] usb 4-1: Manufacturer: syz [ 129.560848][ T1108] usb 4-1: SerialNumber: syz [ 129.568846][ T1108] usb 4-1: config 0 descriptor?? [ 129.964340][ T4294] usb 4-1: USB disconnect, device number 5 [ 131.365348][ T5197] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 131.641817][ T5197] device veth0_vlan left promiscuous mode [ 131.649603][ T5197] device veth0_vlan entered promiscuous mode [ 131.657851][ T5197] team0: Device veth0_vlan failed to register rx_handler [ 132.564050][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.570909][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.658947][ T5197] syz.0.212 (5197) used greatest stack depth: 20256 bytes left [ 132.870327][ T4294] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.130331][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 133.250566][ T4294] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 133.276616][ T4294] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.317214][ T4294] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.351825][ T4294] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.434872][ T4294] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.491173][ T4294] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.526138][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.830542][ T4294] usb 4-1: GET_CAPABILITIES returned 0 [ 133.836183][ T4294] usbtmc 4-1:16.0: can't read capabilities [ 134.414947][ T4294] usb 4-1: USB disconnect, device number 6 [ 135.661627][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.540288][ T4172] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.856355][ T4172] usb 3-1: Using ep0 maxpacket: 32 [ 145.137882][ T4172] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 145.401058][ T4172] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 146.020303][ T4172] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 146.260399][ T4172] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 146.372317][ T4172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.477210][ T4172] usb 3-1: Product: syz [ 146.512883][ T4172] usb 3-1: Manufacturer: syz [ 146.583561][ T4172] usb 3-1: SerialNumber: syz [ 146.673547][ T4172] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 146.704630][ T4172] imon 3-1:155.0: unable to initialize intf0, err -19 [ 146.777585][ T4172] imon:imon_probe: failed to initialize context! [ 147.362888][ T4172] imon 3-1:155.0: unable to register, err -19 [ 147.467640][ T4543] usb 3-1: USB disconnect, device number 3 [ 148.521714][ T5432] sctp: failed to load transform for md5: -2 [ 149.493617][ T5466] binder: 5459:5466 ioctl c0306201 0 returned -14 [ 151.322191][ T5487] bridge0: port 3(gretap0) entered blocking state [ 151.328792][ T5487] bridge0: port 3(gretap0) entered disabled state [ 151.342508][ T5487] device gretap0 entered promiscuous mode [ 151.350348][ T5487] bridge0: port 3(gretap0) entered blocking state [ 151.356965][ T5487] bridge0: port 3(gretap0) entered forwarding state [ 152.960198][ C1] sched: RT throttling activated [ 154.253401][ T2404] libceph: connect (1)[c::]:6789 error -101 [ 154.259808][ T2404] libceph: mon0 (1)[c::]:6789 connect error [ 154.310558][ T5505] ceph: No mds server is up or the cluster is laggy [ 154.551747][ T2404] libceph: connect (1)[c::]:6789 error -101 [ 154.557719][ T2404] libceph: mon0 (1)[c::]:6789 connect error [ 154.861226][ T5516] ubi31: attaching mtd0 [ 154.882594][ T5516] ubi31: scanning is finished [ 154.887427][ T5516] ubi31: empty MTD device detected [ 155.325419][ T4543] libceph: connect (1)[c::]:6789 error -101 [ 155.338358][ T4543] libceph: mon0 (1)[c::]:6789 connect error [ 155.547151][ T5516] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.565915][ T5516] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 155.595915][ T5516] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 155.630418][ T5516] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 155.643255][ T5516] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 155.690272][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.991472][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 156.070720][ T5516] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 156.130494][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.163508][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.195165][ T5516] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 953861043 [ 156.255884][ T5516] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 156.353175][ T5523] ubi31: background thread "ubi_bgt31d" started, PID 5523 [ 156.411581][ T1108] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 156.455097][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.566984][ T1108] usb 2-1: Product: syz [ 156.596551][ T1108] usb 2-1: Manufacturer: syz [ 157.088491][ T1108] usb 2-1: SerialNumber: syz [ 157.120106][ T1108] usb 2-1: config 0 descriptor?? [ 157.416093][ T1108] usb 2-1: USB disconnect, device number 6 [ 159.670882][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 160.008047][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.070530][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.270306][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 160.310294][ T4172] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.400559][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.410955][ T7] usb 3-1: config 0 has no interfaces? [ 160.416444][ T7] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 160.425617][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.431399][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.436141][ T7] usb 3-1: config 0 descriptor?? [ 160.452427][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 160.466023][ T1108] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 160.477486][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.489639][ T1108] usb 2-1: config 0 descriptor?? [ 160.690365][ T4172] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 160.702702][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.800368][ T4172] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 160.809476][ T4172] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 160.825289][ T4172] usb 4-1: Manufacturer: syz [ 160.838710][ T4172] usb 4-1: config 0 descriptor?? [ 160.893289][ T4172] igorplugusb 4-1:0.0: endpoint incorrect [ 160.971850][ T1108] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 2/5 [ 160.988664][ T1108] kovaplus 0003:1E7D:2D50.0004: parse failed [ 161.001709][ T1108] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22 [ 161.101569][ T4172] usb 4-1: USB disconnect, device number 7 [ 161.194348][ T7] usb 2-1: USB disconnect, device number 7 [ 161.532870][ T5611] infiniband syz2: set down [ 161.537617][ T5611] infiniband syz2: added ipvlan0 [ 161.550742][ T5611] infiniband syz2: Couldn't open port 1 [ 161.614167][ T5611] RDS/IB: syz2: added [ 161.618734][ T5611] smc: adding ib device syz2 with port count 1 [ 161.625610][ T5611] smc: ib device syz2 port 1 has pnetid [ 164.885326][ T4261] usb 3-1: USB disconnect, device number 4 [ 164.905641][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.985396][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.077337][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.162634][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.492183][ T5656] chnl_net:caif_netlink_parms(): no params data found [ 166.643066][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.745146][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.752595][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.771438][ T5656] device bridge_slave_0 entered promiscuous mode [ 166.792399][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.819909][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.861710][ T5656] device bridge_slave_1 entered promiscuous mode [ 166.875722][ T155] device hsr_slave_0 left promiscuous mode [ 166.886941][ T155] device hsr_slave_1 left promiscuous mode [ 166.915405][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.931993][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.960446][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.989568][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.010705][ T155] device bridge_slave_1 left promiscuous mode [ 167.020539][ T7] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 167.034367][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.052909][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.071010][ T7] usb 2-1: config 0 descriptor?? [ 167.082761][ T155] device bridge_slave_0 left promiscuous mode [ 167.089028][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.107883][ T155] device veth1_macvtap left promiscuous mode [ 167.114622][ T155] device veth0_macvtap left promiscuous mode [ 167.147465][ T155] device veth1_vlan left promiscuous mode [ 167.153504][ T155] device veth0_vlan left promiscuous mode [ 167.578598][ T155] team0 (unregistering): Port device team_slave_1 removed [ 167.600995][ T4543] Bluetooth: hci0: command 0x0409 tx timeout [ 167.612998][ T155] team0 (unregistering): Port device team_slave_0 removed [ 167.642800][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.683432][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.845785][ T155] bond0 (unregistering): Released all slaves [ 167.938163][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.957772][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.977856][ T5698] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.987104][ T5698] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.996004][ T5698] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.004950][ T5698] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.019084][ T5698] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.028036][ T5698] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.037002][ T5698] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.045944][ T5698] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.148652][ T5656] team0: Port device team_slave_0 added [ 168.175147][ T5656] team0: Port device team_slave_1 added [ 168.302081][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.309211][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.335931][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.352133][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.359380][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.387251][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.450973][ T7] usb 2-1: Cannot set autoneg [ 168.466785][ T7] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 168.495506][ T7] usb 2-1: USB disconnect, device number 8 [ 168.517603][ T5656] device hsr_slave_0 entered promiscuous mode [ 168.566960][ T5656] device hsr_slave_1 entered promiscuous mode [ 168.578176][ T5656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.599949][ T5656] Cannot create hsr debugfs directory [ 168.607019][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 168.685256][ T4172] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.108834][ T4172] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.122276][ T4172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.133964][ T5732] input: syz1 as /devices/virtual/input/input8 [ 169.241157][ T4172] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.256166][ T4172] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.285901][ T4172] usb 3-1: Manufacturer: syz [ 169.325153][ T4172] usb 3-1: config 0 descriptor?? [ 169.537269][ T5656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.680549][ T4543] Bluetooth: hci0: command 0x041b tx timeout [ 169.838860][ T5656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.964143][ T5656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.995565][ T4172] rc_core: IR keymap rc-hauppauge not found [ 170.002016][ T4172] Registered IR keymap rc-empty [ 170.019958][ T5656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.037850][ T4172] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 170.095438][ T4172] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 170.208821][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.225676][ T4172] usb 3-1: USB disconnect, device number 5 [ 170.287193][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.717032][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 170.743683][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.824123][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.861722][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.884990][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.923306][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.930428][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.978320][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.005420][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.035318][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.042451][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.097489][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.245246][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.303091][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.385890][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.414350][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.430313][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.456493][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.476035][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.500883][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.521334][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.549760][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.585364][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.614635][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.760471][ T2404] Bluetooth: hci0: command 0x040f tx timeout [ 172.368794][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.397176][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.440104][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.517358][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.562348][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.701129][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.720853][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.756528][ T5656] device veth0_vlan entered promiscuous mode [ 172.768700][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.821062][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.851994][ T5656] device veth1_vlan entered promiscuous mode [ 172.972782][ T5656] device veth0_macvtap entered promiscuous mode [ 173.000387][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.009604][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.345743][ T5656] device veth1_macvtap entered promiscuous mode [ 173.502334][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.587176][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.822548][ T5822] batman_adv: batadv0: Adding interface: dummy0 [ 173.840441][ T2404] Bluetooth: hci0: command 0x0419 tx timeout [ 173.861214][ T5822] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.905432][ T5822] batman_adv: batadv0: Interface activated: dummy0 [ 173.925363][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.995843][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.006683][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.018641][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.028665][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.039441][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.049678][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.062083][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.084275][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.096397][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.132527][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.188913][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.328964][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.810553][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.832292][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.876574][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.890750][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.901364][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.912360][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.925483][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.956225][ T5656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.997932][ T5656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.007137][ T5656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.016218][ T5656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.036004][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.049321][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.898685][ T4313] Bluetooth: hci4: command 0x0406 tx timeout [ 176.280136][ T4313] Bluetooth: hci1: command 0x0406 tx timeout [ 176.294919][ T4313] Bluetooth: hci2: command 0x0406 tx timeout [ 176.458041][ T5853] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.505663][ T5853] kvm: pic: non byte read [ 176.517608][ T5853] kvm: pic: level sensitive irq not supported [ 176.518120][ T5853] kvm: pic: non byte read [ 176.588435][ T4983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.621857][ T4983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.639605][ T5853] kvm: pic: level sensitive irq not supported [ 176.641007][ T5853] kvm: pic: non byte read [ 176.738793][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.751648][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.769304][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.852436][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.311162][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.355649][ T26] audit: type=1326 audit(1766324412.953:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.2.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b38de1749 code=0x0 [ 181.509185][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.369'. [ 181.851119][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 181.930314][ T4543] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 182.210869][ T23] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 183.120859][ T4543] usb 2-1: Using ep0 maxpacket: 32 [ 183.266740][ T23] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 183.287140][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.295640][ T23] usb 4-1: Product: syz [ 183.305918][ T23] usb 4-1: Manufacturer: syz [ 183.360732][ T4543] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 183.932167][ T4543] usb 2-1: config 0 has no interface number 0 [ 183.940713][ T23] usb 4-1: SerialNumber: syz [ 183.948305][ T4543] usb 2-1: config 0 interface 89 has no altsetting 0 [ 183.966171][ T23] usb 4-1: config 0 descriptor?? [ 184.058008][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 184.557245][ T23] usb 4-1: can't set config #0, error -71 [ 184.634596][ T23] usb 4-1: USB disconnect, device number 8 [ 184.730477][ T4543] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 184.759933][ T4543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.549428][ T4543] usb 2-1: config 0 descriptor?? [ 186.600345][ T4543] usb 2-1: can't set config #0, error -71 [ 186.681151][ T4543] usb 2-1: USB disconnect, device number 9 [ 188.598649][ T26] audit: type=1326 audit(1766324420.193:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 188.960753][ T26] audit: type=1326 audit(1766324420.193:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 188.989795][ T26] audit: type=1326 audit(1766324420.193:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 189.062154][ T26] audit: type=1326 audit(1766324420.193:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 189.088821][ T26] audit: type=1326 audit(1766324420.193:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 189.300745][ T26] audit: type=1326 audit(1766324420.193:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 189.382349][ T26] audit: type=1326 audit(1766324420.193:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 189.458794][ T26] audit: type=1326 audit(1766324420.193:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 189.610582][ T26] audit: type=1326 audit(1766324420.193:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 190.089354][ T26] audit: type=1326 audit(1766324420.193:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8090a25749 code=0x7ffc0000 [ 191.537465][ T6050] kAFS: unable to lookup cell 'Þ({^ú@' [ 194.051943][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.058288][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.050334][ T4543] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 199.171916][ T6154] print_req_error: 2 callbacks suppressed [ 199.171934][ T6154] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.192892][ T6154] qnx6: unable to read the first superblock [ 199.199257][ T6154] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.210215][ T6154] qnx6: unable to read the first superblock [ 199.216109][ T6154] qnx6: unable to read the first superblock [ 200.374885][ T6161] overlayfs: conflicting lowerdir path [ 200.920407][ T4543] usb 6-1: Using ep0 maxpacket: 16 [ 201.287684][ T4543] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 201.310379][ T4172] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.323040][ T4543] usb 6-1: config 0 has no interface number 0 [ 201.825046][ T4543] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.995935][ T4543] usb 6-1: string descriptor 0 read error: -71 [ 202.010350][ T4172] usb 2-1: Using ep0 maxpacket: 16 [ 202.018058][ T4543] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 202.035286][ T4543] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 202.130499][ T4172] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 203.583297][ T4543] usb 6-1: config 0 descriptor?? [ 203.591661][ T4172] usb 2-1: config 0 has no interface number 0 [ 203.597770][ T4172] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 203.607940][ T4543] usb 6-1: can't set config #0, error -71 [ 203.621237][ T4543] usb 6-1: USB disconnect, device number 3 [ 203.838909][ T4172] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.616334][ T6186] tipc: Started in network mode [ 204.630503][ T6186] tipc: Node identity ac14140f, cluster identity 4711 [ 205.107230][ T4172] usb 2-1: string descriptor 0 read error: -71 [ 205.168384][ T4172] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 205.181565][ T6186] tipc: New replicast peer: 255.255.255.255 [ 205.188174][ T4172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.258803][ T4172] usb 2-1: config 0 descriptor?? [ 205.280370][ T4172] usb 2-1: can't set config #0, error -71 [ 205.326391][ T6186] tipc: Enabled bearer , priority 10 [ 205.407071][ T4172] usb 2-1: USB disconnect, device number 10 [ 205.893449][ T6198] overlayfs: filesystem on './file0' not supported as upperdir [ 205.926921][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 205.951969][ T6191] tipc: Disabling bearer [ 206.535950][ T6206] device syzkaller1 entered promiscuous mode [ 206.640300][ T4172] Bluetooth: hci5: command 0x0406 tx timeout [ 208.320064][ T4313] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 209.110427][ T4313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.172865][ T4313] usb 2-1: not running at top speed; connect to a high speed hub [ 209.270477][ T4313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.295787][ T4313] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.315428][ T4313] usb 2-1: config 1 has no interface number 1 [ 209.324847][ T4313] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.353666][ T4313] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 209.540446][ T4313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.549710][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.561807][ T4313] usb 2-1: Product: syz [ 209.567110][ T4313] usb 2-1: Manufacturer: syz [ 209.578730][ T4313] usb 2-1: SerialNumber: syz [ 209.921084][ T4313] hub 2-1:1.0: Invalid hub with more than one config or interface [ 210.370387][ T4313] hub: probe of 2-1:1.0 failed with error -22 [ 210.437018][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'. [ 210.537337][ T4313] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 212.900182][ T4313] usb 2-1: USB disconnect, device number 11 [ 213.830320][ T4313] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 214.278421][ T4313] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.294747][ T4313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.309941][ T4313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.660461][ T4313] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 214.729117][ T6274] device team_slave_0 entered promiscuous mode [ 214.735554][ T6274] device team_slave_1 entered promiscuous mode [ 214.761285][ T6274] device vlan2 entered promiscuous mode [ 214.770478][ T6274] device team0 entered promiscuous mode [ 214.840518][ T4313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.857559][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.867001][ T4313] usb 2-1: Product: syz [ 214.877784][ T4313] usb 2-1: Manufacturer: syz [ 214.882741][ T4313] usb 2-1: SerialNumber: syz [ 215.406726][ T6264] udc-core: couldn't find an available UDC or it's busy [ 215.440735][ T6264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 215.730310][ T4172] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.980436][ T4172] usb 6-1: Using ep0 maxpacket: 32 [ 216.100527][ T4313] usb 2-1: 0:2 : does not exist [ 216.105577][ T4172] usb 6-1: config index 0 descriptor too short (expected 12799, got 27) [ 216.135961][ T4248] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.142655][ T4172] usb 6-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 216.165889][ T4313] usb 2-1: USB disconnect, device number 12 [ 216.173138][ T4172] usb 6-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 216.191710][ T4172] usb 6-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 216.257368][ T4248] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.334252][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 216.360579][ T4172] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 216.390022][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.455542][ T4172] usb 6-1: Product: syz [ 216.608060][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.848505][ T4195] Bluetooth: hci1: hardware error 0x06 [ 216.996606][ T4172] usb 6-1: Manufacturer: syz [ 217.008628][ T4172] usb 6-1: SerialNumber: syz [ 217.052248][ T6302] fido_id[6302]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.592269][ T6280] netlink: 116 bytes leftover after parsing attributes in process `syz.5.468'. [ 217.857916][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 218.184917][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 218.200533][ T6316] netlink: 'syz.1.478': attribute type 7 has an invalid length. [ 218.208512][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 218.281719][ T4172] usb 6-1: USB disconnect, device number 4 [ 218.770503][ T4248] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.240481][ T4248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.254139][ T4248] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 219.520939][ T4248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.559224][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.646231][ T4248] usb 4-1: Product: syz [ 219.787990][ T4248] usb 4-1: Manufacturer: syz [ 219.813287][ T4248] usb 4-1: SerialNumber: syz [ 220.657730][ T6351] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 221.195815][ T6326] netlink: 104 bytes leftover after parsing attributes in process `syz.3.480'. [ 221.477131][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 221.486305][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 223.070687][ T4248] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 223.140473][ T4248] usb 4-1: USB disconnect, device number 9 [ 223.499405][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 226.470383][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.054755][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.076031][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 227.092125][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 227.107144][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 227.117879][ T1108] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 227.127917][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.147501][ T1108] usb 4-1: config 0 descriptor?? [ 228.894434][ T6436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.512'. [ 229.972826][ T6449] fuse: Bad value for 'fd' [ 229.983641][ T4172] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 230.921543][ T6450] netlink: 2 bytes leftover after parsing attributes in process `syz.0.516'. [ 231.186047][ T4172] usb 2-1: Using ep0 maxpacket: 32 [ 231.340588][ T1108] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 231.372174][ T1108] hdpvr 4-1:0.0: device init failed [ 231.420618][ T4172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 231.445046][ T4172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 231.456700][ T1108] hdpvr: probe of 4-1:0.0 failed with error -12 [ 231.487025][ T4172] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.489649][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 231.571836][ T1108] usb 4-1: USB disconnect, device number 10 [ 231.710506][ T4172] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 231.739527][ T4172] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 231.792850][ T4172] usb 2-1: Product: syz [ 231.816616][ T4172] usb 2-1: Manufacturer: syz [ 231.861744][ T4172] usb 2-1: SerialNumber: syz [ 232.701930][ T4172] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 233.314781][ T6476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.360642][ T6477] netlink: 'syz.3.525': attribute type 10 has an invalid length. [ 233.597246][ T6477] team0: Port device dummy0 added [ 233.648503][ T6476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.720762][ T6476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.823423][ T6476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.910073][ T4240] usb 2-1: USB disconnect, device number 13 [ 234.028971][ T4240] appletouch 2-1:1.0: input: appletouch disconnected [ 235.000027][ T6476] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.511213][ T6476] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.526084][ T6476] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.592249][ T6476] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.561896][ T6517] device syzkaller0 entered promiscuous mode [ 238.830295][ T6528] binder: 6522:6528 ioctl 400c620e 0 returned -14 [ 239.297795][ T6534] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 239.325084][ T6534] CIFS mount error: No usable UNC path provided in device string! [ 239.325084][ T6534] [ 239.340374][ T6534] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 241.171273][ T6563] nvme_fabrics: unknown parameter or missing value '”–¢Cê' in ctrl creation request [ 242.145824][ T6570] autofs4:pid:6570:autofs_fill_super: called with bogus options [ 247.785994][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.567'. [ 247.980252][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.567'. [ 248.232732][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.241496][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.725976][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 255.441636][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.447976][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.386148][ T6723] device vlan0 entered promiscuous mode [ 258.712364][ T6737] netlink: 'syz.2.608': attribute type 4 has an invalid length. [ 258.750142][ T6737] netlink: 'syz.2.608': attribute type 4 has an invalid length. [ 258.819486][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 258.824605][ T23] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 259.562851][ T6745] device syzkaller0 entered promiscuous mode [ 260.200479][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 260.329882][ T23] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 260.349261][ T23] usb 4-1: config 95 has no interface number 0 [ 260.356088][ T23] usb 4-1: config 95 interface 1 has no altsetting 0 [ 262.060447][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 262.081663][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.106294][ T23] usb 4-1: Product: syz [ 262.125250][ T23] usb 4-1: Manufacturer: syz [ 262.129867][ T23] usb 4-1: SerialNumber: syz [ 262.237486][ T6788] program syz.0.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.240830][ T6785] syz.2.621 (6785) used greatest stack depth: 18560 bytes left [ 263.390466][ T23] usb 4-1: USB disconnect, device number 11 [ 267.148874][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.640'. [ 267.200072][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.640'. [ 270.787422][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 272.650374][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 272.673249][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 272.686535][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 272.694625][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 272.707789][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 272.786645][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 272.796906][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 272.810308][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 272.824478][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.106697][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.500613][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.522712][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.540339][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.558219][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.578711][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.590185][ T4313] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 273.624765][ T4313] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 274.529331][ T6934] fido_id[6934]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 276.509863][ T6977] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 276.519785][ T6977] netlink: 'syz.2.679': attribute type 2 has an invalid length. [ 277.473337][ T6987] tmpfs: Bad value for 'mpol' [ 278.714515][ T6990] sctp: [Deprecated]: syz.0.683 (pid 6990) Use of int in maxseg socket option. [ 278.714515][ T6990] Use struct sctp_assoc_value instead [ 279.910542][ T4240] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 280.510397][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.787222][ T4240] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 280.796417][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.807056][ T4240] usb 4-1: config 0 descriptor?? [ 281.951274][ T4240] holtek_mouse 0003:04D9:A072.0007: item fetching failed at offset 2/5 [ 282.010693][ T4240] holtek_mouse 0003:04D9:A072.0007: hid parse failed: -22 [ 282.044056][ T4240] holtek_mouse: probe of 0003:04D9:A072.0007 failed with error -22 [ 282.246173][ T4240] usb 4-1: USB disconnect, device number 12 [ 283.290565][ T4313] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 283.560312][ T4313] usb 6-1: Using ep0 maxpacket: 32 [ 283.700527][ T4313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 283.717938][ T4313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 283.729666][ T4313] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.940663][ T4233] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 284.200767][ T4313] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 284.329436][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 284.361538][ T4313] usb 6-1: Product: syz [ 284.366468][ T4313] usb 6-1: Manufacturer: syz [ 284.487243][ T4313] usb 6-1: SerialNumber: syz [ 284.530481][ T4233] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.641270][ T150] nbd_handle_cmd: 2 callbacks suppressed [ 284.655903][ T150] block nbd0: Attempted send on invalid socket [ 284.664026][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.679950][ T150] block nbd0: Attempted send on invalid socket [ 284.686614][ T150] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.698568][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 284.712550][ T150] block nbd0: Attempted send on invalid socket [ 284.718907][ T150] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.733672][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 284.750475][ T150] block nbd0: Attempted send on invalid socket [ 284.756849][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.911162][ T150] block nbd0: Attempted send on invalid socket [ 284.939477][ T150] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.950822][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 284.960653][ T150] block nbd0: Attempted send on invalid socket [ 284.966870][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.978122][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 284.988048][ T150] block nbd0: Attempted send on invalid socket [ 284.994281][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.005906][ T150] block nbd0: Attempted send on invalid socket [ 285.012302][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.023588][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 285.034193][ T150] block nbd0: Attempted send on invalid socket [ 285.040452][ T150] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.051940][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 285.062002][ T150] block nbd0: Attempted send on invalid socket [ 285.068212][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.079547][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 285.089305][ T7048] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 285.098845][ T7048] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 285.120109][ T4313] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input12 [ 285.129582][ T4233] usb 4-1: config 0 interface 0 has no altsetting 0 [ 285.140389][ T4233] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 285.152664][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.283351][ T4233] usb 4-1: config 0 descriptor?? [ 285.301631][ T7054] comedi comedi2: pcl818: I/O port conflict (0x4f27,16) [ 285.344591][ T7054] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 285.356306][ T7054] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 285.364698][ T7054] CPU: 0 PID: 7054 Comm: syz.0.702 Not tainted syzkaller #0 [ 285.371959][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.382011][ T7054] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 285.387542][ T7054] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d 95 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c 95 49 fa 4d 8b 24 24 48 83 c3 [ 285.407130][ T7054] RSP: 0018:ffffc90003467a18 EFLAGS: 00010206 [ 285.413179][ T7054] RAX: 0000000000000005 RBX: ffff88801eb3fe00 RCX: 0000000000080000 [ 285.421131][ T7054] RDX: ffffc90003f01000 RSI: 000000000000299a RDI: 000000000000299b [ 285.429080][ T7054] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100557c426 [ 285.437029][ T7054] R10: ffffed100557c426 R11: 1ffff1100557c425 R12: 0000000000000028 [ 285.444984][ T7054] R13: dffffc0000000000 R14: ffff88802abe2000 R15: dffffc0000000000 [ 285.452935][ T7054] FS: 00007f808ec8c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 285.461849][ T7054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.468423][ T7054] CR2: 000055e416ba1070 CR3: 00000000561f5000 CR4: 00000000003506f0 [ 285.476378][ T7054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.484345][ T7054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.492296][ T7054] Call Trace: [ 285.495557][ T7054] [ 285.498466][ T7054] pcl818_detach+0x62/0xd0 [ 285.502864][ T7054] comedi_device_detach_locked+0x16e/0x710 [ 285.508649][ T7054] comedi_device_attach+0x5c9/0x700 [ 285.513827][ T7054] comedi_unlocked_ioctl+0x5a6/0x1050 [ 285.519190][ T7054] ? kfree+0xef/0x2a0 [ 285.523148][ T7054] ? comedi_poll+0x8b0/0x8b0 [ 285.527729][ T7054] ? bpf_lsm_file_ioctl+0x5/0x10 [ 285.532643][ T7054] ? security_file_ioctl+0x7c/0xa0 [ 285.537733][ T7054] ? comedi_poll+0x8b0/0x8b0 [ 285.542303][ T7054] __se_sys_ioctl+0xfa/0x170 [ 285.546874][ T7054] do_syscall_64+0x4c/0xa0 [ 285.551272][ T7054] ? clear_bhb_loop+0x30/0x80 [ 285.555944][ T7054] ? clear_bhb_loop+0x30/0x80 [ 285.560602][ T7054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.566474][ T7054] RIP: 0033:0x7f8090a25749 [ 285.570868][ T7054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.590453][ T7054] RSP: 002b:00007f808ec8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.598848][ T7054] RAX: ffffffffffffffda RBX: 00007f8090c7bfa0 RCX: 00007f8090a25749 [ 285.606802][ T7054] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 285.614753][ T7054] RBP: 00007f8090aa9f91 R08: 0000000000000000 R09: 0000000000000000 [ 285.622703][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.630651][ T7054] R13: 00007f8090c7c038 R14: 00007f8090c7bfa0 R15: 00007fff196cd2a8 [ 285.638604][ T7054] [ 285.641611][ T7054] Modules linked in: [ 285.672045][ T7054] ---[ end trace 72d96fa3213749a1 ]--- [ 285.678034][ T7054] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 285.685113][ T7054] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d 95 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c 95 49 fa 4d 8b 24 24 48 83 c3 [ 285.705785][ T7054] RSP: 0018:ffffc90003467a18 EFLAGS: 00010206 [ 285.712296][ T7054] RAX: 0000000000000005 RBX: ffff88801eb3fe00 RCX: 0000000000080000 [ 285.721024][ T7054] RDX: ffffc90003f01000 RSI: 000000000000299a RDI: 000000000000299b [ 285.734758][ T7054] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100557c426 [ 285.743209][ T7054] R10: ffffed100557c426 R11: 1ffff1100557c425 R12: 0000000000000028 [ 285.751811][ T7054] R13: dffffc0000000000 R14: ffff88802abe2000 R15: dffffc0000000000 [ 285.760148][ T7054] FS: 00007f808ec8c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 285.769733][ T7054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.778913][ T7054] CR2: 00007f3b37027d58 CR3: 00000000561f5000 CR4: 00000000003506e0 [ 285.785433][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.703'. [ 285.796323][ T7056] netlink: 'syz.2.703': attribute type 7 has an invalid length. [ 285.796965][ T7054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.807068][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 285.812244][ T7054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.832851][ T7054] Kernel panic - not syncing: Fatal exception [ 285.839228][ T7054] Kernel Offset: disabled [ 285.843538][ T7054] Rebooting in 86400 seconds..