last executing test programs: 15m34.559667144s ago: executing program 4 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f00000e6000/0x3000)=nil, 0x3000, 0x2, 0x2a113, r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x23, 0x4, 0x59, @local, @dev={0xfe, 0x80, '\x00', 0x42}, 0x10, 0x7890, 0xfffff800, 0x4}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(0x0, 0x2, 0x101000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x4, 0x81, 0xfd, '\x00', 0x4}, {0x1, 0x3, 0xd, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x28, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0xfd, 0x6}, {0x2, 0x3, 0x0, '\x00', 0x6f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x2, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xc6, '\x00', 0x5}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0x10, 0x3, 0x0) 15m32.088112605s ago: executing program 4 (id=603): getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7fff, 0x80080000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010400000000ebfc18de82244708090002000000000901000000080003400000000a0800010001"], 0x30}, 0x1, 0x0, 0x0, 0x40045}, 0x90) 15m29.914098209s ago: executing program 4 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f00000000c0)=0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) 15m28.532830293s ago: executing program 4 (id=613): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_setup(0x7, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 15m13.357514438s ago: executing program 32 (id=613): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_setup(0x7, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 7m12.335450174s ago: executing program 3 (id=1902): openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040011) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) io_uring_setup(0x1694, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETSF(r0, 0x5404, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m10.805944452s ago: executing program 3 (id=1907): r0 = memfd_create(&(0x7f0000000000)='\x80{\x06\xf4Px\x8d`\x0f\xb8\x10\xc8', 0x5) lseek(r0, 0xfffffffffffffffe, 0x1) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$inet(0x2, 0x802, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000300)={0x4000000, 0xf, &(0x7f0000000040)=[0x1a, 0x1000009, 0x1002, 0xffff32eb, 0x8, 0xffffdff9, 0x20002d7b, 0x401, 0x5d, 0x5, 0x2, 0x300, 0x6, 0xce, 0x2], 0x0, 0x4000003}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xa40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)=0xffffffff) 7m7.482897299s ago: executing program 2 (id=1910): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x400, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r5, 0x3) listen(r5, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f00000003c0)={0x0, 0x3cb1, 0x20000, 0x6, 0x20002f7}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000001c0)={0x2b, &(0x7f0000000100)=[{0x22, '\x00', @st={0x4, [{0x0, @uvalue=0x5}, {0xc5ab822894872ebb}, {0x3, @svalue=0x4}, {0x3, @svalue=0x5}]}, 0x4}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000a10e000000000000fdffffff18010000756c6c25000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff00000085000000b70000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x59, 0x0, 0x41000, 0x11}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 7m5.233521001s ago: executing program 3 (id=1915): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="00000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb", 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r10 = ioctl$TIOCGPTPEER(r5, 0x5441, 0xb3d) ioctl$TCXONC(r10, 0x540a, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x2, 0x0, 0x1, 0xb, 0x6, 0x100000, 0xffffffec}}) 7m2.334654235s ago: executing program 1 (id=1919): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) 7m1.854490571s ago: executing program 1 (id=1920): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x5, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd27, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x9, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) 7m0.187149224s ago: executing program 1 (id=1921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2502000000", @ANYRES32=r6], 0x1c}}, 0x840) connect$nfc_raw(r2, &(0x7f00000002c0)={0x27, r6, 0x1, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000073c0)=[{{&(0x7f0000000240)=@nfc={0x27, r1, 0x6, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="5875de1703e12d1ef6281dd86e8771f6f2ca7eae0f11f82a8cfc47055573e319a87250e97639f1baa7fff51a0d7fd4e7f13f871cb891965a4fa17070a0b72aaf8c657acf118bc0727af4d9c85cff624d87c30ba1ef1595b64378fa90f2bb293733c8e3b029ab413f975e27b05fecb7fedb95218c3bd76afe2f1a1e04f1afdb701610025dce9b57ea26df84377a978d989dc5d6f12434409130f89c0462d0eb20bf8d0e7d619354b925", 0xa9}, {&(0x7f0000000600)="9df04b79cdc238317a1b5327a2e2f73f2ef667433dd1e45ca7cfc38a0d3931ec61f06e6329ca9b41b77d30e11ef0dcae54afbf141e1307f60012e33e380b8cc2baa65378828a4d65ec1345a3487646d56e38c7e7cdb1a42a856cbcf894b1a0505d762558cba267affeded5bf0aba0ac38d6277596d9715747993a05cabbf5138856d48cd075b65ab0eb08b42d9656d46afc583a12b4814e3549c216f14110dada52eb752f882b0ddb58ceec4dde0884e25f31678450994c79ee53d62c8617485c94317fbe0", 0xc5}], 0x2, &(0x7f0000000740)=[{0x38, 0x118, 0x6, "e732b517179892e380f984ad2861ae46916409fd12bf00ed29217c6e9d46d40957d5e7a5e00f792e"}, {0x10, 0x108}, {0x88, 0x107, 0x3, "39b58e68abfec21fc9113d32506e86058273ef92c0e8f76cc25bac51d9a8c170d0e509e7aadc159b81e77c95ea4b2a3ecb71e2633d0287fe165d6aa6e8837b52a3a19b774f9c4123153c7dbdaaa5d249ca62470e8bf72bde39db1c0048041874889fec2eec69a6b887df2fbb8f3a1196a7"}, {0x70, 0x117, 0x2, "6d676ef22e1fc78b739cd66d24742f4a1565a34f15a98fb0ccacd404f5ff5ba4f7ab8bc4cdf7dd3dced70fc8d79ab3bee2abe5edfbb8f7d596ea0943c3b7a4d99710ca5f0f67c9f9ad5cc06e314d58b03acead9ecda3ede0f60f"}, {0x1010, 0x3a, 0xd4d, "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"}], 0x1150}}, {{&(0x7f00000018c0)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)="1f3d2f2ca897b5481a85fe7d764422d8e3ad32700f38d9d322c56bf6232ba2b35ad94f94b29422ca2ec93cc24b8705cce6705ce2b1492274fc7e472c34185bcbe497467bd2039163a30fa8cf9c292545fa0068a316b0662d2fcee4311b6c04006cae5b2566c06a2a924955", 0x6b}, {&(0x7f00000019c0)="a2ba5ba79811878547376e963355b1cb69db6467819c1717611ebfb12d4740207f69065729665035124d77147b7b4bb302efd367755a9e3b2cbed80efe83117594d5c29088838ebd259e138cf7e4e21f87f61bae820d529b1edeecc6e5942a75973fdd6e3ceccc379e8b6f7cee0f066544180927f6ab", 0x76}], 0x2, &(0x7f0000001a80)=[{0xd0, 0x3a, 0xdd35, "e7ff64f44b3bd39b0d07ee1bd0e2abbf11a37f464c58dafe68eaf57ca8f82308219b4975675caf89ba9253ead6ac11d908389d144d04599a88b1cb32ffa8bd8623a4e35dfb15db9d4abd691b94044ebd232c9a90d0ae76f1ab02f3316b444485cb7a3fdadfba0947073bb51d6fe066cf032770e27f181b4eb3c16586f6d69cbe13a18ac8b3e084a22a1c3efdc410cf7364b43b94de6a72ba6b6b19600bb8ae7a5b1d327fb2e52bb1f9335055a42400400dcd1e4102ec9a6b8fe0832af00546"}, {0x68, 0x0, 0x4, "19df74e070c27c06fd0a92119180368922ec8c1940037d0ddb98ca72f1b647f60be640d6052e4ebfd89a4453b6e0745a4ee4eeecab2feecff96f93784881426085ed784e6ed9c5599926ec20c6b5f4251ee8b6"}], 0x138}}, {{&(0x7f0000001bc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)="1c679226b22c17f21131b463ca9806fe13f2d1f7c227b303f75e1db33ecffcf6a0ff8c03e706214345fad80261239c362ee649d57e6c7f62918338724ef883e5528b1622316098eddb3a1395c4d85d314e6ae01f6350dfef9fa9d7", 0x5b}, {&(0x7f0000001cc0)="753c46f0671b3ed58a8930e1decf5304762c0ba8f703af59a7c21895d9b1badb0a9e8b15364fb0a6868ab10bbec14227818155d63f2d51bd483bb0a63afced263308066f8f4c3286156b0616982e", 0x4e}], 0x2, &(0x7f0000002d40)=[{0x1010, 0x29, 0x7fece472, "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"}, {0x90, 0x1, 0x7, "9f17bbd8452a3c06f00371bc3a87d705910ac322deb21e8ae102699eb51ee5fc7358c8859e95ccb51e907ba74b7a830ad315737047e4d6027179321db6a72d2d0181e99fdb9315757edc3b9b456ceb79e30586d1136a091bc78ed1971d7b3d0398d17ac42f62abadf9965555a36aeac3e923fd3d869a3f8b11"}, {0x58, 0x112, 0x9, "1412b53ac21bdddd6c24d1ac337d2bb38bcdfc2da06494be9ada3b86462b809b75eb386f2490c7b8e77d3f5bbd2a146bb37f28ac0f4074cf0c29c94a269ea335e37812f87a"}, {0x70, 0x119, 0x49dfe923, "70ee50203dcdeac3f576b6283a39b11d0673f9b831e6df08c8d6f15fb0b646668bc0aaa8776169561912d575994c63e5df6ca232fdfe6f75f606b0f7f6f23d47ff62116e27d48676e24c8c3466184664e36f5df8a1e543c9da0a7c6c33d7ac"}, {0x108, 0x29, 0x5, "ab57ea1542fc68fa05d7e3050a18ed1d927e9b5345b78ab6fbe6471d6c9b056f8a98407acc61cbb5229c0b76cd6d794f5a1b8c1c5a7d19c257d77edf406d69e9f421cecc676f5b9467e4efd9adf3081f252241313c819272b53c63d89b1e4586ae65ae5ae0246256f37ab28f44c8df1429c9eeb6e5da288da5d2153df97b9a76773c6c19e50731a1a6f9628179b569ac0a60e79a1edafc5c58316803525bfb7d5a675be21b2fe07d2da7c80e5b5a13dced03032af176db414fbd4033bd64ecdd5d33b47ad0465345999aa8043ccef5774083c955da126f851417804a8554413d54fd18700f669c968f9e4ca6a265189a53e374cd8fa4"}, {0x1010, 0x114, 0x20000, "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"}], 0x2280}}, {{&(0x7f0000004fc0)=@nfc={0x27, r6, 0x1, 0x3}, 0x80, &(0x7f0000005400)=[{&(0x7f0000005040)}, {&(0x7f0000005080)="98c94dcf2ec695f8049f94809f2cda739c4cf61d1ba6a572258295c85bcd", 0x1e}, {&(0x7f00000050c0)="3b43d19a10b592f3d56c2958c0563349f07a4d5ebacdb36ae16d21c3ca795b4c599dfcc5ad46", 0x26}, {&(0x7f0000005100)="4ccbffc2d96f89e6900c25a5f429b90c9bb98547c0", 0x15}, {&(0x7f0000005140)="4fd0a580877fc03c6b441e71a522cad7da80bcc7276305eaf5f7ebe2d117abfb2977f5c92010edf4cb44d7767f12f513d9af64d127064c7f791a618fecac250e91d5101529f3b2eed720455a7f1f3559154075e74f8fb54ae0c045ec40ac0ac60214183cae09a4aabe92e4743a49596a4825f40b6170eefdabd1b0e481901e6702291d622ca30456be1cdc96", 0x8c}, {&(0x7f0000005200)="1cf676ab9a1a93c37f81a141d53dd49d54440027d72518e03069c56ddee7f5f0950dd9eafdaca6183f367206cdec512aac955a8368e60505a329ac286f3bf5d93a58797c72c1e9cc037661ade5fd68dafec56fb3552f85e8bce86c90511851c48c52a2e5290b469e02dbfc1e21abf24b18617cb992adac33ee5fc03ec563ec6c7cf814b48a57cd6bfcbfd4ec64e695f15c5c3b36fc655c210358174ea71d68", 0x9f}, {&(0x7f00000052c0)="93bfb5eb67067daa753c4564df25859082b7d9ec47af205bfd49ecaa99bad48bdcc1fc4997fe2b29ab8d964ec620c24a8b542bc550680c25e58a26418f2fc8999e8e50636d1d29006417a024e79d6c6ca4e1fc1035a97c40ea9cc830b4994de1713fd6ec01ab98ade2", 0x69}, {&(0x7f0000005340)="af3fcd9517bc6d6bdae72e6b0f3a9fefda29ba2e42ab5ea63ac27be12d0c9a40fd333a7d2fd6d478c6c95d8d25965d33f16c295f377312d4d41a9a98fd92cb972e45305d760b60ed7792aa9964ce1477c662398e27071be994ab3ad74995a76fb01b115c80697a2110e633837b28f995483e41357c235f04d32fc8b7ba8e5d2f8a28b04d9324691c4aa3d7251895439730856ca9baf503afcf3d8e", 0x9b}], 0x8}}, {{&(0x7f0000005480)=@l2tp={0x2, 0x0, @private=0xa010102}, 0x80, &(0x7f0000006600)=[{&(0x7f0000005500)="27ab03a6534ad9e1440ae2a82609a4305c487b0ad36970481c32b8199dfb4307537b8fcb3a5e0410c75b3eec8a58408e68af615062e86dd7db96b31afb771cd07509035cb52396a279897556c32a23f18768c99eef83b8f33d2c27d009550d0bfe0bfd2124c7efb0fc7b4bfaa12bcf477e59674ae5810dc5a147e399677b60723b384567c4742f3d0a18ed51586f537c999fb5d92bd9b774943aaa364a3ba7081026f3b1f7134bda3a0ce9141ba739b6fe2c33c9c414", 0xb6}, {&(0x7f00000055c0)="7c9d604628eb467d15203a4f1ca58948154abff4d39bb8e40a640a765875df2ac95309c58129ca05e652e94d1939d3fe93ab722e4bdb5c102489978c25fbb56dfa19c6f5149c0c584c4cf248584f67cbe308ff0627314a48d5583694b20b18a6a8f74e241e1e59bbb416e706933e5cac02c8aa75fa367904b8d7b0cf927652b7e4c39a18f4ec0044531767ce0d5eaa1d3f76d89f8bf9d3a96250b27c1121e08e24222f2a4f06e5edd0ffc7ca192f45898bf2489353e06136c45b652e49ac79d73d0a7bc33bca5e97e2c78573e6e52465c62e8105d420416e4b6eefe4055fcb063acc869f39e0925285a06171d9bb647c2feae903e05363757c00dadf6223867a2ae713cf4ae9e414a567f645a5410ddf6879d09bc358c21bf6dcea97dc423ce77c06b7e9530a0ecbb9de7ea40e5608aac1f7983922f7352af35ee593e77d08e875590eabbd72e278f9b934d2636f905cdcab34d8519505877a5d3225cbd37861602b47413ca354a94da887ff4b6c9976d5331fff71b242c2d8ffb9bf2cabd49f43324d171fb52c7db388153ff3ae581aba4d85953f232d06979994ba17b796c1d12e3b8d3042207fac08a3fc55f266eb71cc4839cf80632e69dbd3313a614b7842a59044d65b33ddc69096c3335974d4162a95d403c9320ef932296ee1bdc0bb19e12af821a4964b72a723137aa7d9547b9190b1c32b67fb1c2490e42accf890a400f33e11eb516f729e25a2ce122001c525883f9f92683e7cef4c77536ae354c201e14cfb3693fa615ea05ec71a4c54d5cd5f263dd0a4ae809309575c83eb4254f842d4e12a075b1ea455f9dec1b814d18a75b5e473710fabc37d49d3a8980df93df15dc398121ba7b5ac4ecb551c8eab20201bddf5885f0e571fe0742b9662c9def9a0283bb82915c14dd2f8ffa9674bb66198f27cc551074b143b3aa91b5233804399314c7b7a5289e2ec0a7e8279c9d13563bf7b8af5d7e39d55086e990fe2c0f06757283b184450e1676f970d4e40ed1a8b7a505fecb4765f283985115898b14289c0030e8525600036cc8cdb0032f280b6f2f54ef99b242435345b36fd77abbbdfb8a81938fae3efa91470568483ec94471f722216cbd7cd6e4f48ea5e0c41e8c409fd2a4a050163325d78d0aa834407b56c3da5df695042a5be922187215b6d9906cf232a4fe105e213c1ff1b2c3efb2227449f845bf984b71d643ce2fbe45ac09fc9871676a108228ae1880086cad9b5b586b309f7914c8990073c989562097326ecc0423d8dfc2e377cd6585a62181b975e66ac87fa54345000e81fc159611e0bd5f4be0a3c1e78abcb05f8fe6859942e37d4f6d785afaec083dfe3a4101372061425d89e5ee3e9c1a1e46f4201bf621a9aea1417fd0f0d12433651818e043a40a7ce1375cab553d792a0cba61d4682aced09a61fb91b17ed624dad2f6e80b1f81274fb023e217a289a46a7c9c0e48a601cd68213cd14290a5fe9992a13306aa2534fe8a7619b00c8c31d0089a115eb8d3c0b237d2e7045f01e33ea8bad3d295a038817878c63bd4d97e79c18b10d30c46eca3f4edfc630af0b51a31c207d0d0d79b41122809c52ca3d6602078424f95207070406c2195b8d6d354b026816d4eb4980146798f013a3dd5c1166f4894644ca9b41d547e459b122bf2a509c36f9469fb98550ddf333f60815b9aa360f46927ce59f828785f22143d8ff35efc61c2c41527bab83d47a03dd118b03c52cf1678f733330bd3e58155804ad4e3ba2e89ed2c3ffd565cf080dbcaa8107e327f7b605f8d55f8a05effcf3e5d44ce9b778cf28675c2f02a6269670dc177e65d13f2c83084bdfa09329e8c1aa2867ba283cb39c341ad3f43584c117ae2a86459fabbb023f045e068ad586da1cb5b1cc2ad5ef9cc131837e653cd1cb1f66dc0b632f1fa8fc233babc2981883955f48d391c5d8dda6c5233e88dba00590d590b0679c7f2f8f7fe9efefeb9bb59c7343f0482df77c520c066af576d45e18b98f0a1e82129029e965a93eafa6c5647d6dd48d901667f4ea23db2af71ab13dec694cbf5d3ee524157ed495109832ea119e04f6ae0f1a935b418baa10d3a9435fc90fa47ba3e04a4a0df80d65824075a7ee0d3852dd28d1b1c02dec75d5ebb15e0f66573a46057e4bfa2a991f08f5dc6bdb680132cdaac402127d02b0ba02ebe33ca57ee6afa31e3ee1dfb067a97653812792d7d754525ba7a9c38955cacc30ec2a271c42d69eb04c18e20247c7f76830b88b7fdf528915b4cf135a616726a6c3d3f74ed7c2f942e1eb9f95529f1f784ed45cbd5b4293a3fe625d26ea335f2b5e202c5ef2e1af60b9933867933b8a9ebae9c11b0aefcf1836e085f0b7afb8b5251558dcd669039fcf3b76afe5940748a367cc3378869aa8b076c9668b468e617d2f7b0452fee1a743caea0bd9036c55590ce759ccd6f2f747961a27604efe34f295c2fd48b6161e991e5ae7387e08f546c7e0e390c524f4b2e2fd0cb142de52dc9b77537d1c7869a7f8a5869d98951602fb46609dd9008acf28ed5d90281eaf86a2eaae94afb24a478a986f24f4930221d202c2ab28021ecac2b659b444bb02564654833f67c7858c65e81b9eaecf7a7e28cc0fbb159a9e85b1e7ea100472796f13df8335e54b5f743ed40356544dfaf2ad8b6f1dff2a5572e392c52cc37b36f7b4a59ceade4bdf839ef6860eacdd8793194869128e16ca33aec8bc28aae9b42500886dd60c2fd4763d6b5a7692cc6d66f13f2dcb722b34224da1b381b1b46e25aecafc522182bee45c39627f0fdcedaa51c140dd30a5a6ca8153c5acdf9441e50a7483d9fc6671e1378506c215eb7277e2def0f4c40823240314d1bb9696c28450e562f521ef0e5a5b21acb276a75cbfb029076ae411638d83229da04ed6827f4fbaa39e83fe1509a3befef5c2122f4e8b9898beae420e8bd234a842ce37f2cb30777e658b724d2cc2cf1bdbf4ba63f0637fa66068387846b9515ef189602e8ae57f0656c093e698af4b07f305e1de55d8151250e0a94d72f24185be59403037982c711fc01e69375194fa6fa316fd5e898c7df03c3af28946284c51dbddcab2ba368b3fb03e62e216b110842013196db17f67c06022e4a38a97cdc29c388f415e4017f0c4b40d20c2e3f452a02a0342816c263ee6c5812041832495de3a3b0ed7b0b3228d905e3a02e9e600367d4f2aa7257e73a9149c5267273db57bca1087cfbeb45af864d85f9bb3f966c3df392951835de990c9a08523c2acf341d8248b3bb57c054b8c542e778efca10da3308e66a8877a917b45ab24cb1e4cf4f705c51188e14ed4ccdb2de6b96d264bc37eb9ab1407448a80253029ce815db94796fe68b7fcc2d9d2e071eb3feef6879f6229d0451de0564b620f860ddb2f12b568803f87a9c1032af1d70a626679515b61033a5bd79922dfe82bedab483e2ba56d43b20dcce4b8c1c6587162c7fa20565cf27ecaf1a0da4ec314ca01c115f69a832c4d34b44c0bc09723788eee210f962b3cccce5e161a1a26f0b28710b7ced621b7e71e56058ac5481f16c792d07366cd545640c2413857c40d02bf1291e9eba34fb214fc8ba37d8bdabdc19dcf81e93102c7fd8a27862c8626004e35ab1a3104e8f44dd67e6b4eadfcbe8542bbd02f82754d7b93acaaf257d6813c3bdb364e893a03ea8283e0035d7c312a8e3338666ee8a4017da657f8f1df41b77504bd0e48ce9e0e0a283498db8051d681f704160647286f22e1d33d5f639489e03dcc091fb1e473e4a0de6b5406cd84029e424203f318d845570312b6c30cb3a434b14327927ab9c1630c6f0baafb09863df98e95d0c2586e341d31087fa9cf54505b4ee041728520b233c0e7735fd1f4c6f6d4ef5b415f8594f658328a64fe4c476240cec3693eed1f3484527884acf6b3cdcc35ab44650e92407c4e8e4862196ead3d19888ae18072809b39dabe124333a4035854ce1ad45dae872116718a843a08112a8f43deed4fdc934c4809f4a1d5d51d7386541b8cbc43ec6eee80e21b21f60b3d5925009e203c092c5abf673d72598578305f815e2b987d55c4a36ee009fe49ee3ea7595c750a2f578c933b1e38e3f6379952fcf79af1d41dff43fecac3cf29a141fca4756d6d286bd7f2902aeee0fc98865a6bed751c231778d2ebd1f6954807157cfa271a24df3f9c7d7adaf0f830fdd3a681fd4be431a035797c664084908dfd88bf1b4706fda2f4bf98c5dbf0bd78b187906576fd96cf6d803b01077c5e552fe3eb2089bfe8303deccb789ea3c443081f41d80ffe1daf4023cdeb22583a0fe7b91049c75406d5bff00f5d39c4093097527c815ac143b003db7f283acd2730a5898367df1d45aa99a460ac94d1334ef75da1f508690384ffd019ac70acf7d55ba4ab2116828c0c85b612b38e88c4609399e742d77701172f19d1f8275dfdd52b445c0d01a924571386413e62f22f4bb53c3180e2a2915658dbc8e63869e8df2ce7297b63e89fd1db8485b99af2519eefbd8f502060c4feec142d6c603c69369b70ddefce7979a048a3601e095d0430ab16f9a07f1316bf8154f27e97fe40fe9be2b0aa31e3bfb2f10cfb746b568bd7b56daaa0ef856661377da0d592e4106f5c246b3044e2519d9cf283d9444980526e082942249c75ab3df091ff2ae1ca56bec1e0a4e57f0ac8ab49a90ae5b0ee0bd23f274467f85c867e8f4460b888a54ba31c732eb51ba9b70fd5d0461e0fbd8372050f185e3850d00f98f1a70ed49ff7b7354bc0298cbc7b09abc7cd793ce1a319c0b33d6193d01a54e8cf8060cca14cea75195ac273b1dbd5425d059d2ab651a44518b9bb88cb3ac99d0a7b46741dbf8f942a805d75efda5f4d7c9ebc56dd6e344773e5bf50578d51bea0a7b0a62fabc4f05cb08d2a8d1fbe5451a0c6e6b599961dcf09884bce3d43b7846a1d524b43d705736faaaf6aa252bc722a618e36da5198da4b9c0601bef6efd7be4395f8cdd45ae2180e17f03d53c8a88eb58e7d96cac812e14d67f9ca6f88c37a6f8c5195ce6830436703db1229b7ca81f85adf9dfc3fbf2b891720404128b0ea8f753deb94915b6e4b659b504617552051760056d23382e92c4ceb16374bd6d7c27d64ed665d2598d746688dbcda108f4bd318a716f80e5bbf473cfc9ed697e925b44bc95c290a7b916868900b644508456afd399f67f7741c0623b5b7556a97d2c55b5cdb28adf8d7013364df294a9f4c7ac2141d308933ea60f9eeaa79f9ed4bb42b3813df688a684b5cdd4363712f2f7406c344ab3233288e41bd38904d78fdc3bce1def22bd0b2aca3e2c385f6e65d4c9e017f098555123b05c37e1ba3aa94496d62c17a133d333bd7dd437ca971b09533e78b64ab0379d316dd51813509cb1fc41806a7b8e15bc608416ed0a7cdd773bdfdacc708af567dc25d661b35618038597a80adeaf10f49ca114c3c9d1b411a4df3593e314af3b1c6d3cde7ece70561e65d7b3e64c6cb7ee98808bb251a2143cfd2f58fa04a354df1a57e4dda3a711529d669f79df3dbca0fe84548e17c9913c01e09836e7173edeee72050c4fe90eab5a0561296ac8fc5be338a879c89a69048cd61ea400b3027d142fdd0d15973ec727a4a68f1b3bfa7db039a714673292d5845f9c61cc91e3865b1c512e4d2fbd0c1f1385e06f5a7d96a17ff9595eba3b4146026f6ace6597de66c7fce013d5a7a0c2d95aa8ae3cb01166510fab9600171b8a2a9355fd28d8bc9289be4235918df40f7d7e715392d06f2d432a221fbef80b85b36", 0x1000}, {&(0x7f00000065c0)="2c29034cf9f23ac42023b795021f37b35ec1201519d84697f0b612aa135af886f71008c00123fbe1b03ae7224e3c573f62e4ee1a9b7576a27582f7b0258d20b1", 0x40}], 0x3, &(0x7f0000006640)=[{0x50, 0x10c, 0x3, "25d3074d105f1a5d48cfd29550b326162823260afb0a5011f53370f2d7ff55af64f2bad60f3d35fe75701574914088d4d8fcc2f97adcf67e605f"}, {0xc8, 0x113, 0x7ff, "8e1c0d601d2c8c94897258c3b0fafca37ad9315b6c2875f6b46f0341ad3287c971150b1b293df909605830d222fcca8e216d6a2d67b0fe10f088d4ee83e88ce2c696ca6d4db71d8f295e1edd7543c5efc0df0ae705152caacb8112c0c81dea690c8c0d1352cd1ea385a30a1b3dc86fc32a647f1b1fbeab61964e61a663eccf0bc7d1efd99711bf24369e887549ef64859e30bd83dae15e18d42426972cc1ceed4b3cab95ab76e4217287f93fd01278c1409bd07f41"}, {0xc8, 0x10b, 0x10001, "29b79a0c08646f846543d42a85106ec53692aa4f0beecb33d30019326fd40d578dae11748a3fcb5894e1afe66c9ce20b1cea5d76765beebbc7389fc740e203e5b1a37b80a2d5dd723ecad0b865433e33dcf748d1325562fd80104b9e7a09e5e9c2baaef47fe893ff38dd74b59b206ee9c2da09ac13f3995f73efdd62e8bafd19a909f3d4f8f8cb71dbc9df1faabacfdf966824e13a2997da924fd19c1c1fc88932267d11326d71a3929edcde00839c2e1f71e00f238f0f"}, {0x80, 0x10f, 0x55, "bed3d30c888dfa48ffe1d33c8b96d22c34121dedbae0296b404a05c99599ea1e844c9900c20984f925b88af689305f04ad8bb7dcf95a9c336cd7054cf3e2bdcb6ec27a96d1d4081d9ba57b82ffaa637cbb30bff971a39df733eba526879e7c2a9a051e98de8dcb861043"}, {0xa8, 0x101, 0x3ff, "eb2111ca5bb67e81928dd2f86e0b1349e7eacd8c8a3b13b1e63822f37a73189812d21ec9c55e9c7cabc9dd22e67b7826a336569a855af6def62ba0cc7f3e43642a984ac5d9556d5e32f07e3d547b6d386fb1d6ddc4b07c7a0968f9df75a8f5f85fe131b85f48ebedf785506eceb30a325500cb99c099a2bb8d92a5862921e0a7d44c0e65caf5b2393a9a1d082df0680cb6ccfd8d"}, {0x70, 0x88, 0x80, "7c7d318cc499d3560320e351a2474bd8bd9eae063ac6a89f80f033b1f76581d4c94c17102197839743b2d2cc2e3c7f0475d9fbdb9b2fb173fddc891a2411e4337a6c0a6bb14354ee84fb8e7a55f697fa19e6e6977044574522570bf81e"}], 0x378}}, {{&(0x7f00000069c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xa7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006a40)="6204924164cb4cf3408662fed85b6c3c572f378b942f27fbd5cbee194f793fd6a62ba7dde7a4f06ab6e097d7d224131104e7a8e47258bba867d92b0f42a6d737f2b8e0a9611ff5890acfbce7e6c0c9174774f79324e235c9b8a6d0cc331a7ef47bd57e", 0x63}, {&(0x7f0000006ac0)="6982128e1a285abe1b89e72fd4b3b78c43e6ae10a18c6357e919b5b78bbffdfc21c2591488549f5d3c9b28eb5ba4303c7ae55a0de97cd99baa5abbcecec4f8ce1d9222a0239bf71fb1a84d9aac4fb7f47752d562db0b20290438f12e", 0x5c}, {&(0x7f0000006b40)="abdebcaf5d26ad9fde7c7a4ddea83dd9261bb80eab670fd7c1655931ec6106dd4163a7a4a4f9e0fc40fe4bb0d3d5baf331bfbfbfbd83c93f8545409339d6807e0f1a6f96c9a365416c0f5408dd8792ecc8480723ff80d4a27553a028fc55bf2a1159c201f363cca71bff50191ec0b5587034b2192842b06cbd4524db5f9d266505e58ea1d5e43f582a90a5c37cf4f45b4758187d8542d47ff992e7e10cd29310d0ac12eb9e2249f2d751d58e002f748853880a4e91cc5d8d8457654fc0854212ea7cc124028c0fc5d309c0f67a68073906651aa1cfbc7e4cfe3f6d548834479127c2ca5329c0f3af2f9b76f47b68707f", 0xf0}, {&(0x7f0000006c40)="184bc20342cb6bbf0e17905e89f28f945b02524417d6f601c59782568cde0cf9799320bb0a1b5cad0712787c93dd47ff0ab0f3b2e89560145f6bb209a65e3196589b0a7ab5c58c155bd16b595137e3918beefa02ceb55f411c2f6987f37beba489bbda8898bcd819bfb921dc8170c3d68178f517cebb5c3a389840ac054c6864ba1fe620d1cc13482f4ae291706aa43a59e90d2cc3407979ae68faf07566d9349c34424830118df2aa56be59bfa83b989fdf841b30ec35e916199867c237cb82ded9", 0xc2}, {&(0x7f0000006d40)="32adf70035de171978bd3eeae6699e82a1955b4df7a5f79ace93e39a4f12cfb69d0afc78d723ca272f9070ea5eb7a33e151686e14b1b582ac6f07a7124f6f40e2e24174b7224c5cde808735132741cc25d5553eee2ca47eaccd83da5fd8fb59c01f0abb951568053ada0660d01e7bf1946b7849963b6a9b80ec2a20cf32dcc4e92ef1be22e2fabd8c3f054377c36019a666ed9b00721224dc88ab9f367f91a2cd2ed506f7f8e5932d2389b01b0687966143726f868f7fa039c28d181e988ccd93315", 0xc2}, {&(0x7f0000006e40)="9f1eee68f40c09b400e360d017c31c0405d6c22f2964f7dcb34cb109810db384e878ff90d570fd409a83b43f6596d032e9aa2107af5e981fb42691838d5de66bd9c2781bf9cc7641a65f8cc282c716c1eb37874d2bd7662d96d65cc7c571bbea1d0bfc805d34b97f8e6bfa4742ce796dcb7f127f480df52d33379cd1fdf793b4de2b29d7d9dc19936de8cc5f03b3187be7ac1855f356041d90", 0x99}], 0x6, &(0x7f0000006f80)=[{0x48, 0x10b, 0x5, "0d5588a5c1e62622589087b8c84135c98034be58b40b0ccdaa47d17ad916cbcde7ddfcea09e3964b9eaf313a86089ff97f78"}, {0xf0, 0x110, 0x7, "5de5bb46ab11f122d4b3e7f1d51a373fcbb12e226b7295c2c23e3970e48ad74a9b3382759c7161394875f9d9a3467c1fff4da8132eb6a8ede57395875d560da6c1b453f2df8102104a9e3c1c0cdcf4eb355f2bd8c832408d592450f20e6b1be4dd31d78d3782e2edbec5f62718de0fe080b4ec5c61772ca00ab112f9525ca12c8884c174595a16d64174d9b6db9371d6b4f969fbc8bf7c873aec2538c68b274d17e7ed79496323d1ba14112b1ba062f459b7b6d1052f1a7a5704e8f6920025d693dd3c6ebc12a33675109bb86bbfacc44b294c5201c3f293a23abd4a"}, {0xd0, 0x108, 0x5, "4ad4df96562826d50ec2f54a3ac2c2f50b20015456bb106c9839add73b141542d62259155ebc885077ed1a02e24bfb4712e1ce8e043e7228c8d7a6d9b316e284b94d465ba1ef199c989aeca827af41ea0351542ba329857c096c7436c9de15c91c17c7967ab6aaab1f985fb51b4d0c0b54f061ba1dca753faf2d87360f94512f4777b4518d47ec110743b65f1a605a10b6f87be45f9645064703ed8a68ed3fc247446327b617cf158bca91806175c10a6498e4f4f8c22fdb244646b23a037f"}, {0xc0, 0x109, 0xfff, "af07a1a0dae7b12fa180eaee93bc5cc1cff95c3192f19d416dc5d42d1a4e50adfa0ad34418da68a830fbb9c3683f09f804a8dbbdfc0a34621ba789c9ffff08251ee0d223099048cc734a35534face89e0edea7aa8e540fd31acf3d6829c28b90b2f5cc16b65c9ac66c898399b9b805ea5a35efa084edd3c8f4b15dcef9e09019dca3334ba0dd6d5953284c37eb1771b1b8760f8c3ed50d35eb7642d8b6b68f7514304957e2cf4393b8d7e060"}, {0x40, 0x108, 0x7, "29a448acf2e5ad7f7bdfb6597b06e7f10ab6edc271d1c45ba37738d4b6d1bc4afe6d75be02dcc1264651959e97a3"}, {0x10, 0x0, 0x828}, {0x18, 0x101, 0x2, "9f24c659a5"}, {0x110, 0x88, 0x0, "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"}], 0x440}}], 0x6, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "f4a1b3f6", "12772541f8eb02bb"}, 0x28) splice(r0, &(0x7f0000000080)=0x80000001, r0, &(0x7f0000000100)=0x5, 0x7, 0x8) shutdown(r0, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x20, 0x0, 0x8040}, 0x0) sendfile(r0, r7, 0x0, 0xffffffff004) close(0x3) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x1, 0x5, 0x31}) 6m59.899734601s ago: executing program 2 (id=1924): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='comm\x00') prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 6m59.896843024s ago: executing program 3 (id=1925): r0 = memfd_create(&(0x7f0000000000)='\x80{\x06\xf4Px\x8d`\x0f\xb8\x10\xc8', 0x5) lseek(r0, 0xfffffffffffffffe, 0x1) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$inet(0x2, 0x802, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000300)={0x4000000, 0xf, &(0x7f0000000040)=[0x1a, 0x1000009, 0x1002, 0xffff32eb, 0x8, 0xffffdff9, 0x20002d7b, 0x401, 0x5d, 0x5, 0x2, 0x300, 0x6, 0xce, 0x2], 0x0, 0x4000003}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xa40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000000)=0xffffffff) 6m59.098654498s ago: executing program 5 (id=1927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001400)={0x900, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10cf}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x649}, @NL80211_ATTR_FRAME={0x59c, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac, {0x9, 0xb6}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x40, 0x9, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x9}, {0x48, 0x1}]}, @void, [{0xdd, 0x93, "74c8996fd9cb79b186203dc694443147ec4df6ee5c9fc8d74ab26fa52e30870603f0357ebbbdc85383de8faf6dbedbc92b502ee14a03ea98fca3d81679294f7ac74a5fce2c4d185b2c18387110cb978df2054a3b5b383098d0406d23bb5cce66fae5e815216c183eae30efb25d43537070cbb34ae4aeaa4cad8430c31950b374e83d5fa22193e402e2ec3bbb0cec1e99132bbc"}, {0xdd, 0xe5, "ae1bbff817223df6c6e1e0bce666def05ede104d3dcbb8c1d46cc4d8efa7518e6e8f09db5453061d243272686fb4deb1cd1a2775c0f4ad2fa91a55817db0e5b6d62d94684757ca42b3984e613b927232fe1b2526689d2c9d4faac5679606ca2f8344f3308617113fffad19f16aa79af0986c7f146451006350dec5092d1139732e1cb5bc69a8abcac1ed65d57769942204cdad8452a8adb7497a1f8a779c2dee9894545e98a5fd6381f5dd275dc133effb27070b5cfd0f58e31088641f87482cb36c70ec1bdeea8cb52a6539317afe5a2d70dcefb4e92bf67e60e4627223aeafaee0448cd2"}, {0xdd, 0xbc, "99714de296c47bbd37a99e8147c36c9be5484901b7e9f104054cb3369eddc2b43524effef5ba65600a80a6ec84aa24e42888df5331d90c7743503c8ee5d7abe03ead80e66cec5392e1f50947435f7dd4c60b4a93e99fa8da1f93a7cabfcc7c5b25d6b62d31a254a2735830f1f2c09d31d5eefd771d468c2c2bbaf23eb68fd94cae2f99725770663cc6eed5b1678c51fe4600baf7f7777b917249fbd2ab47b4e7a0312a8d70412f22230a3f518d3ab3c4e2ce882f241bd60b449dbe78"}, {0xdd, 0xd8, "e28335d7ec46b36f83bc544527d12883c5e889ef8fe8e56dc475ac40ef5003430ec657d821d4f953c2dd398daeb2af231bd4a2785b288e19c63277234c94e219b3fc82501ae12de0760331bed33b3f1f845cc4c17bc3e1c86655344c7698c1edbc16ad93a9cfe33709603164eca7afa95a4127293a3950f395f9dbc113103f06f34a226dc869524624b5f2812c41421bfe51af783431509afede8f7a390a5daf3048af49aa350a328ddc0180e286ccb89af4390273b92bb203bd3250471430b66413b6abe3defb37eb0b3c08300a6e50aeb97208891aa9fe"}, {0xdd, 0x20, "ca2a046ea97631b8692aabd52849ab9abfbbc658775d01f6b3a73d56f80550b8"}, {0xdd, 0x3c, "587c665d302fc4c1964ed5266ac42716b5676a8d489c6df310e3f3c8af85cc3ee2688273017a593683d60630f4c1a440516693ed8c6105330e6c82df"}, {0xdd, 0x93, "565d7ae4093977efc4bdb01e93e0fb76f4419a622d1c0dc8b70e1c790a5790577938a3a07a3aec1f3df6d0c38d5d3fa973a719d0cc9e11b231180fea76d11d7fca923b5e84a6615bb437ab2006d5ca75fc3c3585532f85dfeb1701f405fa7e538dead5b4709e910ff8ac0ed1a77c11c1fd77f9957992b00093270f38da90371ec04980eebfe437f72e1e8bbc84641fd4f23815"}, {0xdd, 0x3c, "09dcbdea727a3b47cbed07b54f8f5b3a5974766d3be0cad5170d8982426f817b4c52c954af48dc52647e8843b39c33b824e44a92f86b5e80a9654646"}, {0xdd, 0x9d, "5aa84c0b4ec2799018a97ab6f001159927bbf4dd594daae19d61ed588fe1af832df972d1b11449502bc76cecf43807c51719d1476230908d1ee4843109225cb392689b0b9bc8f5bb5259853f0f241e970408537b2692d8ce507f6180fcfe8b2a69c9d404aaba4670ce4c90acb7b6e028a4c0e6ac84dbec24037fd02feead1001fc0189e9cefddd9829215e5815ef3108a44a660dcc8e0526c4cdba92ac"}, {0xdd, 0x84, "311954f1c0136405f3f2a982ea340f420c3b80e4ca316f693f7cdfce69a3c216e81e704721b3849745782f14f82c60015bbb722e030f286dbd730c3022b4a13ed46e8ac4106b1a70440e226b39b38b1fcb25815dfce18c495c35ea4b41dea8d6352bdd0ffc96b69daec8bd96fcab9c09003d86484239ceb59848b3e9079ebb88a2b0d59d"}]}}, @NL80211_ATTR_FRAME={0x313, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x6, 0x4}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x61, @val={0x10, 0x1, 0xe5}, [{0xdd, 0xef, "58dbb1eb3b31728de1134aa36c8aaaf3f41906ba7f1afbd62eaad3b74978ecc6469aec90be949f16a0f3771c4e156c01752a45995db61b47f2354ce96c6550564ac184a1c1459d66509cbb00ad54bf6c98f3b5a74087bf47710ac827687844d2a7f341ba5a62bb746b497e8090863ba68a30f71423eb1000f705d7243fcfe46637d3e2139681060c9964ce2c1dcfccb8a96d34bc1d817bf533cc309d8c0d2c59fb9bb91a1abc83baf6acdb988f12dcfa71bbbd7515808550683997f9f5e1162642d9bdf8ee92b951e89e72878db33f21f9f742d713488e70d1770085f2215c09ea20aac601f165ead36500c5da362f"}, {0xdd, 0xe3, "d3010709fb305f3cbc13d822284f54b008fbf8e941764d2597039f871795b16d240117029d5f821a1a10bb855bf15625a993d8639e2cdf51078649b214f7620f90a8e31719df25c4110f205668e828080313e9dc189b44f1c17653363a55010508f56f0ed5491e067ce4a56e3a6cf074e0d9abc058ee351f1ac9236a022da1a4d1d9e47cc1148a5a7b8624daed487318361dd8f1a6a3ac663750555923d5274a37e707892a88f6ce731139594fb083dadc9efb99604a5fd78e4686ab7d747aaf1f505f93ec97b3220cdcf44a850bfd80e42a32898db5731ddad5ce636bdb37aef32d3c"}, {0xdd, 0x2c, "8b9b299153b3359d1ddb848c344833d9b1af20d6ba1dff6c0680d64875c9affce77f0209c517bc78a3b2c389"}, {0xdd, 0x66, "e538fdf844b589f7c62c83c983a6c04f9c785338fff0f72c5e8fac2d0810fe9061c2d45418887adc8330bfa6f1937cf07bda4fd195699fdc4651d3fdf0295c8654859f7579439252cc4742638b67079a5c84c4634f1b17369230b3f04327e29bb75c69aae86e"}, {0xdd, 0x34, "85f72e60f4a696869908d663420f3048c78d358f6e849261070276c99c91db6273b8b193d4f43899d9f950a4b5a6b06e97acebf8"}, {0xdd, 0x46, "7a25b2ce2165f9c6e8a438811d26bae0d25427fef7beca7d2567bc6a7ab31b0757e131a29c632ff10f3bf4950716438a85bb4a411aa4b3caa3ae19c28aae42094f885ac74761"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x900}, 0x1, 0x0, 0x0, 0x10}, 0x44084) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m58.57280093s ago: executing program 2 (id=1929): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000001300)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) setpgid(r0, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xffffffffffffff62, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0x7fffffff}, @local, @empty, 0xffffff00, 0x1}}]}, {0x4, 0x6, "24b2fce2b172bb37138846fed8611806e0038b379e826b668011db61ae44f1e65688ac4b7ae47fc77db1132a5e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) recvmmsg(r3, &(0x7f0000003a80)=[{{&(0x7f00000014c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000001540)=""/148, 0x94}, {&(0x7f0000001600)=""/115, 0x73}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/62, 0x3e}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/114, 0x72}, {&(0x7f0000003940)=""/98, 0x62}], 0x7, &(0x7f0000003a40)=""/18, 0x12}, 0x6}], 0x1, 0x0, &(0x7f0000003ac0)) write$P9_RGETLOCK(r4, &(0x7f0000001480)={0x1f, 0x37, 0x1, {0x0, 0x665, 0xd, r0, 0x1, '\x00'}}, 0x1f) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0xfe44, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r5, 0x80207502, &(0x7f00000013c0)={0x0, 0xffff, 0x40, &(0x7f0000001380)=@ublk_ctrl_dev_info_existing}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) alarm(0x6) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2a, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_clone(0x2200, &(0x7f0000000040)="10cef34c9033e1c1b22051c2398d30a87ca5450faf62c37d53d2cf2f4903401d39010e61e753516f54b362a488e731202b10b50aef642ef4cd144285acbcbe1f428987248406361c989e8f171e15fed4ad211c613eccb49483e900ba0dd9762ee63fe421a4d7e64546b37109f458", 0x6e, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)="d0f1a7a70d07fe116b248ab49bf7c2747d4195d7316f729de527b78b5f7a984307dad495e27224722b41686ca4e33ff05e8334858435859fafced83d97f0d8689821cb410aa5bc10bf") 6m58.572259113s ago: executing program 5 (id=1930): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000140)=0x1, 0x4) socket$inet6(0xa, 0x2, 0x8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040841, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000001280), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) recvmmsg(r0, &(0x7f00000006c0), 0x0, 0x41, 0x0) 6m58.406976679s ago: executing program 0 (id=1931): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001400)={0x8c8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10cf}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x649}, @NL80211_ATTR_FRAME={0x59c, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac, {0x9, 0xb6}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x40, 0x9, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x9}, {0x48, 0x1}]}, @void, [{0xdd, 0x93, "74c8996fd9cb79b186203dc694443147ec4df6ee5c9fc8d74ab26fa52e30870603f0357ebbbdc85383de8faf6dbedbc92b502ee14a03ea98fca3d81679294f7ac74a5fce2c4d185b2c18387110cb978df2054a3b5b383098d0406d23bb5cce66fae5e815216c183eae30efb25d43537070cbb34ae4aeaa4cad8430c31950b374e83d5fa22193e402e2ec3bbb0cec1e99132bbc"}, {0xdd, 0xe5, "ae1bbff817223df6c6e1e0bce666def05ede104d3dcbb8c1d46cc4d8efa7518e6e8f09db5453061d243272686fb4deb1cd1a2775c0f4ad2fa91a55817db0e5b6d62d94684757ca42b3984e613b927232fe1b2526689d2c9d4faac5679606ca2f8344f3308617113fffad19f16aa79af0986c7f146451006350dec5092d1139732e1cb5bc69a8abcac1ed65d57769942204cdad8452a8adb7497a1f8a779c2dee9894545e98a5fd6381f5dd275dc133effb27070b5cfd0f58e31088641f87482cb36c70ec1bdeea8cb52a6539317afe5a2d70dcefb4e92bf67e60e4627223aeafaee0448cd2"}, {0xdd, 0xbc, "99714de296c47bbd37a99e8147c36c9be5484901b7e9f104054cb3369eddc2b43524effef5ba65600a80a6ec84aa24e42888df5331d90c7743503c8ee5d7abe03ead80e66cec5392e1f50947435f7dd4c60b4a93e99fa8da1f93a7cabfcc7c5b25d6b62d31a254a2735830f1f2c09d31d5eefd771d468c2c2bbaf23eb68fd94cae2f99725770663cc6eed5b1678c51fe4600baf7f7777b917249fbd2ab47b4e7a0312a8d70412f22230a3f518d3ab3c4e2ce882f241bd60b449dbe78"}, {0xdd, 0xd8, "e28335d7ec46b36f83bc544527d12883c5e889ef8fe8e56dc475ac40ef5003430ec657d821d4f953c2dd398daeb2af231bd4a2785b288e19c63277234c94e219b3fc82501ae12de0760331bed33b3f1f845cc4c17bc3e1c86655344c7698c1edbc16ad93a9cfe33709603164eca7afa95a4127293a3950f395f9dbc113103f06f34a226dc869524624b5f2812c41421bfe51af783431509afede8f7a390a5daf3048af49aa350a328ddc0180e286ccb89af4390273b92bb203bd3250471430b66413b6abe3defb37eb0b3c08300a6e50aeb97208891aa9fe"}, {0xdd, 0x20, "ca2a046ea97631b8692aabd52849ab9abfbbc658775d01f6b3a73d56f80550b8"}, {0xdd, 0x3c, "587c665d302fc4c1964ed5266ac42716b5676a8d489c6df310e3f3c8af85cc3ee2688273017a593683d60630f4c1a440516693ed8c6105330e6c82df"}, {0xdd, 0x93, "565d7ae4093977efc4bdb01e93e0fb76f4419a622d1c0dc8b70e1c790a5790577938a3a07a3aec1f3df6d0c38d5d3fa973a719d0cc9e11b231180fea76d11d7fca923b5e84a6615bb437ab2006d5ca75fc3c3585532f85dfeb1701f405fa7e538dead5b4709e910ff8ac0ed1a77c11c1fd77f9957992b00093270f38da90371ec04980eebfe437f72e1e8bbc84641fd4f23815"}, {0xdd, 0x3c, "09dcbdea727a3b47cbed07b54f8f5b3a5974766d3be0cad5170d8982426f817b4c52c954af48dc52647e8843b39c33b824e44a92f86b5e80a9654646"}, {0xdd, 0x9d, "5aa84c0b4ec2799018a97ab6f001159927bbf4dd594daae19d61ed588fe1af832df972d1b11449502bc76cecf43807c51719d1476230908d1ee4843109225cb392689b0b9bc8f5bb5259853f0f241e970408537b2692d8ce507f6180fcfe8b2a69c9d404aaba4670ce4c90acb7b6e028a4c0e6ac84dbec24037fd02feead1001fc0189e9cefddd9829215e5815ef3108a44a660dcc8e0526c4cdba92ac"}, {0xdd, 0x84, "311954f1c0136405f3f2a982ea340f420c3b80e4ca316f693f7cdfce69a3c216e81e704721b3849745782f14f82c60015bbb722e030f286dbd730c3022b4a13ed46e8ac4106b1a70440e226b39b38b1fcb25815dfce18c495c35ea4b41dea8d6352bdd0ffc96b69daec8bd96fcab9c09003d86484239ceb59848b3e9079ebb88a2b0d59d"}]}}, @NL80211_ATTR_FRAME={0x2db, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x6, 0x4}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x61, @val={0x10, 0x1, 0xe5}, [{0xdd, 0xef, "58dbb1eb3b31728de1134aa36c8aaaf3f41906ba7f1afbd62eaad3b74978ecc6469aec90be949f16a0f3771c4e156c01752a45995db61b47f2354ce96c6550564ac184a1c1459d66509cbb00ad54bf6c98f3b5a74087bf47710ac827687844d2a7f341ba5a62bb746b497e8090863ba68a30f71423eb1000f705d7243fcfe46637d3e2139681060c9964ce2c1dcfccb8a96d34bc1d817bf533cc309d8c0d2c59fb9bb91a1abc83baf6acdb988f12dcfa71bbbd7515808550683997f9f5e1162642d9bdf8ee92b951e89e72878db33f21f9f742d713488e70d1770085f2215c09ea20aac601f165ead36500c5da362f"}, {0xdd, 0xe3, "d3010709fb305f3cbc13d822284f54b008fbf8e941764d2597039f871795b16d240117029d5f821a1a10bb855bf15625a993d8639e2cdf51078649b214f7620f90a8e31719df25c4110f205668e828080313e9dc189b44f1c17653363a55010508f56f0ed5491e067ce4a56e3a6cf074e0d9abc058ee351f1ac9236a022da1a4d1d9e47cc1148a5a7b8624daed487318361dd8f1a6a3ac663750555923d5274a37e707892a88f6ce731139594fb083dadc9efb99604a5fd78e4686ab7d747aaf1f505f93ec97b3220cdcf44a850bfd80e42a32898db5731ddad5ce636bdb37aef32d3c"}, {0xdd, 0x2c, "8b9b299153b3359d1ddb848c344833d9b1af20d6ba1dff6c0680d64875c9affce77f0209c517bc78a3b2c389"}, {0xdd, 0x66, "e538fdf844b589f7c62c83c983a6c04f9c785338fff0f72c5e8fac2d0810fe9061c2d45418887adc8330bfa6f1937cf07bda4fd195699fdc4651d3fdf0295c8654859f7579439252cc4742638b67079a5c84c4634f1b17369230b3f04327e29bb75c69aae86e"}, {0xdd, 0x44, "7a25b2ce2165f9c6e8a438811d26bae0d25427fef7beca7d2567bc6a7ab31b0757e131a29c632ff10f3bf4950716438a85bb4a411aa4b3caa3ae19c28aae42094f885ac7"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x8c8}, 0x1, 0x0, 0x0, 0x10}, 0x44084) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m58.016508414s ago: executing program 0 (id=1932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x200, 0x6, 0x2, 0x1, 0x9, 0xfff, 0xb, 0x80, 0x5, 0x40, 0xfffffa1e, 0xfffffff1, 0x44f, 0x3, 0xffffff80, 0x5, 0x9, 0x4, 0xfa, 0x4, 0x6dfd, 0x6, 0x9, 0x2, 0x8, 0x4, 0x1, 0x4bfe, 0xfffffffe, 0x8, 0x5, 0x6, 0x2, 0x502, 0x2, 0x5, 0x9, 0x0, 0x5d, 0x3, 0x1, 0x80000000, 0x10000, 0xd, 0x5, 0x7ff, 0x80, 0x3, 0x6, 0x6, 0x3, 0x7, 0x8001, 0x0, 0x8, 0x90b9, 0x400, 0x6, 0x6, 0x0, 0x73, 0x0, 0x520, 0x4, 0xd, 0x9, 0x6, 0x4, 0x8, 0xe, 0x8, 0x800, 0xff, 0x80000000, 0x40, 0x5, 0x6, 0x7, 0x0, 0xfffff3b4, 0x9, 0x1, 0x2, 0x9, 0x80000001, 0x7, 0x0, 0x1, 0x8001, 0xb, 0x14400, 0x2, 0x5, 0x138, 0x5, 0xffff, 0xff, 0x5, 0xffff, 0xffff957d, 0x4, 0x8, 0x1, 0x7, 0x9, 0xfffffffe, 0x0, 0x8, 0x4, 0x3, 0x38a, 0x1000, 0xffffff81, 0x57b, 0x1, 0x2, 0xfffffffd, 0xe, 0x67, 0x100, 0x7fff, 0xc8f, 0x2, 0x9, 0x4, 0x6, 0xe6, 0x7fffffff, 0x6, 0x42, 0xedd, 0x7, 0x5, 0x9, 0x7, 0x0, 0x8000, 0x2, 0xb8, 0xffffffff, 0x100, 0x5, 0x3, 0xffffff00, 0xc44, 0x7, 0x0, 0x6, 0x2, 0x7, 0x8, 0x40, 0x5c, 0x1, 0x2, 0x3db3, 0xfffffff2, 0x4, 0xff, 0x7, 0x2, 0xf, 0x9, 0x5, 0x8, 0x613e0320, 0x9c25, 0x8, 0xe, 0x2, 0x80, 0x77e7, 0xe, 0x10001, 0x80000000, 0x7, 0x8001, 0x9, 0x330, 0xfffffff8, 0x1, 0xffffffff, 0x9, 0x7, 0x10000, 0x8, 0x0, 0x1, 0x5, 0x54, 0xf, 0x7ff, 0x1, 0x40, 0x3, 0x9, 0x3, 0x4, 0x80000787, 0x7f, 0x7fffffff, 0x9a, 0xbc, 0xb, 0x29dd, 0x5, 0x9, 0x200008, 0xf6a, 0x0, 0x101, 0xfffffffb, 0x7, 0x9, 0x6, 0xe, 0x5, 0x3, 0x0, 0x0, 0x7, 0x3ed, 0x8, 0x1, 0x5, 0x1ff, 0x7496, 0x200, 0x0, 0x7fffffff, 0xffffffff, 0x200, 0x200, 0x1, 0x6, 0x0, 0x7, 0x5e, 0x6, 0x4, 0x100, 0x9, 0x5a, 0x9, 0x80, 0xc, 0x7fffffff, 0x7, 0x9, 0x1ff, 0x2, 0x3, 0xa65b, 0xbd, 0x200]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 6m57.304768196s ago: executing program 5 (id=1933): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x82042, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r0, 0x0, 0x0, 0x4, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0x0, 0x10000009, 0xff7ffffb, 0x1}) r4 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x3, @mcast2, 0xfffffffc}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000006700000000000000000000000000000064010101000000000000000000000000fc02000048000000000000000000000000030006000000000002000000e000000100000000000000"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000000040)=0xbf, 0x4) 6m56.272475088s ago: executing program 1 (id=1934): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) poll(&(0x7f0000000300)=[{r0, 0x15f0}], 0x1, 0x101) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r4}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6m56.133579415s ago: executing program 0 (id=1935): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x185) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup(r7) (async) r8 = dup(r7) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback, 0x18000000}, 0x1c) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2f0066fab88c60f5257700000400000000000000000000000000000000000000090000000000000007000000010000"], 0x2f) write$P9_RGETATTR(r8, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x1040, {0x1, 0x3, 0x4}, 0x80, 0x0, 0x0, 0xb, 0x8, 0x6, 0x2, 0x8000000000000001, 0x7, 0x8, 0x9, 0x7, 0x1, 0x1ff, 0x4, 0x98, 0x9f1, 0x7fffffffffffffff}}, 0xfdef) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r9 = epoll_create(0xd751) epoll_pwait(r9, 0x0, 0x0, 0xef19, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000080)) (async) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000080)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e21, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e21, @multicast2}}}, 0x88) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x3, 0x6, 0x78f109d7, 0x5}) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x3, 0x6, 0x78f109d7, 0x5}) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) 6m54.976173741s ago: executing program 0 (id=1936): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x144) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000003400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d6727056af7f30a2125f59318104c654f4c0b2f3d", @ANYBLOB]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/168, 0xa8}, {0x0}, {&(0x7f0000000500)=""/61, 0x3d}], 0x3, &(0x7f0000000580)=""/246, 0xf6}, 0x6}, {{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/105, 0x69}, {&(0x7f0000003380)=""/115, 0x73}, {&(0x7f0000000a00)=""/196, 0xc4}], 0x3, &(0x7f0000000c00)=""/244, 0xf4}, 0x1000}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/38, 0x26}], 0x2, &(0x7f0000000dc0)=""/163, 0xa3}, 0x40}, {{&(0x7f0000000e80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002240), 0x0, &(0x7f00000022c0)=""/64, 0x40}, 0x6}, {{&(0x7f0000002300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003700)=[{&(0x7f0000000980)=""/116, 0x74}, {&(0x7f0000000b40)=""/181, 0xb5}, {&(0x7f00000034c0)=""/164, 0xa4}, {&(0x7f0000003940)=""/206, 0xce}, {&(0x7f0000003640)=""/158, 0x9e}], 0x5, &(0x7f0000000700)=""/83, 0x53}, 0x2}, {{&(0x7f0000003800)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003880)=""/185, 0xb9}, {&(0x7f0000004180)=""/135, 0x87}, {&(0x7f0000004040)=""/206, 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003a40)=""/190, 0xbe}, {&(0x7f0000003b00)=""/38, 0x26}, {&(0x7f0000003b40)=""/43, 0x2b}, {&(0x7f0000003b80)=""/4, 0x4}, {&(0x7f0000003bc0)=""/198, 0xc6}, {&(0x7f0000003cc0)=""/90, 0x5a}], 0x6, &(0x7f0000003dc0)=""/27, 0x1b}, 0xfe000000}], 0x7, 0x0, &(0x7f0000004000)={0x0, 0x989680}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0x2, 0xfffffbff, 0x3}}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffdfff}]}) syz_emit_ethernet(0x82, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, 0x1}, 0xc) r4 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="040000000056d4080000c8e20a216000"/27, @ANYRES32=0x0, @ANYBLOB="000000000400"/24, @ANYRES32=r4, @ANYBLOB], 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='lock i'], 0xc) 6m54.896990537s ago: executing program 2 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) request_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) 6m54.43103789s ago: executing program 0 (id=1938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x100) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4000010002, 0x6, 0x1, 0x0, 0x8001, 0xb, 0x651, 0xfffffefffffffffd, 0x8000009654, 0x2, 0x7fffffff, 0x0, 0x10, 0x10000000000000b, 0x80000000000000, 0x98, 0xfffffffffffffffe, 0x7, 0x5, 0x10000000006, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000418000/0x3000)=nil, 0x3000, 0x0, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4], 0x58}}, 0x8011) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="00000000b99b5c65c2a2b84674d78eca6d4bfa1ef997baf2ffffffa591f714cf4d91ae2ae5dfa54c558088a30bb2bad673b80b6a640ead7e80035deff431e0f51df0754ca8c0b3210745e590c3ba014177ae1f03000000000000003869bbba7ba0edabf2eb32a91510917e9ed7dd6aea6904e6fccc51eeaeec792a42ce222e7e268808ec3aaad385a60451fef6e751c8c5224f07f46a12ca16dce0e761871ae9e301f673adac61e53241a1dc4fb3b2ca81413cbb8f9dbb5519958449636c5078d93d24f002e1ed464f1102eca6", 0xf}], 0x100000000000004c}}], 0x1, 0x20008000) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x701082, 0x0) recvmsg(r6, 0x0, 0x12002) 6m53.077460359s ago: executing program 1 (id=1939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@volatile}, {@workdir={'workdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) io_pgetevents(r2, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) 6m53.076189007s ago: executing program 2 (id=1940): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@directio}, {@msize={'msize', 0x3d, 0xfef343a}}]}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x4, {0x405, 0xbde, 0x3, 0x4}}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "650000ea000000000000000000000000000000000000e2c57e0d00", 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x8770, 0x9, 0x1ff, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x67, 0x0, 0x17, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @empty, {[@rr={0x7, 0xf, 0x7d, [@broadcast, @remote, @broadcast]}, @noop, @noop, @rr={0x7, 0x7, 0x73, [@loopback]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x11, "add55bbdca8fa4cba7ad595ddcabb9"}, {0x0, 0x8, "c4ed85de09ae"}]}]}}}}}) sendmsg(r3, &(0x7f00000005c0)={&(0x7f0000000500)=@xdp={0x2c, 0x1, r6, 0x21}, 0x80, &(0x7f0000000580)}, 0x851) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$PROG_LOAD(0x24, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000feffffff8510000005000000850000000f0000007e0000000000001113391d0000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x8}, 0x94) 6m53.024918505s ago: executing program 3 (id=1941): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x1) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}]}}}]}, 0x58}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) 6m52.963685804s ago: executing program 5 (id=1942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001400)={0x8d0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10cf}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x649}, @NL80211_ATTR_FRAME={0x59c, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac, {0x9, 0xb6}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x40, 0x9, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x9}, {0x48, 0x1}]}, @void, [{0xdd, 0x93, "74c8996fd9cb79b186203dc694443147ec4df6ee5c9fc8d74ab26fa52e30870603f0357ebbbdc85383de8faf6dbedbc92b502ee14a03ea98fca3d81679294f7ac74a5fce2c4d185b2c18387110cb978df2054a3b5b383098d0406d23bb5cce66fae5e815216c183eae30efb25d43537070cbb34ae4aeaa4cad8430c31950b374e83d5fa22193e402e2ec3bbb0cec1e99132bbc"}, {0xdd, 0xe5, "ae1bbff817223df6c6e1e0bce666def05ede104d3dcbb8c1d46cc4d8efa7518e6e8f09db5453061d243272686fb4deb1cd1a2775c0f4ad2fa91a55817db0e5b6d62d94684757ca42b3984e613b927232fe1b2526689d2c9d4faac5679606ca2f8344f3308617113fffad19f16aa79af0986c7f146451006350dec5092d1139732e1cb5bc69a8abcac1ed65d57769942204cdad8452a8adb7497a1f8a779c2dee9894545e98a5fd6381f5dd275dc133effb27070b5cfd0f58e31088641f87482cb36c70ec1bdeea8cb52a6539317afe5a2d70dcefb4e92bf67e60e4627223aeafaee0448cd2"}, {0xdd, 0xbc, "99714de296c47bbd37a99e8147c36c9be5484901b7e9f104054cb3369eddc2b43524effef5ba65600a80a6ec84aa24e42888df5331d90c7743503c8ee5d7abe03ead80e66cec5392e1f50947435f7dd4c60b4a93e99fa8da1f93a7cabfcc7c5b25d6b62d31a254a2735830f1f2c09d31d5eefd771d468c2c2bbaf23eb68fd94cae2f99725770663cc6eed5b1678c51fe4600baf7f7777b917249fbd2ab47b4e7a0312a8d70412f22230a3f518d3ab3c4e2ce882f241bd60b449dbe78"}, {0xdd, 0xd8, "e28335d7ec46b36f83bc544527d12883c5e889ef8fe8e56dc475ac40ef5003430ec657d821d4f953c2dd398daeb2af231bd4a2785b288e19c63277234c94e219b3fc82501ae12de0760331bed33b3f1f845cc4c17bc3e1c86655344c7698c1edbc16ad93a9cfe33709603164eca7afa95a4127293a3950f395f9dbc113103f06f34a226dc869524624b5f2812c41421bfe51af783431509afede8f7a390a5daf3048af49aa350a328ddc0180e286ccb89af4390273b92bb203bd3250471430b66413b6abe3defb37eb0b3c08300a6e50aeb97208891aa9fe"}, {0xdd, 0x20, "ca2a046ea97631b8692aabd52849ab9abfbbc658775d01f6b3a73d56f80550b8"}, {0xdd, 0x3c, "587c665d302fc4c1964ed5266ac42716b5676a8d489c6df310e3f3c8af85cc3ee2688273017a593683d60630f4c1a440516693ed8c6105330e6c82df"}, {0xdd, 0x93, "565d7ae4093977efc4bdb01e93e0fb76f4419a622d1c0dc8b70e1c790a5790577938a3a07a3aec1f3df6d0c38d5d3fa973a719d0cc9e11b231180fea76d11d7fca923b5e84a6615bb437ab2006d5ca75fc3c3585532f85dfeb1701f405fa7e538dead5b4709e910ff8ac0ed1a77c11c1fd77f9957992b00093270f38da90371ec04980eebfe437f72e1e8bbc84641fd4f23815"}, {0xdd, 0x3c, "09dcbdea727a3b47cbed07b54f8f5b3a5974766d3be0cad5170d8982426f817b4c52c954af48dc52647e8843b39c33b824e44a92f86b5e80a9654646"}, {0xdd, 0x9d, "5aa84c0b4ec2799018a97ab6f001159927bbf4dd594daae19d61ed588fe1af832df972d1b11449502bc76cecf43807c51719d1476230908d1ee4843109225cb392689b0b9bc8f5bb5259853f0f241e970408537b2692d8ce507f6180fcfe8b2a69c9d404aaba4670ce4c90acb7b6e028a4c0e6ac84dbec24037fd02feead1001fc0189e9cefddd9829215e5815ef3108a44a660dcc8e0526c4cdba92ac"}, {0xdd, 0x84, "311954f1c0136405f3f2a982ea340f420c3b80e4ca316f693f7cdfce69a3c216e81e704721b3849745782f14f82c60015bbb722e030f286dbd730c3022b4a13ed46e8ac4106b1a70440e226b39b38b1fcb25815dfce18c495c35ea4b41dea8d6352bdd0ffc96b69daec8bd96fcab9c09003d86484239ceb59848b3e9079ebb88a2b0d59d"}]}}, @NL80211_ATTR_FRAME={0x2e3, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x6, 0x4}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x61, @val={0x10, 0x1, 0xe5}, [{0xdd, 0xef, "58dbb1eb3b31728de1134aa36c8aaaf3f41906ba7f1afbd62eaad3b74978ecc6469aec90be949f16a0f3771c4e156c01752a45995db61b47f2354ce96c6550564ac184a1c1459d66509cbb00ad54bf6c98f3b5a74087bf47710ac827687844d2a7f341ba5a62bb746b497e8090863ba68a30f71423eb1000f705d7243fcfe46637d3e2139681060c9964ce2c1dcfccb8a96d34bc1d817bf533cc309d8c0d2c59fb9bb91a1abc83baf6acdb988f12dcfa71bbbd7515808550683997f9f5e1162642d9bdf8ee92b951e89e72878db33f21f9f742d713488e70d1770085f2215c09ea20aac601f165ead36500c5da362f"}, {0xdd, 0xe3, "d3010709fb305f3cbc13d822284f54b008fbf8e941764d2597039f871795b16d240117029d5f821a1a10bb855bf15625a993d8639e2cdf51078649b214f7620f90a8e31719df25c4110f205668e828080313e9dc189b44f1c17653363a55010508f56f0ed5491e067ce4a56e3a6cf074e0d9abc058ee351f1ac9236a022da1a4d1d9e47cc1148a5a7b8624daed487318361dd8f1a6a3ac663750555923d5274a37e707892a88f6ce731139594fb083dadc9efb99604a5fd78e4686ab7d747aaf1f505f93ec97b3220cdcf44a850bfd80e42a32898db5731ddad5ce636bdb37aef32d3c"}, {0xdd, 0x2c, "8b9b299153b3359d1ddb848c344833d9b1af20d6ba1dff6c0680d64875c9affce77f0209c517bc78a3b2c389"}, {0xdd, 0x66, "e538fdf844b589f7c62c83c983a6c04f9c785338fff0f72c5e8fac2d0810fe9061c2d45418887adc8330bfa6f1937cf07bda4fd195699fdc4651d3fdf0295c8654859f7579439252cc4742638b67079a5c84c4634f1b17369230b3f04327e29bb75c69aae86e"}, {0xdd, 0x6, "85f72e60f4a6"}, {0xdd, 0x44, "7a25b2ce2165f9c6e8a438811d26bae0d25427fef7beca7d2567bc6a7ab31b0757e131a29c632ff10f3bf4950716438a85bb4a411aa4b3caa3ae19c28aae42094f885ac7"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x8d0}, 0x1, 0x0, 0x0, 0x10}, 0x44084) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m52.505384513s ago: executing program 5 (id=1943): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7ffc0001}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) (fail_nth: 2) 6m52.437079201s ago: executing program 2 (id=1944): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xc, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) semget(0x0, 0x1, 0x201) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000140)=""/108) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000003c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="300100001700010027bd7000fbdbdf25ff020000000000000000000000000001000004d30000000000000000000000000000000000000001ac141426000000000000000000000000640101010000000500000000000000004e2400044e200007da6920a021000000", @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000000000000000000000000000004e2300004e2100020a00802021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000000000000000000010000001e07000000000000faffffffffffffff0000000000000000090000000000000001000000000000000000008000000000dc380000000000007f000000000000000000000000000000060000000000000002000000000000000000030000000000090000000b000000fc0000002cbd700008001d0003000000"], 0x130}}, 0x4004010) 6m52.296526339s ago: executing program 5 (id=1945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x200, 0x6, 0x2, 0x1, 0x9, 0xfff, 0xb, 0x80, 0x5, 0x40, 0xfffffa1e, 0xfffffff1, 0x44f, 0x3, 0xffffff80, 0x5, 0x9, 0x4, 0xfa, 0x4, 0x6dfd, 0x6, 0x9, 0x2, 0x8, 0x4, 0x1, 0x4bfe, 0xfffffffe, 0x8, 0x5, 0x6, 0x2, 0x502, 0x2, 0x5, 0x9, 0x0, 0x5d, 0x3, 0x1, 0x80000000, 0x10000, 0xd, 0x5, 0x7ff, 0x80, 0x3, 0x6, 0x6, 0x3, 0x7, 0x8001, 0x0, 0x8, 0x90b9, 0x400, 0x6, 0x6, 0x0, 0x73, 0x0, 0x520, 0x4, 0xd, 0x9, 0x6, 0x4, 0x8, 0xe, 0x8, 0x800, 0xff, 0x80000000, 0x40, 0x5, 0x6, 0x7, 0x0, 0xfffff3b4, 0x9, 0x1, 0x2, 0x9, 0x80000001, 0x7, 0x0, 0x1, 0x8001, 0xb, 0x14400, 0x2, 0x5, 0x138, 0x5, 0xffff, 0xff, 0x5, 0xffff, 0xffff957d, 0x4, 0x8, 0x1, 0x7, 0x9, 0xfffffffe, 0x0, 0x8, 0x4, 0x3, 0x38a, 0x1000, 0xffffff81, 0x57b, 0x1, 0x2, 0xfffffffd, 0xe, 0x67, 0x100, 0x7fff, 0xc8f, 0x2, 0x9, 0x4, 0x6, 0xe6, 0x7fffffff, 0x6, 0x42, 0xedd, 0x7, 0x5, 0x9, 0x7, 0x0, 0x8000, 0x2, 0xb8, 0xffffffff, 0x100, 0x5, 0x3, 0xffffff00, 0xc44, 0x7, 0x0, 0x6, 0x2, 0x7, 0x8, 0x40, 0x5c, 0x1, 0x2, 0x3db3, 0xfffffff2, 0x4, 0xff, 0x7, 0x2, 0xf, 0x9, 0x5, 0x8, 0x613e0320, 0x9c25, 0x8, 0xe, 0x2, 0x80, 0x77e7, 0xe, 0x10001, 0x80000000, 0x7, 0x8001, 0x9, 0x330, 0xfffffff8, 0x1, 0xffffffff, 0x9, 0x7, 0x10000, 0x8, 0x0, 0x1, 0x5, 0x54, 0xf, 0x7ff, 0x1, 0x40, 0x3, 0x9, 0x3, 0x4, 0x80000787, 0x7f, 0x7fffffff, 0x9a, 0xbc, 0xb, 0x29dd, 0x5, 0x9, 0x200008, 0xf6a, 0x0, 0x101, 0xfffffffb, 0x7, 0x9, 0x6, 0xe, 0x5, 0x3, 0x0, 0x0, 0x7, 0x3ed, 0x8, 0x1, 0x5, 0x1ff, 0x7496, 0x200, 0x0, 0x7fffffff, 0xffffffff, 0x200, 0x200, 0x1, 0x6, 0x0, 0x7, 0x5e, 0x6, 0x4, 0x100, 0x9, 0x5a, 0x9, 0x80, 0xc, 0x7fffffff, 0x7, 0x9, 0x1ff, 0x2, 0x3, 0xa65b, 0xbd, 0x200]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 6m51.837270717s ago: executing program 3 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m51.761271306s ago: executing program 0 (id=1947): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 6m51.752923657s ago: executing program 1 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 6m12.832435108s ago: executing program 33 (id=1947): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5m22.095859914s ago: executing program 34 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 4m49.572922148s ago: executing program 35 (id=1944): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xc, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) semget(0x0, 0x1, 0x201) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000140)=""/108) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000003c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="300100001700010027bd7000fbdbdf25ff020000000000000000000000000001000004d30000000000000000000000000000000000000001ac141426000000000000000000000000640101010000000500000000000000004e2400044e200007da6920a021000000", @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000000000000000000000000000004e2300004e2100020a00802021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000000000000000000010000001e07000000000000faffffffffffffff0000000000000000090000000000000001000000000000000000008000000000dc380000000000007f000000000000000000000000000000060000000000000002000000000000000000030000000000090000000b000000fc0000002cbd700008001d0003000000"], 0x130}}, 0x4004010) 4m49.572788235s ago: executing program 36 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m49.386367606s ago: executing program 37 (id=1945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x200, 0x6, 0x2, 0x1, 0x9, 0xfff, 0xb, 0x80, 0x5, 0x40, 0xfffffa1e, 0xfffffff1, 0x44f, 0x3, 0xffffff80, 0x5, 0x9, 0x4, 0xfa, 0x4, 0x6dfd, 0x6, 0x9, 0x2, 0x8, 0x4, 0x1, 0x4bfe, 0xfffffffe, 0x8, 0x5, 0x6, 0x2, 0x502, 0x2, 0x5, 0x9, 0x0, 0x5d, 0x3, 0x1, 0x80000000, 0x10000, 0xd, 0x5, 0x7ff, 0x80, 0x3, 0x6, 0x6, 0x3, 0x7, 0x8001, 0x0, 0x8, 0x90b9, 0x400, 0x6, 0x6, 0x0, 0x73, 0x0, 0x520, 0x4, 0xd, 0x9, 0x6, 0x4, 0x8, 0xe, 0x8, 0x800, 0xff, 0x80000000, 0x40, 0x5, 0x6, 0x7, 0x0, 0xfffff3b4, 0x9, 0x1, 0x2, 0x9, 0x80000001, 0x7, 0x0, 0x1, 0x8001, 0xb, 0x14400, 0x2, 0x5, 0x138, 0x5, 0xffff, 0xff, 0x5, 0xffff, 0xffff957d, 0x4, 0x8, 0x1, 0x7, 0x9, 0xfffffffe, 0x0, 0x8, 0x4, 0x3, 0x38a, 0x1000, 0xffffff81, 0x57b, 0x1, 0x2, 0xfffffffd, 0xe, 0x67, 0x100, 0x7fff, 0xc8f, 0x2, 0x9, 0x4, 0x6, 0xe6, 0x7fffffff, 0x6, 0x42, 0xedd, 0x7, 0x5, 0x9, 0x7, 0x0, 0x8000, 0x2, 0xb8, 0xffffffff, 0x100, 0x5, 0x3, 0xffffff00, 0xc44, 0x7, 0x0, 0x6, 0x2, 0x7, 0x8, 0x40, 0x5c, 0x1, 0x2, 0x3db3, 0xfffffff2, 0x4, 0xff, 0x7, 0x2, 0xf, 0x9, 0x5, 0x8, 0x613e0320, 0x9c25, 0x8, 0xe, 0x2, 0x80, 0x77e7, 0xe, 0x10001, 0x80000000, 0x7, 0x8001, 0x9, 0x330, 0xfffffff8, 0x1, 0xffffffff, 0x9, 0x7, 0x10000, 0x8, 0x0, 0x1, 0x5, 0x54, 0xf, 0x7ff, 0x1, 0x40, 0x3, 0x9, 0x3, 0x4, 0x80000787, 0x7f, 0x7fffffff, 0x9a, 0xbc, 0xb, 0x29dd, 0x5, 0x9, 0x200008, 0xf6a, 0x0, 0x101, 0xfffffffb, 0x7, 0x9, 0x6, 0xe, 0x5, 0x3, 0x0, 0x0, 0x7, 0x3ed, 0x8, 0x1, 0x5, 0x1ff, 0x7496, 0x200, 0x0, 0x7fffffff, 0xffffffff, 0x200, 0x200, 0x1, 0x6, 0x0, 0x7, 0x5e, 0x6, 0x4, 0x100, 0x9, 0x5a, 0x9, 0x80, 0xc, 0x7fffffff, 0x7, 0x9, 0x1ff, 0x2, 0x3, 0xa65b, 0xbd, 0x200]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 16.716361434s ago: executing program 6 (id=2290): openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 14.986407938s ago: executing program 6 (id=2292): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000007}) 13.817342062s ago: executing program 6 (id=2293): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3}, 0x100) 12.732659531s ago: executing program 8 (id=2295): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffffffc, @empty, 0x81}, 0x19) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) fsopen(0x0, 0x1) mkdirat(r1, 0x0, 0x166) (async) write$binfmt_aout(r1, 0x0, 0xffffffdb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x55}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) inotify_init1(0x80800) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) 12.595235519s ago: executing program 6 (id=2297): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x21, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x40, 0x5, 0x2, "aa65"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet_sctp(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0x8001, 0x5, 0x4, 0x3, 0x2791, 0x100, 0x7, 0x2}}], 0x30, 0x4044085}], 0x1, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="22291bdab85482cb1d9b521d9fdb0581e48f97897ab69ccac1d353c335a0d8d89718fda37c1d69e97a596c8ccc1d75bc1617f544bc0627ec3c2f33729b09754313e2c10c01675cc0fca8db623cdc06f55787ec440c0944b2e243e427cd330e112acf21efd64a2d63a4deae6fe2e5b8e51e8084f3b3f78604910cb6d2d0c2d319f23cab80162027c48277da8cef8b24e769a36469f28f5c89ef2081893d01726be16f866f9bd68a53b6e4bb99f87e442d77677b851e64b61d8c4a58a3d984a8dc665a73799786fd760f477dbe3af857ceb9f47879310514c745ec1086eb135047ed89a520ac915115b267b9f9416b804387b62933c681ad85590be726700c221c98db4415e531cdeef927b8d946e6e04011ee0693ae2c81dbe123613a88e84d0aa3ec70e7bc108542e4a7603043d397ac993d0d39134456af57090a60b17677350eb686595b1afd741e1c51341263e71cd59f3e0380b5a90d35c5b76ee389c2544530623e1c1fed7112479eb433498d6e94ec6ff86279324347a512ed6bda4468592d9ad03e06be795c36d9054d740e44a3761dcba1c7117e4675e8a524ffd4b00144d17784d228f787d4c4dfb5c04bacb4d59d6154467fc135c87036972fc2e47185ff1f903e80231001b00578710253e26521a9cfa101f4f29f23a48ba9412506c18d191484837afa85c09ad4e92d17b024b5abc51936dc56a597e44b68d74ea1717672ac0b9b9603ed495b8bde924caa1d21e020552d9508146142338a43a59d6b9d06a38bd32711c6d596575bee5996e8b8c54ad597ecf921c0a617d4950bbc08bda25ec9bb52260600761e74a6d9b6cc7271e4535b6b8ff06c67a668f00945f079f7570380c6a888e25649e90aa7e3dcbaddf5b9e9ae44650bd3550b2224879190eb15cc63ac9cb331df0ae0975b804e7156d666f2faa990a9750fc3b7212664821e33fe880e2721d724822bf52b38ed88de80c8850b3a6cfc9212c3d1767bd6c474ab82a9239fe437531c5014e064f579b21617421230c6d381c84c8af58f8de538c9f666836bcc2b122fb090abc86b2b80a8700d729b7b0ffd9b46540e86379350814f6cecc1113e90638f964fb61cf695d7632928e15b9123df33baf8a71e96b9661ecb3cdc85d29b3a8a58fc9915e4cf0bb8531914214cc0a9a7a2dce33b0864569bea4954b21b021198171cc2e63b83240b4e145d0d2d718241913eb5fae157a2b141549347c9b24d87a902f84b842723d9de62ea09c26b3e97f3ae9353c476ed7afccd55a4964ea7ecb7bb6294cba42f6c7cbab5a714e3568216a61107a8cd71d3da1117fbc4bcd8f6df8cc0656703d4dc0bbed3de90bbae45803a5c9a2ca5fd6d399753d9202fdba0326562ebce27eddec5f1c9b2d1a32d60b86d0effc5b7b8d5909f490acb21f5d6912e6bad5986ffdb75acf854725012036191ef9ae2af53d16894475f5bc4bde7f309e42499e8970110a2b53148d6bf257407d4b53b87d35787392992600995e2869d5dc8c7665a6712bedbff2a5e447baf5fbe272ff8538f324d9ed4bc20aad7be530098e7cd7d8d7840efeb97666ae9e7b98e3959e88fbfa25102a768b84f148e3c5cd6da01add0464a68f489fd3c912c466d965228b3f701ef28bfa019c62cf189964b190e4b8467f5ef154aad223cf874c31f37296debbea2c1b61e3358fd5bcc7284788c20cc3f690184626a25c9ff257c395cbf0655a3b446b635daa4b8ec63171778215fe61b7efd5eac753bfdc5b9f6f2d7e4f4508a62a5fb92dc84c5bc38bc7f559b1dabcf3a2ff37fdbe4adf8b792eecc8c8588ea9ccdd079f47c072f997f78786277d8dda20143f26d888e5d6edfa998456b4125b086ed846426d306d9fd4d68529e166ab700fc14285620d7162b4201915dc0eb7d8b07115a0ed52678cae9a8d7696101cdc9aed15767ffe5458a94e8691dea7939522d7bfaf601389dd584ce304bb8e784ad93ca48ec0a0d355af3904120790c23d03b90c487958dc55c51665de006101511758049c16809d4c59fb06faa35cebba80a175c463a59ba5affa35c35bc001cb0ee27a175e93b10c653dc1b3d6221d3b0cb36b0f2cecbf87101618099e4b88dbe09217371986780b6db8d659c5bb4702293ad5462f3b9274ec2960750700b3f09badfe85e9a6bce3f644dc76ff8bce735f4af57d1c439b91dfaf1a1699046bd7b5d8b273afc418c34ab1e75d0b170307b2273cd0dbaf4c059aed086233032ef635790b2c5de4114d8c30520272fb5b3c1cb1d0affe74e43c484c9016dd26de4d1fd58245d6f671612ac98fba9d1f5492d24728f3f5a08c96a247c806a2e8c2e6a9b033a206a080d53110ba188d3f211170e9d5f2a73a76afd2259eaa93237e822fa99d54037f44cec8b4ab9ec1353afeacd952a2180bb096cac6d2dfd2276bda7407182452df3e7f3b4e7331bd80e03c318a777b6032598e7a1558aeb84ad8ac83ac873411e15398ec32914779bd4e14c5e23e7a06322fdcccfead9ea0350a3866d41cf905a677d4786eb04f20f13ccf527ed38e5ba66dd52b8f06e94af61bd6b975ed421d1e9b6f379baf7f60c458d74b03730df266059a3accd7d5ceb2f6d8f2897aecbd274ebb33092c5d6ad93d8eaf53414778217fe942e5f23ccf769e5a640a602b7f89fe03190114f89576f3bb44bf2d52b8d08e78f8a0f10d38674f78c1f92fb1e9dc8e8720269e8c18fdf131bef002a0e2643065bbc63aab8f28af20d2b37f47f0289d2adffb3b6ab94b0c2f03454a7aa67b0be359463b31aeee01d5dbc25fc2a06c6469d55158a18765cc9eb223b67837ecbc96cc2e433eb035cbb978e619381c338808b77e27503f8a77dc658fe5009cfe4718bf421091a88b0e556cda8e450a937e89c7c3f940eb9bff9ad9eca870aea15c27debe221c0f32bc3bb1dc9632221cb2d312fd32ed1b6831189a24850a3edc95bb854f953dcaf9903969624a9c946a71634311269d8105c52013c7dfaa185fac3ad4a38e236e2ed9d92cade92afe3505762e1f5cf1b88df9ed9569878c6f1b1bcda22317ae0cf15ea9940722cd26d1a3d92ad00dfc243b7ef1900eda0b6125d229643888d19f37e436baca2c6094f3a1bc960dc8bda6da64cbe2b3536dccd454e5777002089197882c04958b217127dc26bce900c8410370d41d04b645733d0306a1ad580b9a4a5c765ef5d5bd18c8b1fda78646c07dd1474c934ee8c06292d36a2e5628ba73be1ca785f2d3e88fe1bd0fdd5ae0d1c6e389ab2ecf7c9650cb3a4940aaa3cb7857766391f210fb5fed10976641efef9cef6efdc62947f6648b9b2ce87b9beb37e404b4b51168a6fb926571ee16971eeb090e662b97dc50deb4473e61e0afc6d29b4e2c0420c0e5409034149994e2af149aee3c57f02c34d15c0a20f534f8a7e7c464a36382aba49afa8a435941a2886255d899bd170515332c6bee95f2a5ccaf2b14618b1aeb8722afd115328095f3aaccb69389fc01948204dce492883a88343534c8d652dec2e7bae76de68c68978f8542dcdb21e83401ff90c4d7adf6393f808c42cd3cc6a021f1b4232d402970f98b7c0b665196b811592e6db3e221c5e91d0229f00296d8e90fcdb35569c0e2057fdd2ffcc07d8a538bd51656088c9fcfd8b9657d8e822d02b5250f9aa94c2b3134e62897586a58e80c73dcb5b980a0256898d7d3df616429fc8452ab0fcbcb65bfb06a34aa11f59532ab24c3feb83fa9f96e7b30a9ece6f44d4e1f026b319b62c2362808aca16f86acb802c2cba0e1e1d0c69008ee325e51843f2d2e2822040018ecfed7f89cea7120a60f92fe8f7d72028f31fbf7b3a98fb49faeffbc9036d2644b28296ab4f3e6ceeab5b8b0b3f4128495e34163270fc9878b0af3ff79f3162e22ca326ddf4dedf37899910e3a6598de3ed6d3fdff0f15b5c8cba4d59a2a74ae821c41973827c5f42b286bb611b8b8edb236c592c23bbbb315c47b8cafc8a04de8e4ed537053bd3de53523577252799d9be1b577f1eea23fa2820f56d0dda330bcd67a23c4055a05cbd6acf2a4d6758dbb352e6d058311aa0a2b62fc79fe816ca53c26bc9fd406fd56b2b8c3ca4f898267366d1882a1d75242787fa4d08f2333a49d3abd403da22e868eb9a636b9e2d935d81a19a7f14ca7342e44b2bb3dc140ce9cb950d496d9ecb11798ba1369f814dda210309f887ce6a294162a1d7a868078aac9d858826dd6e2f19faf8362c210904f48fa4ff5841ae3844a9b6fd89ef0b0ede37da7f86bd3b8804ffc9761b78ac1964cee026a386846d1eb3386acbb6167ebede903222b71946ece4aa2494599001d272d2e6ad7a7195da8f1a9cc857f714c22d727444098a7a84cb604d40dd516bf37cc26580ea49bdbc19bfef1e7bc6a67039dbc03ee33047a3ff590006e2f838a1330d3f5f70e38e926d663ae61f1991196c52526dc4017be1d84c2631b8396953ebd9588e3c4a0bc1c79a5cfcf66a25406da92e62dac78a8810c349067ec99121bccda42f2d73e213805c167fed901cd207462800dc083f9d7d552d0a66a28a26c2ac4fe935e4f5c2764858919a87f124c322634cb280b6692de69c763e50bb954b6bf4ccfabe5e56cc13ae624f83898ebea59c6a24c1db64feb8d41a96590b9cc15cbf98c9b00d6a87200a78aa479a98ee9c8739aee67d9d06aa108af4aa363e3918292e6cb10841b5e7174ad80b13977dc211539b26cc20e6cf5cc412b52c2bf49e6f0dbcba3aba7c6a92af2309f491d070a045b873e2cda0bf197c016834e64f2acc1b9b70ea95fca1014bee03bd5214b58a9ea122694af389f2c9c14286ea458f0e0e9e204833abd5d62b1046873e8bf0152b6c909d4138edc2f5d6b4857dc08c94515c03e77ff61d9d7d114b31345efc22448beadeb23ecdc46e5aa1e303a2607843a07ebe6f651d3e43d4b964f5f0bfecbfbea01082fe1a40f0b80eedc2aced40d970da08b0b635d8cfb08723676a4e4617b562aaf9b938b2dcf5ad042b293eba66dd66a62690b294e8277f25a1aa0bc95e63da29990cbebf8bc584699da1e72456a3d728df3fdd5279927f56d3c3c13e069c9bcb033aeb143853dd00a23b7d1b5202d36a76d6e3584ccf2093630574242d4844bf3983f2860a5c3c6ec272f71326ca259196060a8bcf927f271276824d8434e25ccf3f20355bdcf0d53024fb63051036fdf965905249c0d504b35dbad3179819a41494f916b37d7b390301f071ff752a4db600270c3dbc7d24bf5980cb7882a4a6e6d9f7237f7649ec64419d5c93271a7d4b1978b3e388ecbb4f55f5cd3d441b5f96bb8b4ef67c3e0d4fcf484e280aca62d81c5a17365add4e5b6cda4f1ba0fa621874003b579942a8e0340e7e738a97762a55cfb7a06d127f0b72513e966e1c04247cbdbcfb8ab1a5e74ef9f4fe43599ca0e264505a12b6a82cc00433d6d75a4055c6db5491c94d15a23fb88e38c5fbf29816e94e64bbdd6cbf48d8e73f14dd38692eaafeeea5dbbd54bfc50cedde56af46598e6b3052f6d45c5ffa31c20c47c298411795807ac8bd612aa0b0b9353d2411b7566b0e66ef8853f2364ffe2bdc57e4c8c15464feec00f951cdc790d1d2d3217e26a839bd720d0a73a136297357f7ed751aa30da6f06374ea269c67e86c39a288db421283339b011acb3cfeb6916470d50b4275250ed601df63036c5d8d4f0b6c92b65e3d047d9840e474bbb9a70b9ac5de50edeae05b0fe8002cac1e877a5835117d4da2ca7606dc57530a5e6849b4f81a3e11415015226beb94de152c8c", @ANYRES16, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RESET(r7, 0x5514) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x600c8050}, 0x0) 11.316708845s ago: executing program 8 (id=2298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x7}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffe6d}, 0x1, 0x0, 0x0, 0x48004}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) r3 = dup(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x8010) inotify_rm_watch(r3, r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x166) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r8, @ANYBLOB="01002dbd7000000000e61a000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0xca61f201bb89548d}, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r6, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) io_setup(0xff, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.315570181s ago: executing program 9 (id=2299): openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 9.612887442s ago: executing program 8 (id=2300): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf00}}], 0x1, 0x8054) 9.609812527s ago: executing program 9 (id=2301): socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1a5000001240400140003006e657464657673696d30000000000000200016801c0001801800"], 0x5c}}, 0x4000844) 9.553484411s ago: executing program 7 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffd1d}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x7, 0xe, 0x0, &(0x7f0000000040)="24c2afc3a2c1589b3933d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x4}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18c49}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) 9.140652359s ago: executing program 8 (id=2302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) clock_adjtime(0x5, &(0x7f0000000000)={0x80, 0x9, 0xffb, 0x1000000000004, 0xff, 0xfffffffffffffff7, 0x400000000000001, 0x2, 0x4008001, 0x8080800, 0x3, 0x82, 0x1, 0x100000000, 0x5, 0x3, 0x7, 0xe3b, 0xfffffffffffffff7, 0x8, 0x4, 0xe9, 0x3, 0x100000000, 0xff, 0xe}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xffeffff, 0x2503, 0xe373, 0xffffffffffffffff, 0x0, 0x0}) ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000000100)={0x2, 0x2, 0x7, 0x81, 0x7fff, 0x71b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000040)={0x8, 0x1e9, 0xd, 0x3f, 0x1a, "3800f6ff051eff2f8528ad00"}) 9.003887754s ago: executing program 9 (id=2303): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0xaf, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1b}, [@mixer_unit={0xa, 0x24, 0x4, 0x5, 0x2, "6d12940226"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x81, 0x7, {0x7, 0x25, 0x1, 0x8, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x1, 0xf, 0x88, "84", "8a4f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x9e, {0x7, 0x25, 0x1, 0x8, 0x49, 0x8}}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x41, 0x3, 0x9, 0x7, 0x10, 0x9}, 0x217, &(0x7f0000000b80)={0x5, 0xf, 0x217, 0x5, [@generic={0xf4, 0x10, 0xb, "2e022b01ba84c89cc452e8a5d945eccad4f2909da369c852f2e43920c819f7252e1047d9c3ca393c601f49377962c74e4629f597ae420e1db9ff08ebbcb52841edf5d5dbd5fd139cb32f71cc99fd30ac6e02479543cc415b2d6e53880c4a785dc470db9bce0f3bf1c3f57a361f010435654903efeb4f677562d016c81f48ed49f383ae39c8bfae7b616d708ac4854ee78250ae7c2898fbf0f804324dca6f1ef37c2d8eb0c6ad1be2dfe63907ad1e294897b1eb0f2378c0d1ef4f19abb65439456083d3394122571a6ce40dc63928c7307a565685beedc766ef77fa9cc8c828d08e8b2186328b524eafe62459e05cf07a1a"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ff554bbb31c43b7ba09a6e05e796211d"}, @generic={0xef, 0x10, 0x3, "35f9493a71d07d4eef9545a304ca49bb03adf86a6d67dfcab382cbd2ee2776655ad920cff863d67298e5483ed15098eaa90e8ceb688d17cd93cd2dbd9634bda33731c1d8f3d506f0702043ecd3e847d450ca41fd4213f3a4779122654707aa77707ba01fc92debba7f34aa327ff09b4e137e6892f62b40b18c20af2e544aedccf7d350a6da54b1a1971b60a210d455d7e7b5258e0d4ffc205d0dbab40766916d49fcdb96cb9d61d3f33bc1a98b44c7c079e5994deb935135336ab3ecc69ee23302ddc51199f0630e718acb68fc6cb5b675bcfe538250b18a1be20a6508f8ee4ee0e5508ec3ae60ad1b153d9a"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d8adef545ae60d35eceee11bdadfd9dd"}]}, 0x3, [{0xb5, &(0x7f0000000dc0)=@string={0xb5, 0x3, "97d94f5b05ed8239769e7c17df8924436eeebc00d4dd94c272b4cd0e9b2bfdba2360fc3c26c4d6c9001db3d4fb63c0ce38eb45a18f9a59d815fa89d89dbc3a64ee6eabc69505d7dd97593b5c6c36bbbf4a3e6a59068e0b03b7ae0dfacd37c543aa2caaa113e53fb978dc64579637e2a2d3a94eba7707e11363b55dd3bc42581e7df9f2d0687c6a73e519042c642b0249e4caead1bd60564d295bc2adc1aa10c468d0e9b560f6214cfb89fbda109166e23ca585"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = msgget$private(0x0, 0x3ac) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000a2f000/0x1000)=nil, 0x1000, 0xb635773f06ebbee6, 0x1010, 0xffffffffffffffff, 0xe776f000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x80, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r8, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x2000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r9, 0x1ba2, 0x0) 8.958843736s ago: executing program 7 (id=2304): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x7, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffb0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 8.718434401s ago: executing program 6 (id=2305): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001000007fffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f00000000c0)={0x0, 0xfdfd, 0x1, "0000087aba0f75501eb6d1f14fa30000000000000016d2f0ffff00", 0x32315241}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r1, &(0x7f0000002d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000580)={@empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0xd30311, r8}) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000004d40)={0x0, 0x6}, &(0x7f0000004d80)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r1, &(0x7f0000000cc0)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@userptr={0x401, 0x4, 0x4, 0x80, 0x8001, {}, {0x4, 0x8, 0x5, 0x6, 0x2, 0x8, "30f24368"}, 0x2, 0x2, {}, 0x1, 0x0, r5}) 8.500417771s ago: executing program 7 (id=2306): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x111001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f00000000c0)='.\x00', 0x900, &(0x7f0000001dc0)={0x0, 0xf7, 0x40000}, 0x20) 7.821019924s ago: executing program 8 (id=2307): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x5, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) io_submit(0x0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5601}]) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) 6.120430502s ago: executing program 7 (id=2308): r0 = epoll_create1(0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) close_range(r0, 0xffffffffffffffff, 0x0) 4.519230113s ago: executing program 8 (id=2309): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x7}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffe6d}, 0x1, 0x0, 0x0, 0x48004}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) r3 = dup(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x8010) inotify_rm_watch(r3, r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x166) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r8, @ANYBLOB="01002dbd7000000000e61a000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0xca61f201bb89548d}, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r6, 0x0, 0x0) io_setup(0xff, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.408440675s ago: executing program 7 (id=2310): openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 2.328694418s ago: executing program 9 (id=2311): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 1.624986837s ago: executing program 9 (id=2312): socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1a5000001240400140003006e657464657673696d30000000000000200016801c0001801800"], 0x5c}}, 0x4000844) 697.198243ms ago: executing program 7 (id=2313): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008", 0x1d) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe145, 0x3, 0x69c9, 0x2, 0xd, 0x385a2d2f, 0x0, 0x100000000}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x12400) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x24}}, 0xc040000) 432.527968ms ago: executing program 4 (id=1953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001400)={0x8d0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10cf}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x649}, @NL80211_ATTR_FRAME={0x59c, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac, {0x9, 0xb6}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x40, 0x9, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x9}, {0x48, 0x1}]}, @void, [{0xdd, 0x93, "74c8996fd9cb79b186203dc694443147ec4df6ee5c9fc8d74ab26fa52e30870603f0357ebbbdc85383de8faf6dbedbc92b502ee14a03ea98fca3d81679294f7ac74a5fce2c4d185b2c18387110cb978df2054a3b5b383098d0406d23bb5cce66fae5e815216c183eae30efb25d43537070cbb34ae4aeaa4cad8430c31950b374e83d5fa22193e402e2ec3bbb0cec1e99132bbc"}, {0xdd, 0xe5, "ae1bbff817223df6c6e1e0bce666def05ede104d3dcbb8c1d46cc4d8efa7518e6e8f09db5453061d243272686fb4deb1cd1a2775c0f4ad2fa91a55817db0e5b6d62d94684757ca42b3984e613b927232fe1b2526689d2c9d4faac5679606ca2f8344f3308617113fffad19f16aa79af0986c7f146451006350dec5092d1139732e1cb5bc69a8abcac1ed65d57769942204cdad8452a8adb7497a1f8a779c2dee9894545e98a5fd6381f5dd275dc133effb27070b5cfd0f58e31088641f87482cb36c70ec1bdeea8cb52a6539317afe5a2d70dcefb4e92bf67e60e4627223aeafaee0448cd2"}, {0xdd, 0xbc, "99714de296c47bbd37a99e8147c36c9be5484901b7e9f104054cb3369eddc2b43524effef5ba65600a80a6ec84aa24e42888df5331d90c7743503c8ee5d7abe03ead80e66cec5392e1f50947435f7dd4c60b4a93e99fa8da1f93a7cabfcc7c5b25d6b62d31a254a2735830f1f2c09d31d5eefd771d468c2c2bbaf23eb68fd94cae2f99725770663cc6eed5b1678c51fe4600baf7f7777b917249fbd2ab47b4e7a0312a8d70412f22230a3f518d3ab3c4e2ce882f241bd60b449dbe78"}, {0xdd, 0xd8, "e28335d7ec46b36f83bc544527d12883c5e889ef8fe8e56dc475ac40ef5003430ec657d821d4f953c2dd398daeb2af231bd4a2785b288e19c63277234c94e219b3fc82501ae12de0760331bed33b3f1f845cc4c17bc3e1c86655344c7698c1edbc16ad93a9cfe33709603164eca7afa95a4127293a3950f395f9dbc113103f06f34a226dc869524624b5f2812c41421bfe51af783431509afede8f7a390a5daf3048af49aa350a328ddc0180e286ccb89af4390273b92bb203bd3250471430b66413b6abe3defb37eb0b3c08300a6e50aeb97208891aa9fe"}, {0xdd, 0x20, "ca2a046ea97631b8692aabd52849ab9abfbbc658775d01f6b3a73d56f80550b8"}, {0xdd, 0x3c, "587c665d302fc4c1964ed5266ac42716b5676a8d489c6df310e3f3c8af85cc3ee2688273017a593683d60630f4c1a440516693ed8c6105330e6c82df"}, {0xdd, 0x93, "565d7ae4093977efc4bdb01e93e0fb76f4419a622d1c0dc8b70e1c790a5790577938a3a07a3aec1f3df6d0c38d5d3fa973a719d0cc9e11b231180fea76d11d7fca923b5e84a6615bb437ab2006d5ca75fc3c3585532f85dfeb1701f405fa7e538dead5b4709e910ff8ac0ed1a77c11c1fd77f9957992b00093270f38da90371ec04980eebfe437f72e1e8bbc84641fd4f23815"}, {0xdd, 0x3c, "09dcbdea727a3b47cbed07b54f8f5b3a5974766d3be0cad5170d8982426f817b4c52c954af48dc52647e8843b39c33b824e44a92f86b5e80a9654646"}, {0xdd, 0x9d, "5aa84c0b4ec2799018a97ab6f001159927bbf4dd594daae19d61ed588fe1af832df972d1b11449502bc76cecf43807c51719d1476230908d1ee4843109225cb392689b0b9bc8f5bb5259853f0f241e970408537b2692d8ce507f6180fcfe8b2a69c9d404aaba4670ce4c90acb7b6e028a4c0e6ac84dbec24037fd02feead1001fc0189e9cefddd9829215e5815ef3108a44a660dcc8e0526c4cdba92ac"}, {0xdd, 0x84, "311954f1c0136405f3f2a982ea340f420c3b80e4ca316f693f7cdfce69a3c216e81e704721b3849745782f14f82c60015bbb722e030f286dbd730c3022b4a13ed46e8ac4106b1a70440e226b39b38b1fcb25815dfce18c495c35ea4b41dea8d6352bdd0ffc96b69daec8bd96fcab9c09003d86484239ceb59848b3e9079ebb88a2b0d59d"}]}}, @NL80211_ATTR_FRAME={0x2e3, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x6, 0x4}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x61, @val={0x10, 0x1, 0xe5}, [{0xdd, 0xef, "58dbb1eb3b31728de1134aa36c8aaaf3f41906ba7f1afbd62eaad3b74978ecc6469aec90be949f16a0f3771c4e156c01752a45995db61b47f2354ce96c6550564ac184a1c1459d66509cbb00ad54bf6c98f3b5a74087bf47710ac827687844d2a7f341ba5a62bb746b497e8090863ba68a30f71423eb1000f705d7243fcfe46637d3e2139681060c9964ce2c1dcfccb8a96d34bc1d817bf533cc309d8c0d2c59fb9bb91a1abc83baf6acdb988f12dcfa71bbbd7515808550683997f9f5e1162642d9bdf8ee92b951e89e72878db33f21f9f742d713488e70d1770085f2215c09ea20aac601f165ead36500c5da362f"}, {0xdd, 0xe3, "d3010709fb305f3cbc13d822284f54b008fbf8e941764d2597039f871795b16d240117029d5f821a1a10bb855bf15625a993d8639e2cdf51078649b214f7620f90a8e31719df25c4110f205668e828080313e9dc189b44f1c17653363a55010508f56f0ed5491e067ce4a56e3a6cf074e0d9abc058ee351f1ac9236a022da1a4d1d9e47cc1148a5a7b8624daed487318361dd8f1a6a3ac663750555923d5274a37e707892a88f6ce731139594fb083dadc9efb99604a5fd78e4686ab7d747aaf1f505f93ec97b3220cdcf44a850bfd80e42a32898db5731ddad5ce636bdb37aef32d3c"}, {0xdd, 0x2c, "8b9b299153b3359d1ddb848c344833d9b1af20d6ba1dff6c0680d64875c9affce77f0209c517bc78a3b2c389"}, {0xdd, 0x66, "e538fdf844b589f7c62c83c983a6c04f9c785338fff0f72c5e8fac2d0810fe9061c2d45418887adc8330bfa6f1937cf07bda4fd195699fdc4651d3fdf0295c8654859f7579439252cc4742638b67079a5c84c4634f1b17369230b3f04327e29bb75c69aae86e"}, {0xdd, 0x6, "85f72e60f4a6"}, {0xdd, 0x44, "7a25b2ce2165f9c6e8a438811d26bae0d25427fef7beca7d2567bc6a7ab31b0757e131a29c632ff10f3bf4950716438a85bb4a411aa4b3caa3ae19c28aae42094f885ac7"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x8d0}, 0x1, 0x0, 0x0, 0x10}, 0x44084) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 327.034982ms ago: executing program 6 (id=2314): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x21, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x40, 0x5, 0x2, "aa65"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet_sctp(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0x8001, 0x5, 0x4, 0x3, 0x2791, 0x100, 0x7, 0x2}}], 0x30, 0x4044085}], 0x1, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RESET(r7, 0x5514) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x600c8050}, 0x0) 326.355483ms ago: executing program 4 (id=2315): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x7, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffb0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 0s ago: executing program 9 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9fd1d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) pwrite64(r3, &(0x7f00000000c0)=',', 0x1, 0x2f6fffd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, &(0x7f0000000240)='~', 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffc, 0x0, 0x1, 0x1a, 0xc, "faf88317e5a1149989fc8dbe43ea6acc96e380f985881a7beda9d69098c8b534464c516bdd8a0f350000000000000000000000007400", "32f9cc26f7060a743d9e234b2ec50997d3bef409ff2176ff7bfe55cd4a5d83cd4a5235d3ba0000000000000000000000000000000000000000fc00", "67523760fd61b7ad336400", [0x3, 0x3fd]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) fcntl$setlease(r3, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) fcntl$setown(r3, 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): ave_1 [ 1110.910813][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1962'. [ 1110.910841][T13327] netlink: 'syz.8.1962': attribute type 2 has an invalid length. [ 1110.910849][T13327] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1962'. [ 1111.193448][T12739] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1111.212189][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 1111.265649][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 1111.368927][T12739] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1111.368956][T12739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.368973][T12739] usb 9-1: Product: syz [ 1111.368980][T12739] usb 9-1: Manufacturer: syz [ 1111.368986][T12739] usb 9-1: SerialNumber: syz [ 1111.590083][T13180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.590277][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.592478][T13180] bridge_slave_1: entered allmulticast mode [ 1111.596894][T13180] bridge_slave_1: entered promiscuous mode [ 1111.837049][ T5834] usb 10-1: USB disconnect, device number 2 [ 1111.928656][T13180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.012226][T13180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.073981][T12739] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1112.074016][T12739] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1112.456045][T13180] team0: Port device team_slave_0 added [ 1112.456644][T12942] veth0_macvtap: entered promiscuous mode [ 1112.505200][T12884] veth0_macvtap: entered promiscuous mode [ 1112.511162][T13180] team0: Port device team_slave_1 added [ 1112.557792][T12942] veth1_macvtap: entered promiscuous mode [ 1112.610622][T13180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.610639][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.610656][T13180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.612394][T12884] veth1_macvtap: entered promiscuous mode [ 1112.666111][T13180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.666127][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.666151][T13180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.405529][T13180] hsr_slave_0: entered promiscuous mode [ 1114.436256][T13180] hsr_slave_1: entered promiscuous mode [ 1114.446941][T13180] debugfs: 'hsr0' already exists in 'hsr' [ 1114.446967][T13180] Cannot create hsr debugfs directory [ 1114.465521][T12739] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1114.465591][T12739] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1114.483799][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.546318][T13347] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1965'. [ 1114.598351][T12739] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1114.807299][T12739] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1114.833385][T12739] usb 9-1: USB disconnect, device number 4 [ 1114.960252][T12884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.963165][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.220637][T12845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.276650][T12845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.278668][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1115.297282][T12845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.299286][T12845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.439480][ T9401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1115.465038][T11045] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1115.478138][ T9401] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1115.511426][ T9401] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1115.520748][ T9401] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1115.521434][ T9401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1115.864483][T11045] usb 9-1: Using ep0 maxpacket: 8 [ 1116.856125][T11045] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1116.856153][T11045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.886589][T11045] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1116.886613][T11045] pvrusb2: ********** [ 1116.886619][T11045] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1116.886630][T11045] pvrusb2: Important functionality might not be entirely working. [ 1116.886638][T11045] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1116.886648][T11045] pvrusb2: ********** [ 1117.066776][ T2380] pvrusb2: Invalid write control endpoint [ 1117.165328][ T2380] pvrusb2: Invalid write control endpoint [ 1117.165341][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1117.165350][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1117.165357][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1117.165365][ T2380] pvrusb2: Device being rendered inoperable [ 1117.165427][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1117.165474][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1117.237373][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1117.237389][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1117.237398][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1119.034768][ T5629] Bluetooth: hci2: command tx timeout [ 1119.935981][ T6662] usb 9-1: USB disconnect, device number 5 [ 1121.003406][ T1641] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1121.093336][ T5629] Bluetooth: hci2: command tx timeout [ 1121.154123][ T1641] usb 10-1: Using ep0 maxpacket: 8 [ 1121.156243][ T1641] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1121.156268][ T1641] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.177081][ T1641] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1121.177098][ T1641] pvrusb2: ********** [ 1121.177104][ T1641] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1121.177115][ T1641] pvrusb2: Important functionality might not be entirely working. [ 1121.177123][ T1641] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1121.177148][ T1641] pvrusb2: ********** [ 1121.399123][ T2380] pvrusb2: Invalid write control endpoint [ 1121.438850][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1121.661821][ T2380] pvrusb2: Invalid write control endpoint [ 1121.661836][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1121.661844][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1121.661851][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1121.661859][ T2380] pvrusb2: Device being rendered inoperable [ 1121.661935][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1121.661975][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1121.663029][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1121.663040][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1121.663049][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1122.889422][T13410] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1972'. [ 1122.889456][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1122.947783][T12843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.947802][T12843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.023908][T13407] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1123.118805][T13407] comedi comedi1: 8255: I/O base address not correctly aligned [ 1123.173514][ T5629] Bluetooth: hci2: command tx timeout [ 1123.741741][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.741760][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.253757][ T5629] Bluetooth: hci2: command tx timeout [ 1125.400505][ T5631] usb 10-1: USB disconnect, device number 3 [ 1125.613397][ T5832] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1125.997227][T13432] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1974'. [ 1125.998237][T13432] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1974'. [ 1126.268131][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.865817][ T5832] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1126.865845][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.877926][ T5832] usb 7-1: config 0 descriptor?? [ 1127.110868][ T5832] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0e [ 1127.110893][ T5832] hackrf 7-1:0.0: Could not detect board [ 1127.110950][ T5832] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 1127.124917][ T5832] usb 7-1: USB disconnect, device number 2 [ 1127.504938][ T823] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1127.703443][ T823] usb 9-1: Using ep0 maxpacket: 8 [ 1127.705724][ T823] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1127.705752][ T823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.906536][ T823] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1127.906553][ T823] pvrusb2: ********** [ 1127.906560][ T823] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1127.906570][ T823] pvrusb2: Important functionality might not be entirely working. [ 1127.906578][ T823] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1127.906588][ T823] pvrusb2: ********** [ 1128.263717][ T2380] pvrusb2: Invalid write control endpoint [ 1129.798144][ T2380] pvrusb2: Invalid write control endpoint [ 1129.798159][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1129.798169][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1129.798176][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1129.798185][ T2380] pvrusb2: Device being rendered inoperable [ 1129.798260][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1129.798315][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1129.805164][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1129.805178][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1129.805187][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1130.882821][ T5631] usb 9-1: USB disconnect, device number 6 [ 1131.517574][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.517699][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.518076][T13355] bridge_slave_0: entered allmulticast mode [ 1131.528028][T13355] bridge_slave_0: entered promiscuous mode [ 1131.840985][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.841140][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.841476][T13355] bridge_slave_1: entered allmulticast mode [ 1131.843666][T13355] bridge_slave_1: entered promiscuous mode [ 1132.115242][T13477] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1132.115354][T13477] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1132.149221][T13355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.292098][T13355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.436580][T13180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1132.534914][T13180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1132.623694][T13180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1132.757728][T13477] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1132.781699][T13180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1132.990918][T13477] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1132.991039][T13477] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1133.015636][T13180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1133.111851][T13180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1133.117351][T13355] team0: Port device team_slave_0 added [ 1133.135063][T13180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1133.178016][T13180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.194388][T13355] team0: Port device team_slave_1 added [ 1133.208616][T13477] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1133.271775][T13477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.272035][T13477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1133.344572][T13477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1133.375129][ T56] bridge_slave_1: left allmulticast mode [ 1133.375151][ T56] bridge_slave_1: left promiscuous mode [ 1133.375303][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.451711][T13477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.456600][T13477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.535806][T13477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.546873][ T56] bridge_slave_0: left allmulticast mode [ 1133.546906][ T56] bridge_slave_0: left promiscuous mode [ 1133.547166][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.613028][T13477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.613128][T13477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1133.684476][T13477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1133.977456][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1134.068602][ T823] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1134.428834][ T823] usb 7-1: Using ep0 maxpacket: 8 [ 1135.159041][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1135.333788][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.478217][ T823] usb 7-1: device descriptor read/all, error -71 [ 1135.493382][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 1135.654286][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1135.754296][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.833908][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.857072][ T56] bond0 (unregistering): Released all slaves [ 1136.052448][T13355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.053777][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1136.057041][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.057067][T13355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.095777][ T823] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1136.101052][T13355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.101068][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.101093][T13355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.296124][ T823] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1136.297173][ T823] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1136.297198][ T823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1136.297216][ T823] usb 7-1: SerialNumber: syz [ 1136.710868][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1989'. [ 1137.334860][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1137.463783][ T9401] Bluetooth: hci0: command 0x0c1a tx timeout [ 1137.574647][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 1137.740724][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1137.816939][T13355] hsr_slave_0: entered promiscuous mode [ 1137.831150][T13355] hsr_slave_1: entered promiscuous mode [ 1137.856187][T13355] debugfs: 'hsr0' already exists in 'hsr' [ 1137.856270][T13355] Cannot create hsr debugfs directory [ 1138.133379][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1138.210590][ T823] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1138.314860][ T823] usb 7-1: USB disconnect, device number 4 [ 1138.423875][ T56] hsr_slave_0: left promiscuous mode [ 1138.501236][ T56] hsr_slave_1: left promiscuous mode [ 1138.502451][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.502478][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.545806][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.634669][ T56] veth1_macvtap: left promiscuous mode [ 1138.634729][ T56] veth0_macvtap: left promiscuous mode [ 1138.637456][ T56] veth1_vlan: left promiscuous mode [ 1138.637585][ T56] veth0_vlan: left promiscuous mode [ 1138.733425][ T6662] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1138.895579][ T6662] usb 10-1: Using ep0 maxpacket: 8 [ 1138.897415][ T6662] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1138.897440][ T6662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.950994][ T6662] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1138.951011][ T6662] pvrusb2: ********** [ 1138.951017][ T6662] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1138.951029][ T6662] pvrusb2: Important functionality might not be entirely working. [ 1138.951037][ T6662] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1138.951048][ T6662] pvrusb2: ********** [ 1139.175460][T13552] 9pnet_fd: Insufficient options for proto=fd [ 1139.194150][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1993'. [ 1139.194171][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1993'. [ 1139.194196][T13550] netlink: 'syz.8.1993': attribute type 11 has an invalid length. [ 1139.194266][T13550] netlink: 'syz.8.1993': attribute type 18 has an invalid length. [ 1139.596045][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1139.596680][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1139.728260][ T9401] Bluetooth: hci1: command 0x0c1a tx timeout [ 1140.298215][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1140.885979][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1995'. [ 1141.606389][ T6662] usb 10-1: USB disconnect, device number 4 [ 1141.606711][ T2380] pvrusb2: Invalid write control endpoint [ 1141.855850][ T2380] pvrusb2: Invalid write control endpoint [ 1141.855864][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1141.855874][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1141.855882][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1141.855892][ T2380] pvrusb2: Device being rendered inoperable [ 1141.855962][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1141.859905][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1141.861494][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1141.861506][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1141.861516][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1142.336690][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1143.139693][T13568] syz.6.1997 (13568): drop_caches: 4 [ 1143.152208][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1143.373876][ T6662] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1143.548463][ T6662] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.548489][ T6662] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.551090][ T6662] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1143.551116][ T6662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1143.551133][ T6662] usb 7-1: SerialNumber: syz [ 1143.831692][ T6662] usb 7-1: 0:2 : does not exist [ 1143.914470][ T6662] usb 7-1: USB disconnect, device number 5 [ 1144.325758][T13572] netlink: 'syz.8.1999': attribute type 4 has an invalid length. [ 1145.236925][T10883] udevd[10883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1145.249133][T13572] IPVS: Error connecting to the multicast addr [ 1145.631119][T13180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.918048][T13590] 9pnet_fd: Insufficient options for proto=fd [ 1145.976870][T13180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.253343][T13583] input: syz1 as /devices/virtual/input/input11 [ 1147.647362][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.647436][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.699630][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.699813][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.246921][T13628] fuse: Bad value for 'group_id' [ 1149.246941][T13628] fuse: Bad value for 'group_id' [ 1149.726725][T13638] Bluetooth: MGMT ver 1.23 [ 1149.993415][T12740] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1150.199922][T12740] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.199954][T12740] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.199989][T12740] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1150.200010][T12740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.211762][T12740] usb 7-1: config 0 descriptor?? [ 1150.648882][T13180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.771069][T13661] 9pnet_fd: Insufficient options for proto=fd [ 1150.793551][T12740] aquacomputer_d5next 0003:0C70:F0B6.0007: item fetching failed at offset 3/7 [ 1150.794455][T12740] aquacomputer_d5next 0003:0C70:F0B6.0007: probe with driver aquacomputer_d5next failed with error -22 [ 1150.817078][T12739] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1150.899458][T12740] usb 7-1: USB disconnect, device number 6 [ 1150.996293][T12739] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 1150.996311][T12739] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1150.996320][T12739] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1150.996339][T12739] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1150.996360][T12739] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1150.996370][T12739] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1150.996380][T12739] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1151.076877][T12739] usb 9-1: string descriptor 0 read error: -22 [ 1151.077032][T12739] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1151.077054][T12739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.124204][T12739] usb 9-1: config 0 descriptor?? [ 1151.133939][T12739] hub 9-1:0.0: bad descriptor, ignoring hub [ 1151.133973][T12739] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1151.265902][T12739] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input12 [ 1151.548694][T12739] usb 9-1: USB disconnect, device number 7 [ 1151.942946][T13677] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 1151.942980][T13677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.873120][T13355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1152.925657][T13355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.946265][T13355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1153.841466][T13355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.861296][T13355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1154.080422][T13355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1154.090738][T13355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1154.116211][T13355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1154.190538][T13180] veth0_vlan: entered promiscuous mode [ 1154.304381][T13180] veth1_vlan: entered promiscuous mode [ 1155.267459][T13180] veth0_macvtap: entered promiscuous mode [ 1155.308201][T13180] veth1_macvtap: entered promiscuous mode [ 1155.454797][T13716] 9pnet_fd: Insufficient options for proto=fd [ 1155.464154][T13180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.479756][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.483037][T13180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.522313][ T3401] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.537330][ T3401] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.539062][ T3401] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.539289][ T3401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.620478][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.647093][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.647189][T10235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.746615][T12842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.746747][T12842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.965890][T13722] netlink: 'syz.6.2022': attribute type 11 has an invalid length. [ 1156.957569][ T5832] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1157.163745][ T5832] usb 10-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1157.163788][ T5832] usb 10-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1157.163813][ T5832] usb 10-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1157.165006][ T5832] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1157.165031][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1157.165049][ T5832] usb 10-1: SerialNumber: syz [ 1157.171606][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1157.241976][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1157.245764][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1157.290736][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1157.344320][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1157.652124][ T5832] rndis_host 10-1:253.0: RNDIS init failed, -71 [ 1157.652304][ T5832] rndis_host 10-1:253.0: probe with driver rndis_host failed with error -71 [ 1157.705548][ T5832] usb 10-1: USB disconnect, device number 5 [ 1159.653636][ T9401] Bluetooth: hci3: command tx timeout [ 1159.773907][ T6629] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1159.937504][ T6629] usb 9-1: Using ep0 maxpacket: 16 [ 1159.939233][ T6629] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1159.939249][ T6629] usb 9-1: config 0 has no interface number 0 [ 1159.939274][ T6629] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1159.939287][ T6629] usb 9-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1159.939299][ T6629] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1159.941325][ T6629] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1159.941350][ T6629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.941369][ T6629] usb 9-1: Product: syz [ 1159.941382][ T6629] usb 9-1: Manufacturer: syz [ 1159.941395][ T6629] usb 9-1: SerialNumber: syz [ 1159.947624][ T6629] usb 9-1: config 0 descriptor?? [ 1159.948742][T13741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1159.948904][T13741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1160.169582][T13741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1160.171081][T13741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1160.361947][ T776] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.388249][ T6629] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1160.388516][ T6629] asix 9-1:0.34: probe with driver asix failed with error -71 [ 1160.438952][ T6629] usb 9-1: USB disconnect, device number 8 [ 1161.271325][ T776] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.745125][ T9401] Bluetooth: hci3: command tx timeout [ 1162.281407][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.671178][ T776] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.673340][ T9401] Bluetooth: hci3: command tx timeout [ 1164.915313][T13787] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2032'. [ 1165.383359][ T5834] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1165.535857][ T5834] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1165.535876][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.540572][ T5834] usb 10-1: config 0 descriptor?? [ 1165.783394][ T5834] hackrf 10-1:0.0: usb_control_msg() failed -71 request 0e [ 1165.783421][ T5834] hackrf 10-1:0.0: Could not detect board [ 1165.783478][ T5834] hackrf 10-1:0.0: probe with driver hackrf failed with error -71 [ 1165.830782][ T5834] usb 10-1: USB disconnect, device number 6 [ 1165.902957][ T776] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.693402][ T9401] Bluetooth: hci3: command tx timeout [ 1167.292453][T13355] veth0_vlan: entered promiscuous mode [ 1167.521094][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.521964][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.522219][T13727] bridge_slave_0: entered allmulticast mode [ 1167.526614][T13727] bridge_slave_0: entered promiscuous mode [ 1167.549494][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.549626][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.549845][T13727] bridge_slave_1: entered allmulticast mode [ 1167.553130][T13727] bridge_slave_1: entered promiscuous mode [ 1167.580789][T13355] veth1_vlan: entered promiscuous mode [ 1167.867940][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.890537][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.034574][ T776] bridge_slave_1: left allmulticast mode [ 1168.034598][ T776] bridge_slave_1: left promiscuous mode [ 1168.034775][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.591449][T13835] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12877] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13835] [ 1168.745786][ T776] bridge_slave_0: left allmulticast mode [ 1168.745821][ T776] bridge_slave_0: left promiscuous mode [ 1168.746053][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.808309][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1168.808326][ T37] audit: type=1326 audit(1780865832.735:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.8.2043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c3712ce59 code=0x0 [ 1169.072862][T13842] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2045'. [ 1169.072978][T13842] netlink: Conntrack attr has 3 unknown bytes [ 1170.304026][ T776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.384148][ T776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.425522][ T776] bond0 (unregistering): Released all slaves [ 1170.793889][T13855] nbd: couldn't find device at index 1073807360 [ 1170.907235][T13727] team0: Port device team_slave_0 added [ 1170.973865][T13727] team0: Port device team_slave_1 added [ 1171.164428][ T776] hsr_slave_0: left promiscuous mode [ 1171.204129][ T776] hsr_slave_1: left promiscuous mode [ 1171.212798][ T776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.212815][ T776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.245147][ T776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.245173][ T776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.334568][ T6629] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1171.505505][ T6629] usb 9-1: config 0 has no interfaces? [ 1171.505549][ T6629] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1171.505571][ T6629] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.509789][ T776] veth1_macvtap: left promiscuous mode [ 1171.509883][ T776] veth0_macvtap: left promiscuous mode [ 1171.512577][ T6629] usb 9-1: config 0 descriptor?? [ 1171.568963][ T776] veth1_vlan: left promiscuous mode [ 1171.569077][ T776] veth0_vlan: left promiscuous mode [ 1171.863526][ T6629] usb 9-1: USB disconnect, device number 9 [ 1171.872561][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2051'. [ 1172.621707][T13873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.984802][ T776] team0 (unregistering): Port device team_slave_1 removed [ 1173.035717][ T776] team0 (unregistering): Port device team_slave_0 removed [ 1174.233675][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.233692][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.233715][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.238999][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.239013][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.239027][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.240289][T13355] veth0_macvtap: entered promiscuous mode [ 1174.454452][T13355] veth1_macvtap: entered promiscuous mode [ 1174.624315][T13727] hsr_slave_0: entered promiscuous mode [ 1174.666863][T13727] hsr_slave_1: entered promiscuous mode [ 1174.669612][T13727] debugfs: 'hsr0' already exists in 'hsr' [ 1174.669637][T13727] Cannot create hsr debugfs directory [ 1174.810868][T13355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.152275][T13355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.470610][ T3401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.522647][ T3401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.523151][ T3401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.524210][ T3401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.840702][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2066'. [ 1176.152485][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1176.246331][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1176.266620][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1176.284796][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1176.306583][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1177.866807][T13940] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 1177.866830][T13940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.035690][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1178.682265][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2072'. [ 1179.307709][ T5629] Bluetooth: hci1: command tx timeout [ 1179.656105][T13961] netlink: 'syz.6.2074': attribute type 2 has an invalid length. [ 1181.333610][ T5629] Bluetooth: hci1: command tx timeout [ 1182.779199][ T776] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.878007][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2077'. [ 1182.913931][ T5631] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1183.063553][ T5631] usb 10-1: device descriptor read/64, error -71 [ 1183.303802][ T5631] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1183.350229][ T776] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.416711][ T5629] Bluetooth: hci1: command tx timeout [ 1183.450233][ T5631] usb 10-1: device descriptor read/64, error -71 [ 1183.450423][T12740] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1183.554041][ T5631] usb usb10-port1: attempt power cycle [ 1183.623293][T12740] usb 9-1: Using ep0 maxpacket: 32 [ 1183.625387][T12740] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1183.625411][T12740] usb 9-1: config 0 has no interface number 0 [ 1183.627585][T12740] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1183.627611][T12740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.627630][T12740] usb 9-1: Product: syz [ 1183.627643][T12740] usb 9-1: Manufacturer: syz [ 1183.627656][T12740] usb 9-1: SerialNumber: syz [ 1183.652064][T12740] usb 9-1: config 0 descriptor?? [ 1183.676024][T12740] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1183.891814][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.892703][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.903470][ T5631] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1183.924175][ T5631] usb 10-1: device descriptor read/8, error -71 [ 1184.081384][T12740] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1184.160973][T12740] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1184.163891][ T5631] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1184.185560][ T5631] usb 10-1: device descriptor read/8, error -71 [ 1184.300472][ T5631] usb usb10-port1: unable to enumerate USB device [ 1184.349088][ T5834] usb 9-1: USB disconnect, device number 10 [ 1184.351008][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1184.437065][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1184.498301][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1184.521406][ T5834] quatech2 9-1:0.51: device disconnected [ 1184.680090][ T776] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.995858][T14014] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 1184.995892][T14014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.066898][T13727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1185.121302][T13727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1185.494042][ T5629] Bluetooth: hci1: command tx timeout [ 1185.495269][ T776] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.827692][T13727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1185.902738][T13727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.993017][T13727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1186.095884][T13727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1187.425991][T13727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1187.497817][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.565550][ T37] audit: type=1800 audit(1780865851.475:553): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2084" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=42993 res=0 errno=0 [ 1187.630047][T13727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1187.806078][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.806200][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.806486][T13920] bridge_slave_0: entered allmulticast mode [ 1187.819398][T13920] bridge_slave_0: entered promiscuous mode [ 1187.846112][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.846230][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.846516][T13920] bridge_slave_1: entered allmulticast mode [ 1187.851150][T13920] bridge_slave_1: entered promiscuous mode [ 1188.052034][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.095429][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.433454][T13920] team0: Port device team_slave_0 added [ 1188.688254][T13920] team0: Port device team_slave_1 added [ 1189.164070][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.164086][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.164110][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.174109][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.174124][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.174148][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.958096][ T6662] IPVS: starting estimator thread 0... [ 1190.382515][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2086'. [ 1190.410593][T14078] IPVS: using max 11 ests per chain, 26400 per kthread [ 1190.868427][ T776] bridge_slave_1: left allmulticast mode [ 1190.868460][ T776] bridge_slave_1: left promiscuous mode [ 1190.868670][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.032525][T14087] FAULT_INJECTION: forcing a failure. [ 1191.032525][T14087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.032554][T14087] CPU: 0 UID: 0 PID: 14087 Comm: syz.8.2091 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1191.032575][T14087] Tainted: [L]=SOFTLOCKUP [ 1191.032580][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1191.032590][T14087] Call Trace: [ 1191.032596][T14087] [ 1191.032603][T14087] dump_stack_lvl+0xe8/0x150 [ 1191.032628][T14087] should_fail_ex+0x46b/0x600 [ 1191.032656][T14087] _copy_from_user+0x2d/0xb0 [ 1191.032672][T14087] proc_control_compat+0xb1/0x190 [ 1191.032802][T14087] ? __pfx_proc_control_compat+0x10/0x10 [ 1191.032818][T14087] ? lockdep_hardirqs_on+0x7a/0x110 [ 1191.032841][T14087] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1191.032861][T14087] ? mutex_lock_nested+0x152/0x1d0 [ 1191.032874][T14087] ? usbdev_ioctl+0x14b/0x20c0 [ 1191.032891][T14087] usbdev_ioctl+0x1367/0x20c0 [ 1191.032910][T14087] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1191.032922][T14087] ? __fget_files+0x2a/0x420 [ 1191.032936][T14087] ? __fget_files+0x3a6/0x420 [ 1191.032948][T14087] ? __fget_files+0x2a/0x420 [ 1191.032962][T14087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1191.033018][T14087] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1191.033033][T14087] __se_sys_ioctl+0xff/0x170 [ 1191.033050][T14087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.033065][T14087] do_syscall_64+0x174/0x580 [ 1191.033084][T14087] ? trace_irq_disable+0x3b/0x140 [ 1191.033102][T14087] ? clear_bhb_loop+0x40/0x90 [ 1191.033118][T14087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.033140][T14087] RIP: 0033:0x7f1c3712ce59 [ 1191.033155][T14087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.033167][T14087] RSP: 002b:00007f1c3537e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.033183][T14087] RAX: ffffffffffffffda RBX: 00007f1c373a5fa0 RCX: 00007f1c3712ce59 [ 1191.033194][T14087] RDX: 0000200000000140 RSI: 00000000c0105500 RDI: 0000000000000003 [ 1191.033203][T14087] RBP: 00007f1c3537e090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.033211][T14087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.033220][T14087] R13: 00007f1c373a6038 R14: 00007f1c373a5fa0 R15: 00007fffde5378c8 [ 1191.033243][T14087] [ 1191.327120][T12866] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1191.566741][T12866] usb 7-1: Using ep0 maxpacket: 8 [ 1191.858324][T12866] usb 7-1: New USB device found, idVendor=0499, idProduct=1011, bcdDevice= 0.40 [ 1191.858354][T12866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.858372][T12866] usb 7-1: Product: syz [ 1191.858385][T12866] usb 7-1: Manufacturer: syz [ 1191.858397][T12866] usb 7-1: SerialNumber: syz [ 1193.935045][ T776] bridge_slave_0: left allmulticast mode [ 1193.949210][ T776] bridge_slave_0: left promiscuous mode [ 1193.950132][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.090221][T12866] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1195.765066][T12866] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1195.770957][T12866] usb 7-1: USB disconnect, device number 7 [ 1195.827742][T10883] udevd[10883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1198.488176][ T5629] Bluetooth: hci0: unexpected event for opcode 0x200c [ 1199.089818][T14108] binder: BINDER_SET_CONTEXT_MGR already set [ 1199.089834][T14108] binder: 14102:14108 ioctl 4018620d 200000001000 returned -16 [ 1199.285254][ T776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.344178][ T776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.372375][ T776] bond0 (unregistering): Released all slaves [ 1199.469970][T13920] hsr_slave_0: entered promiscuous mode [ 1199.471207][T13920] hsr_slave_1: entered promiscuous mode [ 1199.472138][T13920] debugfs: 'hsr0' already exists in 'hsr' [ 1199.472161][T13920] Cannot create hsr debugfs directory [ 1201.309483][ T5834] IPVS: starting estimator thread 0... [ 1201.377523][ T776] hsr_slave_0: left promiscuous mode [ 1201.417978][T14132] IPVS: using max 11 ests per chain, 26400 per kthread [ 1201.675746][ T776] hsr_slave_1: left promiscuous mode [ 1201.677693][ T776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.677720][ T776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.762166][T14136] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 1201.762201][T14136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.480449][ T776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.480473][ T776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.086614][ T776] veth1_macvtap: left promiscuous mode [ 1204.086712][ T776] veth0_macvtap: left promiscuous mode [ 1204.086880][ T776] veth1_vlan: left promiscuous mode [ 1204.086983][ T776] veth0_vlan: left promiscuous mode [ 1204.581574][T14148] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1204.995746][ T776] team0 (unregistering): Port device team_slave_1 removed [ 1205.063798][ T776] team0 (unregistering): Port device team_slave_0 removed [ 1205.359635][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1205.518092][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.574247][T13727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.590440][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.590663][T14059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.613065][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.666161][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.566408][T14172] overlay: ./file0 is not a directory [ 1206.859884][ T37] audit: type=1326 audit(1780865870.745:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14160 comm="syz.8.2106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c3712ce59 code=0x0 [ 1208.765863][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1209.872547][ T37] audit: type=1326 audit(1780865873.795:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.873102][ T37] audit: type=1326 audit(1780865873.795:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.950712][ T37] audit: type=1326 audit(1780865873.875:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.950968][ T37] audit: type=1326 audit(1780865873.875:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.951053][ T37] audit: type=1326 audit(1780865873.875:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.951186][ T37] audit: type=1326 audit(1780865873.875:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.957829][ T37] audit: type=1326 audit(1780865873.875:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.957875][ T37] audit: type=1326 audit(1780865873.875:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1209.957913][ T37] audit: type=1326 audit(1780865873.875:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.6.2115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1479bce59 code=0x7ffc0000 [ 1211.486761][T14231] overlay: ./file0 is not a directory [ 1213.314526][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2119'. [ 1214.124426][T14217] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1214.124635][T14217] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1214.124831][T14217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1214.125248][T14217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1214.142776][T14217] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1214.266509][T14217] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1214.310311][T13727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.440384][T14217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1215.520511][T14217] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1216.033820][T14217] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1216.136335][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 1216.136550][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1216.136579][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1216.136605][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1216.511795][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1216.563453][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1216.590510][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1216.622867][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1216.631532][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1217.915272][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 1218.226075][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 1218.694477][ T5629] Bluetooth: hci2: command tx timeout [ 1220.043892][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 1220.192438][T14299] overlay: ./file0 is not a directory [ 1220.369069][ T37] kauditd_printk_skb: 148 callbacks suppressed [ 1220.369109][ T37] audit: type=1326 audit(1780865884.275:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14294 comm="syz.6.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1479bce59 code=0x0 [ 1220.813693][ T5629] Bluetooth: hci2: command tx timeout [ 1221.630793][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2129'. [ 1222.067605][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 1222.853373][ T5629] Bluetooth: hci2: command tx timeout [ 1225.730697][ T5629] Bluetooth: hci2: command tx timeout [ 1225.829205][T13920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1225.845023][T14327] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1225.845224][T14327] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1225.845406][T14327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1225.845593][T14327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1225.845782][T14327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1225.845857][T14327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1225.914267][T14327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1225.991582][T13920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.023785][T13920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1226.051137][T13920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.069384][T13920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1226.099806][T13920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.110403][T13920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1226.198578][T13920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.893471][ T9401] Bluetooth: hci1: command 0x0c1a tx timeout [ 1227.893509][ T9401] Bluetooth: hci0: command 0x0c1a tx timeout [ 1227.893535][ T9401] Bluetooth: hci8: command 0x0c1a tx timeout [ 1227.893559][ T9401] Bluetooth: hci7: command 0x0c1a tx timeout [ 1227.893639][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1227.920229][T14370] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3351 [ 1228.003479][ T5832] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1228.154962][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 1228.174744][ T5832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1228.177026][ T5832] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.177078][ T5832] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1228.177103][ T5832] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1228.182704][ T5832] usb 9-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1228.182730][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.182748][ T5832] usb 9-1: Product: syz [ 1228.182761][ T5832] usb 9-1: Manufacturer: syz [ 1228.182774][ T5832] usb 9-1: SerialNumber: syz [ 1228.279226][T14368] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1228.414054][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.499515][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.526879][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.527184][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.754099][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.754934][T12846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.618693][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1230.767306][ T5832] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1230.899681][ T5832] usb 9-1: USB disconnect, device number 11 [ 1231.506824][ T9893] udevd[9893]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.667796][T14267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.668006][T14267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.668285][T14267] bridge_slave_0: entered allmulticast mode [ 1231.742123][T14267] bridge_slave_0: entered promiscuous mode [ 1231.814306][T14267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.814426][T14267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.814693][T14267] bridge_slave_1: entered allmulticast mode [ 1231.823665][T14267] bridge_slave_1: entered promiscuous mode [ 1231.908324][T14389] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1231.908574][T14389] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1231.908797][T14389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1231.908986][T14389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1231.909187][T14389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1232.223574][ T1001] bridge_slave_1: left allmulticast mode [ 1232.223607][ T1001] bridge_slave_1: left promiscuous mode [ 1232.223849][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.384314][ T1001] bridge_slave_0: left allmulticast mode [ 1232.384343][ T1001] bridge_slave_0: left promiscuous mode [ 1232.384498][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.474707][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1233.489578][ T5832] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1233.719791][ T5832] usb 10-1: Using ep0 maxpacket: 8 [ 1233.740892][ T5832] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1233.740919][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.786675][ T5832] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1233.786694][ T5832] pvrusb2: ********** [ 1233.786698][ T5832] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1233.786703][ T5832] pvrusb2: Important functionality might not be entirely working. [ 1233.786708][ T5832] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1233.786715][ T5832] pvrusb2: ********** [ 1233.824016][T12739] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1233.968364][ T2380] pvrusb2: Invalid write control endpoint [ 1233.983625][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1233.983661][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 1233.983686][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1233.983711][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1234.047600][T12739] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1234.047628][T12739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.091090][T12739] usb 7-1: config 0 descriptor?? [ 1234.379084][T12739] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0e [ 1234.379112][T12739] hackrf 7-1:0.0: Could not detect board [ 1234.379169][T12739] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 1234.406310][T12739] usb 7-1: USB disconnect, device number 8 [ 1234.536727][ T2380] pvrusb2: Invalid write control endpoint [ 1234.536766][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1234.536856][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1234.536888][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1234.536920][ T2380] pvrusb2: Device being rendered inoperable [ 1234.537211][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1234.539093][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1235.190137][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1235.190153][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1235.190163][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1235.384715][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.464618][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.508911][ T1001] bond0 (unregistering): Released all slaves [ 1235.590015][T14267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.698882][T14267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.902506][T14267] team0: Port device team_slave_0 added [ 1235.912229][T14267] team0: Port device team_slave_1 added [ 1237.179810][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1237.274067][ T5832] usb 10-1: USB disconnect, device number 11 [ 1237.287531][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1237.308920][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1237.339408][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1237.341149][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1237.637490][T14267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.637507][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.637532][T14267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.758797][T14425] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2152'. [ 1237.758929][T14425] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2152'. [ 1238.443672][T14267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.443688][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.443714][T14267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.034851][ T1001] hsr_slave_0: left promiscuous mode [ 1239.073705][ T1001] hsr_slave_1: left promiscuous mode [ 1239.074821][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.124945][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.454049][T12865] Bluetooth: hci3: command tx timeout [ 1240.994988][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 1241.044243][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 1241.888713][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1241.965706][T14433] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1241.965913][T14433] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1241.966095][T14433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1241.966262][T14433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1241.966433][T14433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.966516][T14433] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1242.106293][T14433] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1242.295746][T14267] hsr_slave_0: entered promiscuous mode [ 1242.297171][T14267] hsr_slave_1: entered promiscuous mode [ 1242.298155][T14267] debugfs: 'hsr0' already exists in 'hsr' [ 1242.298177][T14267] Cannot create hsr debugfs directory [ 1242.582245][T14472] netlink: 'syz.6.2160': attribute type 1 has an invalid length. [ 1243.624123][ T6629] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1243.783597][ T6629] usb 10-1: Using ep0 maxpacket: 16 [ 1243.785640][ T6629] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1243.785662][ T6629] usb 10-1: config 0 has no interface number 0 [ 1243.785700][ T6629] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1243.785719][ T6629] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1243.788046][ T6629] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1243.788071][ T6629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.788086][ T6629] usb 10-1: Product: syz [ 1243.788098][ T6629] usb 10-1: Manufacturer: syz [ 1243.788112][ T6629] usb 10-1: SerialNumber: syz [ 1243.866469][ T6629] usb 10-1: config 0 descriptor?? [ 1243.883084][T14472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1243.934779][T14473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1243.935053][T14473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1243.978118][ T9401] Bluetooth: hci2: command 0x0c1a tx timeout [ 1243.978157][ T9401] Bluetooth: hci3: command 0x040f tx timeout [ 1243.978291][ T9401] Bluetooth: hci8: command 0x0c1a tx timeout [ 1243.978316][ T9401] Bluetooth: hci7: command 0x0c1a tx timeout [ 1243.978421][T12865] Bluetooth: hci0: command 0x0c1a tx timeout [ 1244.194856][T14473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1244.195065][T14473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1244.397748][ T6629] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1244.876440][T12866] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1245.039023][T12866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.039136][T12866] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1245.039167][T12866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.085453][T12866] usb 9-1: config 0 descriptor?? [ 1245.406519][T12866] usbhid 9-1:0.0: can't add hid device: -71 [ 1245.406664][T12866] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1245.546820][T12866] usb 9-1: USB disconnect, device number 12 [ 1245.665297][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1245.704210][T14492] nfs4: Unknown parameter '' [ 1246.965015][ T5629] Bluetooth: hci3: command 0x040f tx timeout [ 1247.001009][ T6629] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1247.001037][ T6629] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1247.001275][ T6629] asix 10-1:0.34: probe with driver asix failed with error -71 [ 1247.069662][ T6629] usb 10-1: USB disconnect, device number 12 [ 1247.263383][T12866] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1247.424897][T12866] usb 9-1: Using ep0 maxpacket: 32 [ 1247.444180][T12866] usb 9-1: config index 0 descriptor too short (expected 36, got 27) [ 1247.444234][T12866] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.444283][T12866] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1247.444304][T12866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.449426][T12866] usb 9-1: config 0 descriptor?? [ 1247.639678][T12866] usb 9-1: can't set config #0, error -71 [ 1247.652629][T12866] usb 9-1: USB disconnect, device number 13 [ 1248.868908][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1248.935557][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.014809][ T5629] Bluetooth: hci3: command 0x040f tx timeout [ 1250.055834][T14541] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1250.598737][T14541] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1250.599008][T14541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1250.600671][T14541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1250.600851][T14541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1250.963360][ T5832] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1251.243315][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 1251.246980][ T5832] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1251.247009][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.285036][ T5832] usb 7-1: config 0 descriptor?? [ 1251.700590][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1251.769936][T12865] Bluetooth: hci8: unexpected event for opcode 0x200c [ 1252.130849][ T5832] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1252.879529][ T5629] Bluetooth: hci3: command 0x040f tx timeout [ 1252.914199][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1252.914338][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1253.045147][T12865] Bluetooth: hci7: unexpected event for opcode 0x200c [ 1253.525269][T14417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.525370][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.525600][T14417] bridge_slave_0: entered allmulticast mode [ 1253.527716][T14417] bridge_slave_0: entered promiscuous mode [ 1254.149618][ T5832] gspca_sunplus: reg_w_riv err -71 [ 1254.149713][ T5832] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1254.157323][ T5832] usb 7-1: USB disconnect, device number 9 [ 1254.277959][T14417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.278026][T14417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.278229][T14417] bridge_slave_1: entered allmulticast mode [ 1254.282440][T14417] bridge_slave_1: entered promiscuous mode [ 1255.200739][T14589] overlay: ./file0 is not a directory [ 1255.823447][T12865] Bluetooth: hci3: command 0x040f tx timeout [ 1256.157905][ T37] audit: type=1326 audit(1780865919.285:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.8.2179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c3712ce59 code=0x0 [ 1256.754443][T14417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.390469][T14417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.787349][T14417] team0: Port device team_slave_0 added [ 1258.792344][T14417] team0: Port device team_slave_1 added [ 1259.102301][T14620] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1259.102626][T14620] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1259.102797][T14620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1259.102938][T14620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1259.103087][T14620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1259.353672][ T5834] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1259.525546][ T5834] usb 10-1: Using ep0 maxpacket: 8 [ 1259.691684][T14639] input: syz0 as /devices/virtual/input/input13 [ 1259.900477][ T5834] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1259.900555][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.212995][ T5834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1260.213012][ T5834] pvrusb2: ********** [ 1260.213019][ T5834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1260.213029][ T5834] pvrusb2: Important functionality might not be entirely working. [ 1260.213036][ T5834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1260.254945][ T5834] pvrusb2: ********** [ 1260.399519][ T2380] pvrusb2: Invalid write control endpoint [ 1260.455905][T14417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.455921][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.455947][T14417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.508216][T14417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.508232][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.508263][T14417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.486699][T14652] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2185'. [ 1261.486823][T14652] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2185'. [ 1261.510886][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1261.962699][ T5629] Bluetooth: hci3: command 0x040f tx timeout [ 1261.962739][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1261.962767][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1261.962793][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1262.045624][ T2380] pvrusb2: Invalid write control endpoint [ 1262.045639][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1262.045649][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1262.045656][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1262.045666][ T2380] pvrusb2: Device being rendered inoperable [ 1262.045736][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1262.045794][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1262.165145][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1262.165162][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1262.165172][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1263.198225][T12865] Bluetooth: hci0: unexpected event for opcode 0x200c [ 1263.736705][T12739] usb 10-1: USB disconnect, device number 13 [ 1263.740615][T14417] hsr_slave_0: entered promiscuous mode [ 1263.744512][T14417] hsr_slave_1: entered promiscuous mode [ 1263.746896][T14417] debugfs: 'hsr0' already exists in 'hsr' [ 1263.746919][T14417] Cannot create hsr debugfs directory [ 1265.724315][ T823] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1265.853628][ T823] usb 9-1: device descriptor read/64, error -71 [ 1266.143847][ T823] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1266.180470][T14267] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1266.221425][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1266.275299][ T823] usb 9-1: device descriptor read/64, error -71 [ 1266.361856][T14267] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1266.430531][ T823] usb usb9-port1: attempt power cycle [ 1266.528834][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1266.557714][T14267] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1266.588387][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1266.764783][ T823] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1266.784127][ T823] usb 9-1: device descriptor read/8, error -71 [ 1266.960225][T14267] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1267.085988][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1267.107537][ T823] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1267.126650][ T823] usb 9-1: device descriptor read/8, error -71 [ 1267.236619][ T823] usb usb9-port1: unable to enumerate USB device [ 1267.373485][ T1001] bridge_slave_1: left allmulticast mode [ 1267.373520][ T1001] bridge_slave_1: left promiscuous mode [ 1267.373796][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.613961][ T1001] bridge_slave_0: left allmulticast mode [ 1267.614016][ T1001] bridge_slave_0: left promiscuous mode [ 1267.614241][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.721949][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.795033][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.815720][ T1001] bond0 (unregistering): Released all slaves [ 1269.256346][T14699] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1269.256534][T14699] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1269.256717][T14699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1269.256887][T14699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1269.257124][T14699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1269.613323][T12741] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1269.797399][T12741] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1269.797429][T12741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.843620][T12741] usb 7-1: config 0 descriptor?? [ 1270.096893][T12741] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0e [ 1270.096919][T12741] hackrf 7-1:0.0: Could not detect board [ 1270.096976][T12741] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 1270.197894][T12741] usb 7-1: USB disconnect, device number 10 [ 1270.476809][ T1001] hsr_slave_0: left promiscuous mode [ 1270.513684][ T1001] hsr_slave_1: left promiscuous mode [ 1270.514403][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.564528][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.337119][ T5629] Bluetooth: hci3: command 0x040f tx timeout [ 1271.337215][T12865] Bluetooth: hci0: command 0x0c1a tx timeout [ 1271.337305][T12461] Bluetooth: hci8: command 0x0c1a tx timeout [ 1271.337425][T12461] Bluetooth: hci7: command 0x0c1a tx timeout [ 1271.337556][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 1272.164872][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 1272.205126][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 1273.426286][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1273.933513][T12739] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1274.061518][T14267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.113662][T12739] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1274.114219][T12739] usb 9-1: not running at top speed; connect to a high speed hub [ 1274.120197][T12739] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.120222][T12739] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1274.162993][T12739] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1274.163021][T12739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.163039][T12739] usb 9-1: Product: syz [ 1274.163050][T12739] usb 9-1: Manufacturer: syz [ 1274.163057][T12739] usb 9-1: SerialNumber: syz [ 1274.468040][T14267] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.495820][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.495949][T14056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.633437][ T5834] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1274.783390][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 1274.785335][ T5834] usb 10-1: config 0 has an invalid interface number: 202 but max is 1 [ 1274.785360][ T5834] usb 10-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1274.785380][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1274.785400][ T5834] usb 10-1: config 0 has no interface number 0 [ 1274.785428][ T5834] usb 10-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 1274.785473][ T5834] usb 10-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 1274.785496][ T5834] usb 10-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 1274.785521][ T5834] usb 10-1: config 0 interface 202 has no altsetting 0 [ 1274.787555][ T5834] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 1274.787581][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.787598][ T5834] usb 10-1: Product: syz [ 1274.787611][ T5834] usb 10-1: Manufacturer: syz [ 1274.787625][ T5834] usb 10-1: SerialNumber: syz [ 1274.792057][ T5834] usb 10-1: config 0 descriptor?? [ 1275.014242][T12739] usb 9-1: 0:2 : does not exist [ 1275.025827][T12739] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1275.038996][T12739] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1275.039023][T12739] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1275.039040][T12739] usb 9-1: [5] FU [PCM Capture Volume] ch = 1, val = 0/1/1 [ 1275.043502][T12739] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1275.048378][T12739] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1275.110836][ T5834] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1275.287702][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.288219][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.500223][T12739] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1275.511018][T14059] usb 10-1: Failed to submit usb control message: -71 [ 1275.511062][T14059] usb 10-1: unable to send the bmi data to the device: -71 [ 1275.511079][T14059] usb 10-1: unable to get target info from device [ 1275.511107][T14059] usb 10-1: could not get target info (-71) [ 1275.511553][T14059] usb 10-1: could not probe fw (-71) [ 1275.512191][ T5834] usb 10-1: USB disconnect, device number 14 [ 1275.519938][T12739] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1275.759867][T12739] usb 9-1: USB disconnect, device number 18 [ 1276.393736][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.393864][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.496240][T14782] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1276.496353][T14782] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1276.532786][T14782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1276.533040][T14782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1276.577410][T14782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1276.994680][T14794] batadv0: entered promiscuous mode [ 1277.438639][T14806] binder: 14804:14806 ioctl c0306201 0 returned -14 [ 1277.590040][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1277.605483][T14793] batadv0: left promiscuous mode [ 1277.685851][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1277.712830][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1277.976160][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1278.066666][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1278.816731][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 1278.816775][ T5629] Bluetooth: hci8: command 0x0c1a tx timeout [ 1278.816812][ T5629] Bluetooth: hci7: command 0x0c1a tx timeout [ 1278.816838][ T5629] Bluetooth: hci3: command 0x040f tx timeout [ 1280.585870][T14417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1280.702322][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1280.735073][T14417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1280.835557][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1280.853572][T12865] Bluetooth: hci1: command tx timeout [ 1281.494833][T14417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1281.550060][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.559424][T14417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1281.601357][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1282.041170][T12739] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1282.156518][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2217'. [ 1282.183341][T12739] usb 10-1: device descriptor read/64, error -71 [ 1282.423299][T12739] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1282.563618][T12739] usb 10-1: device descriptor read/64, error -71 [ 1282.720986][T12739] usb usb10-port1: attempt power cycle [ 1282.746006][T14864] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1282.746774][T14864] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1282.747061][T14864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1282.747325][T14864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1282.747584][T14864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1282.747693][T14864] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1282.883084][T14864] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1282.919679][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.073447][T12739] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1283.094060][T12739] usb 10-1: device descriptor read/8, error -71 [ 1283.333758][T12739] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1283.361723][T12739] usb 10-1: device descriptor read/8, error -71 [ 1283.390907][T14417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.163468][T12739] usb usb10-port1: unable to enumerate USB device [ 1284.298930][T12865] Bluetooth: hci7: command 0x0c1a tx timeout [ 1284.447726][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.447798][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.581511][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.581610][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.787101][ T9401] Bluetooth: hci3: command 0x040f tx timeout [ 1284.787151][ T9401] Bluetooth: hci0: command 0x0c1a tx timeout [ 1284.787186][ T9401] Bluetooth: hci8: command 0x0c1a tx timeout [ 1284.787278][T12865] Bluetooth: hci1: command 0x040f tx timeout [ 1286.853818][T12865] Bluetooth: hci1: command 0x040f tx timeout [ 1287.235432][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.235574][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.235816][T14803] bridge_slave_0: entered allmulticast mode [ 1287.242032][T14803] bridge_slave_0: entered promiscuous mode [ 1287.275651][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.275800][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.276079][T14803] bridge_slave_1: entered allmulticast mode [ 1287.286975][T14803] bridge_slave_1: entered promiscuous mode [ 1287.817996][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.074850][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.103477][T12739] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1288.257000][T12739] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.259156][T12739] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1288.259182][T12739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.259201][T12739] usb 9-1: Product: syz [ 1288.259213][T12739] usb 9-1: Manufacturer: syz [ 1288.259226][T12739] usb 9-1: SerialNumber: syz [ 1288.280310][T12739] usb 9-1: config 0 descriptor?? [ 1288.334709][ T1001] bridge_slave_1: left allmulticast mode [ 1288.334740][ T1001] bridge_slave_1: left promiscuous mode [ 1288.334922][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.495677][ T1001] bridge_slave_0: left allmulticast mode [ 1288.495699][ T1001] bridge_slave_0: left promiscuous mode [ 1288.495869][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.065185][T12865] Bluetooth: hci1: command 0x040f tx timeout [ 1290.196451][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.305367][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.365187][ T1001] bond0 (unregistering): Released all slaves [ 1290.405205][T14803] team0: Port device team_slave_0 added [ 1290.514648][T14803] team0: Port device team_slave_1 added [ 1290.648996][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.649012][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.649036][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.652305][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.652320][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.652345][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.745813][ T5631] usb 9-1: USB disconnect, device number 19 [ 1290.830825][T14803] hsr_slave_0: entered promiscuous mode [ 1290.832202][T14803] hsr_slave_1: entered promiscuous mode [ 1290.845090][T14803] debugfs: 'hsr0' already exists in 'hsr' [ 1290.845131][T14803] Cannot create hsr debugfs directory [ 1290.951340][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2230'. [ 1291.093377][T12865] Bluetooth: hci1: command 0x040f tx timeout [ 1291.204458][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2231'. [ 1291.438286][ T1001] hsr_slave_0: left promiscuous mode [ 1291.491952][ T1001] hsr_slave_1: left promiscuous mode [ 1291.492985][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.529650][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.586798][ T6662] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1291.720438][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 1291.720462][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 1291.753412][ T6662] usb 9-1: Using ep0 maxpacket: 8 [ 1291.769929][ T6662] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.769954][ T6662] usb 9-1: config 0 has no interface number 0 [ 1291.769997][ T6662] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.770033][ T6662] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1291.770054][ T6662] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.785461][ T6662] usb 9-1: config 0 descriptor?? [ 1291.887582][ T6662] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 1292.031231][T14947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.037481][T14947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.284843][T12741] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1292.454453][T12741] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1292.454479][T12741] usb 10-1: config 0 has no interface number 0 [ 1292.456657][T12741] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1292.456681][T12741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.456699][T12741] usb 10-1: Product: syz [ 1292.456711][T12741] usb 10-1: Manufacturer: syz [ 1292.456723][T12741] usb 10-1: SerialNumber: syz [ 1292.464475][T12741] usb 10-1: config 0 descriptor?? [ 1292.636264][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 1292.811570][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 1293.173443][T12865] Bluetooth: hci1: command 0x040f tx timeout [ 1293.913834][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1293.997784][T14417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.773497][ T5631] usb 9-1: USB disconnect, device number 20 [ 1296.024428][T12741] uvcvideo 10-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1296.024541][T12741] uvcvideo 10-1:0.64: No valid video chain found. [ 1296.112777][T12741] usb 10-1: USB disconnect, device number 19 [ 1296.552202][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2238'. [ 1296.552223][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2238'. [ 1296.552249][T14989] netlink: 'syz.9.2238': attribute type 18 has an invalid length. [ 1297.468096][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1297.597170][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1297.617848][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.621506][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.623664][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1298.909586][ T5629] Bluetooth: hci0: unexpected event for opcode 0x200c [ 1299.854105][ T5834] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1299.939614][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2242'. [ 1300.006629][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 1300.011618][ T5834] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1300.012814][ T5834] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 1300.012837][ T5834] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.012855][ T5834] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1300.012874][ T5834] usb 10-1: config 128 has no interface number 0 [ 1300.012916][ T5834] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1300.012940][ T5834] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1300.012960][ T5834] usb 10-1: config 128 interface 127 has no altsetting 0 [ 1300.019885][ T5834] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1300.019912][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.019932][ T5834] usb 10-1: Product: syz [ 1300.019946][ T5834] usb 10-1: Manufacturer: syz [ 1300.019960][ T5834] usb 10-1: SerialNumber: syz [ 1300.745871][ T5834] usb 10-1: USB disconnect, device number 20 [ 1300.856999][ T6629] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1300.927168][T10883] udevd[10883]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1301.005836][ T6629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.005868][ T6629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.005902][ T6629] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1301.005923][ T6629] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.077583][ T6629] usb 7-1: config 0 descriptor?? [ 1301.176918][ T5629] Bluetooth: hci2: command tx timeout [ 1302.371858][ T6629] usbhid 7-1:0.0: can't add hid device: -71 [ 1302.371975][ T6629] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1302.403621][ T6629] usb 7-1: USB disconnect, device number 11 [ 1303.022268][T15072] openvswitch: netlink: nsh attr 0 has unexpected len 6 expected 0 [ 1303.022443][T15072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.853216][ T5629] Bluetooth: hci2: command tx timeout [ 1304.068862][ T5629] Bluetooth: hci8: connection err: -111 [ 1304.182613][T15078] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2249'. [ 1304.182637][T15078] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2249'. [ 1304.286057][ T37] audit: type=1326 audit(1780865968.215:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.286188][ T37] audit: type=1326 audit(1780865968.215:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.286382][ T37] audit: type=1326 audit(1780865968.215:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.286523][ T37] audit: type=1326 audit(1780865968.215:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.286643][ T37] audit: type=1326 audit(1780865968.215:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.288631][ T37] audit: type=1326 audit(1780865968.215:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.288679][ T37] audit: type=1326 audit(1780865968.215:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.288719][ T37] audit: type=1326 audit(1780865968.215:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.288753][ T37] audit: type=1326 audit(1780865968.215:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1304.302752][ T37] audit: type=1326 audit(1780865968.225:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15074 comm="syz.9.2249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f217bb4ce59 code=0x7ffc0000 [ 1305.085200][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2251'. [ 1306.109945][ T5629] Bluetooth: hci2: command tx timeout [ 1308.266182][ T5629] Bluetooth: hci2: command tx timeout [ 1308.913464][ T5631] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1309.233457][ T5631] usb 10-1: Using ep0 maxpacket: 8 [ 1309.240485][ T5631] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1309.243424][ T5631] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.243445][ T5631] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.246397][ T5631] usb 10-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 1309.246421][ T5631] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.246440][ T5631] usb 10-1: Product: syz [ 1309.246453][ T5631] usb 10-1: Manufacturer: 桘㾹ం㛑븾楴鉚狮魳䝧⮏肱屹骥觺䄻롶篫魃힗᾿플茴瑱ޕ줏Ⲱ덢柜꠸谬Ԝﲰޮ聹ᘍᶊ累龣뙎ᮬ〚濾츏址హ酤볻츪罸מ쐢픊⽂줾鑌Ӓ싹ᦁ䩻둱ꠢ貼ㆅ磊銢 [ 1309.246476][ T5631] usb 10-1: SerialNumber: syz [ 1309.556932][ T5631] usb 10-1: 0:1 : does not exist [ 1309.556954][ T5631] usb 10-1: 0:2 : does not exist [ 1309.557028][ T5631] usb 10-1: unit 4 not found! [ 1309.890129][ T5631] usb 10-1: USB disconnect, device number 21 [ 1310.381938][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.479330][T15146] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1310.479356][T15146] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1310.753382][ T6629] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1310.833333][ T5631] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1310.882573][T14803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1310.903498][ T6629] usb 7-1: Using ep0 maxpacket: 16 [ 1310.908252][ T6629] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.908274][ T6629] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.910574][ T6629] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1310.910600][ T6629] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.910618][ T6629] usb 7-1: Product: syz [ 1310.910631][ T6629] usb 7-1: Manufacturer: syz [ 1310.910643][ T6629] usb 7-1: SerialNumber: syz [ 1310.931938][ T6629] usb 7-1: 0:2 : does not exist [ 1310.978803][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1310.993333][ T5631] usb 10-1: Using ep0 maxpacket: 32 [ 1310.999891][ T5631] usb 10-1: config 0 has an invalid interface number: 202 but max is 1 [ 1310.999917][ T5631] usb 10-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1310.999935][ T5631] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1310.999954][ T5631] usb 10-1: config 0 has no interface number 0 [ 1310.999982][ T5631] usb 10-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 1311.000020][ T5631] usb 10-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 1311.000043][ T5631] usb 10-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 1311.000067][ T5631] usb 10-1: config 0 interface 202 has no altsetting 0 [ 1311.094402][T14803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1311.119644][ T5631] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 1311.119672][ T5631] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.119688][ T5631] usb 10-1: Product: syz [ 1311.119702][ T5631] usb 10-1: Manufacturer: syz [ 1311.119715][ T5631] usb 10-1: SerialNumber: syz [ 1311.166297][ T6629] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1311.169000][ T5631] usb 10-1: config 0 descriptor?? [ 1311.196850][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1311.370270][T14803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1311.377548][ T6629] usb 7-1: USB disconnect, device number 12 [ 1311.393966][ T5631] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1311.538713][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1311.567737][ T5631] usb 10-1: USB disconnect, device number 22 [ 1311.582678][T14060] usb 10-1: Failed to submit usb control message: -71 [ 1311.582801][T14060] usb 10-1: unable to send the bmi data to the device: -71 [ 1311.582819][T14060] usb 10-1: unable to get target info from device [ 1311.582832][T14060] usb 10-1: could not get target info (-71) [ 1311.583071][T14060] usb 10-1: could not probe fw (-71) [ 1311.625352][T14803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1311.649148][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1311.850995][T14995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.851115][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.851391][T14995] bridge_slave_0: entered allmulticast mode [ 1311.854461][T14995] bridge_slave_0: entered promiscuous mode [ 1311.983904][T10883] udevd[10883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.011752][T14995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.014979][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.015279][T14995] bridge_slave_1: entered allmulticast mode [ 1312.017898][T14995] bridge_slave_1: entered promiscuous mode [ 1312.319012][T14995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.356916][T14995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.443057][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2262'. [ 1312.528361][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2264'. [ 1312.735729][T14995] team0: Port device team_slave_0 added [ 1312.747836][T14995] team0: Port device team_slave_1 added [ 1313.041133][T14995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.041149][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.041172][T14995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.259132][T14995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.259149][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.259174][T14995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.584881][T14056] bridge_slave_1: left allmulticast mode [ 1314.584916][T14056] bridge_slave_1: left promiscuous mode [ 1314.585168][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.753009][T14056] bridge_slave_0: left allmulticast mode [ 1314.753042][T14056] bridge_slave_0: left promiscuous mode [ 1314.754960][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.093408][T12740] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1315.343638][T12740] usb 9-1: Using ep0 maxpacket: 32 [ 1315.345711][T12740] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.345760][T12740] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1315.345784][T12740] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1315.345807][T12740] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1315.349526][T12740] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1315.349552][T12740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.349570][T12740] usb 9-1: Product: syz [ 1315.349583][T12740] usb 9-1: Manufacturer: syz [ 1315.349596][T12740] usb 9-1: SerialNumber: syz [ 1315.417305][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1315.944643][T12740] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input14 [ 1316.233697][T12740] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1316.233718][T12740] (id 0x00) [ 1316.269454][T15197] netlink: 13 bytes leftover after parsing attributes in process `syz.9.2272'. [ 1316.349702][T12740] rc_core: IR keymap rc-imon-pad not found [ 1316.349724][T12740] Registered IR keymap rc-empty [ 1316.384242][T12740] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1316.384264][T12740] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1316.452953][T14056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.486721][T12740] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1316.492138][T12740] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input15 [ 1316.542284][T12740] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:21> initialized [ 1316.543458][T11045] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1316.584830][T14056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.642818][T14056] bond0 (unregistering): Released all slaves [ 1316.709652][T11045] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1316.709681][T11045] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.709698][T11045] usb 10-1: config 0 has no interface number 0 [ 1316.709743][T11045] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1316.709764][T11045] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1316.709775][T11045] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1316.711842][T11045] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1316.711868][T11045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.711882][T11045] usb 10-1: Product: syz [ 1316.711889][T11045] usb 10-1: Manufacturer: syz [ 1316.711896][T11045] usb 10-1: SerialNumber: syz [ 1316.827118][T11045] usb 10-1: config 0 descriptor?? [ 1317.024217][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 1317.081315][T14995] hsr_slave_0: entered promiscuous mode [ 1317.082477][T14995] hsr_slave_1: entered promiscuous mode [ 1317.097678][T14995] debugfs: 'hsr0' already exists in 'hsr' [ 1317.097704][T14995] Cannot create hsr debugfs directory [ 1317.308552][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.310856][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.358940][T15197] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2272'. [ 1317.359013][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2272'. [ 1317.359028][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2272'. [ 1317.359092][T15197] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2272'. [ 1317.438755][T12740] usb 10-1: USB disconnect, device number 23 [ 1317.796169][T14803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.992245][T14056] hsr_slave_0: left promiscuous mode [ 1318.193385][T14056] hsr_slave_1: left promiscuous mode [ 1318.194152][T14056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.972205][ T6629] usb 9-1: USB disconnect, device number 21 [ 1318.991517][T14056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.445992][T14056] team0 (unregistering): Port device team_slave_1 removed [ 1319.496104][T14056] team0 (unregistering): Port device team_slave_0 removed [ 1319.798184][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1319.987277][T14803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.028902][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.028976][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.070176][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.070249][T10235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.573309][T12741] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1320.737941][T12741] usb 10-1: device descriptor read/64, error -71 [ 1320.999073][T12741] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1321.133393][T12741] usb 10-1: device descriptor read/64, error -71 [ 1321.395353][T12741] usb usb10-port1: attempt power cycle [ 1321.863343][ T6629] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1321.863390][T12741] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1321.884151][T12741] usb 10-1: device descriptor read/8, error -71 [ 1322.045346][ T6629] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1322.045375][ T6629] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.056938][ T6629] usb 9-1: config 0 descriptor?? [ 1322.171829][T12741] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1322.184722][T12741] usb 10-1: device descriptor read/8, error -71 [ 1322.282706][ T6629] hackrf 9-1:0.0: usb_control_msg() failed -71 request 0e [ 1322.282732][ T6629] hackrf 9-1:0.0: Could not detect board [ 1322.282797][ T6629] hackrf 9-1:0.0: probe with driver hackrf failed with error -71 [ 1322.304494][T12741] usb usb10-port1: unable to enumerate USB device [ 1322.319061][ T6629] usb 9-1: USB disconnect, device number 22 [ 1323.659126][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.683697][T12741] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1323.835726][T12741] usb 9-1: config 0 has no interfaces? [ 1323.838626][T12741] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1323.838654][T12741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.838673][T12741] usb 9-1: Product: syz [ 1323.838686][T12741] usb 9-1: Manufacturer: syz [ 1323.838699][T12741] usb 9-1: SerialNumber: syz [ 1324.365225][ T6629] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1324.833360][ T6629] usb 10-1: Using ep0 maxpacket: 8 [ 1324.857076][T12741] usb 9-1: config 0 descriptor?? [ 1324.874594][ T6629] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.874620][ T6629] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.874641][ T6629] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1324.874660][ T6629] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.874696][ T6629] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1324.874715][ T6629] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.091921][ T6629] usb 10-1: GET_CAPABILITIES returned 0 [ 1325.091965][ T6629] usbtmc 10-1:16.0: can't read capabilities [ 1325.339741][ T6629] usb 10-1: USB disconnect, device number 28 [ 1325.993455][T15277] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2282'. [ 1326.098273][T15298] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2282'. [ 1326.821444][ T5834] usb 9-1: USB disconnect, device number 23 [ 1327.259351][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2286'. [ 1327.259374][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2286'. [ 1327.259398][T15323] netlink: 'syz.9.2286': attribute type 11 has an invalid length. [ 1327.259410][T15323] netlink: 'syz.9.2286': attribute type 18 has an invalid length. [ 1327.669801][T14995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1327.775400][T14995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1327.796262][T14995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1328.084679][T14995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.086429][T14803] veth0_vlan: entered promiscuous mode [ 1328.087636][T14995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1328.137798][T14995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.287969][T14995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1329.084441][T14995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1329.223297][T14803] veth1_vlan: entered promiscuous mode [ 1330.108218][T14803] veth0_macvtap: entered promiscuous mode [ 1330.158400][T14803] veth1_macvtap: entered promiscuous mode [ 1330.446599][T15345] Can't find a SQUASHFS superblock on nullb0 [ 1330.510946][T14803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.900767][T14803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.948408][T10235] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.948687][T10235] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.949072][T10235] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.949274][T10235] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.066687][T14995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.314641][T15384] netlink: 'syz.6.2293': attribute type 29 has an invalid length. [ 1331.338487][T15387] netlink: 'syz.6.2293': attribute type 29 has an invalid length. [ 1331.361859][T15404] netlink: 'syz.6.2293': attribute type 29 has an invalid length. [ 1331.811461][T14995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.233009][T12857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.233125][T12857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.405324][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.405456][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.729200][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.729219][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.809963][T15417] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1332.939050][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.939070][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.135125][ T5834] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1333.405687][ T5834] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1333.405715][ T5834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.405733][ T5834] usb 7-1: config 0 has no interface number 0 [ 1333.405777][ T5834] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1333.405800][ T5834] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1333.405820][ T5834] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.417620][ T5834] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1333.417649][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.417668][ T5834] usb 7-1: Product: syz [ 1333.417681][ T5834] usb 7-1: Manufacturer: syz [ 1333.417694][ T5834] usb 7-1: SerialNumber: syz [ 1333.422903][ T5834] usb 7-1: config 0 descriptor?? [ 1334.481728][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.482345][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.490257][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1334.490318][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1334.490332][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1334.490397][T15417] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1334.583875][T12739] usb 7-1: USB disconnect, device number 13 [ 1334.932822][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2301'. [ 1335.143763][T14995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.739817][T14995] veth0_vlan: entered promiscuous mode [ 1335.777269][T14995] veth1_vlan: entered promiscuous mode [ 1335.823074][T14995] veth0_macvtap: entered promiscuous mode [ 1335.829627][T14995] veth1_macvtap: entered promiscuous mode [ 1335.837735][T12867] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1336.413702][T12867] usb 10-1: Using ep0 maxpacket: 32 [ 1336.418219][T12867] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1336.418246][T12867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.418264][T12867] usb 10-1: Product: syz [ 1336.418278][T12867] usb 10-1: Manufacturer: syz [ 1336.418291][T12867] usb 10-1: SerialNumber: syz [ 1336.426861][T14995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.432055][T14995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.499622][ T5631] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1336.541722][T12867] usb 10-1: config 0 descriptor?? [ 1336.683338][ T5631] usb 7-1: Using ep0 maxpacket: 32 [ 1336.685998][ T5631] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1336.686073][ T5631] usb 7-1: config 0 has no interface number 0 [ 1336.686114][ T5631] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1337.555875][ T5631] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1337.555966][ T5631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.555985][ T5631] usb 7-1: Product: syz [ 1337.555997][ T5631] usb 7-1: Manufacturer: syz [ 1337.556010][ T5631] usb 7-1: SerialNumber: syz [ 1337.585453][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.671378][T12867] airspy 10-1:0.0: usb_control_msg() failed -110 request 09 [ 1337.671404][T12867] airspy 10-1:0.0: Could not detect board [ 1337.671506][T12867] airspy 10-1:0.0: probe with driver airspy failed with error -110 [ 1337.705266][ T198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.732145][ T3283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.734503][ T5631] usb 7-1: config 0 descriptor?? [ 1337.740199][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.813766][T14060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.820659][ T5631] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1337.820717][ T5631] em28xx 7-1:0.132: Video interface 132 found: [ 1338.048704][T15463] 9p: Bad value for 'rfdno' [ 1338.132282][T14060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.243429][T15474] 9p: Bad value for 'rfdno' [ 1339.785759][ T5631] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1340.644319][T14062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.644332][T14062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.717531][ T5631] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1340.717659][ T5631] em28xx 7-1:0.132: board has no eeprom [ 1341.695190][ T5631] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1341.695320][ T5631] em28xx 7-1:0.132: analog set to bulk mode. [ 1341.791178][ T9] em28xx 7-1:0.132: Registering V4L2 extension [ 1341.850254][T12867] usb 10-1: USB disconnect, device number 29 [ 1342.029208][T12844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.029229][T12844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.102820][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1342.120643][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1342.150932][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1342.151371][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1342.231000][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1342.231384][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1342.232184][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1342.232564][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1342.446956][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1342.447348][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1342.447739][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1342.527482][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1342.527867][ T9] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1343.417047][T11045] usb 7-1: USB disconnect, device number 14 [ 1343.419843][T11045] em28xx 7-1:0.132: Disconnecting em28xx [ 1343.489503][ T9] em28xx 7-1:0.132: Config register raw data: 0xfffffffb [ 1343.489526][ T9] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1343.489614][ T9] em28xx 7-1:0.132: No AC97 audio processor [ 1343.885307][ T9] usb 7-1: Decoder not found [ 1343.885321][ T9] em28xx 7-1:0.132: failed to create media graph [ 1343.885401][ T9] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1343.977123][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1344.207175][T15492] ================================================================== [ 1344.207224][T15492] BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 [ 1344.207356][T15492] Read of size 4 at addr ffff888094e209d0 by task v4l_id/15492 [ 1344.207369][T15492] [ 1344.207382][T15492] CPU: 1 UID: 0 PID: 15492 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1344.207402][T15492] Tainted: [L]=SOFTLOCKUP [ 1344.207408][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1344.207417][T15492] Call Trace: [ 1344.207424][T15492] [ 1344.207432][T15492] dump_stack_lvl+0xe8/0x150 [ 1344.207455][T15492] print_address_description+0x55/0x1e0 [ 1344.207487][T15492] ? v4l2_open+0x398/0x3a0 [ 1344.207506][T15492] print_report+0x58/0x70 [ 1344.207519][T15492] kasan_report+0x117/0x150 [ 1344.207538][T15492] ? v4l2_open+0x398/0x3a0 [ 1344.207556][T15492] v4l2_open+0x398/0x3a0 [ 1344.207574][T15492] chrdev_open+0x4d0/0x5f0 [ 1344.207592][T15492] ? __pfx_chrdev_open+0x10/0x10 [ 1344.207608][T15492] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1344.207662][T15492] ? __pfx_chrdev_open+0x10/0x10 [ 1344.207678][T15492] do_dentry_open+0x83d/0x13e0 [ 1344.207729][T15492] vfs_open+0x3b/0x350 [ 1344.207744][T15492] ? path_openat+0x2e2b/0x38a0 [ 1344.207760][T15492] path_openat+0x2e43/0x38a0 [ 1344.207784][T15492] ? __pfx_path_openat+0x10/0x10 [ 1344.207799][T15492] ? kasan_save_track+0x4f/0x80 [ 1344.207812][T15492] ? kasan_save_track+0x3e/0x80 [ 1344.207824][T15492] ? __kasan_slab_alloc+0x6c/0x80 [ 1344.207836][T15492] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1344.207853][T15492] ? do_raw_spin_lock+0x12b/0x2f0 [ 1344.207873][T15492] do_file_open+0x23e/0x4a0 [ 1344.207887][T15492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1344.207912][T15492] ? __pfx_do_file_open+0x10/0x10 [ 1344.207926][T15492] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1344.207950][T15492] ? alloc_fd+0x64e/0x6c0 [ 1344.207974][T15492] do_sys_openat2+0x113/0x200 [ 1344.207994][T15492] ? __pfx_do_sys_openat2+0x10/0x10 [ 1344.208012][T15492] ? exc_page_fault+0x6a/0xc0 [ 1344.208043][T15492] ? do_user_addr_fault+0xc6f/0x1340 [ 1344.208061][T15492] __x64_sys_openat+0x138/0x170 [ 1344.208074][T15492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.208088][T15492] do_syscall_64+0x174/0x580 [ 1344.208106][T15492] ? trace_irq_disable+0x3b/0x140 [ 1344.208121][T15492] ? clear_bhb_loop+0x40/0x90 [ 1344.208136][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.208152][T15492] RIP: 0033:0x7fdae21ad407 [ 1344.208168][T15492] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1344.208183][T15492] RSP: 002b:00007fffd086bc80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1344.208202][T15492] RAX: ffffffffffffffda RBX: 00007fdae20bf880 RCX: 00007fdae21ad407 [ 1344.208215][T15492] RDX: 0000000000000000 RSI: 00007fffd086df1a RDI: ffffffffffffff9c [ 1344.208226][T15492] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1344.208237][T15492] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1344.208248][T15492] R13: 00007fffd086bed0 R14: 00007fdae2943000 R15: 00005567751a74d8 [ 1344.208266][T15492] [ 1344.208274][T15492] [ 1344.208279][T15492] The buggy address belongs to the physical page: [ 1344.208296][T15492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x94e20 [ 1344.208312][T15492] flags: 0x80000000000000(node=0|zone=1) [ 1344.208331][T15492] raw: 0080000000000000 ffffea00014f1808 ffff8880b8842f00 0000000000000000 [ 1344.208344][T15492] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1344.208352][T15492] page dumped because: kasan: bad access detected [ 1344.208360][T15492] page_owner tracks the page as freed [ 1344.208367][T15492] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9, tgid 9 (kworker/0:0), ts 1341791728958, free_ts 1344202060241 [ 1344.208393][T15492] post_alloc_hook+0x22d/0x280 [ 1344.208412][T15492] get_page_from_freelist+0x28b2/0x2930 [ 1344.208431][T15492] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1344.208450][T15492] alloc_pages_mpol+0xd1/0x380 [ 1344.208469][T15492] ___kmalloc_large_node+0x4e/0x120 [ 1344.208486][T15492] __kmalloc_large_noprof+0x1a/0x90 [ 1344.208503][T15492] em28xx_v4l2_init+0xe7/0x2f50 [ 1344.208574][T15492] em28xx_init_extension+0x120/0x1c0 [ 1344.208620][T15492] process_scheduled_works+0xb5d/0x1860 [ 1344.208637][T15492] worker_thread+0xa53/0xfc0 [ 1344.208653][T15492] kthread+0x388/0x470 [ 1344.208671][T15492] ret_from_fork+0x514/0xb70 [ 1344.208700][T15492] ret_from_fork_asm+0x1a/0x30 [ 1344.208723][T15492] page last free pid 9 tgid 9 stack trace: [ 1344.208732][T15492] __free_frozen_pages+0xfe5/0x10d0 [ 1344.208750][T15492] em28xx_v4l2_init+0x16c5/0x2f50 [ 1344.208764][T15492] em28xx_init_extension+0x120/0x1c0 [ 1344.208785][T15492] process_scheduled_works+0xb5d/0x1860 [ 1344.208800][T15492] worker_thread+0xa53/0xfc0 [ 1344.208815][T15492] kthread+0x388/0x470 [ 1344.208832][T15492] ret_from_fork+0x514/0xb70 [ 1344.208846][T15492] ret_from_fork_asm+0x1a/0x30 [ 1344.208868][T15492] [ 1344.208873][T15492] Memory state around the buggy address: [ 1344.208914][T15492] ffff888094e20880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1344.208926][T15492] ffff888094e20900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1344.208938][T15492] >ffff888094e20980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1344.208947][T15492] ^ [ 1344.208957][T15492] ffff888094e20a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1344.208968][T15492] ffff888094e20a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1344.208977][T15492] ================================================================== [ 1344.209014][T15492] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1344.209038][T15492] CPU: 1 UID: 0 PID: 15492 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1344.209061][T15492] Tainted: [L]=SOFTLOCKUP [ 1344.209067][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1344.209078][T15492] Call Trace: [ 1344.209086][T15492] [ 1344.209094][T15492] vpanic+0x56c/0xa60 [ 1344.209118][T15492] ? __pfx_vpanic+0x10/0x10 [ 1344.209138][T15492] ? __pfx___schedule+0x10/0x10 [ 1344.209163][T15492] panic+0xc5/0xd0 [ 1344.209182][T15492] ? __pfx_panic+0x10/0x10 [ 1344.209201][T15492] ? preempt_schedule_thunk+0x16/0x30 [ 1344.209229][T15492] ? v4l2_open+0x398/0x3a0 [ 1344.209251][T15492] check_panic_on_warn+0x89/0xb0 [ 1344.209275][T15492] ? v4l2_open+0x398/0x3a0 [ 1344.209296][T15492] end_report+0x73/0x170 [ 1344.209315][T15492] ? v4l2_open+0x398/0x3a0 [ 1344.209337][T15492] kasan_report+0x128/0x150 [ 1344.209357][T15492] ? v4l2_open+0x398/0x3a0 [ 1344.209383][T15492] v4l2_open+0x398/0x3a0 [ 1344.209407][T15492] chrdev_open+0x4d0/0x5f0 [ 1344.209430][T15492] ? __pfx_chrdev_open+0x10/0x10 [ 1344.209452][T15492] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1344.209475][T15492] ? __pfx_chrdev_open+0x10/0x10 [ 1344.209496][T15492] do_dentry_open+0x83d/0x13e0 [ 1344.209523][T15492] vfs_open+0x3b/0x350 [ 1344.209545][T15492] ? path_openat+0x2e2b/0x38a0 [ 1344.209566][T15492] path_openat+0x2e43/0x38a0 [ 1344.209601][T15492] ? __pfx_path_openat+0x10/0x10 [ 1344.209622][T15492] ? kasan_save_track+0x4f/0x80 [ 1344.209638][T15492] ? kasan_save_track+0x3e/0x80 [ 1344.209655][T15492] ? __kasan_slab_alloc+0x6c/0x80 [ 1344.209672][T15492] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1344.209696][T15492] ? do_raw_spin_lock+0x12b/0x2f0 [ 1344.209718][T15492] do_file_open+0x23e/0x4a0 [ 1344.209737][T15492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1344.209764][T15492] ? __pfx_do_file_open+0x10/0x10 [ 1344.209782][T15492] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1344.209813][T15492] ? alloc_fd+0x64e/0x6c0 [ 1344.209841][T15492] do_sys_openat2+0x113/0x200 [ 1344.209866][T15492] ? __pfx_do_sys_openat2+0x10/0x10 [ 1344.209891][T15492] ? exc_page_fault+0x6a/0xc0 [ 1344.209915][T15492] ? do_user_addr_fault+0xc6f/0x1340 [ 1344.209936][T15492] __x64_sys_openat+0x138/0x170 [ 1344.209954][T15492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.209971][T15492] do_syscall_64+0x174/0x580 [ 1344.209993][T15492] ? trace_irq_disable+0x3b/0x140 [ 1344.210012][T15492] ? clear_bhb_loop+0x40/0x90 [ 1344.210038][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.210056][T15492] RIP: 0033:0x7fdae21ad407 [ 1344.210071][T15492] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1344.210087][T15492] RSP: 002b:00007fffd086bc80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1344.210106][T15492] RAX: ffffffffffffffda RBX: 00007fdae20bf880 RCX: 00007fdae21ad407 [ 1344.210120][T15492] RDX: 0000000000000000 RSI: 00007fffd086df1a RDI: ffffffffffffff9c [ 1344.210133][T15492] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1344.210143][T15492] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1344.210155][T15492] R13: 00007fffd086bed0 R14: 00007fdae2943000 R15: 00005567751a74d8 [ 1344.210176][T15492] [ 1344.210443][T15492] Kernel Offset: disabled