last executing test programs: 10m16.040433377s ago: executing program 1 (id=980): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 10m14.912046222s ago: executing program 1 (id=981): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x10, @remote}, 0x10) 10m13.877880601s ago: executing program 1 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0)) epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x1800848, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc0e776df92a744de0460c42690f2f2770749d8c7824b149b2ea7af7357f19d85a21309b0b67191b00fd99ba8e60c9aa77f07a8d682ead5a4966f93839c7feefe634d", @ANYRESHEX=r5, @ANYRESHEX, @ANYBLOB=',cache=fscache,msize=0x00000000000007ff,fscache,cache=mmap,fscache,cache=none,cache=mmap,access=user,version=9p2000.u,\x00']) r8 = msgget$private(0x0, 0x790) msgsnd(r8, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r8, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) 10m11.469076626s ago: executing program 1 (id=987): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2a, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 10m9.171012215s ago: executing program 1 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) io_uring_setup(0x1abf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x804) 10m7.856503947s ago: executing program 1 (id=993): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)=ANY=[]) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 9m51.52509329s ago: executing program 32 (id=993): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)=ANY=[]) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 4m7.200175333s ago: executing program 0 (id=1779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4m5.983982673s ago: executing program 0 (id=1783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000580)="74e4b542a2ad3177290efb27849ac6b27fc4111dc23317598a874080528f337e141ad1ebe2518aa45b8fe1abf868681643d3d170950d62003518ce16d3362fcfc3b5f4d429fbcba2244d428ec20236070ae801000000e3de0ca54ab0f5762fbdd9617e9c4066e73aa6f52f9705c809084767897a1135eceb8f8959d66acc11aa8d368c757055fdc0159c3cb88bc5af20d5b648f102aa124e27c0efdb9b3af8e1f418bbe98ef18fc60b2abaeea040bc0e1d964c22dbf733a82e21b0435a593ddbfb5028502b875c7fb2b38c6b76c4c12401426af0aabf482b8051fe0c4fdc069446", 0xe1, 0x800, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d73797a3200000000cfb35ae42b0694d1c53cd92700a6378e7f5760f3a6e1d62547fd188bade96a06b27dc1189603920d161a535ceaa19caf85ba93b79dd1f53fb55cda2b70ed3a6cd7afb81a1ee51e0aeb0b3707ab9125326a"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="2608e0b670a675bb5b35a3ee172dd3ac49d3b1b4f0e1eaf3247251c62e18304702ed1161b53e26695f7051c740e4037051cd9caa2c22080b4b11da1fcf85f53e5807078c01a5be079e471c869c8ad404c6317e3d0cf872a0df38f8099017401d074f65faad1e008053bd2426ea62ca59c742", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 4m1.40010273s ago: executing program 0 (id=1787): socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x7}, 0x0) 3m54.32391177s ago: executing program 0 (id=1797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000580)="74e4b542a2ad3177290efb27849ac6b27fc4111dc23317598a874080528f337e141ad1ebe2518aa45b8fe1abf868681643d3d170950d62003518ce16d3362fcfc3b5f4d429fbcba2244d428ec20236070ae801000000e3de0ca54ab0f5762fbdd9617e9c4066e73aa6f52f9705c809084767897a1135eceb8f8959d66acc11aa8d368c757055fdc0159c3cb88bc5af20d5b648f102aa124e27c0efdb9b3af8e1f418bbe98ef18fc60b2abaeea040bc0e1d964c22dbf733a82e21b0435a593ddbfb5028502b875c7fb2b38c6b76c4c12401426af0aabf482b8051fe0c4fdc069446", 0xe1, 0x800, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d73797a3200000000cfb35ae42b0694d1c53cd92700a6378e7f5760f3a6e1d62547fd188bade96a06b27dc1189603920d161a535ceaa19caf85ba93b79dd1f53fb55cda2b70ed3a6cd7afb81a1ee51e0aeb0b3707ab9125326a"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="2608e0b670a675bb5b35a3ee172dd3ac49d3b1b4f0e1eaf3247251c62e18304702ed1161b53e26695f7051c740e4037051cd9caa2c22080b4b11da1fcf85f53e5807078c01a5be079e471c869c8ad404c6317e3d0cf872a0df38f8099017401d074f65faad1e008053bd2426ea62ca59c742", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 3m50.553280845s ago: executing program 0 (id=1802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m48.650818298s ago: executing program 0 (id=1805): sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getcwd(0x0, 0xfffffffffffffe7d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m32.950796136s ago: executing program 33 (id=1805): sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getcwd(0x0, 0xfffffffffffffe7d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m12.266400988s ago: executing program 4 (id=1960): read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8a102, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000280)={0x5, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2a, 0x2, 0xc00) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 2m10.232930206s ago: executing program 4 (id=1963): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$video(0x0, 0x75, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0) gettid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000440)=ANY=[], 0x1010fe) mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f00000000c0)) 2m9.409296675s ago: executing program 4 (id=1964): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000040)={0x40, 0x9, 0x6e, "01004700000040f400be00008ef35e84eef5083d4871521ef1862a0ae881337e5d3054a19b0c109796dcc6345ae30e2d5435176532b5171919255a800cc30f715ae2b21758c4bb1df0838a069069a117a734465e546c5a5172cf3b08064584371778e15afa8dc87db23b329d49f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x16, 0x29, "ba0bf8ae53aed01238b3d6408614da7aa1f04600e928eba586b411a0d576c310068286e10b8ce533cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x60d7a0a4c78f47fe, 0x2, 0x87, {0x87, 0xf, "34bc15ed251923257fbc3ae616be25dd995a6eb6791502491b5e852c4fa97619511f70c4c7b8b92611e4988e3f91c1d81e8aa6e493021778e84405d619c43f328ccd5d8a4cc52c655a8a240c846f088d95feb662a47d9dac3fa8c050b28b745a10226b978702d3f89aa3b8ba6f8bdad82c8f46ac28284cd92264877af85ad9a60adf1f944f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000440)={0x0, 0x3, 0x1d, "951929b01cbf1a4cd9f49d46bbdb98acb5f208a18f3756a10f3ac9b92f"}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x7}}) 2m5.120831076s ago: executing program 4 (id=1975): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6000}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m1.417635912s ago: executing program 4 (id=1982): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)=0xfedc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000240)={0x18, 0x2, {0x1}}, 0x1e) 1m58.604072528s ago: executing program 4 (id=1988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000b4e) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x2}], "8f"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x3c}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0) 1m43.387247377s ago: executing program 34 (id=1988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000b4e) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x2}], "8f"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x3c}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0) 17.635051428s ago: executing program 5 (id=2182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf01}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000ff00000000800000308001", @ANYRES32, @ANYBLOB="00000000000000e1513f90000000000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYBLOB], 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f00000000c0), 0x0}, 0x20) 16.604980882s ago: executing program 5 (id=2184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) r5 = fsopen(&(0x7f0000000240)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getitimer(0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 15.283591929s ago: executing program 5 (id=2188): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x400, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, 0x0, 0x0) 12.824778793s ago: executing program 7 (id=2192): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r0}, 0x1e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000440)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x0, 0x26, 0x0, 0x0, 0xffffffff}, 0x28) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f00", 0x59) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0xffffffffffffffff) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r6) socket$netlink(0x10, 0x3, 0x15) 12.759072092s ago: executing program 5 (id=2194): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='xprt_ping\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f00000000c0)={0x40}, 0x1) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x1c780, 0x44) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/237, 0xed, 0x4eb) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 'id1\x00'}) dup2(r1, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 10.410050868s ago: executing program 6 (id=2195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf01}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000ff00000000800000308001", @ANYRES32, @ANYBLOB="00000000000000e1513f90000000000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYBLOB], 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f00000000c0), 0x0}, 0x20) 10.322595049s ago: executing program 7 (id=2196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) 9.304081943s ago: executing program 6 (id=2197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x12, r0, 0x1739f000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) read(r4, &(0x7f00000017c0)=""/4090, 0xffa) 9.254072522s ago: executing program 2 (id=2198): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) r5 = fsopen(&(0x7f0000000240)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) syz_open_dev$vcsu(0x0, 0x1, 0x200) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 7.794345621s ago: executing program 3 (id=2202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x3, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x19, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x9, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x2, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000100000007"], 0x1010fe) mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) 7.793671866s ago: executing program 7 (id=2203): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESDEC=0x0, @ANYBLOB]) syz_open_dev$video4linux(0x0, 0xf3, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getitimer(0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7.476346102s ago: executing program 5 (id=2204): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x715, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0) 6.731918743s ago: executing program 6 (id=2205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000a00)=[0x0]) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000780)="1040cc31be7e48aeb59eefe06d7e6851614b39e6738a5dd174ff57a9d51752c707711d8a5cb2313a735f846779f2c3aa00242a963c654c87f74ea6adfafbd6a943147c9105ef9b4bec020dd3af7492e5f06f6fce84c2713cce7864718543efbb243e", 0x62}], 0x1, 0x9e8f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000400)=""/137, 0x89}, {&(0x7f0000000600)=""/138, 0x8a}, {&(0x7f0000000540)=""/144, 0x90}, {0x0}], 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x304}, "27fc332f87d8157e", "9bde776ad68fd8dc7b93d2de51e0ca7c", "803cf818", "24f54d7009d6a97f"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) 5.66450447s ago: executing program 3 (id=2206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) syz_open_dev$audion(0x0, 0x80, 0x800) sendmmsg$sock(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) 4.803818394s ago: executing program 2 (id=2207): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'c6xdigio\x00', [0x8001, 0xf, 0x6, 0x8, 0xfffffffb, 0x3ff, 0x4d7, 0x2, 0x4, 0x4, 0x0, 0x401, 0x3, 0x47, 0x9, 0x7ff, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x8c, 0x6, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={r3, r4, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0xb) 4.216120156s ago: executing program 7 (id=2208): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x77e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) read$msr(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) 4.134017941s ago: executing program 2 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x1bdc, 0x0, 0x1, 0x7d, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1bbc, 0xb9, 0x0, 0x1, [@beacon_params, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x299, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7ff0}, @broadcast, @device_a, @random="d9c7a6da523b", {0x7, 0x9}}, 0x3, @random=0x1, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0x2, 0x8, 0xfffd, 0x4}}, @void, @val={0x5, 0x6, {0x4, 0x64, 0x40, "0042cd"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x7, 0xb, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x7}}, @void, [{0xdd, 0x81, "329cdf1f677c5292d6120061f9022754f493bbd5a6407e862b6f9ccb5ee5abd436a06021de9b896a5888d96ba3255599153a98fcb2e4f530f292c2daa81e3463920082758e546d48d58d4870ec4cec2c2d6e898ee2e989d3e5aa6587e42dc2c0fc44f0ceb105aaa2ba37774d585cfd18a4bf30b532d05049769eccb177a8167644"}, {0xdd, 0x6, "3d49adcd200d"}, {0xdd, 0x12, "e9dc134c1340c276d5f0e94555cca1366074"}, {0xdd, 0x28, "b5c2f3e647161d8bcc8e0633ab2dd51fe6618447a349d98f50c9070c90175d07f29a1bc9900678b6"}, {0xdd, 0x65, "dcd02d4b97cc9904e26bc416c48bac6e9368d8a6c02bc0bcfc851f5342187075e3780656be6b1a40749c1acf0d38a5a256fc400f77a08d42362bcd0190e978b7f8079d0403993686f4457a37f42cfcbadb26876625f0741ce4c5b37391080b6f56432ce2fc"}, {0xdd, 0xdc, "3c79b939fdff4265af2d97cb6e9a1fef8e6fbee34e832fce524f8149381ce950b18bef2281c9cfe939a6485d3927ac2b455c29764f97fa19247b7ffd1272f1f6e32e275273721527eb3fd576aa1dab37c512b97868ad5317e4afbb3daffd2c941350372b9e464ef27b7797efa11713f674f50bdefa275ddd9c876b09d5bd811e7dec6a9c6ec8ab7948f6956138e8c84fb8e6683191bdb2237c1498c8c517bfbea8161acaf0fa3be3bb24a02c89361d377fecae624d97f0bbf298fab59157cee8420f54a74c429d50572d28384aea41f98b0d1f0a21605a07f3ff6af3"}, {0xdd, 0x16, "6487ef44901439ff7557527e71da0c18bd28207b107e"}]}}, @NL80211_ATTR_IE={0x58, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x1b}, @chsw_timing={0x68, 0x4, {0xe5a1, 0x57}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x15, @val="9acf2831ebcd243011e6a8f1024ea4b6"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6f, 0x0, @device_b, 0x4e11, @value=@device_b, 0x3, 0xb5, @device_b, 0xfffffffc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x1}}]}, @NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x1b, 0x1}, {0xc}, {0x5}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x3c, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x36, @device_b, 0xfffffffc, @value=@device_b, 0x3, 0x5, @device_b, 0x9}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x3, 0x9, 0x0, 0x3fe, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xb4}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x56, 0x7f, [@random_vendor={0xdd, 0x26, "f1784e05e96abebe1de18145a531010fd76d6dc9f2bbdde9da6a4313e864e83d96bc8ddddfa3"}, @dsss={0x3, 0x1, 0x8c}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xff, @device_a, 0x400, @value, 0x2, 0x1, @device_a, 0x10000}}]}, @NL80211_ATTR_PROBE_RESP={0x3e1, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1074, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfc4, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xaa, 0x3, "2d21eabefcd779e94099b1b55d00d0c4dcb2d4ba5adbf47efe49392904f93e83ec3eb374dd328ff62d6f2202d1ed988661e0866ca84259ab027c855314b8bc5f7cc21792adaad9bf282e2940956b301b73e134cd339f22d8875e00123c42c2bb7d995a08262274473f982c97497e9063e4421587a0a5d8eb1c48e479603c1124bda8e18a1452ad2b452564b528cfd794e53c117d539ed8c3e5d485373bea741d852054327a02"}]}, @NL80211_ATTR_BEACON_HEAD={0x34a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="b25972e0d06a", {0x5, 0x8}}, 0x7, @random=0x2, 0x8000, @void, @val={0x1, 0x4, [{0x60, 0x1}, {0xc}, {0x60, 0x1}, {0x16, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x45}, @val={0x5, 0x88, {0x9, 0x99, 0x2, "c1e0b04574b62f21ee93832cf8322f0b23a5f7c13945e70e7665ed72822ae7eb95bc81907ae786c5fc1657a24dd354b72d4cd28265e96cf629b028a69ee236a295147004f138466c5064fb03bc477262078dfc26e7f1f7c49344d1e341d050ea2406f84cc51c08a499ccb63f09787569db063b3911b07851f624bd4b3ba99f82cec6820df3"}}, @val={0x25, 0x3, {0x1, 0xb4, 0xfd}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x1c, "9ed626babf77cbd2f3e100a1f262c42b55de8ee5652c9fbbffe45323"}, {0xdd, 0x3b, "0d95df8e466e332165b0483831135440b3ac74ead7fed0c735cdb91eb70696b97d97cf928aee986d49bd36f2ccdfbde4c027c40a52d538448fb6bd"}, {0xdd, 0x81, "4e0f16a2d083faabc847903bea56dc05c3455080a74711d7a46b00465f9879622399d32a778b7abc04769adcad3391f16fcde94f177503d1dfc9a48ed391cbb6edc16e1279ad006c5e053ac680653ee02cf7cdc87b4b3a31e6746144603325c0918e505494ba39036610dc09ae990f4b11af756eeb5cfb3b4f76ccdb171c951081"}, {0xdd, 0xa8, "a5425006ba3c4fb3d21ae53cd1d3ab4ba72afc88e04706b5c1a61cf2ad62c35ec9ff0fa2d232013516118f4607e5e713095082285634c8d42ccbd29cc8876407cd15ac8697cce0638a63203512dea1024e4d313c897634e78b14f6c2fb2cc9a7fe832e9eb1c4112828c984b1915eb6da5caa4da2ffcef80de96b7bd7362cb0bd31f35515db40e9d37d397db09df1de8b1350dc06f0c5b96aa4fee8bf0bc9e2934976e5b1008b35b6"}, {0xdd, 0xf4, "2a89078b2967d1b43b9cb4bb0e92dd558085f3f9e28146802676d68bddd4bb9f411bda33f03c60989528e096b5ae072a3af7839a1a9ccf03677db8f7c72ecc2a4f71ba35ee36ca5cce17d615cd42f50660b00cb331b55dbf02c84b9cb3cc0ee02854538ddf78f52d740cb38815cfdbbf7f098812b4c31d93d78f1c8017653af812166aadfe076981dd695440f56c7606f6d7fc7007fd20e35114a63692bd110757d6ba03d8813feaabc4cd4c5c70044f1f5b264ae18ab9a858ee0cbdd8b9b8ec2a2dd7fe51feb5bfcd75d87ed09ff49c77939200a83c20d6a3818eb45d3a89267bbc894f8bc14b6514098c71da13e2e110a6aa86"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x7, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x2, 0x1, 0x7ff, 0x0, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4, 0x2, 0x5, 0x6, 0x7fff, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x5, 0xcc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xfff, 0x7, 0xa, 0x9, 0x5, 0x4, 0x1000, 0x6, 0x6, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x9]}]}, @chandef_params]}, 0x1bdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 4.057470237s ago: executing program 3 (id=2210): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r4}, &(0x7f0000000200)=0x8) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) setrlimit(0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300), &(0x7f0000000040), 0x0, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 2.36391626s ago: executing program 2 (id=2211): mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03f090fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b89abae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() setitimer(0x0, 0x0, 0x0) 2.290386672s ago: executing program 3 (id=2212): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x1bdc, 0x0, 0x1, 0x7d, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1bbc, 0xb9, 0x0, 0x1, [@beacon_params, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x299, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7ff0}, @broadcast, @device_a, @random="d9c7a6da523b", {0x7, 0x9}}, 0x3, @random=0x1, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0x2, 0x8, 0xfffd, 0x4}}, @void, @val={0x5, 0x6, {0x4, 0x64, 0x40, "0042cd"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x7, 0xb, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x7}}, @void, [{0xdd, 0x81, "329cdf1f677c5292d6120061f9022754f493bbd5a6407e862b6f9ccb5ee5abd436a06021de9b896a5888d96ba3255599153a98fcb2e4f530f292c2daa81e3463920082758e546d48d58d4870ec4cec2c2d6e898ee2e989d3e5aa6587e42dc2c0fc44f0ceb105aaa2ba37774d585cfd18a4bf30b532d05049769eccb177a8167644"}, {0xdd, 0x6, "3d49adcd200d"}, {0xdd, 0x12, "e9dc134c1340c276d5f0e94555cca1366074"}, {0xdd, 0x28, "b5c2f3e647161d8bcc8e0633ab2dd51fe6618447a349d98f50c9070c90175d07f29a1bc9900678b6"}, {0xdd, 0x65, "dcd02d4b97cc9904e26bc416c48bac6e9368d8a6c02bc0bcfc851f5342187075e3780656be6b1a40749c1acf0d38a5a256fc400f77a08d42362bcd0190e978b7f8079d0403993686f4457a37f42cfcbadb26876625f0741ce4c5b37391080b6f56432ce2fc"}, {0xdd, 0xdc, "3c79b939fdff4265af2d97cb6e9a1fef8e6fbee34e832fce524f8149381ce950b18bef2281c9cfe939a6485d3927ac2b455c29764f97fa19247b7ffd1272f1f6e32e275273721527eb3fd576aa1dab37c512b97868ad5317e4afbb3daffd2c941350372b9e464ef27b7797efa11713f674f50bdefa275ddd9c876b09d5bd811e7dec6a9c6ec8ab7948f6956138e8c84fb8e6683191bdb2237c1498c8c517bfbea8161acaf0fa3be3bb24a02c89361d377fecae624d97f0bbf298fab59157cee8420f54a74c429d50572d28384aea41f98b0d1f0a21605a07f3ff6af3"}, {0xdd, 0x16, "6487ef44901439ff7557527e71da0c18bd28207b107e"}]}}, @NL80211_ATTR_IE={0x58, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x1b}, @chsw_timing={0x68, 0x4, {0xe5a1, 0x57}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x15, @val="9acf2831ebcd243011e6a8f1024ea4b6"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6f, 0x0, @device_b, 0x4e11, @value=@device_b, 0x3, 0xb5, @device_b, 0xfffffffc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x1}}]}, @NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x1b, 0x1}, {0xc}, {0x5}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x3c, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x36, @device_b, 0xfffffffc, @value=@device_b, 0x3, 0x5, @device_b, 0x9}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x3, 0x9, 0x0, 0x3fe, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xb4}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x56, 0x7f, [@random_vendor={0xdd, 0x26, "f1784e05e96abebe1de18145a531010fd76d6dc9f2bbdde9da6a4313e864e83d96bc8ddddfa3"}, @dsss={0x3, 0x1, 0x8c}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xff, @device_a, 0x400, @value, 0x2, 0x1, @device_a, 0x10000}}]}, @NL80211_ATTR_PROBE_RESP={0x3e1, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1074, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfc4, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xaa, 0x3, "2d21eabefcd779e94099b1b55d00d0c4dcb2d4ba5adbf47efe49392904f93e83ec3eb374dd328ff62d6f2202d1ed988661e0866ca84259ab027c855314b8bc5f7cc21792adaad9bf282e2940956b301b73e134cd339f22d8875e00123c42c2bb7d995a08262274473f982c97497e9063e4421587a0a5d8eb1c48e479603c1124bda8e18a1452ad2b452564b528cfd794e53c117d539ed8c3e5d485373bea741d852054327a02"}]}, @NL80211_ATTR_BEACON_HEAD={0x34a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="b25972e0d06a", {0x5, 0x8}}, 0x7, @random=0x2, 0x8000, @void, @val={0x1, 0x4, [{0x60, 0x1}, {0xc}, {0x60, 0x1}, {0x16, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x45}, @val={0x5, 0x88, {0x9, 0x99, 0x2, "c1e0b04574b62f21ee93832cf8322f0b23a5f7c13945e70e7665ed72822ae7eb95bc81907ae786c5fc1657a24dd354b72d4cd28265e96cf629b028a69ee236a295147004f138466c5064fb03bc477262078dfc26e7f1f7c49344d1e341d050ea2406f84cc51c08a499ccb63f09787569db063b3911b07851f624bd4b3ba99f82cec6820df3"}}, @val={0x25, 0x3, {0x1, 0xb4, 0xfd}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x1c, "9ed626babf77cbd2f3e100a1f262c42b55de8ee5652c9fbbffe45323"}, {0xdd, 0x3b, "0d95df8e466e332165b0483831135440b3ac74ead7fed0c735cdb91eb70696b97d97cf928aee986d49bd36f2ccdfbde4c027c40a52d538448fb6bd"}, {0xdd, 0x81, "4e0f16a2d083faabc847903bea56dc05c3455080a74711d7a46b00465f9879622399d32a778b7abc04769adcad3391f16fcde94f177503d1dfc9a48ed391cbb6edc16e1279ad006c5e053ac680653ee02cf7cdc87b4b3a31e6746144603325c0918e505494ba39036610dc09ae990f4b11af756eeb5cfb3b4f76ccdb171c951081"}, {0xdd, 0xa8, "a5425006ba3c4fb3d21ae53cd1d3ab4ba72afc88e04706b5c1a61cf2ad62c35ec9ff0fa2d232013516118f4607e5e713095082285634c8d42ccbd29cc8876407cd15ac8697cce0638a63203512dea1024e4d313c897634e78b14f6c2fb2cc9a7fe832e9eb1c4112828c984b1915eb6da5caa4da2ffcef80de96b7bd7362cb0bd31f35515db40e9d37d397db09df1de8b1350dc06f0c5b96aa4fee8bf0bc9e2934976e5b1008b35b6"}, {0xdd, 0xf4, "2a89078b2967d1b43b9cb4bb0e92dd558085f3f9e28146802676d68bddd4bb9f411bda33f03c60989528e096b5ae072a3af7839a1a9ccf03677db8f7c72ecc2a4f71ba35ee36ca5cce17d615cd42f50660b00cb331b55dbf02c84b9cb3cc0ee02854538ddf78f52d740cb38815cfdbbf7f098812b4c31d93d78f1c8017653af812166aadfe076981dd695440f56c7606f6d7fc7007fd20e35114a63692bd110757d6ba03d8813feaabc4cd4c5c70044f1f5b264ae18ab9a858ee0cbdd8b9b8ec2a2dd7fe51feb5bfcd75d87ed09ff49c77939200a83c20d6a3818eb45d3a89267bbc894f8bc14b6514098c71da13e2e110a6aa86"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x7, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x2, 0x1, 0x7ff, 0x0, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4, 0x2, 0x5, 0x6, 0x7fff, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x5, 0xcc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xfff, 0x7, 0xa, 0x9, 0x5, 0x4, 0x1000, 0x6, 0x6, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x9]}]}, @chandef_params]}, 0x1bdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 2.21509434s ago: executing program 6 (id=2213): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 1.95830191s ago: executing program 6 (id=2214): sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xf) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getcwd(0x0, 0xfffffffffffffe7d) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.193676829s ago: executing program 3 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) syz_open_dev$vcsu(0x0, 0x1, 0x200) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 1.133779274s ago: executing program 7 (id=2216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x3, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x19, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x9, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x2, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000100000007"], 0x1010fe) mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) 1.132749415s ago: executing program 2 (id=2217): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x26}}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180), 0x4) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) lseek(0xffffffffffffffff, 0x10000000005, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000140)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c920"], 0x17) 1.160918ms ago: executing program 2 (id=2218): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000003c0)=""/189) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x6}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) 0s ago: executing program 3 (id=2219): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={r3, r4, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0xb) kernel console output (not intermixed with test programs): bled state [ 396.352111][ T12] bridge_slave_0: left allmulticast mode [ 396.357839][ T12] bridge_slave_0: left promiscuous mode [ 396.363670][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.376704][ T12] bridge_slave_1: left allmulticast mode [ 396.386582][ T12] bridge_slave_1: left promiscuous mode [ 396.393680][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.404344][ T12] bridge_slave_0: left allmulticast mode [ 396.411936][ T12] bridge_slave_0: left promiscuous mode [ 396.417725][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.783778][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.795518][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.807258][ T12] bond0 (unregistering): Released all slaves [ 396.853020][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 396.861786][ T12] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a2:a1:18:1b:21:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 397.157095][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.169012][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.180949][ T12] bond0 (unregistering): Released all slaves [ 397.202799][ T12] bond1 (unregistering): (slave veth3): Releasing backup interface [ 397.215103][ T12] bond1 (unregistering): Released all slaves [ 397.234971][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.242165][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.268613][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.365991][ T12] tipc: Disabling bearer [ 397.373222][ T12] tipc: Left network mode [ 397.376343][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.388465][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.415666][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.574217][ T8431] hsr_slave_0: entered promiscuous mode [ 397.580947][ T8431] hsr_slave_1: entered promiscuous mode [ 397.587099][ T8431] debugfs: 'hsr0' already exists in 'hsr' [ 397.595501][ T8431] Cannot create hsr debugfs directory [ 397.820333][ T5864] Bluetooth: hci3: command tx timeout [ 398.082751][ T12] hsr_slave_0: left promiscuous mode [ 398.089576][ T12] hsr_slave_1: left promiscuous mode [ 398.095508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.103505][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.113711][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.121217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.136492][ T12] hsr_slave_0: left promiscuous mode [ 398.142959][ T12] hsr_slave_1: left promiscuous mode [ 398.149408][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.156822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.165706][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.173214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.205558][ T12] veth1_macvtap: left promiscuous mode [ 398.211237][ T12] veth0_macvtap: left promiscuous mode [ 398.216858][ T12] veth1_vlan: left promiscuous mode [ 398.225148][ T12] veth0_vlan: left promiscuous mode [ 398.244114][ T12] veth1_macvtap: left promiscuous mode [ 398.250982][ T12] veth0_macvtap: left promiscuous mode [ 398.256619][ T12] veth1_vlan: left promiscuous mode [ 398.265223][ T12] veth0_vlan: left promiscuous mode [ 398.298007][ T5864] Bluetooth: hci1: command tx timeout [ 398.828198][ T12] team0 (unregistering): Port device team_slave_1 removed [ 398.869303][ T12] team0 (unregistering): Port device team_slave_0 removed [ 399.586115][ T12] team0 (unregistering): Port device team_slave_1 removed [ 399.625589][ T12] team0 (unregistering): Port device team_slave_0 removed [ 399.898111][ T5864] Bluetooth: hci3: command tx timeout [ 400.153170][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.171456][ T8376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.195025][ T8376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.221377][ T8376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.295290][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 400.307413][ T8376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.334060][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.379746][ T5864] Bluetooth: hci1: command tx timeout [ 400.416025][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.497071][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.504301][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.569940][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.577129][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.626365][ T8248] veth0_vlan: entered promiscuous mode [ 400.633232][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.644903][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.654596][ T8469] bridge_slave_0: entered allmulticast mode [ 400.662857][ T8469] bridge_slave_0: entered promiscuous mode [ 400.685594][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.694570][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.702060][ T8469] bridge_slave_1: entered allmulticast mode [ 400.711981][ T8469] bridge_slave_1: entered promiscuous mode [ 400.817103][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.832587][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.924983][ T8248] veth1_vlan: entered promiscuous mode [ 400.943351][ T8469] team0: Port device team_slave_0 added [ 400.952665][ T8469] team0: Port device team_slave_1 added [ 401.025315][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.033030][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.060825][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.077273][ T8431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.113405][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.121288][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.148688][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.161907][ T8431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.174468][ T8431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.208606][ T8431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.303267][ T8469] hsr_slave_0: entered promiscuous mode [ 401.316150][ T8469] hsr_slave_1: entered promiscuous mode [ 401.380833][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.417087][ T8248] veth0_macvtap: entered promiscuous mode [ 401.480233][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.555883][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.574403][ T8248] veth1_macvtap: entered promiscuous mode [ 401.637450][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.739485][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.763804][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.777318][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.784546][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.800235][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.834472][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.846691][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.868716][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.875877][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.925955][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.935793][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.949781][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.991658][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.112261][ T12] bridge_slave_1: left allmulticast mode [ 402.122311][ T12] bridge_slave_1: left promiscuous mode [ 402.133187][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.152918][ T12] bridge_slave_0: left allmulticast mode [ 402.159129][ T12] bridge_slave_0: left promiscuous mode [ 402.164926][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.468001][ T5864] Bluetooth: hci1: command tx timeout [ 402.504665][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.515826][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.526416][ T12] bond0 (unregistering): Released all slaves [ 402.561655][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.585939][ T8350] veth0_vlan: entered promiscuous mode [ 402.659343][ T8350] veth1_vlan: entered promiscuous mode [ 402.719780][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.825315][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.832564][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.844545][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.851775][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.873226][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.886973][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.987971][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.999667][ T8350] veth0_macvtap: entered promiscuous mode [ 403.052296][ T12] hsr_slave_0: left promiscuous mode [ 403.067435][ T12] hsr_slave_1: left promiscuous mode [ 403.079653][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.087104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.103374][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.112297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.134040][ T12] veth1_macvtap: left promiscuous mode [ 403.139846][ T12] veth0_macvtap: left promiscuous mode [ 403.145467][ T12] veth1_vlan: left promiscuous mode [ 403.150852][ T12] veth0_vlan: left promiscuous mode [ 403.564122][ T12] team0 (unregistering): Port device team_slave_1 removed [ 403.602880][ T12] team0 (unregistering): Port device team_slave_0 removed [ 403.993143][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.995854][ T8350] veth1_macvtap: entered promiscuous mode [ 404.010282][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.096240][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.146264][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.304878][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.341197][ T8469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.424172][ T8469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.445868][ T8469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.469940][ T5973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.491673][ T8469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.506826][ T5973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.527397][ T5973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.553425][ T5864] Bluetooth: hci1: command tx timeout [ 404.563479][ T5973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.729402][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.736662][ T8376] veth0_vlan: entered promiscuous mode [ 404.749879][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.764262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.809891][ T8376] veth1_vlan: entered promiscuous mode [ 404.838493][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.853162][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.955429][ T8431] veth0_vlan: entered promiscuous mode [ 404.973603][ T8376] veth0_macvtap: entered promiscuous mode [ 405.242329][ T8376] veth1_macvtap: entered promiscuous mode [ 405.513656][ T8431] veth1_vlan: entered promiscuous mode [ 405.542074][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.610761][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.631123][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.692312][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.746890][ T8431] veth0_macvtap: entered promiscuous mode [ 405.763611][ T8431] veth1_macvtap: entered promiscuous mode [ 405.786693][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.800020][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.807224][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.940324][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.947626][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.678678][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.687482][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.776333][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.811012][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.818286][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.853266][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.017159][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.035035][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.109113][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.165621][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.202424][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.283106][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.294572][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.236572][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.274200][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.630815][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.697114][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.018314][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.354569][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.195317][ T8469] veth0_vlan: entered promiscuous mode [ 411.438129][ T8469] veth1_vlan: entered promiscuous mode [ 411.873159][ T8469] veth0_macvtap: entered promiscuous mode [ 412.292320][ T8597] xt_nat: multiple ranges no longer supported [ 412.700252][ T8469] veth1_macvtap: entered promiscuous mode [ 413.528074][ T1341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.670182][ T8607] xt_nat: multiple ranges no longer supported [ 413.809229][ T1341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.952668][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.017940][ T1341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.074172][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.099189][ T6109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.145578][ T6109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.314149][ T6109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.432447][ T1341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.585420][ T6109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.651822][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 417.004651][ T6885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.018104][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 417.067476][ T6885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.099838][ T1341] bridge_slave_1: left allmulticast mode [ 417.105525][ T1341] bridge_slave_1: left promiscuous mode [ 417.469492][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.599088][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.609453][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.633038][ T1341] bridge_slave_0: left allmulticast mode [ 417.640072][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.650513][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.678575][ T1341] bridge_slave_0: left promiscuous mode [ 417.678680][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.685970][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 417.719638][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.727392][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.743514][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.759495][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 417.794477][ T9] usb 4-1: SerialNumber: syz [ 417.833153][ T9] usb 4-1: 0:2 : does not exist [ 418.885678][ T8639] erofs (device nbd3): cannot find valid erofs superblock [ 419.823411][ T5860] Bluetooth: hci2: command tx timeout [ 420.032018][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.079949][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.111758][ T1341] bond0 (unregistering): Released all slaves [ 420.296595][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.362218][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.804759][ T9] usb 4-1: USB disconnect, device number 6 [ 421.958950][ T5860] Bluetooth: hci2: command tx timeout [ 422.010560][ T8661] xt_nat: multiple ranges no longer supported [ 423.118887][ T8671] xt_nat: multiple ranges no longer supported [ 424.016236][ T5860] Bluetooth: hci2: command tx timeout [ 424.334511][ T8682] bridge0: entered promiscuous mode [ 424.340103][ T8682] macvlan2: entered promiscuous mode [ 424.502781][ T1341] hsr_slave_0: left promiscuous mode [ 424.525417][ T1341] hsr_slave_1: left promiscuous mode [ 424.537661][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.561508][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.729671][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.737209][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.773324][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 424.784210][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 424.796689][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 424.831881][ T9] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 424.964644][ T1341] veth1_macvtap: left promiscuous mode [ 424.994433][ T1341] veth0_macvtap: left promiscuous mode [ 425.013236][ T1341] veth1_vlan: left promiscuous mode [ 425.034618][ T1341] veth0_vlan: left promiscuous mode [ 426.057988][ T5860] Bluetooth: hci2: command tx timeout [ 427.363135][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 427.443629][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 428.098112][ T8631] chnl_net:caif_netlink_parms(): no params data found [ 429.204329][ T8718] xt_nat: multiple ranges no longer supported [ 429.891079][ T8729] process 'syz.0.662' launched './file2' with NULL argv: empty string added [ 430.085114][ T8732] random: crng reseeded on system resumption [ 430.808631][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.815840][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.060811][ T8631] bridge_slave_0: entered allmulticast mode [ 431.070786][ T8631] bridge_slave_0: entered promiscuous mode [ 431.104075][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.130698][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.143609][ T8631] bridge_slave_1: entered allmulticast mode [ 431.155640][ T8631] bridge_slave_1: entered promiscuous mode [ 431.292034][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.556871][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.980997][ T8631] team0: Port device team_slave_0 added [ 431.989999][ T8631] team0: Port device team_slave_1 added [ 433.299525][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.327037][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.382625][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.427213][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.486345][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.554246][ T8631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.738930][ T8765] xt_nat: multiple ranges no longer supported [ 433.761490][ T8631] hsr_slave_0: entered promiscuous mode [ 433.769204][ T8631] hsr_slave_1: entered promiscuous mode [ 433.778740][ T8631] debugfs: 'hsr0' already exists in 'hsr' [ 433.785670][ T8631] Cannot create hsr debugfs directory [ 434.336370][ T44] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 434.354155][ T44] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 434.428025][ T44] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 434.483104][ T8779] random: crng reseeded on system resumption [ 434.625754][ T44] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 436.971762][ T8783] nvme_fabrics: missing parameter 'transport=%s' [ 436.992666][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.679'. [ 437.002374][ T8783] nvme_fabrics: missing parameter 'nqn=%s' [ 437.492213][ T8631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.400489][ T8631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.420900][ T8631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.450070][ T8631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.359865][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.596897][ T8631] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.664434][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.671640][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.877084][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.884310][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.304666][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.311467][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.420464][ T8829] random: crng reseeded on system resumption [ 441.823018][ T8631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.239012][ T8631] veth0_vlan: entered promiscuous mode [ 445.320193][ T8631] veth1_vlan: entered promiscuous mode [ 445.453852][ T8631] veth0_macvtap: entered promiscuous mode [ 445.476052][ T8631] veth1_macvtap: entered promiscuous mode [ 446.061783][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.713388][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.780634][ T9] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 446.828692][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.831575][ T9] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 446.913371][ T9] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 446.937196][ T9] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 446.975920][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.146232][ T1039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.299736][ T1039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.654559][ T6885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.815380][ T6885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.725879][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.828722][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.197169][ T8932] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 453.555446][ T8943] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 453.688209][ T8933] veth3: entered promiscuous mode [ 456.161355][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'. [ 457.958310][ T8986] bridge0: entered promiscuous mode [ 457.965102][ T8986] macvlan2: entered promiscuous mode [ 458.769181][ T8990] evm: overlay not supported [ 460.202743][ T9003] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 460.298432][ T9003] team0: Port device ip6gretap1 added [ 460.501502][ T9004] veth3: entered promiscuous mode [ 460.582137][ T9004] team0: Port device veth3 added [ 462.140976][ T9020] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 466.400160][ T9053] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 466.662530][ T9056] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 467.713475][ T9058] veth3: entered promiscuous mode [ 467.745722][ T9058] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 469.250503][ T9084] macvlan3: entered promiscuous mode [ 469.350660][ T9057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.377231][ T9057] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 469.951396][ T9057] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.966248][ T9057] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 470.937979][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 471.428185][ T9057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.434132][ T9057] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 471.630678][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 473.167140][ T9105] nvme_fabrics: missing parameter 'transport=%s' [ 473.241383][ T9105] nvme_fabrics: missing parameter 'nqn=%s' [ 473.335836][ T9057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.358088][ T9057] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 474.435143][ T9128] netlink: 'syz.4.770': attribute type 1 has an invalid length. [ 474.744616][ T9131] veth5: entered promiscuous mode [ 475.204995][ T9057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 475.918813][ T9057] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 476.044882][ T9146] netlink: 72 bytes leftover after parsing attributes in process `syz.4.773'. [ 478.242362][ T9167] macvlan4: entered promiscuous mode [ 480.156525][ T9180] macvlan5: entered promiscuous mode [ 480.883246][ T9187] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 481.900459][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.783'. [ 481.947967][ T9184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.239278][ T9194] veth5: entered promiscuous mode [ 484.425893][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.302131][ T9243] macvlan3: entered promiscuous mode [ 488.063481][ T9260] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 489.191253][ T9268] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 489.343662][ T9272] veth3: entered promiscuous mode [ 489.374434][ T9272] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 489.413149][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.800'. [ 489.477311][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.036299][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 496.442585][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'. [ 498.528378][ T9338] nvme_fabrics: missing parameter 'transport=%s' [ 498.534779][ T9338] nvme_fabrics: missing parameter 'nqn=%s' [ 499.609343][ T9332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.242268][ T9356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.744808][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.754929][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.505011][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'. [ 503.886703][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.828'. [ 504.993770][ T9385] nvme_fabrics: missing parameter 'transport=%s' [ 505.053865][ T9385] nvme_fabrics: missing parameter 'nqn=%s' [ 505.368061][ T9407] ubi: mtd0 is already attached to ubi31 [ 507.180792][ T9413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.048572][ T9432] ubi: mtd0 is already attached to ubi31 [ 511.491827][ T9454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.196248][ T9469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.323383][ T9479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.851'. [ 514.520777][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 515.947864][ T9486] ubi: mtd0 is already attached to ubi31 [ 516.904312][ T9491] netlink: 17 bytes leftover after parsing attributes in process `syz.1.855'. [ 516.913522][ T9491] net_ratelimit: 72 callbacks suppressed [ 516.913677][ T9491] netlink: zone id is out of range [ 516.924719][ T9491] netlink: zone id is out of range [ 516.930025][ T9491] netlink: zone id is out of range [ 516.935283][ T9491] netlink: zone id is out of range [ 516.940776][ T9491] netlink: zone id is out of range [ 516.946052][ T9491] netlink: zone id is out of range [ 516.951372][ T9491] netlink: zone id is out of range [ 516.956641][ T9491] netlink: zone id is out of range [ 516.962046][ T9491] netlink: zone id is out of range [ 516.967471][ T9491] netlink: zone id is out of range [ 520.651671][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.371260][ T9534] netlink: 72 bytes leftover after parsing attributes in process `syz.0.868'. [ 522.561674][ T9538] ubi: mtd0 is already attached to ubi31 [ 524.890015][ T9547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.871'. [ 527.005174][ T9554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.440409][ T9580] ubi: mtd0 is already attached to ubi31 [ 529.847753][ T5958] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 530.018185][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 530.197049][ T9599] ubi: mtd0 is already attached to ubi31 [ 531.227680][ T5958] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 531.237740][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.245879][ T5958] usb 5-1: Product: syz [ 531.275203][ T5958] usb 5-1: Manufacturer: syz [ 531.296710][ T5958] usb 5-1: SerialNumber: syz [ 531.325925][ T5958] usb 5-1: config 0 descriptor?? [ 531.829427][ T5958] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 532.533736][ T5958] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 533.142221][ T9618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.721200][ T9625] bridge0: entered promiscuous mode [ 533.727956][ T9625] macvlan2: entered promiscuous mode [ 534.327858][ T5837] usb 5-1: USB disconnect, device number 5 [ 535.678926][ T9641] netlink: 17 bytes leftover after parsing attributes in process `syz.4.898'. [ 535.891226][ T9641] net_ratelimit: 72 callbacks suppressed [ 535.892327][ T9641] netlink: zone id is out of range [ 535.904727][ T9641] netlink: zone id is out of range [ 535.911493][ T9641] netlink: zone id is out of range [ 535.918255][ T9641] netlink: zone id is out of range [ 535.925043][ T9641] netlink: zone id is out of range [ 535.932968][ T9641] netlink: zone id is out of range [ 535.939688][ T9641] netlink: zone id is out of range [ 535.945278][ T9641] netlink: zone id is out of range [ 535.950898][ T9641] netlink: zone id is out of range [ 535.956492][ T9641] netlink: zone id is out of range [ 537.509446][ T9653] ubi: mtd0 is already attached to ubi31 [ 539.768182][ T9666] macvlan3: entered promiscuous mode [ 539.820750][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 540.170272][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 540.193721][ T5837] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 540.230685][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.313771][ T5837] usb 3-1: Product: syz [ 540.318424][ T5837] usb 3-1: Manufacturer: syz [ 540.340703][ T5837] usb 3-1: SerialNumber: syz [ 540.361081][ T5837] usb 3-1: config 0 descriptor?? [ 540.396829][ T9668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.906'. [ 540.803513][ T5837] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 541.490471][ T5837] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 542.747334][ T9694] macvlan4: entered promiscuous mode [ 543.302800][ T8527] usb 3-1: USB disconnect, device number 7 [ 544.172993][ T9708] geneve2: entered promiscuous mode [ 544.178587][ T9708] geneve2: entered allmulticast mode [ 545.707888][ T9718] : entered promiscuous mode [ 546.303279][ T9725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.921'. [ 546.621060][ T9728] netlink: 17 bytes leftover after parsing attributes in process `syz.4.920'. [ 546.630820][ T9728] net_ratelimit: 72 callbacks suppressed [ 546.630878][ T9728] netlink: zone id is out of range [ 546.641764][ T9728] netlink: zone id is out of range [ 546.647000][ T9728] netlink: zone id is out of range [ 546.652249][ T9728] netlink: zone id is out of range [ 546.657504][ T9728] netlink: zone id is out of range [ 546.662843][ T9728] netlink: zone id is out of range [ 546.668087][ T9728] netlink: zone id is out of range [ 546.673295][ T9728] netlink: zone id is out of range [ 546.678549][ T9728] netlink: zone id is out of range [ 546.683768][ T9728] netlink: zone id is out of range [ 548.650495][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 550.728010][ T9745] nvme_fabrics: missing parameter 'transport=%s' [ 550.734982][ T9745] nvme_fabrics: missing parameter 'nqn=%s' [ 553.623775][ T9776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 555.555441][ T9789] geneve2: entered promiscuous mode [ 555.565497][ T9789] geneve2: entered allmulticast mode [ 559.420220][ T9803] geneve2: entered promiscuous mode [ 559.425528][ T9803] geneve2: entered allmulticast mode [ 560.338297][ T9821] netlink: 17 bytes leftover after parsing attributes in process `syz.4.945'. [ 560.347587][ T9821] net_ratelimit: 72 callbacks suppressed [ 560.353441][ T9821] netlink: zone id is out of range [ 560.358873][ T9821] netlink: zone id is out of range [ 560.364108][ T9821] netlink: zone id is out of range [ 560.369451][ T9821] netlink: zone id is out of range [ 560.374717][ T9821] netlink: zone id is out of range [ 560.380108][ T9821] netlink: zone id is out of range [ 560.385412][ T9821] netlink: zone id is out of range [ 560.393096][ T9821] netlink: zone id is out of range [ 560.398674][ T9821] netlink: zone id is out of range [ 560.404003][ T9821] netlink: zone id is out of range [ 560.878486][ T9817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.948'. [ 560.979504][ T9820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.008497][ T9818] vlan2: entered allmulticast mode [ 561.028502][ T9818] erspan0: entered allmulticast mode [ 561.997235][ T9840] geneve2: entered promiscuous mode [ 562.005912][ T9840] geneve2: entered allmulticast mode [ 562.922469][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.955'. [ 563.188084][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.194468][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.649309][ T9848] nvme_fabrics: missing parameter 'transport=%s' [ 564.747751][ T9848] nvme_fabrics: missing parameter 'nqn=%s' [ 566.108032][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.960'. [ 566.808355][ T9867] macvlan6: entered promiscuous mode [ 569.577742][ T9888] macvlan5: entered promiscuous mode [ 569.942140][ T9887] tmpfs: Bad value for 'mpol' [ 570.137959][ T6009] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 571.467776][ T6009] usb 4-1: Using ep0 maxpacket: 8 [ 571.551646][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 571.569609][ T6009] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 571.587697][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.595764][ T6009] usb 4-1: Product: syz [ 571.609159][ T6009] usb 4-1: Manufacturer: syz [ 571.613912][ T6009] usb 4-1: SerialNumber: syz [ 571.622218][ T6009] usb 4-1: config 0 descriptor?? [ 571.683080][ T9903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.973'. [ 572.243205][ T6009] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 572.393866][ T9912] can0: slcan on ptm0. [ 572.598307][ T9911] can0 (unregistered): slcan off ptm0. [ 573.525037][ T6009] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 575.720091][ T5958] usb 4-1: USB disconnect, device number 7 [ 577.272009][ T9939] geneve2: entered promiscuous mode [ 577.277299][ T9939] geneve2: entered allmulticast mode [ 579.637103][ T9954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.987'. [ 581.229326][ T9966] netlink: 17 bytes leftover after parsing attributes in process `syz.0.990'. [ 581.239187][ T9966] net_ratelimit: 72 callbacks suppressed [ 581.239226][ T9966] netlink: zone id is out of range [ 581.250361][ T9966] netlink: zone id is out of range [ 581.255594][ T9966] netlink: zone id is out of range [ 581.261022][ T9966] netlink: zone id is out of range [ 581.266237][ T9966] netlink: zone id is out of range [ 581.271571][ T9966] netlink: zone id is out of range [ 581.276858][ T9966] netlink: zone id is out of range [ 581.282228][ T9966] netlink: zone id is out of range [ 581.287461][ T9966] netlink: zone id is out of range [ 581.294476][ T9966] netlink: zone id is out of range [ 583.592231][ T9978] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 584.723548][ T9984] geneve2: entered promiscuous mode [ 584.728866][ T9984] geneve2: entered allmulticast mode [ 585.903904][ T9996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 586.757056][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.651498][T10047] macvlan4: entered promiscuous mode [ 593.752146][T10056] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1018'. [ 593.764742][T10056] net_ratelimit: 72 callbacks suppressed [ 593.764786][T10056] netlink: zone id is out of range [ 593.775901][T10056] netlink: zone id is out of range [ 593.781550][T10056] netlink: zone id is out of range [ 593.786739][T10056] netlink: zone id is out of range [ 593.792240][T10056] netlink: zone id is out of range [ 593.797434][T10056] netlink: zone id is out of range [ 593.805305][T10056] netlink: zone id is out of range [ 593.811285][T10056] netlink: zone id is out of range [ 593.817292][T10056] netlink: zone id is out of range [ 593.824143][T10056] netlink: zone id is out of range [ 601.447246][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.456815][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.465415][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.473660][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.486944][T10098] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1031'. [ 601.496311][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.672154][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.687939][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.695576][T10098] net_ratelimit: 72 callbacks suppressed [ 601.706491][T10098] netlink: zone id is out of range [ 601.720149][T10098] netlink: zone id is out of range [ 601.730490][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.745931][T10098] netlink: zone id is out of range [ 601.760228][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.773038][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.854028][T10098] netlink: zone id is out of range [ 601.885947][T10098] netlink: zone id is out of range [ 601.925902][T10098] netlink: zone id is out of range [ 601.957863][T10098] netlink: zone id is out of range [ 602.002665][T10098] netlink: zone id is out of range [ 602.290646][T10098] netlink: zone id is out of range [ 602.404998][T10109] ubi: mtd0 is already attached to ubi31 [ 603.130615][T10098] netlink: zone id is out of range [ 603.829259][ T5860] Bluetooth: hci5: command tx timeout [ 604.555836][T10101] chnl_net:caif_netlink_parms(): no params data found [ 604.922407][ T5973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.568870][ T5973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.871173][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.897976][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.905299][T10101] bridge_slave_0: entered allmulticast mode [ 605.928323][ T5860] Bluetooth: hci5: command tx timeout [ 605.960315][T10101] bridge_slave_0: entered promiscuous mode [ 606.838165][T10137] macvlan7: entered promiscuous mode [ 606.965517][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.991938][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.491074][T10101] bridge_slave_1: entered allmulticast mode [ 607.554109][T10101] bridge_slave_1: entered promiscuous mode [ 607.815300][ T5973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.891231][T10146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 607.897807][T10146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 607.941834][T10146] vhci_hcd vhci_hcd.0: Device attached [ 607.992920][ T5860] Bluetooth: hci5: command tx timeout [ 608.006763][T10101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.083503][ T5973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.177755][ T44] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 608.187791][ T9947] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 608.249020][T10101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.408431][ T9947] usb 4-1: config 0 has no interfaces? [ 608.411821][T10101] team0: Port device team_slave_0 added [ 608.437855][ T9947] usb 4-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 608.454558][T10101] team0: Port device team_slave_1 added [ 608.601036][ T9947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.618246][ T9947] usb 4-1: config 0 descriptor?? [ 608.727571][T10158] ubi: mtd0 is already attached to ubi31 [ 609.457759][ T44] usb 39-1: device descriptor read/64, error -71 [ 609.477337][T10101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.510073][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.537071][T10101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.603033][T10101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.617660][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.697925][ T44] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 609.699127][T10101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.067811][ T5860] Bluetooth: hci5: command tx timeout [ 610.689882][T10101] hsr_slave_0: entered promiscuous mode [ 610.716482][T10101] hsr_slave_1: entered promiscuous mode [ 610.725802][T10101] debugfs: 'hsr0' already exists in 'hsr' [ 610.740609][T10101] Cannot create hsr debugfs directory [ 610.799868][ T5973] bridge_slave_1: left allmulticast mode [ 610.809845][ T5973] bridge_slave_1: left promiscuous mode [ 610.814156][T10167] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1048'. [ 610.828038][T10167] net_ratelimit: 72 callbacks suppressed [ 610.829337][T10167] netlink: zone id is out of range [ 610.832371][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.854669][T10167] netlink: zone id is out of range [ 610.860113][T10167] netlink: zone id is out of range [ 610.866203][T10167] netlink: zone id is out of range [ 610.873533][T10167] netlink: zone id is out of range [ 610.882046][T10167] netlink: zone id is out of range [ 610.889410][T10167] netlink: zone id is out of range [ 610.895829][T10167] netlink: zone id is out of range [ 610.902976][T10167] netlink: zone id is out of range [ 610.909975][T10167] netlink: zone id is out of range [ 610.932973][ T5973] bridge_slave_0: left allmulticast mode [ 610.957912][ T24] usb 4-1: USB disconnect, device number 8 [ 610.969248][T10147] vhci_hcd: connection closed [ 610.969578][ T5973] bridge_slave_0: left promiscuous mode [ 610.990512][ T37] vhci_hcd: stop threads [ 611.024199][ T37] vhci_hcd: release socket [ 611.032551][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.042561][ T37] vhci_hcd: disconnect device [ 615.438922][ T44] vhci_hcd: vhci_device speed not set [ 615.780574][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.794127][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.808418][ T5973] bond0 (unregistering): Released all slaves [ 615.830967][T10174] bridge0: entered promiscuous mode [ 615.836308][T10174] macvlan2: entered promiscuous mode [ 616.178274][T10188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1056'. [ 618.641388][ T5973] hsr_slave_0: left promiscuous mode [ 618.657330][ T5973] hsr_slave_1: left promiscuous mode [ 618.674798][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.683396][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.849097][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.856650][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.975589][ T5973] veth1_macvtap: left promiscuous mode [ 618.987848][ T5973] veth0_macvtap: left promiscuous mode [ 619.002398][ T5973] veth1_vlan: left promiscuous mode [ 619.184435][T10211] ubi: mtd0 is already attached to ubi31 [ 619.783342][ T5973] veth0_vlan: left promiscuous mode [ 619.838983][ T8527] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 620.247670][ T8527] usb 5-1: Using ep0 maxpacket: 8 [ 622.127672][ T8527] usb 5-1: unable to read config index 0 descriptor/all [ 622.134740][ T8527] usb 5-1: can't read configurations, error -71 [ 623.865495][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 623.912816][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 624.342065][T10228] macvlan5: entered promiscuous mode [ 624.625205][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.631701][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.910123][T10101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 625.435323][T10101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 625.561163][T10101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 625.641343][T10101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.139113][T10257] ubi: mtd0 is already attached to ubi31 [ 627.330093][T10101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.396931][T10101] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.428518][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.435729][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.502704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.509981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.068694][T10265] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1075'. [ 628.078146][T10265] net_ratelimit: 72 callbacks suppressed [ 628.078164][T10265] netlink: zone id is out of range [ 628.116494][T10265] netlink: zone id is out of range [ 628.123086][T10265] netlink: zone id is out of range [ 628.152011][T10265] netlink: zone id is out of range [ 628.172179][T10265] netlink: zone id is out of range [ 628.181025][T10265] netlink: zone id is out of range [ 628.207255][T10265] netlink: zone id is out of range [ 628.217041][T10265] netlink: zone id is out of range [ 628.233130][T10265] netlink: zone id is out of range [ 628.239153][T10265] netlink: zone id is out of range [ 630.241236][T10286] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 631.168714][T10101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.691454][T10300] macvlan3: entered promiscuous mode [ 632.367799][ T5837] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 632.567618][T10101] veth0_vlan: entered promiscuous mode [ 632.580755][T10101] veth1_vlan: entered promiscuous mode [ 632.629383][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 633.318588][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.360705][T10101] veth0_macvtap: entered promiscuous mode [ 633.368248][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.430025][T10101] veth1_macvtap: entered promiscuous mode [ 633.436715][ T5837] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 633.477922][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.509931][ T5837] usb 3-1: config 0 descriptor?? [ 633.521209][T10101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.545228][T10101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.658559][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.684192][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.959834][T10318] ubi: mtd0 is already attached to ubi31 [ 634.064395][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.585688][ T1039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.975832][T10305] input: syz1 as /devices/virtual/input/input6 [ 635.036686][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.036714][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.124141][ T5837] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 635.127166][ T5837] usb 3-1: USB disconnect, device number 8 [ 635.178199][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.214659][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.452220][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1098'. [ 638.789086][T10350] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1099'. [ 638.799015][T10350] net_ratelimit: 72 callbacks suppressed [ 638.799054][T10350] netlink: zone id is out of range [ 638.810158][T10350] netlink: zone id is out of range [ 638.815528][T10350] netlink: zone id is out of range [ 638.820926][T10350] netlink: zone id is out of range [ 638.826273][T10350] netlink: zone id is out of range [ 638.831732][T10350] netlink: zone id is out of range [ 638.836995][T10350] netlink: zone id is out of range [ 638.842355][T10350] netlink: zone id is out of range [ 638.847748][T10350] netlink: zone id is out of range [ 638.852973][T10350] netlink: zone id is out of range [ 640.867183][T10359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.407928][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 642.569303][T10372] geneve2: entered promiscuous mode [ 642.574679][T10372] geneve2: entered allmulticast mode [ 643.331078][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 645.492786][ T5922] usb 3-1: unable to read config index 0 descriptor/all [ 645.511679][ T5922] usb 3-1: can't read configurations, error -71 [ 646.252862][T10402] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1111'. [ 646.262219][T10402] net_ratelimit: 72 callbacks suppressed [ 646.262260][T10402] netlink: zone id is out of range [ 646.273302][T10402] netlink: zone id is out of range [ 646.278614][T10402] netlink: zone id is out of range [ 646.283982][T10402] netlink: zone id is out of range [ 646.289442][T10402] netlink: zone id is out of range [ 646.294876][T10402] netlink: zone id is out of range [ 646.300479][T10402] netlink: zone id is out of range [ 646.305856][T10402] netlink: zone id is out of range [ 646.312454][T10402] netlink: zone id is out of range [ 646.317844][T10402] netlink: zone id is out of range [ 647.213898][T10408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1114'. [ 648.859053][T10420] geneve2: entered promiscuous mode [ 648.864410][T10420] geneve2: entered allmulticast mode [ 649.815334][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.317714][ T6009] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 650.607686][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 651.309082][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.563032][T10444] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1125'. [ 651.573542][T10444] net_ratelimit: 72 callbacks suppressed [ 651.573585][T10444] netlink: zone id is out of range [ 651.587840][T10444] netlink: zone id is out of range [ 651.594217][T10444] netlink: zone id is out of range [ 651.599549][T10444] netlink: zone id is out of range [ 651.604706][T10444] netlink: zone id is out of range [ 651.610502][T10444] netlink: zone id is out of range [ 651.616109][T10444] netlink: zone id is out of range [ 651.621585][T10444] netlink: zone id is out of range [ 651.627116][T10444] netlink: zone id is out of range [ 651.633007][T10444] netlink: zone id is out of range [ 651.937679][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.971094][ T6009] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 652.060011][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.514521][ T6009] usb 4-1: config 0 descriptor?? [ 653.369183][T10427] input: syz1 as /devices/virtual/input/input7 [ 653.720572][ T6009] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 653.937845][ T6009] usb 4-1: USB disconnect, device number 9 [ 654.250808][T10463] can0: slcan on ptm0. [ 654.349669][T10462] can0 (unregistered): slcan off ptm0. [ 655.599407][T10470] geneve2: entered promiscuous mode [ 655.604693][T10470] geneve2: entered allmulticast mode [ 656.286855][T10472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1133'. [ 657.636738][T10486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1136'. [ 657.755715][T10492] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1138'. [ 657.769920][T10492] net_ratelimit: 72 callbacks suppressed [ 657.769962][T10492] netlink: zone id is out of range [ 657.781240][T10492] netlink: zone id is out of range [ 657.786613][T10492] netlink: zone id is out of range [ 657.791981][T10492] netlink: zone id is out of range [ 657.797237][T10492] netlink: zone id is out of range [ 657.802671][T10492] netlink: zone id is out of range [ 657.807980][T10492] netlink: zone id is out of range [ 657.813220][T10492] netlink: zone id is out of range [ 657.818982][T10492] netlink: zone id is out of range [ 657.824262][T10492] netlink: zone id is out of range [ 658.983331][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1144'. [ 662.236730][T10542] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1154'. [ 662.788956][T10545] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1155'. [ 666.969749][T10578] ubi: mtd0 is already attached to ubi31 [ 668.707581][T10587] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1167'. [ 668.717063][T10587] net_ratelimit: 154 callbacks suppressed [ 668.717103][T10587] netlink: zone id is out of range [ 668.728364][T10587] netlink: zone id is out of range [ 668.733670][T10587] netlink: zone id is out of range [ 668.739088][T10587] netlink: zone id is out of range [ 668.744463][T10587] netlink: zone id is out of range [ 668.749781][T10587] netlink: zone id is out of range [ 668.755056][T10587] netlink: zone id is out of range [ 668.760349][T10587] netlink: zone id is out of range [ 668.765630][T10587] netlink: zone id is out of range [ 668.770991][T10587] netlink: zone id is out of range [ 670.162384][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 671.643703][T10597] nvme_fabrics: missing parameter 'transport=%s' [ 671.684801][T10597] nvme_fabrics: missing parameter 'nqn=%s' [ 672.827023][T10612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 672.838541][T10612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 677.412889][T10656] macvlan6: entered promiscuous mode [ 677.457904][T10653] fuse: Bad value for 'user_id' [ 677.462915][T10653] fuse: Bad value for 'user_id' [ 683.458022][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 683.607717][ T9] usb 5-1: device descriptor read/64, error -71 [ 683.725699][T10695] Error: Driver 'c6xdigio' is already registered, aborting... [ 683.978055][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 684.110652][ T9] usb 5-1: device descriptor read/64, error -71 [ 684.234322][ T9] usb usb5-port1: attempt power cycle [ 684.678404][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 685.028312][T10708] macvlan7: entered promiscuous mode [ 685.068583][ T9] usb 5-1: device descriptor read/8, error -71 [ 685.387788][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 685.428471][ T9] usb 5-1: device descriptor read/8, error -71 [ 685.686075][ T9] usb usb5-port1: unable to enumerate USB device [ 685.772050][T10716] ubi: mtd0 is already attached to ubi31 [ 686.357736][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.368193][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.941295][T10738] macvlan8: entered promiscuous mode [ 693.068729][T10766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.535154][T10772] ubi: mtd0 is already attached to ubi31 [ 696.278521][T10787] macvlan4: entered promiscuous mode [ 696.660705][T10795] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1225'. [ 701.785933][T10831] ubi: mtd0 is already attached to ubi31 [ 702.853711][T10833] macvlan8: entered promiscuous mode [ 703.052103][T10841] comedi comedi4: bad chanlist[0]=0x00001001 chan=4097 range length=2 [ 703.216266][T10844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1240'. [ 711.583812][T10890] ubi: mtd0 is already attached to ubi31 [ 712.455256][T10892] macvlan6: entered promiscuous mode [ 716.712037][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 716.740089][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.831788][T10931] macvlan7: entered promiscuous mode [ 717.992011][T10940] ubi: mtd0 is already attached to ubi31 [ 721.095603][T10954] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 721.162360][T10954] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.196598][T10954] bond0: (slave team0): Enslaving as an active interface with an up link [ 721.590277][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 722.040107][T10960] macvlan5: entered promiscuous mode [ 723.618760][T10976] macvlan9: entered promiscuous mode [ 724.305740][ T5860] Bluetooth: hci5: command 0x0406 tx timeout [ 724.337749][T10982] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1280'. [ 724.346831][T10982] net_ratelimit: 72 callbacks suppressed [ 724.346852][T10982] netlink: zone id is out of range [ 724.358065][T10982] netlink: zone id is out of range [ 724.363227][T10982] netlink: zone id is out of range [ 724.368420][T10982] netlink: zone id is out of range [ 724.373566][T10982] netlink: zone id is out of range [ 724.379615][T10982] netlink: zone id is out of range [ 724.384777][T10982] netlink: zone id is out of range [ 724.390282][T10982] netlink: zone id is out of range [ 724.395450][T10982] netlink: zone id is out of range [ 724.400638][T10982] netlink: zone id is out of range [ 724.422862][T10977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.464980][T10988] nvme_fabrics: missing parameter 'transport=%s' [ 727.517977][T10988] nvme_fabrics: missing parameter 'nqn=%s' [ 727.877738][T11003] netlink: 'syz.5.1285': attribute type 10 has an invalid length. [ 729.114255][T11003] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.547911][T11003] bond0: (slave team0): Enslaving as an active interface with an up link [ 733.030716][T11034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.391541][T11086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.699404][T11123] overlayfs: missing 'lowerdir' [ 747.949926][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.956308][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.015086][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.665903][T11173] overlayfs: missing 'lowerdir' [ 757.364057][T11202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.457702][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1339'. [ 761.792010][T11243] ubi: mtd0 is already attached to ubi31 [ 764.239810][T11255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1354'. [ 765.358280][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.706089][T11264] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1357'. [ 765.715574][T11264] net_ratelimit: 72 callbacks suppressed [ 765.715595][T11264] netlink: zone id is out of range [ 765.726569][T11264] netlink: zone id is out of range [ 765.732067][T11264] netlink: zone id is out of range [ 765.739610][T11264] netlink: zone id is out of range [ 765.745195][T11264] netlink: zone id is out of range [ 765.751641][T11264] netlink: zone id is out of range [ 765.756866][T11264] netlink: zone id is out of range [ 765.762409][T11264] netlink: zone id is out of range [ 765.769406][T11264] netlink: zone id is out of range [ 765.774634][T11264] netlink: zone id is out of range [ 770.074496][T11293] ubi: mtd0 is already attached to ubi31 [ 771.487150][T11296] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1367'. [ 772.989860][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.605874][ T6009] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 774.685278][T11319] kernel profiling enabled (shift: 63) [ 774.691220][T11319] profiling shift: 63 too large [ 774.787669][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 775.002113][ T6009] usb 4-1: config 0 interface 0 has no altsetting 0 [ 775.016629][ T6009] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 775.026199][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.041636][ T6009] usb 4-1: Product: syz [ 775.048346][ T6009] usb 4-1: Manufacturer: syz [ 775.054291][ T6009] usb 4-1: SerialNumber: syz [ 775.072928][ T6009] usb 4-1: config 0 descriptor?? [ 775.576192][T11319] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 775.636117][T11319] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 775.846324][ T6009] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 776.637073][ T6009] usb 4-1: USB disconnect, device number 10 [ 777.354929][T11341] ubi: mtd0 is already attached to ubi31 [ 779.010974][T11349] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1382'. [ 779.020796][T11349] net_ratelimit: 72 callbacks suppressed [ 779.020831][T11349] netlink: zone id is out of range [ 779.050578][T11349] netlink: zone id is out of range [ 779.056069][T11349] netlink: zone id is out of range [ 779.070297][T11349] netlink: zone id is out of range [ 779.075653][T11349] netlink: zone id is out of range [ 779.081507][T11349] netlink: zone id is out of range [ 779.086813][T11349] netlink: zone id is out of range [ 779.093240][T11349] netlink: zone id is out of range [ 779.103502][T11349] netlink: zone id is out of range [ 779.108913][T11349] netlink: zone id is out of range [ 779.367690][ T6009] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 779.517742][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 779.524851][ T6009] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 779.541870][ T6009] usb 4-1: config 0 has no interface number 0 [ 779.585638][ T6009] usb 4-1: config 0 interface 153 has no altsetting 0 [ 779.628315][ T6009] usb 4-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0 [ 779.638056][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.650868][ T6009] usb 4-1: Product: syz [ 779.655737][ T6009] usb 4-1: Manufacturer: syz [ 779.661588][ T6009] usb 4-1: SerialNumber: syz [ 779.679012][ T6009] usb 4-1: config 0 descriptor?? [ 779.692071][ T6009] ti_usb_3410_5052 4-1:0.153: TI USB 3410 1 port adapter converter detected [ 779.732433][ T6009] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 780.068030][T11353] wireguard0: entered promiscuous mode [ 780.233621][T11353] wireguard0: entered allmulticast mode [ 780.504353][ T5837] usb 4-1: USB disconnect, device number 11 [ 780.627266][ T5837] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 780.643051][ T5837] ti_usb_3410_5052 4-1:0.153: device disconnected [ 784.016463][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 785.993261][T11420] netlink: 'syz.2.1403': attribute type 10 has an invalid length. [ 786.006545][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.016063][T11420] bond0: (slave team0): Enslaving as an active interface with an up link [ 786.397754][ T5958] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 787.066737][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 787.162770][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.196417][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.216187][T11433] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1407'. [ 787.225793][T11433] net_ratelimit: 72 callbacks suppressed [ 787.225829][T11433] netlink: zone id is out of range [ 787.246935][T11433] netlink: zone id is out of range [ 787.256506][ T5958] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 787.265801][T11433] netlink: zone id is out of range [ 787.272037][T11433] netlink: zone id is out of range [ 787.277305][T11433] netlink: zone id is out of range [ 787.283567][T11433] netlink: zone id is out of range [ 787.289254][T11433] netlink: zone id is out of range [ 787.294851][T11433] netlink: zone id is out of range [ 787.300430][T11433] netlink: zone id is out of range [ 787.305668][T11433] netlink: zone id is out of range [ 787.404160][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.415460][ T5958] usb 3-1: config 0 descriptor?? [ 788.380144][ T5958] usbhid 3-1:0.0: can't add hid device: -71 [ 788.387201][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 788.458900][ T5958] usb 3-1: USB disconnect, device number 11 [ 788.591420][T11438] overlayfs: failed to get inode (-116) [ 788.659916][T11438] overlayfs: failed to get inode (-116) [ 790.412982][T11453] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 792.576051][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'. [ 793.008102][ T981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 793.160492][T11478] macvlan6: entered promiscuous mode [ 793.231314][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 793.304425][T11480] macvlan10: entered promiscuous mode [ 793.631347][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.646459][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.657901][ T981] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 793.667305][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.681994][ T981] usb 5-1: config 0 descriptor?? [ 794.133142][ T981] usbhid 5-1:0.0: can't add hid device: -71 [ 794.146039][ T981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 794.312521][ T981] usb 5-1: USB disconnect, device number 12 [ 794.712133][T11489] netlink: 'syz.5.1427': attribute type 10 has an invalid length. [ 801.750612][T11538] overlayfs: missing 'workdir' [ 801.992968][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1441'. [ 804.289686][T11556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1445'. [ 805.529549][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1449'. [ 808.988219][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.994604][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.033695][T11605] overlayfs: missing 'workdir' [ 816.640607][T11657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1475'. [ 819.067778][T11686] geneve2: entered promiscuous mode [ 819.073056][T11686] geneve2: entered allmulticast mode [ 821.511273][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1489'. [ 821.902902][T11698] nvme_fabrics: missing parameter 'transport=%s' [ 821.909506][T11698] nvme_fabrics: missing parameter 'nqn=%s' [ 822.103864][T11708] netlink: 'syz.3.1491': attribute type 11 has an invalid length. [ 822.111976][T11708] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1491'. [ 825.122475][T11728] geneve2: entered promiscuous mode [ 825.127792][T11728] geneve2: entered allmulticast mode [ 826.915274][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'. [ 827.608174][T11758] macvlan11: entered promiscuous mode [ 827.659148][T11753] nvme_fabrics: missing parameter 'transport=%s' [ 827.665571][T11753] nvme_fabrics: missing parameter 'nqn=%s' [ 829.704641][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 830.200013][T11782] geneve2: entered promiscuous mode [ 830.205301][T11782] geneve2: entered allmulticast mode [ 832.474473][T11802] wireguard0: entered promiscuous mode [ 832.482777][T11802] wireguard0: entered allmulticast mode [ 832.564110][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 835.011889][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 835.571242][T11826] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1523'. [ 835.580545][T11826] net_ratelimit: 72 callbacks suppressed [ 835.580561][T11826] netlink: zone id is out of range [ 835.591366][T11826] netlink: zone id is out of range [ 835.596476][T11826] netlink: zone id is out of range [ 835.601651][T11826] netlink: zone id is out of range [ 835.606757][T11826] netlink: zone id is out of range [ 835.611900][T11826] netlink: zone id is out of range [ 835.617007][T11826] netlink: zone id is out of range [ 835.622144][T11826] netlink: zone id is out of range [ 835.627257][T11826] netlink: zone id is out of range [ 835.632414][T11826] netlink: zone id is out of range [ 836.032505][T11832] geneve2: entered promiscuous mode [ 836.037833][T11832] geneve2: entered allmulticast mode [ 836.100110][T11834] netlink: 'syz.4.1525': attribute type 10 has an invalid length. [ 837.917521][ T5915] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 838.397670][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 838.532724][ T5915] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 838.550308][ T5915] usb 5-1: config 0 has no interface number 0 [ 838.568405][ T5915] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 838.577950][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.586182][ T5915] usb 5-1: Product: syz [ 838.590770][ T5915] usb 5-1: Manufacturer: syz [ 838.595590][ T5915] usb 5-1: SerialNumber: syz [ 838.629759][ T5915] usb 5-1: config 0 descriptor?? [ 838.851451][ T5915] usb 5-1: USB disconnect, device number 13 [ 839.299224][T11865] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1535'. [ 839.768745][T11869] xt_nat: multiple ranges no longer supported [ 840.723464][T11889] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 842.958762][T11903] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1547'. [ 842.968493][T11903] net_ratelimit: 154 callbacks suppressed [ 842.968510][T11903] netlink: zone id is out of range [ 842.979400][T11903] netlink: zone id is out of range [ 842.984524][T11903] netlink: zone id is out of range [ 842.989741][T11903] netlink: zone id is out of range [ 842.994849][T11903] netlink: zone id is out of range [ 842.999996][T11903] netlink: zone id is out of range [ 843.005119][T11903] netlink: zone id is out of range [ 843.010246][T11903] netlink: zone id is out of range [ 843.015393][T11903] netlink: zone id is out of range [ 843.020544][T11903] netlink: zone id is out of range [ 843.391637][T11921] netlink: 'syz.3.1553': attribute type 10 has an invalid length. [ 843.417189][T11921] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.435790][T11921] bond0: (slave team0): Enslaving as an active interface with an up link [ 847.865887][T11955] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1562'. [ 848.042444][T11962] netlink: 'syz.5.1565': attribute type 10 has an invalid length. [ 850.891762][T11990] xt_nat: multiple ranges no longer supported [ 853.760846][T12009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1578'. [ 853.783241][T12006] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1576'. [ 853.792440][T12006] net_ratelimit: 154 callbacks suppressed [ 853.792452][T12006] netlink: zone id is out of range [ 853.803391][T12006] netlink: zone id is out of range [ 853.808554][T12006] netlink: zone id is out of range [ 853.813655][T12006] netlink: zone id is out of range [ 853.818798][T12006] netlink: zone id is out of range [ 853.823902][T12006] netlink: zone id is out of range [ 853.829339][T12006] netlink: zone id is out of range [ 853.834566][T12006] netlink: zone id is out of range [ 853.839712][T12006] netlink: zone id is out of range [ 853.844821][T12006] netlink: zone id is out of range [ 854.036123][T12009] nvme_fabrics: missing parameter 'transport=%s' [ 854.042568][T12009] nvme_fabrics: missing parameter 'nqn=%s' [ 857.149620][T12032] xt_nat: multiple ranges no longer supported [ 858.896424][T12052] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1590'. [ 858.905555][T12052] net_ratelimit: 72 callbacks suppressed [ 858.905567][T12052] netlink: zone id is out of range [ 858.916359][T12052] netlink: zone id is out of range [ 858.921518][T12052] netlink: zone id is out of range [ 858.926621][T12052] netlink: zone id is out of range [ 858.931799][T12052] netlink: zone id is out of range [ 858.936955][T12052] netlink: zone id is out of range [ 858.942220][T12052] netlink: zone id is out of range [ 858.947334][T12052] netlink: zone id is out of range [ 858.952508][T12052] netlink: zone id is out of range [ 858.957671][T12052] netlink: zone id is out of range [ 861.083614][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 861.837945][T12085] xt_nat: multiple ranges no longer supported [ 863.341016][T12095] netlink: 'syz.4.1603': attribute type 10 has an invalid length. [ 863.893392][T12097] netlink: 'syz.4.1606': attribute type 11 has an invalid length. [ 863.957799][T12097] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1606'. [ 868.081550][T12134] netlink: 'syz.3.1616': attribute type 10 has an invalid length. [ 869.366490][T12144] program syz.5.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.383320][T12144] program syz.5.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.681918][T12144] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 869.948881][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1619'. [ 870.498548][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.505270][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.247979][T12176] netlink: 'syz.2.1627': attribute type 10 has an invalid length. [ 873.449544][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1632'. [ 874.585657][ T5958] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 875.012178][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 875.070432][ T5958] usb 5-1: config 0 interface 0 has no altsetting 0 [ 875.090317][ T5958] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 875.101032][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.109718][ T5958] usb 5-1: Product: syz [ 875.114152][ T5958] usb 5-1: Manufacturer: syz [ 875.119443][ T5958] usb 5-1: SerialNumber: syz [ 875.127314][ T5958] usb 5-1: config 0 descriptor?? [ 875.527066][T12208] netlink: 'syz.2.1637': attribute type 11 has an invalid length. [ 875.535099][T12208] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1637'. [ 876.114045][ T5958] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 876.596692][ T5915] usb 5-1: USB disconnect, device number 14 [ 877.570334][T12223] netlink: 'syz.4.1640': attribute type 10 has an invalid length. [ 881.029656][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 882.695447][T12276] Device name cannot be null; rc = [-22] [ 883.267027][T12277] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 889.704819][T12328] netlink: 'syz.5.1669': attribute type 10 has an invalid length. [ 891.917657][T12349] input: syz1 as /devices/virtual/input/input9 [ 892.749750][T12349] vivid-003: disconnect [ 894.720913][T12343] vivid-003: reconnect [ 896.362369][T12358] can0: slcan on ptm0. [ 897.662583][T12355] can0 (unregistered): slcan off ptm0. [ 897.898291][T12368] netlink: 'syz.4.1682': attribute type 10 has an invalid length. [ 898.777808][ T981] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 899.049985][T12382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1687'. [ 899.297616][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 900.092386][ T981] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 900.100987][ T981] usb 3-1: config 0 has no interface number 0 [ 900.107237][ T981] usb 3-1: config 0 interface 153 has no altsetting 0 [ 900.116608][ T981] usb 3-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0 [ 900.125856][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.137626][ T981] usb 3-1: Product: syz [ 900.141900][ T981] usb 3-1: Manufacturer: syz [ 900.146637][ T981] usb 3-1: SerialNumber: syz [ 900.168517][ T981] usb 3-1: config 0 descriptor?? [ 900.176828][ T981] ti_usb_3410_5052 3-1:0.153: TI USB 3410 1 port adapter converter detected [ 900.357611][ T981] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 901.000677][T12370] wireguard0: entered promiscuous mode [ 901.007986][T12370] wireguard0: entered allmulticast mode [ 901.231599][ T9] usb 3-1: USB disconnect, device number 12 [ 901.266199][ T9] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 901.724414][ T9] ti_usb_3410_5052 3-1:0.153: device disconnected [ 901.752281][T12397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.828980][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1693'. [ 903.368316][T12405] nvme_fabrics: missing parameter 'transport=%s' [ 903.403646][T12405] nvme_fabrics: missing parameter 'nqn=%s' [ 903.598177][T12421] netlink: 'syz.5.1697': attribute type 10 has an invalid length. [ 904.315963][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1701'. [ 906.624407][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1702'. [ 907.736772][T12450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.827569][T12444] nvme_fabrics: missing parameter 'transport=%s' [ 907.837396][T12444] nvme_fabrics: missing parameter 'nqn=%s' [ 909.271891][T12464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1708'. [ 909.735979][T12465] nvme_fabrics: missing parameter 'transport=%s' [ 909.745418][T12465] nvme_fabrics: missing parameter 'nqn=%s' [ 910.090068][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1712'. [ 910.705715][T12488] netlink: 'syz.5.1713': attribute type 11 has an invalid length. [ 910.713905][T12488] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1713'. [ 913.608229][T12507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.260418][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1722'. [ 916.427950][T12529] fuse: Bad value for 'fd' [ 916.856338][T12516] nvme_fabrics: missing parameter 'transport=%s' [ 916.863085][T12516] nvme_fabrics: missing parameter 'nqn=%s' [ 917.707626][ T981] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 917.897655][ T981] usb 5-1: device descriptor read/64, error -71 [ 918.168133][ T981] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 918.457740][ T981] usb 5-1: device descriptor read/64, error -71 [ 918.580354][ T981] usb usb5-port1: attempt power cycle [ 919.032762][T12549] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1731'. [ 919.043278][T12549] net_ratelimit: 72 callbacks suppressed [ 919.043368][T12549] netlink: zone id is out of range [ 919.054479][T12549] netlink: zone id is out of range [ 919.059911][T12549] netlink: zone id is out of range [ 919.065268][T12549] netlink: zone id is out of range [ 919.070803][T12549] netlink: zone id is out of range [ 919.076318][T12549] netlink: zone id is out of range [ 919.081787][T12549] netlink: zone id is out of range [ 919.087195][T12549] netlink: zone id is out of range [ 919.092596][T12549] netlink: zone id is out of range [ 919.098152][T12549] netlink: zone id is out of range [ 919.148820][ T981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 919.393293][ T981] usb 5-1: device descriptor read/8, error -71 [ 919.718956][ T981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 919.758368][ T981] usb 5-1: device descriptor read/8, error -71 [ 920.018617][ T981] usb usb5-port1: unable to enumerate USB device [ 920.066211][T12555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.613155][T12584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 923.670464][T12575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1738'. [ 924.051136][T12579] nvme_fabrics: missing parameter 'transport=%s' [ 924.111671][T12579] nvme_fabrics: missing parameter 'nqn=%s' [ 927.817574][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 928.576124][T12618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.588985][ T9] usb 5-1: device descriptor read/64, error -71 [ 928.940015][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 929.157661][ T9] usb 5-1: device descriptor read/64, error -71 [ 929.268907][ T9] usb usb5-port1: attempt power cycle [ 929.441610][T12633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1753'. [ 929.887567][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 929.930432][ T9] usb 5-1: device descriptor read/8, error -71 [ 930.339116][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 932.408258][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.414686][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.124984][ T9] usb 5-1: device descriptor read/8, error -71 [ 933.658785][ T9] usb usb5-port1: unable to enumerate USB device [ 936.192173][T12667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.327724][T12677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1764'. [ 937.007277][T12680] wireguard1: entered promiscuous mode [ 937.013112][T12680] wireguard1: entered allmulticast mode [ 939.963866][T12700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1771'. [ 941.993034][T12715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.717883][T12733] Device name cannot be null; rc = [-22] [ 946.348471][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1785'. [ 948.390128][T12749] ubi: mtd0 is already attached to ubi31 [ 955.483258][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1797'. [ 955.678978][T12791] nvme_fabrics: missing parameter 'transport=%s' [ 955.692935][T12791] nvme_fabrics: missing parameter 'nqn=%s' [ 956.428961][T12798] input: syz1 as /devices/virtual/input/input10 [ 956.455600][T12798] vivid-003: disconnect [ 956.954957][T12795] vivid-003: reconnect [ 960.191823][T12811] Device name cannot be null; rc = [-22] [ 961.164766][T12810] netlink: 'syz.2.1803': attribute type 4 has an invalid length. [ 961.303403][T12818] netlink: 'syz.0.1805': attribute type 10 has an invalid length. [ 961.437727][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.629719][T12818] bond0: (slave team0): Enslaving as an active interface with an up link [ 962.641033][T12821] slcan: can't register candev [ 962.646073][T12821] Falling back ldisc for ptm0. [ 964.671047][T12841] input: syz1 as /devices/virtual/input/input11 [ 964.692642][T12841] vivid-001: disconnect [ 965.167512][T12836] vivid-001: reconnect [ 968.741157][T12853] Device name cannot be null; rc = [-22] [ 970.438219][T12864] netlink: 'syz.3.1818': attribute type 4 has an invalid length. [ 973.272191][T12892] input: syz1 as /devices/virtual/input/input12 [ 973.361565][T12893] vivid-001: disconnect [ 973.885299][T12885] vivid-001: reconnect [ 974.838797][T12894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1827'. [ 976.480413][T12896] nvme_fabrics: missing parameter 'transport=%s' [ 976.751028][T12896] nvme_fabrics: missing parameter 'nqn=%s' [ 978.149497][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.491160][T12918] Device name cannot be null; rc = [-22] [ 979.195800][T10961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.205555][T10961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.214522][T10961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.225676][T10961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.234048][T10961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.262253][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.274495][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.282608][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.291248][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.300792][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.531719][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.564317][T12919] netlink: 'syz.2.1836': attribute type 4 has an invalid length. [ 980.323734][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.563027][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.379765][ T5860] Bluetooth: hci1: command tx timeout [ 982.101227][ T34] bridge_slave_1: left allmulticast mode [ 982.116519][ T34] bridge_slave_1: left promiscuous mode [ 982.127179][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.199107][ T34] bridge_slave_0: left allmulticast mode [ 982.217004][ T34] bridge_slave_0: left promiscuous mode [ 982.301127][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.477653][ T5860] Bluetooth: hci1: command tx timeout [ 984.519208][T12963] Device name cannot be null; rc = [-22] [ 985.499840][ T5860] Bluetooth: hci1: command tx timeout [ 986.008627][T12973] netlink: 'syz.4.1849': attribute type 4 has an invalid length. [ 986.161971][T12975] ubi: mtd0 is already attached to ubi31 [ 986.800146][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.843376][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.902607][ T34] bond0 (unregistering): (slave team0): Releasing backup interface [ 987.009963][ T34] bond0 (unregistering): Released all slaves [ 987.073212][ T34] bond1 (unregistering): Released all slaves [ 987.135428][T12920] chnl_net:caif_netlink_parms(): no params data found [ 987.219750][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'. [ 987.617428][ T5860] Bluetooth: hci1: command tx timeout [ 988.860274][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.887969][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.911745][T12920] bridge_slave_0: entered allmulticast mode [ 988.944701][T12920] bridge_slave_0: entered promiscuous mode [ 989.028698][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.188611][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.196075][T12920] bridge_slave_1: entered allmulticast mode [ 989.206002][T12920] bridge_slave_1: entered promiscuous mode [ 989.244190][ T34] hsr_slave_0: left promiscuous mode [ 989.269284][ T34] hsr_slave_1: left promiscuous mode [ 989.294321][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.322111][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.351984][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.382173][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.448760][ T34] veth1_macvtap: left promiscuous mode [ 989.464791][ T34] veth0_macvtap: left promiscuous mode [ 989.495918][ T34] veth1_vlan: left promiscuous mode [ 989.522086][ T34] veth0_vlan: left promiscuous mode [ 992.053228][T13010] autofs: Unknown parameter 'fd0x0000000000000000' [ 993.310080][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.319743][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.490392][ T34] team0 (unregistering): Port device team_slave_1 removed [ 996.212570][T13020] nvme_fabrics: missing parameter 'transport=%s' [ 996.219400][T13020] nvme_fabrics: missing parameter 'nqn=%s' [ 996.982536][ T34] team0 (unregistering): Port device team_slave_0 removed [ 998.611152][T13048] input: syz1 as /devices/virtual/input/input13 [ 998.732545][T13049] vivid-000: disconnect [ 999.206517][T13045] vivid-000: reconnect [ 999.988413][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1859'. [ 1000.236466][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.309456][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.604136][T12920] team0: Port device team_slave_0 added [ 1000.661175][T13057] autofs: Unknown parameter 'fd0x0000000000000000' [ 1000.669765][T12920] team0: Port device team_slave_1 added [ 1000.879872][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.889783][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.915768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.945044][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.019208][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.035564][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.125034][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.800423][T13066] netlink: 'syz.3.1872': attribute type 10 has an invalid length. [ 1001.866826][T12920] hsr_slave_0: entered promiscuous mode [ 1001.879999][T12920] hsr_slave_1: entered promiscuous mode [ 1002.250928][T13071] Device name cannot be null; rc = [-22] [ 1002.625240][T12920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1002.712803][T12920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1002.846370][T12920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1002.889018][T12920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1004.028228][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.053165][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.113269][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.120526][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.169527][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.176820][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.389054][T13089] vivid-000: disconnect [ 1004.932056][T13086] vivid-000: reconnect [ 1005.824770][T12920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1005.872708][T12920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1007.166595][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.385389][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1878'. [ 1010.979001][T13130] Device name cannot be null; rc = [-22] [ 1011.652963][T13132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 1018.036322][T12920] veth0_vlan: entered promiscuous mode [ 1018.140954][T12920] veth1_vlan: entered promiscuous mode [ 1018.335800][T12920] veth0_macvtap: entered promiscuous mode [ 1018.372388][T12920] veth1_macvtap: entered promiscuous mode [ 1018.444743][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.491962][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.594605][ T6109] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.648291][ T6109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.682553][ T6109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.755675][ T6109] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.918850][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.926742][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.701595][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.760627][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.715939][T13184] Device name cannot be null; rc = [-22] [ 1022.851085][T13190] vivid-001: disconnect [ 1023.490565][T13187] vivid-001: reconnect [ 1030.272537][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1907'. [ 1034.382767][T13253] kernel profiling enabled (shift: 63) [ 1034.400470][T13253] profiling shift: 63 too large [ 1035.680670][T13253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1035.934020][T13253] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1036.470834][T13270] netlink: 'syz.3.1917': attribute type 11 has an invalid length. [ 1036.478903][T13270] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1917'. [ 1037.364834][T13273] Device name cannot be null; rc = [-22] [ 1039.928634][T13293] ubi: mtd0 is already attached to ubi31 [ 1040.216697][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1924'. [ 1042.787709][T13298] nvme_fabrics: missing parameter 'transport=%s' [ 1042.794089][T13298] nvme_fabrics: missing parameter 'nqn=%s' [ 1046.606042][T13329] macvlan9: entered promiscuous mode [ 1047.205735][T13341] kernel profiling enabled (shift: 63) [ 1047.253144][T13341] profiling shift: 63 too large [ 1047.610233][T13345] ubi: mtd0 is already attached to ubi31 [ 1048.392168][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1939'. [ 1048.787155][T13357] overlayfs: failed to clone upperpath [ 1051.388695][T13374] macvlan10: entered promiscuous mode [ 1051.467567][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1051.937441][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 1052.067850][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1052.764055][ T5837] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1052.780737][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.801377][ T5837] usb 4-1: Product: syz [ 1052.867145][ T5837] usb 4-1: Manufacturer: syz [ 1052.880831][ T5837] usb 4-1: SerialNumber: syz [ 1053.161110][ T5837] usb 4-1: config 0 descriptor?? [ 1053.175673][ T5837] gs_usb 4-1:0.0: Required endpoints not found [ 1053.474298][T13388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1054.701329][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.707767][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.622413][ T5958] usb 4-1: USB disconnect, device number 12 [ 1055.624761][T13387] nvme_fabrics: missing parameter 'transport=%s' [ 1055.818895][T13387] nvme_fabrics: missing parameter 'nqn=%s' [ 1056.199520][T13405] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 1056.523052][T13411] macvlan8: entered promiscuous mode [ 1057.224489][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 1060.540998][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1060.677632][ T5941] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1060.707301][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1060.724889][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1060.760307][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1060.783392][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.803565][ T9] usb 5-1: Product: syz [ 1060.813769][ T9] usb 5-1: Manufacturer: syz [ 1060.823911][ T9] usb 5-1: SerialNumber: syz [ 1060.846774][ T9] usb 5-1: config 0 descriptor?? [ 1060.851894][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 1060.867175][ T9] gs_usb 5-1:0.0: Required endpoints not found [ 1060.909176][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1060.928597][ T5941] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1060.957497][ T5941] usb 6-1: config 1 has no interface number 1 [ 1060.970232][ T5941] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1060.983510][ T5941] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1061.039903][ T5941] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1061.087465][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.107544][ T5941] usb 6-1: Product: syz [ 1061.120574][ T5941] usb 6-1: Manufacturer: syz [ 1061.134230][ T5941] usb 6-1: SerialNumber: syz [ 1063.171962][ T5941] usb 6-1: 2:1 : unsupported sample bitwidth 5 in 253 bytes [ 1063.424360][ T5958] usb 5-1: USB disconnect, device number 23 [ 1063.604608][T13464] Device name cannot be null; rc = [-22] [ 1064.429815][ T5941] usb 6-1: USB disconnect, device number 2 [ 1064.571715][T13468] autofs: Unknown parameter 'fd0x0000000000000000' [ 1068.547550][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1069.771180][ T9] usb 7-1: config 241 has an invalid interface number: 0 but max is -1 [ 1069.796001][ T9] usb 7-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1069.810178][ T9] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1069.829611][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.041001][ T9] pcwd_usb: The device isn't a Human Interface Device [ 1070.440737][T13509] Device name cannot be null; rc = [-22] [ 1071.090304][T13493] Bluetooth: MGMT ver 1.23 [ 1072.050442][ T44] usb 7-1: USB disconnect, device number 2 [ 1076.501437][T13541] autofs: Unknown parameter 'fd0x0000000000000000' [ 1077.899255][T13558] Device name cannot be null; rc = [-22] [ 1079.652844][ T5958] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1079.831454][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1079.953946][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1079.983149][ T5958] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1080.010566][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.683895][ T5958] usb 4-1: Product: syz [ 1080.714918][ T5958] usb 4-1: Manufacturer: syz [ 1080.720571][ T5958] usb 4-1: SerialNumber: syz [ 1080.741571][ T5958] usb 4-1: config 0 descriptor?? [ 1080.972913][T13574] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 1081.171472][ T5958] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 1081.183139][ T5958] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 1082.316260][ T8527] usb 4-1: USB disconnect, device number 13 [ 1088.963266][T10961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1088.974237][T10961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1088.982701][T10961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.002877][T10961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.012281][T10961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.034326][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.047889][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.057821][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.078306][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.094320][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.267971][ T5915] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1089.460829][ T5958] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1089.630752][ T5958] usb 7-1: Using ep0 maxpacket: 32 [ 1089.693392][ T5958] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1089.736608][ T1341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.860755][ T5958] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1090.043660][ T5958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.060187][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1090.070932][ T5915] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 1090.082993][ T5915] usb 6-1: config 0 has no interface number 0 [ 1090.083414][ T5958] usb 7-1: Product: syz [ 1090.089309][ T5915] usb 6-1: config 0 interface 153 has no altsetting 0 [ 1090.092164][ T5915] usb 6-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0 [ 1090.103876][ T5958] usb 7-1: Manufacturer: syz [ 1090.115914][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.124930][ T5915] usb 6-1: Product: syz [ 1090.130083][ T5915] usb 6-1: Manufacturer: syz [ 1090.143596][ T5915] usb 6-1: SerialNumber: syz [ 1090.169215][ T5915] usb 6-1: config 0 descriptor?? [ 1090.213112][ T5915] ti_usb_3410_5052 6-1:0.153: TI USB 3410 1 port adapter converter detected [ 1090.235300][ T1341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.256767][ T5958] usb 7-1: SerialNumber: syz [ 1090.264652][ T5915] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1090.271637][ T5958] usb 7-1: config 0 descriptor?? [ 1090.565218][ T1341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.704272][ T5958] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 1090.712733][ T1341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.733623][ T5958] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1090.868581][T13624] wireguard0: entered promiscuous mode [ 1090.874291][T13624] wireguard0: entered allmulticast mode [ 1090.899255][ T5915] usb 6-1: USB disconnect, device number 3 [ 1090.936667][ T5915] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1090.995593][ T5915] ti_usb_3410_5052 6-1:0.153: device disconnected [ 1091.166096][ T1341] bridge_slave_1: left allmulticast mode [ 1091.176156][ T1341] bridge_slave_1: left promiscuous mode [ 1091.192149][ T5860] Bluetooth: hci4: command tx timeout [ 1091.194010][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.396896][ T1341] bridge_slave_0: left allmulticast mode [ 1091.402859][ T1341] bridge_slave_0: left promiscuous mode [ 1091.411216][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.587007][ T1341] team0: Port device ip6gretap1 removed [ 1091.887167][T13650] Device name cannot be null; rc = [-22] [ 1092.232439][ T5958] usb 7-1: USB disconnect, device number 3 [ 1093.263431][ T5860] Bluetooth: hci4: command tx timeout [ 1093.286420][ T5958] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1093.462414][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.475153][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.495590][ T1341] bond0 (unregistering): (slave team0): Releasing backup interface [ 1093.511746][ T5958] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1093.524180][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.534598][ T1341] bond0 (unregistering): Released all slaves [ 1093.554060][ T5958] usb 7-1: config 0 descriptor?? [ 1093.583102][ T1341] bond1 (unregistering): Released all slaves [ 1093.635267][ T1341] bond2 (unregistering): Released all slaves [ 1094.713539][ T5958] ath6kl: Failed to submit usb control message: -110 [ 1094.730867][ T5958] ath6kl: unable to send the bmi data to the device: -110 [ 1094.867321][ T5958] ath6kl: Unable to send get target info: -110 [ 1094.924986][ T5958] ath6kl: Failed to init ath6kl core: -110 [ 1094.950225][ T5958] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1094.966630][T13623] chnl_net:caif_netlink_parms(): no params data found [ 1095.342737][ T5860] Bluetooth: hci4: command tx timeout [ 1095.673176][ T5961] usb 7-1: USB disconnect, device number 4 [ 1096.899577][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.919638][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.927424][T13623] bridge_slave_0: entered allmulticast mode [ 1096.977533][T13623] bridge_slave_0: entered promiscuous mode [ 1097.177638][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.199683][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.447350][ T5860] Bluetooth: hci4: command tx timeout [ 1097.489985][T13623] bridge_slave_1: entered allmulticast mode [ 1097.536379][T13623] bridge_slave_1: entered promiscuous mode [ 1097.853839][T13623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.901887][T13623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.964893][ T1341] hsr_slave_0: left promiscuous mode [ 1097.989832][ T1341] hsr_slave_1: left promiscuous mode [ 1098.001150][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.020186][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.044659][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.062465][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.112622][ T1341] veth1_macvtap: left promiscuous mode [ 1098.139226][ T1341] veth0_macvtap: left promiscuous mode [ 1098.144991][ T1341] veth1_vlan: left promiscuous mode [ 1098.157467][ T1341] veth0_vlan: left promiscuous mode [ 1098.169448][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1098.338454][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 1098.360657][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1098.390214][ T44] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1098.401704][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.419199][ T44] usb 7-1: Product: syz [ 1098.443891][ T44] usb 7-1: Manufacturer: syz [ 1098.458949][ T44] usb 7-1: SerialNumber: syz [ 1098.476824][ T44] usb 7-1: config 0 descriptor?? [ 1098.514984][ T1341] team0 (unregistering): Port device veth3 removed [ 1099.169404][ T44] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 1099.178360][ T44] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1101.313919][T13724] syz.3.2036 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1101.450533][ T5941] usb 7-1: USB disconnect, device number 5 [ 1103.590940][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 1103.708163][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 1105.047373][ T155] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.285397][T13623] team0: Port device team_slave_0 added [ 1105.316306][T13623] team0: Port device team_slave_1 added [ 1105.537134][T13756] netlink: 'syz.5.2041': attribute type 11 has an invalid length. [ 1105.545174][T13756] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2041'. [ 1106.067587][T13623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.127059][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.353254][T13623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.366591][T13623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.373753][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.400217][T13623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.122313][T13776] Device name cannot be null; rc = [-22] [ 1108.173473][T13623] hsr_slave_0: entered promiscuous mode [ 1108.367253][T13623] hsr_slave_1: entered promiscuous mode [ 1108.759130][T13623] debugfs: 'hsr0' already exists in 'hsr' [ 1108.764932][T13623] Cannot create hsr debugfs directory [ 1111.060886][T13794] Device name cannot be null; rc = [-22] [ 1112.510978][T13802] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1112.956340][T13802] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1113.070008][T13623] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1113.333224][T13810] input: syz1 as /devices/virtual/input/input16 [ 1113.371942][T13810] vivid-000: disconnect [ 1113.794085][T13805] vivid-000: reconnect [ 1115.545494][T13623] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1115.640230][T13623] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1117.643548][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.644192][T13623] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1117.656999][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.510014][T13623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.409433][T13623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.461942][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.469202][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.548827][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.556064][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.307990][T13866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.531776][T13623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.399183][T13882] Device name cannot be null; rc = [-22] [ 1124.059474][T13890] netlink: 'syz.5.2073': attribute type 11 has an invalid length. [ 1124.067392][T13890] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2073'. [ 1124.121222][T13623] veth0_vlan: entered promiscuous mode [ 1124.226341][T13623] veth1_vlan: entered promiscuous mode [ 1124.253876][T13623] veth0_macvtap: entered promiscuous mode [ 1124.272767][T13623] veth1_macvtap: entered promiscuous mode [ 1124.681144][T13623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.781889][T13623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.879538][ T1341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.909794][ T1341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.961102][T13903] binder: 13902:13903 ioctl c018620c 0 returned -14 [ 1124.976806][ T1341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.993822][ T1341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.176401][T13905] Device name cannot be null; rc = [-22] [ 1126.463317][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.499298][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.557329][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1126.697402][T13281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.742968][T13281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.753438][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1126.782805][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.850959][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.890276][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1126.930612][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.227394][ T44] usb 4-1: config 0 descriptor?? [ 1128.081622][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 1128.107687][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1128.128180][ T44] usb 4-1: USB disconnect, device number 14 [ 1128.415843][T13927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1128.427862][T13927] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1128.806638][T13934] can0: slcan on ptm0. [ 1129.095905][T13937] ubi: mtd0 is already attached to ubi31 [ 1129.663159][T13932] can0 (unregistered): slcan off ptm0. [ 1130.693168][T13948] Device name cannot be null; rc = [-22] [ 1135.185690][T13993] tmpfs: Unknown parameter 'grpquota 0 [ 1135.185690][T13993] ' [ 1135.195305][T13993] netlink: 'syz.3.2100': attribute type 11 has an invalid length. [ 1135.203593][T13993] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2100'. [ 1136.835845][T14020] Device name cannot be null; rc = [-22] [ 1138.182377][T14029] tmpfs: Unknown parameter 'grpquota 0 [ 1138.182377][T14029] ' [ 1138.191945][T14029] netlink: 'syz.3.2113': attribute type 11 has an invalid length. [ 1138.199892][T14029] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2113'. [ 1143.849951][T14075] Device name cannot be null; rc = [-22] [ 1145.347240][T14087] kernel profiling enabled (shift: 63) [ 1145.356214][T14087] profiling shift: 63 too large [ 1147.507938][T14099] Device name cannot be null; rc = [-22] [ 1148.214281][T14107] input: syz1 as /devices/virtual/input/input17 [ 1148.310220][T14108] vivid-000: disconnect [ 1148.621714][T14100] vivid-000: reconnect [ 1153.301132][T14132] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1153.331437][T14132] CIFS mount error: No usable UNC path provided in device string! [ 1153.331437][T14132] [ 1153.351247][T14132] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1154.302235][T14140] kernel profiling enabled (shift: 63) [ 1154.322157][T14140] profiling shift: 63 too large [ 1154.659621][T14148] can0: slcan on ptm0. [ 1154.713542][T14150] Device name cannot be null; rc = [-22] [ 1155.167547][T14145] can0 (unregistered): slcan off ptm0. [ 1155.186715][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2149'. [ 1155.906713][T14163] Device name cannot be null; rc = [-22] [ 1159.940959][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2161'. [ 1161.697513][T14201] nvme_fabrics: missing parameter 'transport=%s' [ 1161.711804][T14201] nvme_fabrics: missing parameter 'nqn=%s' [ 1161.933043][T14207] kernel profiling enabled (shift: 63) [ 1161.947343][T14207] profiling shift: 63 too large [ 1162.247705][ T5922] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1162.407554][ T5922] usb 8-1: Using ep0 maxpacket: 8 [ 1162.424089][ T5922] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1162.446123][ T5922] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1162.470055][ T5922] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1162.492766][ T5922] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.510665][ T5922] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1162.523010][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.738384][ T5922] usbtmc 8-1:16.0: bulk endpoints not found [ 1164.869086][T14231] Device name cannot be null; rc = [-22] [ 1165.584241][ T5961] usb 8-1: USB disconnect, device number 2 [ 1165.875789][T14234] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2170'. [ 1167.483512][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2173'. [ 1168.749212][T14247] nvme_fabrics: missing parameter 'transport=%s' [ 1168.982566][T14247] nvme_fabrics: missing parameter 'nqn=%s' [ 1169.668329][T14260] kernel profiling enabled (shift: 63) [ 1169.673829][T14260] profiling shift: 63 too large [ 1170.257289][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1170.587275][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1170.594700][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.617352][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.627557][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1170.647355][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.688360][ T44] usb 4-1: config 0 descriptor?? [ 1171.111274][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 1171.127349][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1171.167382][ T44] usb 4-1: USB disconnect, device number 15 [ 1171.194280][T14274] can0: slcan on ptm0. [ 1171.948885][T14272] can0 (unregistered): slcan off ptm0. [ 1172.260043][T14282] Device name cannot be null; rc = [-22] [ 1174.512376][T14293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1174.520091][T14293] IPv6: NLM_F_CREATE should be set when creating new route [ 1174.527456][T14293] IPv6: NLM_F_CREATE should be set when creating new route [ 1174.534683][T14293] IPv6: NLM_F_CREATE should be set when creating new route [ 1176.135925][T14308] macvlan7: entered promiscuous mode [ 1177.272696][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1177.592140][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.598774][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.369869][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1179.376888][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.549583][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.559806][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1179.569163][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.581950][ T44] usb 4-1: config 0 descriptor?? [ 1179.677029][T14327] Device name cannot be null; rc = [-22] [ 1180.229225][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 1180.238778][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1180.293462][ T44] usb 4-1: USB disconnect, device number 16 [ 1181.379237][T14334] CIFS mount error: No usable UNC path provided in device string! [ 1181.379237][T14334] [ 1181.520004][T14334] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1185.026976][T14366] overlayfs: failed to clone upperpath [ 1185.535675][T14371] can0: slcan on ptm0. [ 1186.005234][T14377] sctp: [Deprecated]: syz.3.2210 (pid 14377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1186.005234][T14377] Use struct sctp_sack_info instead [ 1186.199727][T14370] can0 (unregistered): slcan off ptm0. [ 1187.354733][T14388] CIFS mount error: No usable UNC path provided in device string! [ 1187.354733][T14388] [ 1187.365307][T14388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1189.174611][T14403] netlink: 'syz.6.2214': attribute type 10 has an invalid length. [ 1189.455234][T14403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.529045][T14403] bond0: (slave team0): Enslaving as an active interface with an up link [ 1189.864513][T14407] ================================================================== [ 1189.872628][T14407] BUG: KASAN: global-out-of-bounds in kernfs_root+0x132/0x230 [ 1189.880114][T14407] Read of size 8 at addr ffffffff8f669358 by task syz.3.2219/14407 [ 1189.888006][T14407] [ 1189.890355][T14407] CPU: 0 UID: 0 PID: 14407 Comm: syz.3.2219 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 1189.890375][T14407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1189.890389][T14407] Call Trace: [ 1189.890396][T14407] [ 1189.890404][T14407] dump_stack_lvl+0x189/0x250 [ 1189.890425][T14407] ? __kasan_check_byte+0x12/0x40 [ 1189.890450][T14407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1189.890477][T14407] ? lock_release+0x4b/0x3e0 [ 1189.890504][T14407] ? __virt_addr_valid+0x4a5/0x5c0 [ 1189.890525][T14407] print_report+0xca/0x230 [ 1189.890539][T14407] ? kernfs_root+0x132/0x230 [ 1189.890557][T14407] kasan_report+0x118/0x150 [ 1189.890585][T14407] ? kernfs_root+0x132/0x230 [ 1189.890605][T14407] ? kernfs_root+0x1c/0x230 [ 1189.890623][T14407] kernfs_root+0x132/0x230 [ 1189.890642][T14407] kernfs_remove_by_name_ns+0x2b/0x130 [ 1189.890666][T14407] bus_remove_driver+0x198/0x2f0 [ 1189.890684][T14407] comedi_device_detach+0x134/0x720 [ 1189.890708][T14407] comedi_unlocked_ioctl+0xbd2/0xfc0 [ 1189.890728][T14407] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1189.890756][T14407] ? __lock_acquire+0xab9/0xd20 [ 1189.890786][T14407] ? __fget_files+0x2a/0x420 [ 1189.890803][T14407] ? __fget_files+0x2a/0x420 [ 1189.890817][T14407] ? __fget_files+0x3a0/0x420 [ 1189.890832][T14407] ? __fget_files+0x2a/0x420 [ 1189.890848][T14407] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1189.890869][T14407] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1189.890886][T14407] __se_sys_ioctl+0xf9/0x170 [ 1189.890907][T14407] do_syscall_64+0xfa/0x3b0 [ 1189.890930][T14407] ? lockdep_hardirqs_on+0x9c/0x150 [ 1189.890951][T14407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.890966][T14407] ? clear_bhb_loop+0x60/0xb0 [ 1189.890983][T14407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.891002][T14407] RIP: 0033:0x7fc0e0b8e929 [ 1189.891020][T14407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.891034][T14407] RSP: 002b:00007fc0e19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.891051][T14407] RAX: ffffffffffffffda RBX: 00007fc0e0db5fa0 RCX: 00007fc0e0b8e929 [ 1189.891063][T14407] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1189.891073][T14407] RBP: 00007fc0e0c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1189.891082][T14407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.891091][T14407] R13: 0000000000000000 R14: 00007fc0e0db5fa0 R15: 00007ffe6a12b0b8 [ 1189.891108][T14407] [ 1189.891114][T14407] [ 1190.139882][T14407] The buggy address belongs to the variable: [ 1190.145858][T14407] initial_table+0x78/0xa0 [ 1190.150289][T14407] [ 1190.152618][T14407] The buggy address belongs to the physical page: [ 1190.159049][T14407] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf669 [ 1190.167738][T14407] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1190.175662][T14407] raw: 00fff00000002000 ffffea00003d9a48 ffffea00003d9a48 0000000000000000 [ 1190.184257][T14407] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1190.192861][T14407] page dumped because: kasan: bad access detected [ 1190.199292][T14407] page_owner info is not present (never set?) [ 1190.205360][T14407] [ 1190.207696][T14407] Memory state around the buggy address: [ 1190.213331][T14407] ffffffff8f669200: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1190.221400][T14407] ffffffff8f669280: 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 1190.229473][T14407] >ffffffff8f669300: 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 [ 1190.237536][T14407] ^ [ 1190.244477][T14407] ffffffff8f669380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1190.252542][T14407] ffffffff8f669400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1190.260603][T14407] ================================================================== [ 1190.546902][T14407] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1190.554165][T14407] CPU: 1 UID: 0 PID: 14407 Comm: syz.3.2219 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 1190.565735][T14407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1190.575837][T14407] Call Trace: [ 1190.579130][T14407] [ 1190.582087][T14407] dump_stack_lvl+0x99/0x250 [ 1190.586704][T14407] ? __asan_memcpy+0x40/0x70 [ 1190.591301][T14407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1190.596507][T14407] ? __pfx__printk+0x10/0x10 [ 1190.601146][T14407] vpanic+0x281/0x750 [ 1190.605133][T14407] ? preempt_schedule+0xae/0xc0 [ 1190.610002][T14407] ? __pfx_vpanic+0x10/0x10 [ 1190.614523][T14407] ? preempt_schedule_common+0x83/0xd0 [ 1190.620019][T14407] ? preempt_schedule+0xae/0xc0 [ 1190.624887][T14407] ? __pfx_preempt_schedule+0x10/0x10 [ 1190.630299][T14407] panic+0xb9/0xc0 [ 1190.634034][T14407] ? __pfx_panic+0x10/0x10 [ 1190.638466][T14407] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1190.644376][T14407] ? kernfs_root+0x132/0x230 [ 1190.648977][T14407] check_panic_on_warn+0x89/0xb0 [ 1190.653930][T14407] ? kernfs_root+0x132/0x230 [ 1190.658538][T14407] end_report+0x78/0x160 [ 1190.662803][T14407] kasan_report+0x129/0x150 [ 1190.667320][T14407] ? kernfs_root+0x132/0x230 [ 1190.671959][T14407] ? kernfs_root+0x1c/0x230 [ 1190.676473][T14407] kernfs_root+0x132/0x230 [ 1190.680898][T14407] kernfs_remove_by_name_ns+0x2b/0x130 [ 1190.686462][T14407] bus_remove_driver+0x198/0x2f0 [ 1190.691409][T14407] comedi_device_detach+0x134/0x720 [ 1190.696623][T14407] comedi_unlocked_ioctl+0xbd2/0xfc0 [ 1190.701917][T14407] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1190.707743][T14407] ? __lock_acquire+0xab9/0xd20 [ 1190.712614][T14407] ? __fget_files+0x2a/0x420 [ 1190.717215][T14407] ? __fget_files+0x2a/0x420 [ 1190.721810][T14407] ? __fget_files+0x3a0/0x420 [ 1190.726487][T14407] ? __fget_files+0x2a/0x420 [ 1190.731100][T14407] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1190.736075][T14407] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1190.741884][T14407] __se_sys_ioctl+0xf9/0x170 [ 1190.746488][T14407] do_syscall_64+0xfa/0x3b0 [ 1190.751001][T14407] ? lockdep_hardirqs_on+0x9c/0x150 [ 1190.756217][T14407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.762295][T14407] ? clear_bhb_loop+0x60/0xb0 [ 1190.766977][T14407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.772874][T14407] RIP: 0033:0x7fc0e0b8e929 [ 1190.777293][T14407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1190.796902][T14407] RSP: 002b:00007fc0e19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1190.805322][T14407] RAX: ffffffffffffffda RBX: 00007fc0e0db5fa0 RCX: 00007fc0e0b8e929 [ 1190.813304][T14407] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1190.821460][T14407] RBP: 00007fc0e0c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1190.829442][T14407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.837419][T14407] R13: 0000000000000000 R14: 00007fc0e0db5fa0 R15: 00007ffe6a12b0b8 [ 1190.845406][T14407] [ 1190.848833][T14407] Kernel Offset: disabled [ 1190.853172][T14407] Rebooting in 86400 seconds..