last executing test programs: 16m17.100350983s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x81}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000100)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0) 16m10.973019151s ago: executing program 3 (id=246): r0 = getpid() creat(&(0x7f00000002c0)='./file0\x00', 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r0}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 16m10.085381852s ago: executing program 3 (id=249): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 16m10.045063828s ago: executing program 5 (id=250): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043", 0x312}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16m9.234337509s ago: executing program 5 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 16m1.888090123s ago: executing program 5 (id=263): syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xf) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, &(0x7f0000000280)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 15m59.697573352s ago: executing program 5 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 15m58.578069087s ago: executing program 3 (id=269): pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000000)={0x0, 0x3234000, 0x10000, 0x2, 0xc, 0x7fff, 0x5}) 15m58.166218783s ago: executing program 3 (id=272): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) 15m57.209500141s ago: executing program 3 (id=275): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000100)=ANY=[]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20008044) 15m56.06164594s ago: executing program 5 (id=277): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x14, 0x52, 0x1, 0x70bd2a, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40800) 15m55.912538262s ago: executing program 5 (id=279): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x81}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000100)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0) 15m41.480996152s ago: executing program 32 (id=264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7", 0x12, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) 15m41.17939687s ago: executing program 33 (id=273): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, 0x0, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15m40.150903941s ago: executing program 34 (id=276): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) fchdir(0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000070000040000000000000000950000000000000039466cf0871cdfd27c7fbefb673e4fd809dc31c9d1f725f6ec43f27510fbf5955184bdc02ecacfa9e555b5d886b6121d9e7355e8de7baad56390d1a1957e"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 15m39.912984434s ago: executing program 35 (id=275): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000100)=ANY=[]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20008044) 15m39.630691407s ago: executing program 36 (id=279): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x81}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000100)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0) 9m27.65637138s ago: executing program 9 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendfile(r3, r2, 0x0, 0x17) 9m26.600865813s ago: executing program 9 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 9m25.274584247s ago: executing program 9 (id=1264): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x134, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_ACT={0x104, 0x1, [@m_ctinfo={0x100, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0xd1, 0x6, "a0773f2bb49483a66924317d3b4b588c7981f0c577e78b34b033d53c664d7d5adcd0a977eb1d127ae75aca24bbcec1a2f6d11f7507733a6410d1fb177adcbb9264d3675c55fb051448096a40717113285248b37b3e771781660545032fd181c60c30c760d2ab0d4ae183aef4ff4dbaf779ff7aed43a23c6a5146637cb0966b37936580f1c2459e480c7cd54f1accdb5905e0fbce30cc11d07c4dc542965f788bcb24b46bd76645a41fc53b80f074c17aec055ab44ccebe8c1425fe66385998ed7963651982992e2b2bcaed4288"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x134}}, 0x0) 9m24.440501876s ago: executing program 9 (id=1266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x1a0, 0x10, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0xaf, 0x3, {{'deflate\x00'}, 0x338, "b58df0a08e0496ffabdcb03b0da890ed6b3500005fb8503ad50bdc3ec9016754c6f594629a01a5e9acc0d913d908a4df2a9988195189b9832439b164dbbc7755e975aa04209111bbb1c5b310bb6c89d5b73116d45ee08f35e681410fee01fa204207c04b7634d2"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000240)={0x0, 0x0}) flistxattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9m22.970124343s ago: executing program 9 (id=1273): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 9m21.957837107s ago: executing program 9 (id=1276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYRESDEC], 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000dc0)=""/210, 0xd2}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/204, 0xcc}], 0x8, 0x1, 0x7ffffff0) socket$inet_smc(0x2b, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000ac0)={{0x3, 0xffffffff, 0x6f, 0x0, 0x8000, 0x1}, 0x326, [0x5, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x81, 0x3, 0xf, 0xc, 0x9, 0x1ff, 0xf, 0x3, 0xffffffff, 0xe9, 0x8, 0x3ade1a47, 0xb38c, 0x3, 0x81, 0x0, 0x8001, 0x5, 0x6ab0, 0x4, 0x3e74, 0x415, 0x7f, 0xffff, 0x4, 0x1, 0x2, 0x0, 0x5, 0x8, 0xfffffffe, 0xfffffffe, 0x6, 0x840, 0x2, 0x5, 0x2e43, 0xffffffff, 0x8, 0x9, 0x6, 0x3, 0x7fff, 0x5, 0x81, 0x9, 0x9, 0x8, 0x5, 0xc82, 0x92d, 0x7ff, 0x9, 0x82f, 0x5, 0x2, 0x5, 0x2b, 0x4, 0x6, 0x4, 0xec, 0x9242, 0xfffffffb, 0x9, 0x8000, 0x3, 0x4, 0x4, 0x5, 0xfff, 0xb, 0x2, 0x401, 0x9, 0x6, 0x0, 0x6, 0x8001, 0x7, 0x3, 0x6, 0x34cb, 0x80000001, 0x1, 0x3, 0x6, 0x2, 0xa, 0x3, 0x104, 0x60000, 0x0, 0x400c, 0x5, 0x3, 0x4, 0x5d6, 0x334, 0x1dcd, 0x2370, 0x7f, 0xf0, 0x3, 0x3, 0x1, 0x7fffffff, 0x7ff, 0x3, 0x1, 0x8, 0x81, 0x9, 0x1, 0x1, 0x401, 0x2, 0x7, 0x0, 0x80000000, 0x9, 0x4, 0x3, 0x1ff, 0x1, 0xb, 0x34f, 0xfffffffd, 0x6, 0x1000, 0x95, 0x6, 0xec, 0xc100000, 0x1, 0x6, 0xffffffff, 0x169e, 0xea68, 0xa5f, 0x80000001, 0x9, 0x8, 0x40, 0xcdd, 0x101, 0xb, 0x10, 0x0, 0x4, 0x8, 0x6, 0x1, 0x2, 0x3, 0xd7, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x7, 0x7fffffff, 0x4, 0x1, 0x3ff, 0xf, 0x840, 0x5, 0x4, 0x7, 0x9, 0x4, 0x81, 0xd379, 0xe00, 0x3, 0xf591, 0x0, 0x7f, 0xffffffff, 0x7ffffffd, 0xdf, 0x0, 0xffff, 0x6, 0xffffffff, 0x1ce5, 0x5, 0xfffffff1, 0xfffffff9, 0x2, 0x10000, 0x9, 0x100, 0x35, 0x4, 0xff000000, 0x101, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x6, 0x1, 0x5, 0xe, 0x9, 0x9, 0x66, 0x816, 0x5, 0x5, 0x4, 0x6, 0x15, 0x4, 0x40, 0x2, 0x40, 0x2, 0x6, 0xfffff0e8, 0x3, 0x9f0d, 0x3, 0xffffffff, 0x1, 0x1, 0x3, 0x31e, 0xfa0, 0x5b88, 0x7, 0x6, 0x4, 0x438, 0x6b4, 0x0, 0x2f5, 0x6ed4, 0x0, 0x385b0000, 0x3, 0x4, 0x3, 0x9, 0x0, 0x9, 0x7, 0x8, 0xffffffd1, 0x4, 0x2, 0x7, 0x47b0, 0xc6, 0xb7f, 0x8, 0xdc, 0xb, 0x8001, 0x8, 0x7f, 0xfffffffa, 0xffffffff, 0x6, 0x75e5, 0xf, 0x5, 0x2, 0x1, 0x7, 0x8001, 0x400, 0x81, 0x2, 0xb0, 0x80, 0x501, 0x3, 0x800, 0x8, 0x5, 0x9, 0xffffffff, 0x4e542f21, 0x3, 0x6, 0x0, 0xfffffffb, 0x5, 0x4, 0x5, 0x8, 0x97, 0x0, 0x7, 0x47c, 0x42b, 0x0, 0xcd0, 0x3, 0x8bf, 0x8, 0x8a38, 0x7ff, 0x9, 0x3, 0x0, 0x5, 0x81, 0x326, 0x2, 0xe4f, 0xa, 0x6, 0x9, 0x10000, 0x5, 0x1ff, 0x9, 0x8, 0x2, 0x1, 0xcd, 0xd515, 0x49ed, 0x10, 0x5, 0x3, 0x7f, 0x5, 0x80000000, 0x80000000, 0x3, 0x9, 0x3, 0x39, 0xfbf, 0x1000, 0x95c, 0x6, 0x5, 0x5b5, 0xfffffffe, 0x3, 0x4, 0xfffffffa, 0x1, 0x503, 0x1, 0x8, 0xc9, 0x7, 0xffffffff, 0x2, 0x80000008, 0x4, 0xcc5, 0xfffffff4, 0x6, 0x5, 0x0, 0xe, 0x80000001, 0xffffffff, 0x4, 0x5, 0x1, 0x5, 0x0, 0xd8, 0x8, 0x1, 0x2, 0x80000001, 0x5, 0x0, 0x8, 0x2203c5f4, 0x2a, 0xfffffffc, 0x80000000, 0x4fa1, 0x400, 0x6, 0x81, 0x6, 0x80000000, 0x8, 0x300, 0x0, 0x9, 0x6, 0x5, 0x5, 0x9, 0x8, 0x7, 0x1, 0x6, 0x64, 0x77, 0x7, 0x1ff, 0x8, 0x8, 0x5, 0x2, 0xa0000000, 0x7, 0xfffffff8, 0xba71, 0x7, 0xfffffffc, 0x1, 0x200, 0x5, 0x10001, 0x5, 0x1, 0x9, 0xfffffff1, 0x6, 0x1000, 0x1, 0x100000, 0x5, 0x3, 0xffff, 0xfd, 0xda64, 0x0, 0x4, 0xd, 0xffffffbe, 0x10000, 0x6, 0x5, 0x0, 0x8, 0x2, 0x7f, 0x8, 0x80, 0x0, 0x5, 0xc171, 0x971, 0x1ff, 0x7, 0x3, 0x2, 0x349f, 0x0, 0x0, 0x4, 0x9, 0xe47, 0x3047, 0x1, 0x7, 0x81, 0x7f, 0x3, 0x2, 0x6, 0x5, 0xffff4902, 0x4, 0xc, 0x9, 0x9, 0xfff, 0x28, 0x1, 0x7f, 0x8, 0x3, 0x3a, 0x4, 0xfe4c, 0x8001, 0x4, 0x4, 0x0, 0x5, 0xe37e, 0x6, 0x10000, 0x2, 0x400, 0x6, 0x2, 0x9, 0x3, 0xf, 0x7fffffff, 0xa9, 0x1, 0x5, 0xf28c, 0x3, 0x35abdfd5, 0xc0d8, 0x7eb, 0x7ff, 0x1, 0x4, 0x7, 0x3fff80, 0x10, 0x8, 0x401, 0x4, 0x7, 0x2, 0xd, 0x0, 0x3, 0xa2c5, 0x3, 0x0, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x1f3, 0x5, 0xb1e, 0x101, 0x200, 0x2, 0x3, 0x1e5, 0x9, 0xe1, 0x3, 0x8, 0x5, 0x8, 0x3, 0x8001, 0x7, 0x401, 0x2, 0x9, 0x1, 0x7f, 0x0, 0x8, 0x9, 0x401, 0x8, 0xfd4, 0x2, 0x2, 0x0, 0x8, 0xfbcd, 0xb, 0x5, 0x10000, 0x40, 0x7, 0x4, 0xe7d, 0x1888dd9e, 0x7, 0xbb30, 0x6, 0x200, 0xe3, 0x3, 0x1c000000, 0x81, 0x6, 0x1, 0xd6, 0x4, 0x9, 0x5, 0x9, 0x1ff, 0x7fffffff, 0x9, 0xf, 0x10001, 0x1, 0x4, 0x6, 0x330f, 0x5, 0x3, 0xa79, 0xf, 0x200000, 0x8, 0x6, 0x4, 0xafa, 0x5, 0xb03, 0x568, 0xffffffff, 0x4, 0x6, 0xbf, 0x4, 0x0, 0x7376, 0x0, 0x9, 0x3, 0x8f0, 0x8, 0x1, 0x2, 0x6, 0x2, 0xb76d, 0x1, 0xfffffff3, 0xfffffff7, 0x3, 0x0, 0x40, 0x9, 0x7f, 0x76, 0x6, 0x0, 0x5, 0x7, 0xa1, 0x0, 0x1, 0x4, 0x8, 0x5, 0x3, 0x4, 0x8000, 0x5, 0x11, 0x1ffc00, 0x21, 0x8, 0x8, 0x4, 0x5, 0x2, 0x5fdb, 0x7, 0x7, 0x7, 0x10000, 0x1, 0x6, 0x5, 0x1, 0x1, 0xfffffff8, 0xe39, 0x5, 0x100, 0xfff, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0x7, 0x23, 0x3, 0x9, 0x5, 0x4, 0x81, 0xa1, 0xffffffff, 0x7, 0x6747, 0xc87, 0x4, 0x3, 0x7, 0x4, 0xfff, 0x9, 0x0, 0xffff0001, 0x1ff, 0xffff, 0x5, 0x3, 0x4, 0x9, 0xb, 0x852d, 0x1, 0x6, 0x8, 0x4, 0x4, 0x0, 0xfffffffd, 0x2, 0x7, 0x3, 0x9, 0x1, 0x11d0, 0x8, 0x7f, 0x800, 0x80000000, 0x8, 0x0, 0x8, 0x3, 0x3, 0xf, 0x4a58, 0xa3, 0x5000000, 0x6d, 0x5, 0x1, 0x9, 0x2b1, 0x6, 0x80000000, 0x5, 0x0, 0x9, 0x6, 0xffffffff, 0x9, 0x9, 0x7477, 0x7, 0x3e, 0x56ce, 0x3ff, 0x1, 0xe87d, 0x400, 0xf, 0x9, 0x0, 0x37f7, 0x2, 0x3, 0x3, 0x2, 0xf, 0x10000003, 0x5, 0x800, 0x7, 0x6, 0x8, 0xc, 0x8, 0xfcd37f1f, 0x2, 0x2, 0x6df98ed8, 0x3, 0x1, 0xb, 0x8, 0x8000, 0x10, 0x3, 0x3ff, 0x1, 0x1e87bca3, 0xff, 0x0, 0x7, 0xfb, 0x7, 0x1ed, 0xc, 0x6, 0x75eb, 0x6, 0x0, 0x3, 0x6, 0xa78d, 0xfffffffc, 0xb, 0x6, 0x3, 0xa, 0x6, 0x1c, 0x7, 0x4, 0x5, 0x4, 0x8001, 0x4, 0x800, 0x1, 0x1ff, 0x2, 0x1000, 0x0, 0x7, 0xe, 0x3, 0x1, 0x694, 0x40, 0x400, 0x401, 0x101, 0xd73, 0xc8, 0x400, 0x3ff, 0x5, 0x6, 0xfff, 0xca, 0x4, 0xffffffff, 0x10, 0x1, 0xd09, 0x1, 0x1, 0x0, 0x49e9, 0x6, 0x3d2, 0x8, 0x400, 0x3, 0x3, 0xb, 0xffff, 0xca19, 0x2, 0x5, 0x78, 0x2, 0x7, 0x10000, 0xfffffffe, 0x1000, 0x8, 0x41, 0x8, 0xa358, 0x9, 0x8, 0x800, 0x1, 0x1ff, 0x5, 0x3, 0x100, 0x3, 0xf3, 0x7ff, 0x9, 0xfffffff8, 0x92c, 0xe, 0xc, 0xd, 0x10, 0x0, 0x200, 0xfff, 0xff, 0x0, 0xf8, 0xe2a, 0x68f8, 0x2, 0x0, 0x1ff, 0x6, 0x1, 0x3d41, 0x3aa, 0x9, 0x3, 0x0, 0x6, 0x7, 0x3, 0x7fffffff, 0x8, 0x6, 0x0, 0xf, 0x9fda, 0x18000000, 0x1, 0x1, 0x7, 0xc5c3, 0x9, 0xbfc, 0x4c, 0x3ff, 0x8, 0x21, 0x4, 0x101, 0x2, 0xffffff01, 0x8, 0x5, 0x8, 0x1, 0x0, 0x1000, 0x9, 0xc81, 0x800, 0x2, 0x7, 0x4, 0x6, 0xffffffd0, 0xf, 0x9, 0x80, 0xae, 0x2, 0x3, 0x80, 0x3, 0x2, 0x8, 0xb3, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x6, 0xa, 0x80, 0x82, 0x7, 0x40, 0xfff, 0x3, 0x63, 0x7, 0x6, 0x0, 0xffffffff, 0x1, 0x8, 0x5, 0x0, 0x3, 0xb00f, 0x9, 0x3, 0x8, 0x4, 0x3, 0xd, 0x80000000, 0x2, 0x1, 0xffff9c86, 0x10, 0xb, 0x6, 0x7, 0x8, 0x7, 0xfffffff8, 0x100, 0x9, 0x80, 0x1, 0x7ff, 0x3a0b, 0x80000001, 0x5, 0x60, 0x10001, 0x0, 0x10001, 0x9, 0x5, 0x1, 0x1ff, 0x3, 0x691, 0x10000, 0x2, 0x1c61ff54, 0x401, 0x3, 0x74c4, 0x5, 0x8, 0x4, 0x1bec8000]}) 9m6.757359595s ago: executing program 37 (id=1276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYRESDEC], 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000dc0)=""/210, 0xd2}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/204, 0xcc}], 0x8, 0x1, 0x7ffffff0) socket$inet_smc(0x2b, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000ac0)={{0x3, 0xffffffff, 0x6f, 0x0, 0x8000, 0x1}, 0x326, [0x5, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x81, 0x3, 0xf, 0xc, 0x9, 0x1ff, 0xf, 0x3, 0xffffffff, 0xe9, 0x8, 0x3ade1a47, 0xb38c, 0x3, 0x81, 0x0, 0x8001, 0x5, 0x6ab0, 0x4, 0x3e74, 0x415, 0x7f, 0xffff, 0x4, 0x1, 0x2, 0x0, 0x5, 0x8, 0xfffffffe, 0xfffffffe, 0x6, 0x840, 0x2, 0x5, 0x2e43, 0xffffffff, 0x8, 0x9, 0x6, 0x3, 0x7fff, 0x5, 0x81, 0x9, 0x9, 0x8, 0x5, 0xc82, 0x92d, 0x7ff, 0x9, 0x82f, 0x5, 0x2, 0x5, 0x2b, 0x4, 0x6, 0x4, 0xec, 0x9242, 0xfffffffb, 0x9, 0x8000, 0x3, 0x4, 0x4, 0x5, 0xfff, 0xb, 0x2, 0x401, 0x9, 0x6, 0x0, 0x6, 0x8001, 0x7, 0x3, 0x6, 0x34cb, 0x80000001, 0x1, 0x3, 0x6, 0x2, 0xa, 0x3, 0x104, 0x60000, 0x0, 0x400c, 0x5, 0x3, 0x4, 0x5d6, 0x334, 0x1dcd, 0x2370, 0x7f, 0xf0, 0x3, 0x3, 0x1, 0x7fffffff, 0x7ff, 0x3, 0x1, 0x8, 0x81, 0x9, 0x1, 0x1, 0x401, 0x2, 0x7, 0x0, 0x80000000, 0x9, 0x4, 0x3, 0x1ff, 0x1, 0xb, 0x34f, 0xfffffffd, 0x6, 0x1000, 0x95, 0x6, 0xec, 0xc100000, 0x1, 0x6, 0xffffffff, 0x169e, 0xea68, 0xa5f, 0x80000001, 0x9, 0x8, 0x40, 0xcdd, 0x101, 0xb, 0x10, 0x0, 0x4, 0x8, 0x6, 0x1, 0x2, 0x3, 0xd7, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x7, 0x7fffffff, 0x4, 0x1, 0x3ff, 0xf, 0x840, 0x5, 0x4, 0x7, 0x9, 0x4, 0x81, 0xd379, 0xe00, 0x3, 0xf591, 0x0, 0x7f, 0xffffffff, 0x7ffffffd, 0xdf, 0x0, 0xffff, 0x6, 0xffffffff, 0x1ce5, 0x5, 0xfffffff1, 0xfffffff9, 0x2, 0x10000, 0x9, 0x100, 0x35, 0x4, 0xff000000, 0x101, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x6, 0x1, 0x5, 0xe, 0x9, 0x9, 0x66, 0x816, 0x5, 0x5, 0x4, 0x6, 0x15, 0x4, 0x40, 0x2, 0x40, 0x2, 0x6, 0xfffff0e8, 0x3, 0x9f0d, 0x3, 0xffffffff, 0x1, 0x1, 0x3, 0x31e, 0xfa0, 0x5b88, 0x7, 0x6, 0x4, 0x438, 0x6b4, 0x0, 0x2f5, 0x6ed4, 0x0, 0x385b0000, 0x3, 0x4, 0x3, 0x9, 0x0, 0x9, 0x7, 0x8, 0xffffffd1, 0x4, 0x2, 0x7, 0x47b0, 0xc6, 0xb7f, 0x8, 0xdc, 0xb, 0x8001, 0x8, 0x7f, 0xfffffffa, 0xffffffff, 0x6, 0x75e5, 0xf, 0x5, 0x2, 0x1, 0x7, 0x8001, 0x400, 0x81, 0x2, 0xb0, 0x80, 0x501, 0x3, 0x800, 0x8, 0x5, 0x9, 0xffffffff, 0x4e542f21, 0x3, 0x6, 0x0, 0xfffffffb, 0x5, 0x4, 0x5, 0x8, 0x97, 0x0, 0x7, 0x47c, 0x42b, 0x0, 0xcd0, 0x3, 0x8bf, 0x8, 0x8a38, 0x7ff, 0x9, 0x3, 0x0, 0x5, 0x81, 0x326, 0x2, 0xe4f, 0xa, 0x6, 0x9, 0x10000, 0x5, 0x1ff, 0x9, 0x8, 0x2, 0x1, 0xcd, 0xd515, 0x49ed, 0x10, 0x5, 0x3, 0x7f, 0x5, 0x80000000, 0x80000000, 0x3, 0x9, 0x3, 0x39, 0xfbf, 0x1000, 0x95c, 0x6, 0x5, 0x5b5, 0xfffffffe, 0x3, 0x4, 0xfffffffa, 0x1, 0x503, 0x1, 0x8, 0xc9, 0x7, 0xffffffff, 0x2, 0x80000008, 0x4, 0xcc5, 0xfffffff4, 0x6, 0x5, 0x0, 0xe, 0x80000001, 0xffffffff, 0x4, 0x5, 0x1, 0x5, 0x0, 0xd8, 0x8, 0x1, 0x2, 0x80000001, 0x5, 0x0, 0x8, 0x2203c5f4, 0x2a, 0xfffffffc, 0x80000000, 0x4fa1, 0x400, 0x6, 0x81, 0x6, 0x80000000, 0x8, 0x300, 0x0, 0x9, 0x6, 0x5, 0x5, 0x9, 0x8, 0x7, 0x1, 0x6, 0x64, 0x77, 0x7, 0x1ff, 0x8, 0x8, 0x5, 0x2, 0xa0000000, 0x7, 0xfffffff8, 0xba71, 0x7, 0xfffffffc, 0x1, 0x200, 0x5, 0x10001, 0x5, 0x1, 0x9, 0xfffffff1, 0x6, 0x1000, 0x1, 0x100000, 0x5, 0x3, 0xffff, 0xfd, 0xda64, 0x0, 0x4, 0xd, 0xffffffbe, 0x10000, 0x6, 0x5, 0x0, 0x8, 0x2, 0x7f, 0x8, 0x80, 0x0, 0x5, 0xc171, 0x971, 0x1ff, 0x7, 0x3, 0x2, 0x349f, 0x0, 0x0, 0x4, 0x9, 0xe47, 0x3047, 0x1, 0x7, 0x81, 0x7f, 0x3, 0x2, 0x6, 0x5, 0xffff4902, 0x4, 0xc, 0x9, 0x9, 0xfff, 0x28, 0x1, 0x7f, 0x8, 0x3, 0x3a, 0x4, 0xfe4c, 0x8001, 0x4, 0x4, 0x0, 0x5, 0xe37e, 0x6, 0x10000, 0x2, 0x400, 0x6, 0x2, 0x9, 0x3, 0xf, 0x7fffffff, 0xa9, 0x1, 0x5, 0xf28c, 0x3, 0x35abdfd5, 0xc0d8, 0x7eb, 0x7ff, 0x1, 0x4, 0x7, 0x3fff80, 0x10, 0x8, 0x401, 0x4, 0x7, 0x2, 0xd, 0x0, 0x3, 0xa2c5, 0x3, 0x0, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x1f3, 0x5, 0xb1e, 0x101, 0x200, 0x2, 0x3, 0x1e5, 0x9, 0xe1, 0x3, 0x8, 0x5, 0x8, 0x3, 0x8001, 0x7, 0x401, 0x2, 0x9, 0x1, 0x7f, 0x0, 0x8, 0x9, 0x401, 0x8, 0xfd4, 0x2, 0x2, 0x0, 0x8, 0xfbcd, 0xb, 0x5, 0x10000, 0x40, 0x7, 0x4, 0xe7d, 0x1888dd9e, 0x7, 0xbb30, 0x6, 0x200, 0xe3, 0x3, 0x1c000000, 0x81, 0x6, 0x1, 0xd6, 0x4, 0x9, 0x5, 0x9, 0x1ff, 0x7fffffff, 0x9, 0xf, 0x10001, 0x1, 0x4, 0x6, 0x330f, 0x5, 0x3, 0xa79, 0xf, 0x200000, 0x8, 0x6, 0x4, 0xafa, 0x5, 0xb03, 0x568, 0xffffffff, 0x4, 0x6, 0xbf, 0x4, 0x0, 0x7376, 0x0, 0x9, 0x3, 0x8f0, 0x8, 0x1, 0x2, 0x6, 0x2, 0xb76d, 0x1, 0xfffffff3, 0xfffffff7, 0x3, 0x0, 0x40, 0x9, 0x7f, 0x76, 0x6, 0x0, 0x5, 0x7, 0xa1, 0x0, 0x1, 0x4, 0x8, 0x5, 0x3, 0x4, 0x8000, 0x5, 0x11, 0x1ffc00, 0x21, 0x8, 0x8, 0x4, 0x5, 0x2, 0x5fdb, 0x7, 0x7, 0x7, 0x10000, 0x1, 0x6, 0x5, 0x1, 0x1, 0xfffffff8, 0xe39, 0x5, 0x100, 0xfff, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0x7, 0x23, 0x3, 0x9, 0x5, 0x4, 0x81, 0xa1, 0xffffffff, 0x7, 0x6747, 0xc87, 0x4, 0x3, 0x7, 0x4, 0xfff, 0x9, 0x0, 0xffff0001, 0x1ff, 0xffff, 0x5, 0x3, 0x4, 0x9, 0xb, 0x852d, 0x1, 0x6, 0x8, 0x4, 0x4, 0x0, 0xfffffffd, 0x2, 0x7, 0x3, 0x9, 0x1, 0x11d0, 0x8, 0x7f, 0x800, 0x80000000, 0x8, 0x0, 0x8, 0x3, 0x3, 0xf, 0x4a58, 0xa3, 0x5000000, 0x6d, 0x5, 0x1, 0x9, 0x2b1, 0x6, 0x80000000, 0x5, 0x0, 0x9, 0x6, 0xffffffff, 0x9, 0x9, 0x7477, 0x7, 0x3e, 0x56ce, 0x3ff, 0x1, 0xe87d, 0x400, 0xf, 0x9, 0x0, 0x37f7, 0x2, 0x3, 0x3, 0x2, 0xf, 0x10000003, 0x5, 0x800, 0x7, 0x6, 0x8, 0xc, 0x8, 0xfcd37f1f, 0x2, 0x2, 0x6df98ed8, 0x3, 0x1, 0xb, 0x8, 0x8000, 0x10, 0x3, 0x3ff, 0x1, 0x1e87bca3, 0xff, 0x0, 0x7, 0xfb, 0x7, 0x1ed, 0xc, 0x6, 0x75eb, 0x6, 0x0, 0x3, 0x6, 0xa78d, 0xfffffffc, 0xb, 0x6, 0x3, 0xa, 0x6, 0x1c, 0x7, 0x4, 0x5, 0x4, 0x8001, 0x4, 0x800, 0x1, 0x1ff, 0x2, 0x1000, 0x0, 0x7, 0xe, 0x3, 0x1, 0x694, 0x40, 0x400, 0x401, 0x101, 0xd73, 0xc8, 0x400, 0x3ff, 0x5, 0x6, 0xfff, 0xca, 0x4, 0xffffffff, 0x10, 0x1, 0xd09, 0x1, 0x1, 0x0, 0x49e9, 0x6, 0x3d2, 0x8, 0x400, 0x3, 0x3, 0xb, 0xffff, 0xca19, 0x2, 0x5, 0x78, 0x2, 0x7, 0x10000, 0xfffffffe, 0x1000, 0x8, 0x41, 0x8, 0xa358, 0x9, 0x8, 0x800, 0x1, 0x1ff, 0x5, 0x3, 0x100, 0x3, 0xf3, 0x7ff, 0x9, 0xfffffff8, 0x92c, 0xe, 0xc, 0xd, 0x10, 0x0, 0x200, 0xfff, 0xff, 0x0, 0xf8, 0xe2a, 0x68f8, 0x2, 0x0, 0x1ff, 0x6, 0x1, 0x3d41, 0x3aa, 0x9, 0x3, 0x0, 0x6, 0x7, 0x3, 0x7fffffff, 0x8, 0x6, 0x0, 0xf, 0x9fda, 0x18000000, 0x1, 0x1, 0x7, 0xc5c3, 0x9, 0xbfc, 0x4c, 0x3ff, 0x8, 0x21, 0x4, 0x101, 0x2, 0xffffff01, 0x8, 0x5, 0x8, 0x1, 0x0, 0x1000, 0x9, 0xc81, 0x800, 0x2, 0x7, 0x4, 0x6, 0xffffffd0, 0xf, 0x9, 0x80, 0xae, 0x2, 0x3, 0x80, 0x3, 0x2, 0x8, 0xb3, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x6, 0xa, 0x80, 0x82, 0x7, 0x40, 0xfff, 0x3, 0x63, 0x7, 0x6, 0x0, 0xffffffff, 0x1, 0x8, 0x5, 0x0, 0x3, 0xb00f, 0x9, 0x3, 0x8, 0x4, 0x3, 0xd, 0x80000000, 0x2, 0x1, 0xffff9c86, 0x10, 0xb, 0x6, 0x7, 0x8, 0x7, 0xfffffff8, 0x100, 0x9, 0x80, 0x1, 0x7ff, 0x3a0b, 0x80000001, 0x5, 0x60, 0x10001, 0x0, 0x10001, 0x9, 0x5, 0x1, 0x1ff, 0x3, 0x691, 0x10000, 0x2, 0x1c61ff54, 0x401, 0x3, 0x74c4, 0x5, 0x8, 0x4, 0x1bec8000]}) 4m43.388979454s ago: executing program 6 (id=2079): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 4m43.146088701s ago: executing program 6 (id=2081): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) chroot(&(0x7f0000000340)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 4m42.788858335s ago: executing program 6 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 4m40.694142061s ago: executing program 6 (id=2086): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f00000ab000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 4m35.624521658s ago: executing program 6 (id=2102): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, 0x0) syz_usb_connect$uac1(0x0, 0xd4, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902c200030107300f0904000000010100000a240101000f0201020a240806520e049e545e0f24060178040400010007000700090904010000010200000904010101010200000c24020100010800ed2205bf1224e4020500050002e856cc64903e16e4e1072401010b0000072401e148011011240201ff030006f29e78dd45fcc954c90d24020205000100074e12c39309050109080001080c0725018309ff0709040200000102000009040201010102000009058209400003000f50250183bc0180"], &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x6, 0x5, 0x8, 0x8}, 0x62, &(0x7f0000000580)={0x5, 0xf, 0x62, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x9, 0x9, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7fffeb1, 0x0, 0x101, [0xf, 0xf, 0xff00ff]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xc5, 0x6, 0x6, 0xf000, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "26359a47089de8754b6fe94d6c79df9a"}]}, 0x3, [{0xf8, &(0x7f00000008c0)=@string={0xf8, 0x3, "bf2249cf590df393504ca0e83773d4d2046990e460f3f545dfd5f53c4f47355d7ed76b49a4d492928ee5ee5ec6531fcb8dbad4e2cf968c854305f6eb2927cdf21f0b79f6d405a254be75c08701b22d34f0487805325917e908a5681b7e67d09c553cfd9d497741abaf1ef7423223b182c6a53ddeee4263312481efcfb517b56db7b5ac51693e45aff300438fa8c6b1267a1d02cd265077fa8669523a9eb5499f76c0a0a5aa5451bbf1628fcbf3db5612a0a5e188e6456e4f39da8b99278d99ba9a474d2ffe904663b6696893fa19ca1e4dcbddff4b32bd2b4845e422de112ac72834bbf4051c30d7b7a4350f547acec6327d95792654"}}, {0xff, &(0x7f0000000d80)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x43e}}]}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 4m32.017871653s ago: executing program 6 (id=2112): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 4m15.344558163s ago: executing program 38 (id=2112): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 33.654820748s ago: executing program 8 (id=2588): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000030c0)=""/138) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 27.307317707s ago: executing program 8 (id=2602): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x5e, {{0x2, 0x36ba, @multicast1}}}, 0x88) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 25.868017717s ago: executing program 8 (id=2607): syz_usb_connect(0x5, 0x24, &(0x7f0000001100)=ANY=[@ANYBLOB="12010003296fb608229084d488ff0102030109021200010495008109041e800056a7f6022d81f115fff3"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, 0x0) 22.872823189s ago: executing program 8 (id=2610): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r3, 0xff, 0x0) getdents64(r3, 0xffffffffffffffff, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xccd4453e7e835cf8, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0xa, &(0x7f0000000000)={0x1000, 0x9}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x22, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780)}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 21.890480234s ago: executing program 8 (id=2611): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0), 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x2, 'bridge_slave_1\x00', {0x8}, 0x800}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x400000000000000, 0x0, 0x8001}, 0x4000) add_key$fscrypt_v1(0x0, &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) 21.654020514s ago: executing program 0 (id=2612): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 20.224014817s ago: executing program 0 (id=2615): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 17.679616767s ago: executing program 2 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 17.580515401s ago: executing program 0 (id=2620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001c180)=@newtaction={0x518, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x504, 0x1, [@m_ipt={0x130, 0x1a, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbd, 0x6, {0x3, 'filter\x00', 0x5, 0xd, "8df27bf52614b7e9f8ed9cb637b81e532c54a964584ee1549af2fc8bcd18003cb1a881810fec9c6668e919a56d888a1d3084b851d9bc372c68d603cdf9de7a343c35384505f1f0f0b77719d4611fa9a5f68222bf2a025f091531f49602a2b769bd2754dbfbd0520930cd71e265bebeb8e77715fccff319c9ca40f84c26e4fea3e30841cf6b62b1bfbeebae48a9f9c9abf7739f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x36, 0x6, "9dbf40cf4270866e31eb9ceef43dbaaaae6878a5cfb956cdbf16723a0e7bd140c3b76527d792db1845904574e4eb7cabb351"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x240, 0x12, 0x0, 0x0, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffff8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xca, 0x6, {0x8, 'security\x00', 0x28, 0x3, "f4b0775f0e6de4b4ff29d42ad934f5473bc8764d6675f3b39fc177f509bf9a5cd9390f6cf52dd1341ee7d98950cc5dfdce1169a6c65843df84dd4361a3f30850687b3e21fbac48a0b280741f48026eb05907f6d7a55be422489ceb89469556bbe3561a13f626ba8855a2309f9a9fbf1d2dd368199d6c7f07183fabeb4b23330fc52289d37e74d575ad816ba4915ce2c751dd2d6c485410b40295d0216984262d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'raw\x00', 0xc}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f4f}]}, {0xbe, 0x6, "1b3ec043f25e80566bc4eb402e2bc33874852d29b48a9934d226d2f5a403d6d03d6c825988153d860d07e1371e057ac538e21d2d9877f0654a0b1f761ca7b971025cac9d94bd6759765489180ed5d8fe9cdbfd63453f6f6307afd0f56de6ee8c27937598679411da1b1951c8366bbd4d0ed8538869fe88774cd1c225699b855e8c25bc3ee5968e46f35b3e67033a09a851e844ae81e2cd40ee043e913c830c207d40ea8e961cede4eea5f75502a7cae28f639a470ec2a25a3ec6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x5c, 0x1e, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2d, 0x6, {0x7, 'nat\x00', 0xdd, 0x9180, "7aaa39"}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xdc, 0x14, 0x0, 0x0, {{0x8}, {0x4}, {0xb1, 0x6, "6fca8a236a3932d0ec4a44fc16cf3cf1a0a90ef0a5b1e0c3ea864b11cb277c58c880fad0740dc662ba19d7bdd865ced6d620bab74fb0377bc5fe0104e8c5dc3b16b4863f2093bb7782547653550ecf8e167fb2fac451b9e604266fb468cbdfc21a9e7fa45a2ea537fe73b13a42c93ce2616f1869767905535fbcca1197871b3794f4dc3f3ae12a05d318ab2e2aada1b5b530fdb48d9f881765ccd59544aab0b492e8f889a966725ac61bdd34b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x518}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 16.071137179s ago: executing program 2 (id=2621): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001600010a0000"], 0x14}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 15.693006454s ago: executing program 0 (id=2624): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x1f8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1c8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0xfc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x1f8}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.964616405s ago: executing program 2 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 13.765905037s ago: executing program 2 (id=2626): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80000021, 0x800000000004}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000600007910a800000000005d0a00000000000095000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) listen(0xffffffffffffffff, 0x1ad72f7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(0xffffffffffffffff, 0x401, 0x3) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) 13.756136993s ago: executing program 8 (id=2627): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x6}}, 0x20) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8021, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 12.440779985s ago: executing program 2 (id=2630): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 12.137137326s ago: executing program 0 (id=2631): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0x1, 0xffff, 0xa, 0x89}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x8, 0x5, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x1, 0x8000, 0x1, 0x80000000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x4, 0xac, 0x2, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7800, 0x20, 0x10, 0x3}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x52c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x30}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "94166aace4a71313147ca2122435ab933b184cae4ff02b3000a42dfdb85b6c8aeca793cf8e341a98ecbab8a17646322c67b1dfbb4aed5ace6152b056cb5212918fceb8f68aeae9de858ecd576d29c5231d8cc8c57b74c0ae0e892d5214e343d9f7ead0db3962c7034a3a46f33ec9c8b3481fd9f99fa4f03562b3fac5ff797d6929b4c977d3f7eed8d8042473ec4ff7f38aeb1fd7bc9f45918ba65821be681c3d77c0baa72266e640cfc4d2e318bba688b86889eb0ea18a870cdf8db854f0e4b9401e646fd7165aa898f6b53e3c370c5bd190e1eff65080e2d4a7e383cd910f4dace70fb294"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/proc/cgroups\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'CT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-[+^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-$%^^/\xec:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/^.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x785}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x49, 0x5, "b17b9342b2b4e6ff3993136491d0b0d363941f75a30a1d531eb66087bb7a8c39e43defa58de78f6aafa49aabb388455e7a8230e86da525f0669b9a47344e70be2bd1f75e92"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xae}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^!$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9fc0}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']#[-]){\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcecd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf4e}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/proc/cgroups\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "19400f6878646002fdd5e0d9150ed58d1b988aaa4bdc7b496d549bfc3312c924948f707b0d557d48ab3ab5b441a30c40c326414e0ee282e2ecf378e8f94487c1955e1782aeb29a08a46cfefa18787268931566a24c1a75d1e9a5e91c60c3160eb4918a38bf6b0bb3d72713a08d31debfb52c478ca5920c636682511cc0e577dc15"}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0xd0}, 0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) 9.224475466s ago: executing program 4 (id=2634): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe6b) 8.92786262s ago: executing program 2 (id=2637): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x40000189, 0x100) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x8, 0x8], 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) inotify_init1(0x800) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000300)={0x3, 0x8}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000100), 0x9, 0x80500) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB="2c726f6f746d6f64653d303030ff7f000030303000023030303030310000000030302c75736500000000", @ANYRESDEC=0x0, @ANYRES64=r3, @ANYRES64=r4, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="3a1d55ea2f90b4be45e36795ae720d82edfc0a352ea5cdd5313d2ccf7bcba9dd0b2a4e496b729edfa31b9be0f70692c1eae7cceb9ad89115fe0349b66dcab5107ede7e7e79742eaa222e20e2270090b5d0d04551d1cd4c31ab7264dc5b00965024a0c3ce0cf863583960c463c4d5f2b9a52da8ef07b8f63f0b344c4b9bd1efa3042cb0156c6c05ba7c0d5a7d19981a5531bab47d3f54aa974dcd775872f618dfb86b1343ebfe18b3bcc5abd9688ac03b96b7ded0b65db592a095a0eb10df596060877ea1a66257daafa902b918c4da9dab05"]) read$FUSE(r4, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) acct(&(0x7f0000000240)='./file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) 8.093829033s ago: executing program 4 (id=2638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x5, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) 5.978234989s ago: executing program 4 (id=2640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f00000000c0), &(0x7f0000004040)}, 0x20) 5.320572801s ago: executing program 7 (id=2643): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x204, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1d4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x108, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "d128be47491207a500"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x204}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.274497061s ago: executing program 4 (id=2644): io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) fsetxattr$security_ima(r1, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 5.054844042s ago: executing program 7 (id=2645): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x1, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2176]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000086c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000044000000060a010400000000000000000500000008000b40000000001c000480180001800d00010073796e70726f787900000000040002800900010073797a3000000000140000001100010000000000000000000000000a53c99f2c5691a1e6b59af27c0ae4d3bad5807e6b73eb3cbf14546ea69b2ae930865d6a9fdf0431952b04c0ca6ad5"], 0xb8}}, 0x0) 4.924847568s ago: executing program 1 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4.665291131s ago: executing program 1 (id=2647): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 3.87662803s ago: executing program 7 (id=2648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.876241456s ago: executing program 4 (id=2649): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 2.238450774s ago: executing program 1 (id=2650): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe6b) 2.128802674s ago: executing program 7 (id=2651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.654721027s ago: executing program 1 (id=2652): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.640553597s ago: executing program 0 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$kcm(0x1e, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000280)='\x00\x98\xf7\xe2\x99\xb9Z\x00\x00\x00\x00\x00\xe2\xff\x00\x00\x00\x00'}, 0x30) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x6, 0x1000, 0x1000, 0x0, 0x1, 0x1, 0x1}, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r10 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="81af0d3d846d04f02e305c7d3c278a669680f07d33bf4d85ac1cfba5d98fe69175ef518f11e0d6541570fd73793ba38d5464efe3e44ae5a8f9889fc47b1e0aace67c1f2ec934473159567c69939eca02be9e51235fde5f7c50b23b34554839b4bd42beead21af944c41ea949750e5a2c82e1e20663553eb3cfda1621956ece6f49ff469e8c80baf47601ce0e866293432965d0e4b57b58fead6f14bdde9ca6de74f15ec9737668dbdc60328b6fcf27fffd867eddf6b74820a8ead4ce67e7f5b9878e582090770b2bdad98c254cb68af0cb3dca4155b3162819fd3ef27c89fd3105ff0a72b69e4c92df28487b353b2cc1d595", @ANYRESOCT=r4, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="e54d4c794b4a96ed4bce9efede14dbcb192dc570fa2ee7"], 0x38}, 0x1, 0x0, 0x0, 0x4c080}, 0xe821651e0a1b45fc) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="5c911743358da85b21255725d4b8f7827e3cd424e14628e14e5e25a46907273aa10f4446f7f265a6d92fbdd6ddf8bb325e74e57296d84138db899c25a0d62e881bdddc909c9482b9bd6d75e1909279afe73085e5e64867dcf975b9cd52ee30a9017e73fb7e7e3ce1b15da3e67965d8dec6d6b54bd7b411f8f010ebc976b313223054d1ff30f729dab5429e9f78bff162ab2fc2e6e85447b09f1255beb2403c300970572d1739001d94888871220ebdfcb135ded64440c57ad1a0f7f7a7"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.292768904s ago: executing program 4 (id=2654): sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x1, @local, 0x3}, 0x1c) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000013c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 575.728343ms ago: executing program 1 (id=2655): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000200", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 541.391383ms ago: executing program 7 (id=2656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f00000000c0), &(0x7f0000004040)}, 0x20) 187.399928ms ago: executing program 1 (id=2657): bpf$MAP_CREATE(0x0, 0x0, 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{0x0}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f00000000c0)='gfs2\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 7 (id=2658): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}], 0x2, 0x1) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x54) r4 = syz_io_uring_setup(0x53f, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x36, 0x0, 0x0, 0x202}]}, 0x10) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x2, 0x10000, 0x4, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0xffffffff, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x8) kernel console output (not intermixed with test programs): 1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.496684][ T973] usb 10-1: config 0 descriptor?? [ 525.371161][T10103] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 525.387160][T10103] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 525.393616][ T973] usbhid 10-1:0.0: can't add hid device: -22 [ 525.418636][ T973] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 526.180031][T10110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1033'. [ 528.758829][ T7642] usb 10-1: USB disconnect, device number 3 [ 533.084824][ T5956] kernel write not supported for file /sysvipc/msg (pid: 5956 comm: kworker/1:4) [ 538.599879][ T5986] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 538.899619][ T5986] usb 1-1: Using ep0 maxpacket: 8 [ 538.906662][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.992010][ T5986] usb 1-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 539.087744][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.133592][ T5986] usb 1-1: config 0 descriptor?? [ 540.274617][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055fc6c00: rx timeout, send abort [ 540.286789][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055fc6c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 540.301298][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054dd8800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 540.368124][ T5986] usbhid 1-1:0.0: can't add hid device: -71 [ 540.401707][ T5986] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 541.165198][ T5956] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 541.195784][ T5986] usb 1-1: USB disconnect, device number 6 [ 541.387541][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.446314][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.478773][ T5956] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 541.511293][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.540762][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1070'. [ 541.547932][ T5956] usb 10-1: config 0 descriptor?? [ 541.575027][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1070'. [ 541.584806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054004c00: rx timeout, send abort [ 541.593763][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054004c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 541.608246][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054005000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 542.445986][T10232] netlink: 'syz.6.1073': attribute type 1 has an invalid length. [ 542.598493][ T5956] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 542.675837][ T5956] usb 10-1: USB disconnect, device number 4 [ 544.391448][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1081'. [ 545.780801][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 545.815038][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 549.798624][ T7642] kernel write not supported for file /sysvipc/msg (pid: 7642 comm: kworker/0:8) [ 550.382628][T10310] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1101'. [ 550.982558][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 551.163879][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.398877][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.430216][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.476707][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.553709][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.580831][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.598366][ T24] usb 8-1: config 0 descriptor?? [ 552.167939][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053cf3400: rx timeout, send abort [ 552.176502][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053cf3400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 552.190920][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053cf0800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 552.499404][ T24] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 553.066397][T10315] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 553.467408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031088000: rx timeout, send abort [ 553.475890][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031088000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 553.490426][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031089800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 554.598026][ T5848] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 555.739736][ T5848] usb 8-1: device descriptor read/64, error -32 [ 556.108603][ T6044] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 557.016580][ T6044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.070480][ T6044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.080637][ T6044] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 557.091114][ T6044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.102461][ T6044] usb 9-1: config 0 descriptor?? [ 557.137905][ T24] usb 8-1: USB disconnect, device number 2 [ 558.964134][ T6044] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 559.183246][ T6044] usb 9-1: USB disconnect, device number 5 [ 560.432734][T10383] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1122'. [ 561.841200][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b0d000: rx timeout, send abort [ 561.850036][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054b0d000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 561.864663][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054b0f000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 562.046974][T10398] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1127'. [ 562.171302][T10402] random: crng reseeded on system resumption [ 562.185274][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.192645][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.947323][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1131'. [ 563.094260][T10413] netlink: 'syz.7.1132': attribute type 17 has an invalid length. [ 563.116238][T10413] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1132'. [ 563.142132][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d2e5400: rx timeout, send abort [ 563.150564][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d2e5400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 563.164958][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053ecfc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 563.559651][ T7642] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 563.731812][ T7642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.763059][ T7642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.637256][ T7642] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 564.778375][ T7642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.128209][ T7642] usb 7-1: config 0 descriptor?? [ 565.575443][ T7642] usbhid 7-1:0.0: can't add hid device: -71 [ 565.581609][ T7642] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 565.600250][ T7642] usb 7-1: USB disconnect, device number 5 [ 568.727327][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1149'. [ 568.966925][ T5876] Bluetooth: hci5: unexpected cc 0x2005 length: 8 > 1 [ 568.974306][ T5876] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 569.482470][T10477] block nbd4: shutting down sockets [ 571.560411][T10506] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 571.569588][T10506] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 573.735011][T10517] random: crng reseeded on system resumption [ 574.240363][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 574.509651][ T5876] Bluetooth: hci3: unexpected cc 0x2005 length: 8 > 1 [ 574.516472][ T5876] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 575.047478][T10528] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 575.054705][T10528] overlayfs: failed to set xattr on upper [ 575.069595][T10528] overlayfs: ...falling back to redirect_dir=nofollow. [ 575.113566][T10528] overlayfs: ...falling back to index=off. [ 575.127098][T10528] overlayfs: ...falling back to uuid=null. [ 575.135898][T10528] overlayfs: maximum fs stacking depth exceeded [ 578.912354][ T5876] Bluetooth: hci1: unexpected cc 0x2005 length: 8 > 1 [ 578.919814][ T5876] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 579.637444][T10569] random: crng reseeded on system resumption [ 582.372035][T10604] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 582.402007][T10604] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 583.570109][T10609] netlink: 'syz.7.1195': attribute type 1 has an invalid length. [ 583.623868][T10609] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.1195'. [ 583.693182][T10617] netlink: 'syz.4.1196': attribute type 10 has an invalid length. [ 583.931606][T10617] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 585.107967][T10632] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[10632] [ 585.746852][T10634] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 585.769695][T10634] overlayfs: failed to set xattr on upper [ 585.776140][T10634] overlayfs: ...falling back to redirect_dir=nofollow. [ 585.828229][T10634] overlayfs: ...falling back to index=off. [ 586.093788][T10634] overlayfs: ...falling back to uuid=null. [ 586.142449][T10634] overlayfs: maximum fs stacking depth exceeded [ 586.541333][T10650] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 586.553605][T10650] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 586.795365][T10652] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1208'. [ 590.325487][ T30] audit: type=1800 audit(1756345201.087:27): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1217" name="bus" dev="overlay" ino=898 res=0 errno=0 [ 593.157002][T10706] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 594.164490][T10713] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 599.194232][T10756] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 606.679670][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 606.859637][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 607.305014][ T5848] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 607.339655][ T5848] usb 1-1: config 0 has no interface number 0 [ 607.369613][ T5848] usb 1-1: config 0 interface 12 has no altsetting 0 [ 607.426317][ T5848] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 607.454374][ T5848] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 607.489600][ T5848] usb 1-1: Product: syz [ 607.514236][ T5848] usb 1-1: Manufacturer: syz [ 607.518867][ T5848] usb 1-1: SerialNumber: syz [ 607.581104][ T5848] usb 1-1: config 0 descriptor?? [ 608.596538][T10824] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 608.790641][T10827] netlink: 'syz.8.1262': attribute type 17 has an invalid length. [ 608.846840][T10827] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1262'. [ 609.585207][ T5848] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 609.604668][ T5848] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 609.614026][ T5848] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 609.639177][ T5848] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 609.751272][ T5848] usb 1-1: USB disconnect, device number 7 [ 609.881045][T10838] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1266'. [ 613.449714][ T973] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 614.357771][ T973] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.924020][ T973] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.959683][ T973] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 615.034260][ T973] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 615.076904][ T973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.132380][ T973] usb 10-1: config 0 descriptor?? [ 615.817895][T10904] trusted_key: encrypted_key: insufficient parameters specified [ 615.925403][T10907] block nbd6: Attempted send on invalid socket [ 615.932738][T10907] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.946432][T10907] block nbd6: Attempted send on invalid socket [ 615.952760][T10907] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.962793][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 615.979692][T10907] block nbd6: Attempted send on invalid socket [ 615.986214][T10907] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.996550][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 616.056559][T10908] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 616.067667][ T973] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 616.100706][T10907] block nbd6: Attempted send on invalid socket [ 616.125972][T10907] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.864654][T10907] block nbd6: Attempted send on invalid socket [ 618.873268][T10907] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.882882][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 618.911547][T10907] block nbd6: Attempted send on invalid socket [ 618.950973][T10907] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.011917][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 619.022734][T10907] block nbd6: Attempted send on invalid socket [ 619.030234][T10907] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.040128][T10907] block nbd6: Attempted send on invalid socket [ 619.046405][T10907] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.069439][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 619.152684][T10907] block nbd6: Attempted send on invalid socket [ 619.185375][T10907] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.447529][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 620.224589][T10907] block nbd6: Attempted send on invalid socket [ 620.257757][T10907] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.290368][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 620.340125][T10907] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 620.379575][T10907] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 622.745054][T10937] random: crng reseeded on system resumption [ 623.637061][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.647003][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.830099][T10908] plantronics 0003:047F:FFFF.000B: timeout initializing reports [ 627.057275][ T5848] usb 10-1: USB disconnect, device number 5 [ 627.422642][T11001] netlink: 'syz.6.1301': attribute type 17 has an invalid length. [ 627.430824][T11001] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1301'. [ 628.094543][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1306'. [ 628.118991][T11016] netlink: 'syz.7.1306': attribute type 7 has an invalid length. [ 628.139847][T11016] netlink: 'syz.7.1306': attribute type 8 has an invalid length. [ 628.190848][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1306'. [ 630.773486][T11030] trusted_key: encrypted_key: insufficient parameters specified [ 631.810007][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 631.821564][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 631.831434][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 631.857836][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 631.870585][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.020032][T11046] netlink: 'syz.8.1316': attribute type 17 has an invalid length. [ 632.063451][T11039] lo speed is unknown, defaulting to 1000 [ 632.092929][T11046] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1316'. [ 632.423731][T11039] vxcan1 speed is unknown, defaulting to 1000 [ 633.944896][ T5876] Bluetooth: hci0: command tx timeout [ 634.171597][ T1132] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.397368][ T1132] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.662996][ T1132] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.764815][T11072] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 636.019981][ T5876] Bluetooth: hci0: command tx timeout [ 636.233075][ T1132] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.102596][ T5876] Bluetooth: hci0: command tx timeout [ 639.152396][T11100] trusted_key: encrypted_key: insufficient parameters specified [ 641.291724][ T5862] Bluetooth: hci0: command tx timeout [ 642.464358][T11039] chnl_net:caif_netlink_parms(): no params data found [ 645.358876][T11146] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 645.372342][T11146] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 647.020719][ T1132] bridge_slave_1: left allmulticast mode [ 647.037350][ T1132] bridge_slave_1: left promiscuous mode [ 647.082675][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.184785][ T1132] bridge_slave_0: left allmulticast mode [ 647.224050][ T1132] bridge_slave_0: left promiscuous mode [ 647.291480][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.065917][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.091771][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.115715][ T1132] bond0 (unregistering): Released all slaves [ 649.187168][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.232262][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.291900][T11039] bridge_slave_0: entered allmulticast mode [ 649.303575][T11039] bridge_slave_0: entered promiscuous mode [ 649.336876][T11176] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1350'. [ 649.357511][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.379733][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.400864][T11039] bridge_slave_1: entered allmulticast mode [ 649.425310][T11039] bridge_slave_1: entered promiscuous mode [ 649.680679][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.278309][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.904882][T11039] team0: Port device team_slave_0 added [ 652.970751][T11039] team0: Port device team_slave_1 added [ 653.458877][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.508964][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1361'. [ 653.512017][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.572633][T11234] netlink: 'syz.7.1361': attribute type 7 has an invalid length. [ 653.600455][T11234] netlink: 'syz.7.1361': attribute type 8 has an invalid length. [ 653.608566][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1361'. [ 653.681954][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.313151][ T1132] hsr_slave_0: left promiscuous mode [ 654.389596][ T1132] hsr_slave_1: left promiscuous mode [ 654.411172][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.600421][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.619277][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.627097][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.724410][ T1132] veth1_macvtap: left promiscuous mode [ 654.752743][ T1132] veth0_macvtap: left promiscuous mode [ 655.201248][ T1132] veth1_vlan: left promiscuous mode [ 655.207283][ T1132] veth0_vlan: left promiscuous mode [ 657.567654][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 657.664750][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 659.853282][ T5862] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 660.865324][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.886630][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.912565][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.988513][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.552373][T11039] hsr_slave_0: entered promiscuous mode [ 661.561106][T11039] hsr_slave_1: entered promiscuous mode [ 661.612332][T11039] debugfs: 'hsr0' already exists in 'hsr' [ 661.626473][T11039] Cannot create hsr debugfs directory [ 662.014122][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.048960][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.113624][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.177538][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.211684][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.917359][T11312] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 664.656085][ T1132] IPVS: stop unused estimator thread 0... [ 665.691112][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1392'. [ 665.739589][T11349] netlink: 'syz.8.1392': attribute type 7 has an invalid length. [ 665.820438][T11349] netlink: 'syz.8.1392': attribute type 8 has an invalid length. [ 665.856158][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1392'. [ 667.948570][T11373] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1398'. [ 669.659549][T11386] siw: device registration error -23 [ 670.246210][T11039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 670.294039][T11039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 670.354423][T11039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 670.417875][T11039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.167136][T11412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.839647][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.057278][T11039] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.944076][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.951254][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.066008][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.073178][ T7605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.545673][T11039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.971480][T11489] netlink: 'syz.8.1424': attribute type 17 has an invalid length. [ 677.979327][T11489] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1424'. [ 678.108948][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.411770][T11039] veth0_vlan: entered promiscuous mode [ 678.484434][T11039] veth1_vlan: entered promiscuous mode [ 678.495918][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1428'. [ 678.618311][T11039] veth0_macvtap: entered promiscuous mode [ 678.692077][T11502] netlink: 'syz.8.1428': attribute type 7 has an invalid length. [ 678.701475][T11039] veth1_macvtap: entered promiscuous mode [ 678.790251][T11502] netlink: 'syz.8.1428': attribute type 8 has an invalid length. [ 678.814168][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1428'. [ 678.925597][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.003020][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.121639][ T5982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.165244][ T5982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.223583][ T5982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.284787][ T5982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.828907][ T8261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.119835][ T8261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.843993][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.899692][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.970852][ T7261] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 683.164267][ T7261] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 683.204317][ T7261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.272637][ T7261] usb 7-1: Product: syz [ 683.331441][ T7261] usb 7-1: Manufacturer: syz [ 683.369705][ T7261] usb 7-1: SerialNumber: syz [ 684.394525][ T7261] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 684.409330][ T7261] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 684.422058][ T7261] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 684.971118][ T7261] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 685.063850][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.079559][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.600167][ T5986] usb 7-1: USB disconnect, device number 6 [ 686.518145][T11607] syz2: rxe_newlink: already configured on vxcan1 [ 690.462667][T11644] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 690.475591][T11644] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 690.562160][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804933ec00: rx timeout, send abort [ 690.571542][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804933ec00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 690.586131][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053d01400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.694326][T11665] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 691.770239][ T7261] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 691.868746][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a9b4400: rx timeout, send abort [ 691.877536][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a9b4400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.892097][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a9b4c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.935371][ T7261] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 691.961839][ T7261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.006569][ T7261] usb 9-1: Product: syz [ 692.034723][ T7261] usb 9-1: Manufacturer: syz [ 692.070259][ T7261] usb 9-1: SerialNumber: syz [ 692.880410][ T7261] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 693.019664][ T7261] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 693.209241][ T7261] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 694.230835][ T7261] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 694.612547][ T7261] usb 9-1: USB disconnect, device number 6 [ 694.672881][ T5862] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 695.131764][T11711] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 698.923424][T11744] ntfs3(nullb0): Primary boot signature is not NTFS. [ 698.932057][T11744] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 700.997408][T11759] fuse: Bad value for 'fd' [ 701.495630][T11770] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 702.199554][ T973] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 702.361748][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.408542][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.856377][ T973] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 702.918318][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.990585][ T973] usb 5-1: config 0 descriptor?? [ 703.924587][ T973] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 704.738286][ T973] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 704.749663][ T973] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 704.756730][ T973] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 704.919585][ T973] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 705.041674][ T973] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 705.119818][ T973] usb 5-1: USB disconnect, device number 6 [ 705.199605][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 705.451878][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.836226][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 705.867486][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.935544][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.015725][T11795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 706.057870][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 706.597119][T11819] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 707.410092][ T24] usb 1-1: USB disconnect, device number 8 [ 708.615245][T11839] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1521'. [ 709.149877][ T973] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 709.389805][ T6044] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 709.554844][ T973] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 709.612458][ T6044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.657270][ T6044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.692598][ T6044] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 709.726504][ T973] usb 7-1: config 0 has no interface number 0 [ 709.748554][ T6044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.978370][ T6044] usb 9-1: config 0 descriptor?? [ 710.004786][ T973] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 710.533431][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.596871][ T973] usb 7-1: config 0 descriptor?? [ 710.671465][ T6044] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 710.674071][ T973] usb 7-1: selecting invalid altsetting 1 [ 710.710639][ T6044] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 710.761795][ T6044] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 710.804491][ T973] dvb_ttusb_budget: ttusb_init_controller: error [ 710.986164][ T973] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 711.008348][T11869] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 711.152963][ T6044] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 711.169633][ T6044] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 711.233856][ T6044] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 711.296737][ T6044] usb 9-1: USB disconnect, device number 7 [ 711.452055][ T973] DVB: Unable to find symbol cx22700_attach() [ 711.663050][ T973] DVB: Unable to find symbol tda10046_attach() [ 711.690518][T11865] block nbd1: shutting down sockets [ 711.735586][ T973] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 711.862732][T11887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.927291][T11899] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1537'. [ 713.118976][ T6044] usb 7-1: USB disconnect, device number 7 [ 715.694002][T11924] fuse: Bad value for 'fd' [ 716.298694][T11938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1548'. [ 716.449761][ T5848] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 717.049583][ T5848] usb 8-1: Using ep0 maxpacket: 32 [ 717.241399][ T5848] usb 8-1: unable to get BOS descriptor or descriptor too short [ 717.250260][ T5848] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 717.262607][ T5848] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 717.301001][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.329651][ T5848] usb 8-1: Product: syz [ 717.450427][ T5848] usb 8-1: Manufacturer: syz [ 717.879603][ T5848] usb 8-1: SerialNumber: syz [ 718.166433][ T5848] usb 8-1: Cannot retrieve CPort count: 0 [ 718.193560][ T5848] usb 8-1: Cannot retrieve CPort count: -5 [ 718.410625][ T5848] es2_ap_driver 8-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 718.431997][ T5848] usb 8-1: USB disconnect, device number 3 [ 719.452829][T11963] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1554'. [ 720.646065][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1559'. [ 720.693799][T11972] netlink: 'syz.4.1559': attribute type 7 has an invalid length. [ 720.720045][T11972] netlink: 'syz.4.1559': attribute type 8 has an invalid length. [ 720.783241][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'. [ 721.254084][ T7642] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 721.655825][ T7642] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 721.655836][T11990] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1562'. [ 721.655865][ T7642] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 721.869737][ T7642] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 721.889224][ T7642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.960703][T11982] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.022113][ T7642] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 722.178976][T11982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.189738][T11982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.267509][ T30] audit: type=1326 audit(1756345333.050:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 722.290165][ T7642] usb 9-1: USB disconnect, device number 8 [ 722.472416][T11812] udevd[11812]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.869672][ T30] audit: type=1326 audit(1756345333.050:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 723.145175][ T30] audit: type=1326 audit(1756345333.050:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 723.589119][ T30] audit: type=1326 audit(1756345333.050:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 723.799550][ T30] audit: type=1326 audit(1756345333.050:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 724.299724][ T30] audit: type=1326 audit(1756345333.050:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 724.322308][ T30] audit: type=1326 audit(1756345333.050:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 724.350055][ T30] audit: type=1326 audit(1756345333.050:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 724.388575][ T30] audit: type=1326 audit(1756345333.050:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 724.449650][ T30] audit: type=1326 audit(1756345333.050:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.8.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fed9858ebe9 code=0x7ffc0000 [ 725.638324][T12034] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1571'. [ 725.853956][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049046400: rx timeout, send abort [ 725.862501][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888049046400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 725.876955][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ab49000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.497512][T12030] comedi comedi2: reset error (fatal) [ 727.155466][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ab4b400: rx timeout, send abort [ 727.163891][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ab4b400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 727.178337][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ab4a800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 727.248087][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1575'. [ 727.257742][T12053] netlink: 'syz.6.1575': attribute type 7 has an invalid length. [ 727.278178][T12053] netlink: 'syz.6.1575': attribute type 8 has an invalid length. [ 727.314443][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1575'. [ 727.355759][T12055] fuse: Bad value for 'fd' [ 727.678412][T12063] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1579'. [ 728.732425][ T5862] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 730.284166][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 730.330544][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 730.330563][ T30] audit: type=1400 audit(1756345341.170:42): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12090 comm="syz.0.1586" [ 730.485050][ T24] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 730.552468][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 730.623455][ T24] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 730.757267][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.031342][ T24] usb 5-1: config 0 descriptor?? [ 732.741732][ T7642] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 732.752907][ T5862] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 732.761813][ T5862] Bluetooth: hci6: Injecting HCI hardware error event [ 732.769971][ T5862] Bluetooth: hci6: hardware error 0x00 [ 732.929588][ T7642] usb 1-1: Using ep0 maxpacket: 32 [ 732.946821][ T7642] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.967826][ T7642] usb 1-1: config 0 interface 0 has no altsetting 0 [ 732.974976][ T7642] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 733.004265][ T7642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.642029][ T7642] usb 1-1: config 0 descriptor?? [ 734.080515][ T7642] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 734.145716][ T7642] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 734.240719][ T7642] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 734.313884][ T7642] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 734.383219][ T7642] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x0 [ 734.451760][ T7642] hid-retrode 0003:0403:97C1.000E: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 734.757739][ T7642] usb 1-1: USB disconnect, device number 9 [ 734.928149][ T5862] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 735.069430][T12149] input: syz1 as /devices/virtual/input/input7 [ 735.961945][T12146] fido_id[12146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 737.016998][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 737.066305][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 737.373485][T12135] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 738.017335][T12164] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 738.333920][T12135] usb 1-1: Using ep0 maxpacket: 32 [ 738.416927][T12135] usb 1-1: config 0 has an invalid interface number: 152 but max is 0 [ 738.496637][T12135] usb 1-1: config 0 has no interface number 0 [ 738.549574][T12135] usb 1-1: config 0 interface 152 has no altsetting 0 [ 738.582617][T12135] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=b8.77 [ 738.680957][T12135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.689023][T12135] usb 1-1: Product: syz [ 738.788147][T12135] usb 1-1: Manufacturer: syz [ 738.793065][T12135] usb 1-1: SerialNumber: syz [ 738.810279][T12135] usb 1-1: config 0 descriptor?? [ 738.820542][T12135] ati_remote 1-1:0.152: ati_remote_probe: Unexpected endpoint_in [ 739.005105][T12135] usb 5-1: USB disconnect, device number 7 [ 739.520851][T12185] ntfs3(nullb0): Primary boot signature is not NTFS. [ 739.528423][T12185] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 739.776341][T12135] usb 1-1: USB disconnect, device number 10 [ 740.750026][T12203] fuse: Bad value for 'fd' [ 741.156719][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1611'. [ 741.324821][T12215] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1609'. [ 743.006142][T12236] binder: 12235:12236 ioctl c0306201 200000000080 returned -14 [ 745.917187][T12256] random: crng reseeded on system resumption [ 746.509231][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.515845][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.373987][T12305] fuse: Bad value for 'fd' [ 749.520911][T12135] Process accounting resumed [ 749.700211][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 753.480617][T12331] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 754.142786][T12299] Process accounting resumed [ 755.186604][T12358] sit1: entered allmulticast mode [ 756.690834][T12360] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 756.861668][T12360] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 756.898644][T12360] usb 5-1: config 0 has no interface number 0 [ 756.936111][T12360] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 756.954460][T12360] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 756.972598][T12360] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 756.984413][T12360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.025507][T12360] usb 5-1: Product: syz [ 757.154053][T12360] usb 5-1: Manufacturer: syz [ 757.464520][T12360] usb 5-1: SerialNumber: syz [ 757.481098][T12360] usb 5-1: config 0 descriptor?? [ 757.544413][T12384] netlink: 'syz.8.1660': attribute type 1 has an invalid length. [ 757.569711][T12384] netlink: 'syz.8.1660': attribute type 4 has an invalid length. [ 757.791144][T12384] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1660'. [ 758.158510][T12360] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 758.261550][T12360] vmk80xx 5-1:0.255: probe with driver vmk80xx failed with error -22 [ 758.351593][T12360] usb 5-1: USB disconnect, device number 8 [ 765.174480][T12456] netlink: 'syz.7.1676': attribute type 1 has an invalid length. [ 765.362973][T12456] netlink: 'syz.7.1676': attribute type 4 has an invalid length. [ 765.430748][T12456] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1676'. [ 765.535884][T12463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.737533][T12468] random: crng reseeded on system resumption [ 767.461178][T12501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 767.559580][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 768.465414][ T44] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 768.491150][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.538375][T12513] syzkaller1: entered promiscuous mode [ 768.567943][ T44] usb 2-1: Product: syz [ 768.569542][T12513] syzkaller1: entered allmulticast mode [ 768.611987][ T44] usb 2-1: Manufacturer: syz [ 768.634529][ T44] usb 2-1: SerialNumber: syz [ 768.662438][T12516] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1692'. [ 768.677657][ T44] usb 2-1: config 0 descriptor?? [ 768.715443][ T44] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007 [ 768.942598][T12520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.108900][T12526] netlink: 'syz.8.1695': attribute type 4 has an invalid length. [ 769.137312][ T44] (null): failure reading functionality [ 769.153860][T12529] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 769.338740][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.414882][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.440061][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 769.528772][ T44] i2c i2c-1: connected i2c-tiny-usb device [ 769.648729][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 769.732978][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.791934][ T24] usb 5-1: Product: syz [ 769.796140][ T24] usb 5-1: Manufacturer: syz [ 769.824228][ T7261] usb 2-1: USB disconnect, device number 7 [ 769.838124][ T24] usb 5-1: SerialNumber: syz [ 772.195877][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 772.222965][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 772.344967][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 772.409598][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 772.438723][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 772.494731][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 772.614838][ T24] usb 5-1: USB disconnect, device number 9 [ 773.366244][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.785594][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 773.843518][T12575] netlink: 'syz.4.1710': attribute type 7 has an invalid length. [ 773.890517][T12575] netlink: 'syz.4.1710': attribute type 8 has an invalid length. [ 773.939718][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'. [ 774.972836][T12575] team0: entered promiscuous mode [ 775.036936][T12575] team_slave_0: entered promiscuous mode [ 775.089907][T12575] team_slave_1: entered promiscuous mode [ 775.282463][T12575] bond0: entered promiscuous mode [ 775.309570][T12575] bond_slave_0: entered promiscuous mode [ 775.317587][T12575] bond_slave_1: entered promiscuous mode [ 775.323984][ T44] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 775.412028][T12575] bridge_slave_1: entered promiscuous mode [ 775.443667][T12575] team0: left promiscuous mode [ 775.451120][T12575] team_slave_0: left promiscuous mode [ 775.491210][T12575] team_slave_1: left promiscuous mode [ 775.532843][ T44] usb 8-1: device descriptor read/64, error -71 [ 775.551801][T12575] bond0: left promiscuous mode [ 775.639854][T12575] bond_slave_0: left promiscuous mode [ 775.647276][T12575] bond_slave_1: left promiscuous mode [ 775.658691][T12575] bridge_slave_1: left promiscuous mode [ 775.819571][ T44] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 776.019561][ T44] usb 8-1: device descriptor read/64, error -71 [ 776.189948][ T44] usb usb8-port1: attempt power cycle [ 776.533449][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1716'. [ 776.543095][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1716'. [ 776.664067][ T44] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 776.910356][ T44] usb 8-1: device descriptor read/8, error -71 [ 777.159698][ T44] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 777.270666][ T44] usb 8-1: device descriptor read/8, error -71 [ 777.488589][ T44] usb usb8-port1: unable to enumerate USB device [ 777.635745][T12623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.593978][ T6044] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 778.771289][ T6044] usb 2-1: Using ep0 maxpacket: 16 [ 778.799843][ T6044] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 778.835443][ T6044] usb 2-1: config 0 has no interface number 0 [ 779.003812][ T6044] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 779.029495][ T6044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.173044][ T6044] usb 2-1: Product: syz [ 779.191788][ T6044] usb 2-1: Manufacturer: syz [ 779.231468][ T6044] usb 2-1: SerialNumber: syz [ 779.320820][ T6044] usb 2-1: config 0 descriptor?? [ 779.348514][ T6044] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 780.485948][T12658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.185593][ T6044] gspca_spca1528: reg_r err -71 [ 781.190795][ T6044] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 781.271396][ T6044] usb 2-1: USB disconnect, device number 8 [ 783.402292][T12689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.450524][T12692] netlink: 'syz.4.1738': attribute type 17 has an invalid length. [ 783.484066][T12692] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1738'. [ 783.500419][T12694] netlink: 'syz.7.1739': attribute type 1 has an invalid length. [ 785.204547][T12717] random: crng reseeded on system resumption [ 787.427241][T12739] ntfs3(nullb0): Primary boot signature is not NTFS. [ 787.435257][T12739] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 788.449714][T12135] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 788.629870][T12135] usb 8-1: Using ep0 maxpacket: 16 [ 789.085707][T12135] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.444396][T12135] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 789.550576][T12135] usb 8-1: config 0 interface 0 has no altsetting 0 [ 789.557708][T12135] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 789.567318][T12135] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.579795][T12135] usb 8-1: config 0 descriptor?? [ 789.704093][T12764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.341736][T12135] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 790.348475][T12135] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 790.398808][T12135] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 790.428784][T12135] kye 0003:0458:0138.000F: hidraw0: USB HID v0.08 Device [HID 0458:0138] on usb-dummy_hcd.7-1/input0 [ 790.498666][T12135] usb 8-1: USB disconnect, device number 8 [ 790.917050][T12775] fido_id[12775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 791.383189][T12788] /dev/nullb0: Can't open blockdev [ 792.569872][T12801] netlink: 'syz.6.1776': attribute type 17 has an invalid length. [ 792.624194][T12801] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1776'. [ 793.759508][T12808] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 794.721171][T12825] 9pnet_fd: Insufficient options for proto=fd [ 795.213949][T12828] random: crng reseeded on system resumption [ 795.605899][T12833] syz.6.1785 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 799.045692][T12872] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 799.074915][T12872] team0: Port device batadv1 added [ 801.650119][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 801.823643][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 801.916578][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.965304][ T24] usb 7-1: Product: syz [ 802.181236][ T24] usb 7-1: Manufacturer: syz [ 802.239261][ T24] usb 7-1: SerialNumber: syz [ 802.301635][T12906] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 805.266968][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 805.318318][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 805.538007][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 806.242518][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 806.478766][ T24] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 806.513081][ T24] usb 7-1: USB disconnect, device number 8 [ 808.028273][T12971] bridge_slave_0: left allmulticast mode [ 808.040043][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.046349][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.064662][T12971] bridge_slave_0: left promiscuous mode [ 808.088599][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.354366][T12976] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1830'. [ 808.363450][T12976] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1830'. [ 808.449770][T12971] bridge_slave_1: left allmulticast mode [ 808.455938][T12971] bridge_slave_1: left promiscuous mode [ 808.471055][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.118459][T12971] bond0: (slave bond_slave_0): Releasing backup interface [ 809.444734][T12982] JFS: discard option not supported on device [ 809.456356][T12982] Mount JFS Failure: -22 [ 809.460713][T12982] jfs_mount failed w/return code = -22 [ 810.561858][T12971] bond0: (slave bond_slave_1): Releasing backup interface [ 810.601305][T12987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.755601][T12971] team0: Port device team_slave_0 removed [ 810.979578][ T24] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 811.029051][T12971] team0: Port device team_slave_1 removed [ 811.067056][T12971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.096067][T12971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.250121][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.267346][ T24] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 811.342441][T12971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.350773][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.372573][ T24] usb 7-1: config 0 descriptor?? [ 811.403064][T12971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.907470][ T24] pantherlord 0003:0810:0001.0010: item fetching failed at offset 5/7 [ 812.029997][ T24] pantherlord 0003:0810:0001.0010: parse failed [ 812.108253][ T24] pantherlord 0003:0810:0001.0010: probe with driver pantherlord failed with error -22 [ 812.211291][ T24] usb 7-1: USB disconnect, device number 9 [ 817.627882][ T5862] Bluetooth: hci1: ACL packet too small [ 818.306996][T13058] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 820.106216][T13078] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 822.851948][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1865'. [ 823.119598][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 823.249628][ T24] usb 9-1: device descriptor read/64, error -71 [ 823.523246][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 823.739617][ T24] usb 9-1: device descriptor read/64, error -71 [ 823.979989][ T24] usb usb9-port1: attempt power cycle [ 824.449611][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 824.680616][ T24] usb 9-1: device descriptor read/8, error -71 [ 824.755200][T13121] ntfs3(nullb0): Primary boot signature is not NTFS. [ 824.762902][T13121] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 825.559724][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 826.884198][ T24] usb 9-1: device descriptor read/8, error -71 [ 827.050946][ T24] usb usb9-port1: unable to enumerate USB device [ 828.184009][T13152] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1880'. [ 830.269808][T13166] ntfs3(nullb0): Primary boot signature is not NTFS. [ 830.446386][T13166] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 832.454455][T13180] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 832.838948][T13189] netlink: 'syz.7.1891': attribute type 4 has an invalid length. [ 832.839628][T13191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1889'. [ 833.241056][T13195] netlink: 'syz.7.1891': attribute type 4 has an invalid length. [ 833.583245][T13202] netlink: 'syz.6.1893': attribute type 17 has an invalid length. [ 833.626015][T13202] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1893'. [ 833.719778][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 836.045397][T13236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.718753][T13254] netlink: 'syz.8.1910': attribute type 17 has an invalid length. [ 838.825320][T13254] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1910'. [ 842.081846][T13282] comedi comedi2: aio_iiro_16: I/O port conflict (0xffff,8) [ 842.784716][T13299] netlink: 'syz.0.1926': attribute type 17 has an invalid length. [ 842.792829][T13299] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1926'. [ 843.011858][T13305] comedi comedi3: das16m1: I/O port conflict (0xb6,16) [ 843.306144][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 845.135125][T13332] netlink: 'syz.6.1934': attribute type 4 has an invalid length. [ 850.238541][T13366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.262174][T13370] netlink: 'syz.6.1948': attribute type 4 has an invalid length. [ 851.348808][T13376] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1949'. [ 852.896389][T13395] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 852.914404][T13395] overlayfs: failed to set xattr on upper [ 852.928359][T13395] overlayfs: ...falling back to redirect_dir=nofollow. [ 853.044911][T13395] overlayfs: ...falling back to index=off. [ 854.035385][T13395] overlayfs: ...falling back to uuid=null. [ 854.045229][T13395] overlayfs: maximum fs stacking depth exceeded [ 856.361972][T13420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.368373][T13432] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1967'. [ 864.430638][T13501] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1990'. [ 865.259124][T13515] netlink: 'syz.8.1994': attribute type 4 has an invalid length. [ 865.936698][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 866.269647][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 867.230329][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.249505][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.680086][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.689164][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.895481][ T9] usb 7-1: Product: syz [ 867.909100][ T9] usb 7-1: Manufacturer: syz [ 867.925222][ T9] usb 7-1: SerialNumber: syz [ 867.986509][T13547] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2007'. [ 868.382604][ T9] usb 7-1: cannot find UAC_HEADER [ 869.400069][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.406619][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.939537][ T5876] Bluetooth: hci0: command 0x0405 tx timeout [ 870.819239][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 870.922726][ T9] usb 7-1: USB disconnect, device number 10 [ 871.054758][T13562] udevd[13562]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.279114][T13596] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2024'. [ 875.801676][T13625] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2033'. [ 877.789525][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 878.435286][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.578353][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.618034][ T44] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 878.699442][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.014866][ T44] usb 1-1: config 0 descriptor?? [ 879.077722][T13652] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2041'. [ 879.871908][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 879.913974][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 879.939343][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 879.946688][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 880.019711][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 880.026702][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 880.074345][ T44] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 880.129835][ T44] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 880.678499][ T44] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 881.144839][T13643] cp2112 0003:10C4:EA90.0011: Error starting transaction: -38 [ 881.169779][ T44] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 881.207663][T13677] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2049'. [ 881.226434][ T44] usb 1-1: USB disconnect, device number 12 [ 881.659563][T13684] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2050'. [ 881.669048][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2050'. [ 881.682376][T13684] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2050'. [ 881.691603][T13684] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2050'. [ 881.701081][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2050'. [ 884.411335][T13702] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2057'. [ 886.310114][T13727] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 891.100823][T13781] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2080'. [ 893.121161][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2084'. [ 894.159524][ T44] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 894.469701][ T44] usb 8-1: Using ep0 maxpacket: 8 [ 894.500173][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 894.589706][ T44] usb 8-1: config 4 has an invalid interface number: 30 but max is 0 [ 894.597828][ T44] usb 8-1: config 4 has no interface number 0 [ 894.639563][ T44] usb 8-1: config 4 interface 30 has no altsetting 0 [ 894.666741][ T44] usb 8-1: string descriptor 0 read error: -22 [ 894.689576][ T44] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 895.179488][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.212692][ T44] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 895.234917][ T44] dw2102: su3000_power_ctrl: 1, initialized 0 [ 895.272718][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 895.315810][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 895.392628][ T44] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 895.414619][ T44] usb 8-1: media controller created [ 895.435312][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 895.465892][ T44] dw2102: i2c transfer failed. [ 895.554287][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 895.715386][ T44] dw2102: i2c transfer failed. [ 895.791252][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 895.797035][ T44] dw2102: i2c transfer failed. [ 895.837052][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 895.853924][ T44] dw2102: i2c transfer failed. [ 895.873295][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 895.919560][ T44] dw2102: i2c transfer failed. [ 895.924370][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 896.189523][ T44] dw2102: i2c transfer failed. [ 896.200164][ T44] dvb-usb: MAC address: 02:02:02:02:02:02 [ 896.297834][T13828] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 896.399355][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.496641][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 896.529869][ T44] dw2102: command 0x0e transfer failed. [ 896.553621][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 896.598380][ T44] dw2102: command 0x0e transfer failed. [ 897.679675][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 897.685422][ T44] dw2102: command 0x0e transfer failed. [ 897.699587][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 897.707106][ T44] dw2102: command 0x0e transfer failed. [ 897.713095][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 897.719357][ T44] dw2102: command 0x51 transfer failed. [ 897.724979][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 898.099979][ T44] dw2102: i2c probe for address 0x68 failed. [ 898.108588][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 898.116123][ T44] dw2102: i2c probe for address 0x69 failed. [ 898.130625][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 898.136359][ T44] dw2102: i2c probe for address 0x6a failed. [ 898.176801][ T44] dw2102: probing for demodulator failed. Is the external power switched on? [ 898.216200][ T44] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 898.505678][ T44] rc_core: IR keymap rc-tt-1500 not found [ 898.542299][ T44] Registered IR keymap rc-empty [ 898.992968][ T44] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 899.056523][ T44] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input8 [ 899.192155][ T44] dvb-usb: schedule remote query interval to 250 msecs. [ 899.230356][ T44] dw2102: su3000_power_ctrl: 0, initialized 1 [ 899.279530][ T44] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 899.315878][ T44] usb 8-1: USB disconnect, device number 9 [ 899.321866][ T6044] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 899.514215][ T6044] usb 7-1: Using ep0 maxpacket: 16 [ 899.699119][ T6044] usb 7-1: descriptor type invalid, skip [ 899.741353][ T6044] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 900.489620][ T6044] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 900.535653][ T44] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 900.567391][ T6044] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 900.597170][ T6044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.620846][ T6044] usb 7-1: Product: о [ 900.632065][ T6044] usb 7-1: Manufacturer: ꓯϋ႗呈厢ㄶ穸棟ⶾ儛쒕蛱ﻺ엁甹횻뽅戜瞊벯ꗚ齜ｧ⚢Ⱇ[䟆폷袰䢣겣駀뵠蔏ﺁ볋᧜崼鐘ᦚ辋ꭗ荐㙻⅟롲⎄㴯셨训앛լ頑ݦ徰囧ꠃԍᚽ㛴惬醄瑠憡ꗻ啱傸薈鐦繸෉ᯚ깅앲⏿潂⮢␔珌鷸䃾怼ᐢ陃Ѫ냠璃鮒詼촹썎煲㾽噊怄资滟铯캣告ﾕ榢⑏焴ǡᢽ⍯౯賅㉞伒鬭䳢锿Ꚑ◧ [ 900.776028][ T6044] usb 7-1: SerialNumber: syz [ 901.142805][ T6044] usb 7-1: 0:2 : does not exist [ 901.474095][ T6044] usb 7-1: USB disconnect, device number 11 [ 901.638899][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.719541][ T7261] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 902.916113][ T7261] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 902.950081][ T7261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.996228][ T7261] usb 9-1: Product: syz [ 903.014948][ T7261] usb 9-1: Manufacturer: syz [ 903.031801][ T7261] usb 9-1: SerialNumber: syz [ 904.319615][ T7261] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 904.357512][ T7261] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 904.390237][ T7261] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 904.430273][ T7261] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 905.114487][T13899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 905.611484][T12360] usb 9-1: USB disconnect, device number 13 [ 910.867871][T13955] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 911.571746][ T6044] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 912.298148][ T6044] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 912.399985][ T6044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.993030][ T6044] usb 1-1: Product: syz [ 913.058213][ T6044] usb 1-1: Manufacturer: syz [ 913.132655][ T6044] usb 1-1: SerialNumber: syz [ 913.309549][ T7642] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 913.470956][ T7642] usb 8-1: Using ep0 maxpacket: 16 [ 913.513942][ T7642] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 913.549602][ T7642] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 913.565183][ T7642] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 913.576111][ T7642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.584225][ T7642] usb 8-1: Product: syz [ 913.589915][ T7642] usb 8-1: Manufacturer: syz [ 913.598774][ T7642] usb 8-1: SerialNumber: syz [ 913.607117][ T7642] usb 8-1: config 0 descriptor?? [ 913.633279][ T7642] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 913.649876][ T7642] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 914.135208][ T6044] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 914.329628][ T6044] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 914.359777][ T7642] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 914.360442][ T6044] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 914.369516][ T7642] em28xx 8-1:0.0: Config register raw data: 0xe8 [ 914.452134][ T7642] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 914.468067][ T7642] em28xx 8-1:0.0: No AC97 audio processor [ 914.508651][ T6044] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 914.790266][ T7642] usb 8-1: USB disconnect, device number 10 [ 915.643919][ T7642] usb 1-1: USB disconnect, device number 13 [ 918.265857][T14000] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 921.251586][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 922.230183][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 922.253284][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.729725][ T24] usb 5-1: Product: syz [ 922.735186][ T24] usb 5-1: Manufacturer: syz [ 922.769534][ T24] usb 5-1: SerialNumber: syz [ 925.031731][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 925.047975][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 925.056029][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 925.066265][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 925.096221][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 925.174005][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 925.403011][T14055] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 925.480407][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 925.510061][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 925.538878][T14049] lo speed is unknown, defaulting to 1000 [ 925.577755][T14049] vxcan1 speed is unknown, defaulting to 1000 [ 925.588909][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 926.434058][ T24] usb 5-1: USB disconnect, device number 10 [ 926.781488][ T6250] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.140221][ T5876] Bluetooth: hci2: command tx timeout [ 927.201450][T14070] Invalid source name [ 927.617251][ T6250] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.105150][T14089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.230034][ T5876] Bluetooth: hci2: command tx timeout [ 929.391363][ T6250] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.562557][T14097] netlink: 'syz.8.2184': attribute type 4 has an invalid length. [ 929.576251][T14097] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2184'. [ 930.834827][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.841573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.299575][ T5876] Bluetooth: hci2: command tx timeout [ 932.119994][ T6250] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.383896][ T5876] Bluetooth: hci2: command tx timeout [ 933.622680][T14148] netlink: 'syz.8.2199': attribute type 4 has an invalid length. [ 933.631151][T14148] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2199'. [ 934.299962][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 934.670003][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 934.756725][ T6250] bridge_slave_1: left allmulticast mode [ 934.766235][ T6250] bridge_slave_1: left promiscuous mode [ 934.774361][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.821359][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 934.832938][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 934.843109][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 934.864203][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 934.879233][ T6250] bridge_slave_0: left allmulticast mode [ 935.049091][ T6250] bridge_slave_0: left promiscuous mode [ 935.060714][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.083901][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.582741][T14167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.975502][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.099524][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 937.169091][ T24] usb 2-1: USB disconnect, device number 9 [ 939.509606][T14190] netlink: 'syz.4.2208': attribute type 8 has an invalid length. [ 940.837726][ T6250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.860180][ T6250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.874682][ T6250] bond0 (unregistering): Released all slaves [ 941.068530][T14049] chnl_net:caif_netlink_parms(): no params data found [ 942.530903][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2215'. [ 947.904743][T14255] kexec: Could not allocate control_code_buffer [ 948.901427][ T5862] Bluetooth: hci0: command 0x0405 tx timeout [ 949.559782][T14049] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.566946][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.645375][T14049] bridge_slave_0: entered allmulticast mode [ 949.689550][T14049] bridge_slave_0: entered promiscuous mode [ 949.880383][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.888028][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.091727][T14049] bridge_slave_1: entered allmulticast mode [ 950.279096][T14049] bridge_slave_1: entered promiscuous mode [ 951.500575][T14281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.912480][T14049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.119992][ T6250] hsr_slave_0: left promiscuous mode [ 956.136318][ T6250] hsr_slave_1: left promiscuous mode [ 956.150139][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.166520][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.066932][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.126806][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.439564][ T6250] veth1_macvtap: left promiscuous mode [ 957.445142][ T6250] veth0_macvtap: left promiscuous mode [ 957.613057][ T6250] veth1_vlan: left promiscuous mode [ 957.618976][ T6250] veth0_vlan: left promiscuous mode [ 960.690013][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'. [ 962.585127][ T6250] team0 (unregistering): Port device team_slave_1 removed [ 962.708044][ T6250] team0 (unregistering): Port device team_slave_0 removed [ 964.141406][ T8263] smc: removing ib device syz2 [ 966.023655][T14049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.728663][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 966.826886][ T9] syz2: Port: 1 Link DOWN [ 966.900467][T14049] team0: Port device team_slave_0 added [ 967.033741][T14049] team0: Port device team_slave_1 added [ 969.524611][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 969.569294][T14401] netlink: 'syz.7.2261': attribute type 4 has an invalid length. [ 969.736498][T14407] tmpfs: Bad value for 'nr_blocks' [ 970.806594][T14407] IPVS: Error connecting to the multicast addr [ 971.684075][T14049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.764069][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.497209][T14049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.690821][T14049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.714134][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.842758][T14049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.676862][T14444] binder: 14441:14444 ioctl c0306201 200000000540 returned -22 [ 974.355265][T14449] qnx6: unable to read the first superblock [ 974.655858][T14451] futex_wake_op: syz.8.2272 tries to shift op by 144; fix this program [ 975.125322][T14049] hsr_slave_0: entered promiscuous mode [ 975.411420][T14049] hsr_slave_1: entered promiscuous mode [ 976.892223][T14049] debugfs: 'hsr0' already exists in 'hsr' [ 976.907497][T14049] Cannot create hsr debugfs directory [ 981.937403][T14508] binder: 14506:14508 ioctl c0306201 200000000540 returned -22 [ 982.293992][ T6250] IPVS: stop unused estimator thread 0... [ 983.608886][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 983.911029][T14518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 983.959511][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 983.993026][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 984.014572][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 984.069960][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.724084][T14514] lo speed is unknown, defaulting to 1000 [ 985.074769][ T6250] bridge_slave_1: left allmulticast mode [ 985.094210][ T6250] bridge_slave_1: left promiscuous mode [ 985.108439][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.100064][ T5862] Bluetooth: hci4: command tx timeout [ 986.162252][ T6250] bridge_slave_0: left allmulticast mode [ 986.175328][ T6250] bridge_slave_0: left promiscuous mode [ 986.207526][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.555471][T14585] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 987.577872][T14585] overlayfs: failed to set xattr on upper [ 987.995191][T14585] overlayfs: ...falling back to redirect_dir=nofollow. [ 988.190151][ T5862] Bluetooth: hci4: command tx timeout [ 988.194988][T14585] overlayfs: ...falling back to index=off. [ 988.456582][T14585] overlayfs: ...falling back to uuid=null. [ 988.492860][T14585] overlayfs: maximum fs stacking depth exceeded [ 988.939235][T14504] kexec: Could not allocate control_code_buffer [ 989.292576][T14599] binder: 14596:14599 ioctl c0306201 200000000540 returned -22 [ 989.611872][ T6250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.782703][ T6250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.122540][ T6250] bond0 (unregistering): Released all slaves [ 990.259568][ T5862] Bluetooth: hci4: command tx timeout [ 991.088312][ T6250] hsr_slave_0: left promiscuous mode [ 991.138427][ T6250] hsr_slave_1: left promiscuous mode [ 991.354663][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.662351][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.340940][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.347350][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.357610][ T5862] Bluetooth: hci4: command tx timeout [ 993.369981][ T6250] team0 (unregistering): Port device team_slave_1 removed [ 993.438407][ T6250] team0 (unregistering): Port device team_slave_0 removed [ 994.097250][T14644] binder: 14641:14644 ioctl c0306201 200000000540 returned -22 [ 998.214368][T14667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.239683][T12360] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 998.516675][T12360] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 999.427445][T12360] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 999.468901][T12360] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 999.534397][T12360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.573125][T14663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 999.626708][T14514] chnl_net:caif_netlink_parms(): no params data found [ 999.653959][T12360] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 999.671621][T14683] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2322'. [ 1000.032806][T12360] usb 8-1: USB disconnect, device number 11 [ 1006.609555][T14514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.616771][T14514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.397255][T14514] bridge_slave_0: entered allmulticast mode [ 1007.412128][T14514] bridge_slave_0: entered promiscuous mode [ 1007.420288][T14514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.427479][T14514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.439561][T14514] bridge_slave_1: entered allmulticast mode [ 1007.447384][T14514] bridge_slave_1: entered promiscuous mode [ 1008.150658][T14514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.410200][ T6044] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1008.602483][T14514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.001682][ T6044] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1009.044459][ T6044] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1009.112147][ T6044] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1009.152682][ T6044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.192607][T14514] team0: Port device team_slave_0 added [ 1009.259009][T14514] team0: Port device team_slave_1 added [ 1009.266196][T14757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1009.339071][ T6044] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1010.489677][ T6044] usb 2-1: USB disconnect, device number 10 [ 1011.189087][T14514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.208845][T14514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.980216][T14514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.017015][T14514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.077514][T14514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.223371][T14514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.652849][T14779] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2343'. [ 1013.931052][T14514] hsr_slave_0: entered promiscuous mode [ 1013.955607][T14514] hsr_slave_1: entered promiscuous mode [ 1013.967309][T14514] debugfs: 'hsr0' already exists in 'hsr' [ 1013.979223][T14514] Cannot create hsr debugfs directory [ 1020.775715][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2356'. [ 1020.899463][T14828] veth1: entered promiscuous mode [ 1020.969008][T14828] netlink: 'syz.7.2356': attribute type 8 has an invalid length. [ 1020.990979][T14828] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 1021.290386][T14838] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1021.340645][T14838] overlayfs: failed to set xattr on upper [ 1021.492501][T14838] overlayfs: ...falling back to redirect_dir=nofollow. [ 1021.539496][T14838] overlayfs: ...falling back to index=off. [ 1022.017099][T14838] overlayfs: ...falling back to uuid=null. [ 1022.084606][T14845] netlink: 'syz.1.2359': attribute type 1 has an invalid length. [ 1022.089459][T14838] overlayfs: maximum fs stacking depth exceeded [ 1022.167359][T14845] netlink: 'syz.1.2359': attribute type 4 has an invalid length. [ 1022.229597][T14845] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2359'. [ 1031.299204][T14514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1031.420321][T14514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1031.481042][T14514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1031.573369][T14514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1032.615508][T14514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.499494][ T7261] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1033.517010][T14514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.586087][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.593307][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.660835][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.668030][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.679842][ T7261] usb 5-1: Using ep0 maxpacket: 32 [ 1033.726504][ T7261] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1033.741802][ T7261] usb 5-1: config 0 has no interface number 0 [ 1033.770993][ T7261] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1033.799613][ T7261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.839457][ T7261] usb 5-1: Product: syz [ 1033.841646][T14514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.843638][ T7261] usb 5-1: Manufacturer: syz [ 1033.926044][ T7261] usb 5-1: SerialNumber: syz [ 1033.981501][ T7261] usb 5-1: config 0 descriptor?? [ 1034.054888][ T7261] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1034.629905][ T5986] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1035.193223][ T5986] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1035.210088][ T7261] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1035.219420][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.219449][ T5986] usb 1-1: Product: syz [ 1035.219493][ T5986] usb 1-1: Manufacturer: syz [ 1035.219512][ T5986] usb 1-1: SerialNumber: syz [ 1035.222505][ T5986] usb 1-1: config 0 descriptor?? [ 1035.260769][ T5986] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 014 [ 1035.362202][ T7261] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1035.375843][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1035.459512][ T7261] usb 5-1: USB disconnect, device number 11 [ 1035.469832][ T30] audit: type=1800 audit(1756345646.325:43): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2386" name="/newroot/452/bus/#2415//deleted" dev="tmpfs" ino=2415 res=0 errno=0 [ 1035.653650][ T7261] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1035.753998][ T7261] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1035.816681][ T7261] quatech2 5-1:0.51: device disconnected [ 1035.882878][ T5986] i2c i2c-1: failure reading functionality [ 1035.996589][ T5986] i2c i2c-1: connected i2c-tiny-usb device [ 1036.224041][ T5986] usb 1-1: USB disconnect, device number 14 [ 1036.947905][T14514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.504943][T14992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.653234][T14514] veth0_vlan: entered promiscuous mode [ 1038.813997][T15006] binder: 14995:15006 ioctl c0306201 200000000540 returned -22 [ 1039.016340][T14514] veth1_vlan: entered promiscuous mode [ 1039.957555][T14514] veth0_macvtap: entered promiscuous mode [ 1041.665793][T15032] ufs: You didn't specify the type of your ufs filesystem [ 1041.665793][T15032] [ 1041.665793][T15032] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1041.665793][T15032] [ 1041.665793][T15032] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1041.697856][T15032] ufs: ufstype=old is supported read-only [ 1041.711425][T15032] ufs: ufs_fill_super(): bad magic number [ 1045.428710][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1045.442247][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1045.451435][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1045.460260][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1045.469508][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1047.006922][T15060] lo speed is unknown, defaulting to 1000 [ 1047.361280][T15081] binder: 15078:15081 ioctl c0306201 200000000540 returned -22 [ 1047.570321][ T5876] Bluetooth: hci2: command tx timeout [ 1049.619509][ T5876] Bluetooth: hci2: command tx timeout [ 1051.757331][ T5876] Bluetooth: hci2: command tx timeout [ 1054.378990][ T5876] Bluetooth: hci2: command tx timeout [ 1054.441936][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.587792][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.961497][T15142] binder: 15138:15142 ioctl c0306201 200000000540 returned -22 [ 1056.695411][T15060] chnl_net:caif_netlink_parms(): no params data found [ 1059.876232][ T7605] bridge_slave_1: left allmulticast mode [ 1059.932819][ T7605] bridge_slave_1: left promiscuous mode [ 1060.027067][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.219936][ T7605] bridge_slave_0: left allmulticast mode [ 1060.225609][ T7605] bridge_slave_0: left promiscuous mode [ 1060.231527][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.232173][T15201] binder: 15198:15201 ioctl c0306201 200000000540 returned -22 [ 1064.861273][T15225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2443'. [ 1065.989444][ T5986] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1066.603355][ T7605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.671120][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 1066.693025][ T7605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.707962][ T5986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1066.735538][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.777631][ T5986] usb 2-1: config 0 has no interfaces? [ 1066.784274][ T7605] bond0 (unregistering): Released all slaves [ 1066.803730][ T5986] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1067.192149][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.239367][ T5986] usb 2-1: Product: syz [ 1067.269384][ T5986] usb 2-1: Manufacturer: syz [ 1067.289454][ T5986] usb 2-1: SerialNumber: syz [ 1067.353070][ T5986] usb 2-1: config 0 descriptor?? [ 1067.643786][ T5986] usb 2-1: USB disconnect, device number 11 [ 1068.001072][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.008817][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.048937][T15060] bridge_slave_0: entered allmulticast mode [ 1068.068539][T15060] bridge_slave_0: entered promiscuous mode [ 1070.446993][T15268] binder: 15264:15268 ioctl c0306201 200000000540 returned -22 [ 1070.547768][ T7605] hsr_slave_0: left promiscuous mode [ 1070.604371][ T7605] hsr_slave_1: left promiscuous mode [ 1070.626533][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.672936][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.945176][T15281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1072.011055][ T7605] veth0_macvtap: left promiscuous mode [ 1072.016765][ T7605] veth1_vlan: left promiscuous mode [ 1072.079589][ T7605] veth0_vlan: left promiscuous mode [ 1072.223193][T15290] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2457'. [ 1074.944618][ T7605] team0 (unregistering): Port device team_slave_1 removed [ 1075.015932][ T7605] team0 (unregistering): Port device team_slave_0 removed [ 1078.084887][T15313] binder: 15312:15313 ioctl c0306201 200000000540 returned -22 [ 1078.916408][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.938063][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.996419][ T30] audit: type=1800 audit(1756345689.845:44): pid=15321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2467" name="/newroot/169/bus/#885//deleted" dev="tmpfs" ino=885 res=0 errno=0 [ 1079.086177][T15060] bridge_slave_1: entered allmulticast mode [ 1079.109457][T15060] bridge_slave_1: entered promiscuous mode [ 1079.219503][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1079.955191][T15060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.988636][T15060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.024281][ T24] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1080.053001][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.079425][ T24] usb 2-1: Product: syz [ 1080.089699][ T24] usb 2-1: Manufacturer: syz [ 1080.100714][ T24] usb 2-1: SerialNumber: syz [ 1080.309992][ T24] usb 2-1: config 0 descriptor?? [ 1080.318626][ T24] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 012 [ 1081.048216][ T24] i2c i2c-1: failure reading functionality [ 1081.057757][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 1081.069905][ T24] usb 2-1: USB disconnect, device number 12 [ 1082.138964][T15060] team0: Port device team_slave_0 added [ 1082.183956][T15060] team0: Port device team_slave_1 added [ 1082.240879][T15352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.518262][T15060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.247974][T12134] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1083.422043][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.448045][T15060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.601264][T12134] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1083.614718][T12134] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1083.624736][T12134] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1083.641950][T15060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.644981][T12134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.657088][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.824033][T15060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.163671][T12134] usb 1-1: config 0 descriptor?? [ 1085.692182][T12134] usbhid 1-1:0.0: can't add hid device: -71 [ 1085.701106][T12134] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1085.729533][T12134] usb 1-1: USB disconnect, device number 15 [ 1085.752167][T15060] hsr_slave_0: entered promiscuous mode [ 1085.775008][T15060] hsr_slave_1: entered promiscuous mode [ 1085.801279][T15060] debugfs: 'hsr0' already exists in 'hsr' [ 1085.807044][T15060] Cannot create hsr debugfs directory [ 1089.982729][T15438] netlink: 'syz.1.2494': attribute type 4 has an invalid length. [ 1091.911918][T15060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1092.103466][T15060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1093.045849][T15060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1093.638962][T15060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1093.704887][T15469] netlink: 'syz.0.2502': attribute type 1 has an invalid length. [ 1093.755019][T15469] netlink: 'syz.0.2502': attribute type 4 has an invalid length. [ 1093.976133][T15481] netlink: 'syz.4.2505': attribute type 1 has an invalid length. [ 1093.984092][T15481] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2505'. [ 1094.025888][T15469] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2502'. [ 1094.039859][T15481] netlink: 'syz.4.2505': attribute type 2 has an invalid length. [ 1094.152193][T15481] netlink: 'syz.4.2505': attribute type 1 has an invalid length. [ 1094.245872][T15060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.339945][T15060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.500812][T15336] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1094.867715][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.874912][T12410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.011295][T15336] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1095.417931][T15336] usb 2-1: config 0 has no interface number 0 [ 1095.459873][T15336] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1095.468945][T15336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.522445][T15336] usb 2-1: config 0 descriptor?? [ 1095.582061][T15336] usb 2-1: selecting invalid altsetting 1 [ 1095.596862][T15336] dvb_ttusb_budget: ttusb_init_controller: error [ 1095.622370][T15336] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1095.760807][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.767982][T12412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.937073][T15336] DVB: Unable to find symbol cx22700_attach() [ 1095.991109][T15060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1096.416761][T15336] DVB: Unable to find symbol tda10046_attach() [ 1097.109626][T15336] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1097.145455][T15336] usb 2-1: USB disconnect, device number 13 [ 1101.597441][T15561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.262511][T15569] IPVS: stopping backup sync thread 15571 ... [ 1103.269540][T15571] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1103.630452][ T6044] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1103.862627][ T6044] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1103.929271][ T6044] usb 2-1: config 0 has no interface number 0 [ 1104.006448][ T6044] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1104.077556][ T6044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.176376][ T6044] usb 2-1: config 0 descriptor?? [ 1104.289575][ T6044] usb 2-1: selecting invalid altsetting 1 [ 1104.357378][ T6044] dvb_ttusb_budget: ttusb_init_controller: error [ 1104.826732][ T6044] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1105.087528][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1105.099904][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1105.121359][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1105.130908][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1105.139262][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1105.259653][ T6044] DVB: Unable to find symbol cx22700_attach() [ 1105.387078][T15587] lo speed is unknown, defaulting to 1000 [ 1107.235484][ T5862] Bluetooth: hci2: command tx timeout [ 1107.788301][ T6044] DVB: Unable to find symbol tda10046_attach() [ 1107.979137][ T6044] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1108.997433][ T6044] usb 2-1: USB disconnect, device number 14 [ 1109.355548][ T5862] Bluetooth: hci2: command tx timeout [ 1111.381803][ T5862] Bluetooth: hci2: command tx timeout [ 1113.466262][ T5862] Bluetooth: hci2: command tx timeout [ 1113.770212][ T1132] bridge_slave_1: left allmulticast mode [ 1113.777264][ T1132] bridge_slave_1: left promiscuous mode [ 1113.784915][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.877963][ T1132] bridge_slave_0: left allmulticast mode [ 1113.893639][ T1132] bridge_slave_0: left promiscuous mode [ 1113.909827][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.010584][ T6044] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1114.019846][T12134] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1114.183880][T12134] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1114.744626][T12134] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.761520][ T6044] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1114.774996][T12134] usb 8-1: Product: syz [ 1114.779178][T12134] usb 8-1: Manufacturer: syz [ 1114.789471][ T6044] usb 1-1: config 0 has no interface number 0 [ 1114.805041][T12134] usb 8-1: SerialNumber: syz [ 1114.811687][ T6044] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1114.864842][ T6044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.068518][ T6044] usb 1-1: config 0 descriptor?? [ 1115.152125][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.158609][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.870039][ T6044] usb 1-1: selecting invalid altsetting 1 [ 1115.920376][ T6044] dvb_ttusb_budget: ttusb_init_controller: error [ 1115.947199][ T6044] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1116.755159][ T6044] DVB: Unable to find symbol cx22700_attach() [ 1116.836588][T12134] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1116.882629][T12134] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1116.927579][T12134] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1117.006833][T12134] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1117.033949][ T6044] DVB: Unable to find symbol tda10046_attach() [ 1117.046939][ T6044] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1117.098068][ T6044] usb 1-1: USB disconnect, device number 16 [ 1117.268831][T12134] usb 8-1: USB disconnect, device number 12 [ 1118.504502][T15695] fuse: Bad value for 'fd' [ 1119.330633][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.486269][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.509828][ T1132] bond0 (unregistering): Released all slaves [ 1119.692633][ T1132] hsr_slave_0: left promiscuous mode [ 1119.731923][ T1132] hsr_slave_1: left promiscuous mode [ 1119.738312][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.774816][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.432559][T15707] 9pnet_fd: Insufficient options for proto=fd [ 1121.674209][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 1121.876465][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 1124.151523][T15336] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1124.317602][T15587] chnl_net:caif_netlink_parms(): no params data found [ 1124.345211][T15336] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1124.374723][T15692] Process accounting resumed [ 1124.379808][T15336] usb 1-1: config 0 has no interface number 0 [ 1124.385916][T15336] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1124.475948][T15336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.525935][T15336] usb 1-1: config 0 descriptor?? [ 1124.562227][T15336] usb 1-1: selecting invalid altsetting 1 [ 1124.599766][T15336] dvb_ttusb_budget: ttusb_init_controller: error [ 1124.606140][T15336] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1124.642037][T15754] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2556'. [ 1126.483089][T15771] qnx6: unable to read the first superblock [ 1126.493021][T15771] futex_wake_op: syz.1.2558 tries to shift op by 144; fix this program [ 1127.052805][T15336] DVB: Unable to find symbol cx22700_attach() [ 1127.792372][T15782] 9pnet_fd: Insufficient options for proto=fd [ 1127.834354][T15587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.842285][T15336] DVB: Unable to find symbol tda10046_attach() [ 1127.871459][T15336] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1128.067895][T15587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.075338][T15587] bridge_slave_0: entered allmulticast mode [ 1128.091661][T15587] bridge_slave_0: entered promiscuous mode [ 1128.103845][T15336] usb 1-1: USB disconnect, device number 17 [ 1130.687427][T15814] fuse: Bad value for 'fd' [ 1130.917165][T15785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.924585][T15785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.026295][T15785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.122647][T15785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.861932][T15790] : entered promiscuous mode [ 1134.872720][T15587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.882647][T15587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.894788][T15587] bridge_slave_1: entered allmulticast mode [ 1134.912837][T15587] bridge_slave_1: entered promiscuous mode [ 1135.082120][ T44] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1135.124596][T12414] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.147653][T15805] Process accounting resumed [ 1135.276221][T15587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.317803][ T44] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1135.329207][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.349503][T12414] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.435648][ T44] usb 8-1: Product: syz [ 1135.443305][T12414] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.454398][ T44] usb 8-1: Manufacturer: syz [ 1135.460089][ T44] usb 8-1: SerialNumber: syz [ 1135.663288][ T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1136.698644][T15587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.877366][T12412] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.072668][T15587] team0: Port device team_slave_0 added [ 1137.157230][T15587] team0: Port device team_slave_1 added [ 1137.367596][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1137.391667][ T24] usb 2-1: config 0 has no interface number 0 [ 1137.397827][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1137.410733][T15587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.431495][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.682780][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.015133][ T24] usb 2-1: config 0 descriptor?? [ 1138.104076][ T24] usb 2-1: selecting invalid altsetting 1 [ 1138.114395][T15587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.143815][T15587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.159322][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.279619][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 1138.286020][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1138.341536][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1138.549341][T15587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.435942][T15901] Can't find ip_set type hash:ip,po [ 1139.546634][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1139.618588][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1139.652193][ T44] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1139.706468][ T44] usb 8-1: USB disconnect, device number 13 [ 1139.715337][ T24] DVB: Unable to find symbol cx22700_attach() [ 1140.216140][T15587] hsr_slave_0: entered promiscuous mode [ 1140.245556][T15587] hsr_slave_1: entered promiscuous mode [ 1140.422126][T15587] debugfs: 'hsr0' already exists in 'hsr' [ 1140.428470][T15587] Cannot create hsr debugfs directory [ 1140.625292][ T24] DVB: Unable to find symbol tda10046_attach() [ 1140.663835][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1140.729164][ T24] usb 2-1: USB disconnect, device number 15 [ 1140.736490][T15917] sctp: failed to load transform for md5: -2 [ 1142.791397][T15923] kexec: Could not allocate control_code_buffer [ 1143.198471][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1144.023643][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1144.312287][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.329780][ T24] usb 2-1: Product: syz [ 1144.339857][ T24] usb 2-1: Manufacturer: syz [ 1144.344454][ T24] usb 2-1: SerialNumber: syz [ 1144.870748][T15974] qnx6: unable to read the first superblock [ 1144.929163][T15974] futex_wake_op: syz.0.2596 tries to shift op by 144; fix this program [ 1145.969538][ T44] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1146.118717][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1146.172499][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1146.216975][ T44] usb 1-1: config 0 has no interface number 0 [ 1146.234733][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1146.269591][ T44] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1146.295556][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1146.320397][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.325978][T15987] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1146.336699][T15987] overlayfs: failed to set xattr on upper [ 1146.342844][T15987] overlayfs: ...falling back to redirect_dir=nofollow. [ 1146.354526][ T44] usb 1-1: config 0 descriptor?? [ 1146.395259][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1146.410767][ T44] usb 1-1: selecting invalid altsetting 1 [ 1146.415028][T15987] overlayfs: ...falling back to index=off. [ 1146.425411][T15987] overlayfs: ...falling back to uuid=null. [ 1146.446419][T15987] overlayfs: maximum fs stacking depth exceeded [ 1146.449729][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 1146.474313][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1146.509812][ T24] usb 2-1: USB disconnect, device number 16 [ 1146.648419][T15587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1146.723380][T15587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1146.752905][T15587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1146.837229][T15587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1146.945042][ T44] DVB: Unable to find symbol cx22700_attach() [ 1148.209102][ T44] DVB: Unable to find symbol tda10046_attach() [ 1148.267750][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1148.299062][T15587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.366604][ T44] usb 1-1: USB disconnect, device number 18 [ 1148.420416][T15587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.453777][T16021] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1149.499769][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.507073][T12418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.528017][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.535148][T12412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.711808][ T7642] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1149.879436][ T7642] usb 9-1: Using ep0 maxpacket: 8 [ 1149.906759][ T7642] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1149.921540][ T7642] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 1149.945253][ T7642] usb 9-1: config 4 has no interface number 0 [ 1149.972284][ T7642] usb 9-1: config 4 interface 30 has no altsetting 0 [ 1150.010044][ T7642] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1150.045590][ T7642] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.081261][ T7642] usb 9-1: Product: syz [ 1150.149559][ T7642] usb 9-1: Manufacturer: syz [ 1150.166515][ T7642] usb 9-1: SerialNumber: syz [ 1150.443492][ T7642] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1150.620835][ T7642] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1150.642038][ T7642] dvb-usb: bulk message failed: -22 (2/0) [ 1150.680750][ T7642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1150.730277][ T7642] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1150.771210][ T7642] usb 9-1: media controller created [ 1150.787483][T15587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.800289][ T7642] dvb-usb: bulk message failed: -22 (6/0) [ 1150.844113][ T7642] dw2102: i2c transfer failed. [ 1150.848905][ T7642] dvb-usb: bulk message failed: -22 (6/0) [ 1150.884849][ T7642] dw2102: i2c transfer failed. [ 1150.900034][ T7642] dvb-usb: bulk message failed: -22 (6/0) [ 1150.919597][ T7642] dw2102: i2c transfer failed. [ 1150.947132][ T7642] dvb-usb: bulk message failed: -22 (6/0) [ 1150.966156][T15587] veth0_vlan: entered promiscuous mode [ 1150.987802][ T7642] dw2102: i2c transfer failed. [ 1151.012778][ T7642] dvb-usb: bulk message failed: -22 (6/0) [ 1151.028102][ T7642] dw2102: i2c transfer failed. [ 1151.046321][ T7642] dvb-usb: bulk message failed: -22 (6/0) [ 1151.066808][T15587] veth1_vlan: entered promiscuous mode [ 1151.075006][ T7642] dw2102: i2c transfer failed. [ 1151.101380][ T7642] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1151.219140][T15587] veth0_macvtap: entered promiscuous mode [ 1151.226545][ T7642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1151.264775][T15587] veth1_macvtap: entered promiscuous mode [ 1151.350983][ T7642] dvb-usb: bulk message failed: -22 (3/0) [ 1151.375291][ T7642] dw2102: command 0x0e transfer failed. [ 1151.399561][ T7642] dvb-usb: bulk message failed: -22 (3/0) [ 1151.427859][ T7642] dw2102: command 0x0e transfer failed. [ 1151.528162][T15587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.671305][T16044] tmpfs: Bad value for 'mpol' [ 1151.927323][T15587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.960199][ T7642] dvb-usb: bulk message failed: -22 (3/0) [ 1151.978784][T16038] kexec: Could not allocate control_code_buffer [ 1151.988422][ T7642] dw2102: command 0x0e transfer failed. [ 1152.006211][ T7642] dvb-usb: bulk message failed: -22 (3/0) [ 1152.028449][ T7642] dw2102: command 0x0e transfer failed. [ 1152.043415][T12412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.067106][ T7642] dvb-usb: bulk message failed: -22 (1/0) [ 1152.087424][T12412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.096343][ T7642] dw2102: command 0x51 transfer failed. [ 1152.120396][ T7642] dvb-usb: bulk message failed: -22 (5/0) [ 1152.126110][ T7642] dw2102: i2c probe for address 0x68 failed. [ 1152.151292][T12412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.214332][ T7642] dvb-usb: bulk message failed: -22 (5/0) [ 1152.224125][ T7642] dw2102: i2c probe for address 0x69 failed. [ 1152.244329][ T7642] dvb-usb: bulk message failed: -22 (5/0) [ 1152.264338][ T7642] dw2102: i2c probe for address 0x6a failed. [ 1152.283249][ T7642] dw2102: probing for demodulator failed. Is the external power switched on? [ 1152.302117][ T7642] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1152.322862][T12412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.489410][ T7642] rc_core: IR keymap rc-tt-1500 not found [ 1152.495170][ T7642] Registered IR keymap rc-empty [ 1152.528662][ T7642] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1152.684349][ T7642] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input11 [ 1152.775272][ T7642] dvb-usb: schedule remote query interval to 250 msecs. [ 1152.799553][ T7642] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1152.811914][ T7642] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1152.844289][T12414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.899103][ T7642] usb 9-1: USB disconnect, device number 14 [ 1152.925523][T12414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.577301][ T7642] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1153.751946][ T8368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.761108][ T8368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.022793][T16079] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1156.030425][T16079] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1161.974384][T16127] kexec: Could not allocate control_code_buffer [ 1162.045549][T16128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1168.008420][T16167] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 1168.421094][T16169] fuse: Bad value for 'fd' [ 1168.482996][T12135] Process accounting resumed [ 1169.869896][ T30] audit: type=1800 audit(1756345780.725:45): pid=16180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2644" name="/newroot/394/bus/#2061//deleted" dev="tmpfs" ino=2061 res=0 errno=0 [ 1174.600060][T16234] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 1174.612241][T16234] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1174.620660][T16234] CPU: 0 UID: 0 PID: 16234 Comm: syz.7.2658 Not tainted syzkaller #0 PREEMPT(full) [ 1174.630029][T16234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1174.640084][T16234] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1174.645623][T16234] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a9 1b 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 88 1b 36 f9 4d 8b 24 24 48 83 c3 [ 1174.665214][T16234] RSP: 0018:ffffc9000bdb7a60 EFLAGS: 00010216 [ 1174.671287][T16234] RAX: 0000000000000005 RBX: ffff8880326b6d00 RCX: 0000000000080000 [ 1174.679321][T16234] RDX: ffffc9001dcea000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 1174.687342][T16234] RBP: 0000000000000001 R08: ffff88802eedd12f R09: 1ffff11005ddba25 [ 1174.695302][T16234] R10: dffffc0000000000 R11: ffffffff88ecd870 R12: 0000000000000028 [ 1174.703260][T16234] R13: dffffc0000000000 R14: ffff88802eedd000 R15: dffffc0000000000 [ 1174.711218][T16234] FS: 00007f3e184cd6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1174.720130][T16234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1174.726688][T16234] CR2: 0000562d08645048 CR3: 0000000077c4c000 CR4: 0000000000350ef0 [ 1174.734641][T16234] Call Trace: [ 1174.737914][T16234] [ 1174.740825][T16234] pcl818_detach+0x66/0xd0 [ 1174.745236][T16234] comedi_device_detach_locked+0x178/0x750 [ 1174.751039][T16234] comedi_unlocked_ioctl+0xcde/0x1020 [ 1174.756394][T16234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.762016][T16234] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1174.767816][T16234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.773427][T16234] ? __lock_acquire+0xab9/0xd20 [ 1174.778277][T16234] ? __fget_files+0x2a/0x420 [ 1174.782881][T16234] ? __fget_files+0x2a/0x420 [ 1174.787509][T16234] ? __fget_files+0x3a0/0x420 [ 1174.792179][T16234] ? __fget_files+0x2a/0x420 [ 1174.796766][T16234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.802397][T16234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.808028][T16234] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1174.813817][T16234] __se_sys_ioctl+0xfc/0x170 [ 1174.818393][T16234] do_syscall_64+0xfa/0x3b0 [ 1174.822886][T16234] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.828081][T16234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.834130][T16234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.839923][T16234] ? exc_page_fault+0x9f/0xf0 [ 1174.844592][T16234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.850491][T16234] RIP: 0033:0x7f3e1758ebe9 [ 1174.854889][T16234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.874485][T16234] RSP: 002b:00007f3e184cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.882886][T16234] RAX: ffffffffffffffda RBX: 00007f3e177b5fa0 RCX: 00007f3e1758ebe9 [ 1174.890856][T16234] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1174.898828][T16234] RBP: 00007f3e17611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1174.906804][T16234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.914775][T16234] R13: 00007f3e177b6038 R14: 00007f3e177b5fa0 R15: 00007ffd86de26d8 [ 1174.922759][T16234] [ 1174.925771][T16234] Modules linked in: [ 1174.931911][T16234] ---[ end trace 0000000000000000 ]--- [ 1174.945328][T16234] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1174.984431][T16234] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a9 1b 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 88 1b 36 f9 4d 8b 24 24 48 83 c3 [ 1175.048415][T16234] RSP: 0018:ffffc9000bdb7a60 EFLAGS: 00010216 [ 1175.076316][T16234] RAX: 0000000000000005 RBX: ffff8880326b6d00 RCX: 0000000000080000 [ 1175.087683][T16234] RDX: ffffc9001dcea000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 1175.098173][T16234] RBP: 0000000000000001 R08: ffff88802eedd12f R09: 1ffff11005ddba25 [ 1175.108343][T16234] R10: dffffc0000000000 R11: ffffffff88ecd870 R12: 0000000000000028 [ 1175.125690][T16234] R13: dffffc0000000000 R14: ffff88802eedd000 R15: dffffc0000000000 [ 1175.135640][T16234] FS: 00007f3e184cd6c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1175.152494][T16234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.173064][T16234] CR2: 0000200000003000 CR3: 0000000077c4c000 CR4: 0000000000350ef0 [ 1175.185624][T16234] Kernel panic - not syncing: Fatal exception [ 1175.191920][T16234] Kernel Offset: disabled [ 1175.196253][T16234] Rebooting in 86400 seconds..