last executing test programs: 30m33.347289255s ago: executing program 32 (id=7): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x2004c805}, 0x40880) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) sendto$inet(r3, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x49) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) 25m16.654322229s ago: executing program 1 (id=1124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xfce1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket(0x1e, 0x4, 0x0) 25m1.554522361s ago: executing program 33 (id=1124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xfce1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket(0x1e, 0x4, 0x0) 24m59.073928909s ago: executing program 34 (id=1160): unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffd}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40) 24m58.18210669s ago: executing program 35 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x57, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x47, 0x2, {{0x1, 0x2, 0x1, 0x9, 0x1}, 0xfffffffd, 0x1, 0xe, 0x3, 0xfffffffa, 0x6, 0x8, 0x5, 0x7, 0x14ee808c, {0x2f0095fc, 0x7, 0xffff8001, 0x0, 0x6, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 19m5.716543455s ago: executing program 36 (id=3533): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES16], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffff, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000003c0)={0x9, 0x0, '\x00', {0x0, @bt={0x8, 0x0, 0x0, 0x1, 0x7, 0x6, 0x1ff, 0x9, 0x80000000, 0xdb5, 0x7, 0x9, 0x2, 0x4, 0x12, 0x1, {0x3c, 0xff}, 0x7, 0x2}}}) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ibss_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d0003006861"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 17m32.496276045s ago: executing program 37 (id=3754): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="09e6e81fd9b032b805c90000000000000100"/28, @ANYRES32], 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000180)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) 17m32.26848699s ago: executing program 38 (id=3742): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 17m32.108036422s ago: executing program 39 (id=3752): socket$packet(0x11, 0x2, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xd, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x0, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x10}, {0x0, 0x8, 0x8, 0x1, 0x3, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 17m31.67797719s ago: executing program 40 (id=3755): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0}) 17m31.283738252s ago: executing program 41 (id=3753): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) 16m46.800735347s ago: executing program 1 (id=3757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 16m45.00687687s ago: executing program 1 (id=3762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="ab8b000000000031c4e90d000000"], 0x18}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) 16m42.927612803s ago: executing program 1 (id=3764): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 16m42.355829525s ago: executing program 1 (id=3765): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) socket$rds(0x15, 0x5, 0x0) 16m41.843373936s ago: executing program 1 (id=3766): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x8, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) fanotify_init(0x4, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xb0, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000140), 0x4, &(0x7f0000000480)) ioctl$BLKRRPART(r4, 0x125f, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x5d, 0x2780) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f00000000c0)=""/37) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)=0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000603, r7, &(0x7f0000000240)={0x1, 0x8}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) 16m26.982620562s ago: executing program 42 (id=3763): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES16], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xc, &(0x7f0000000100)) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffff, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000003c0)={0x9, 0x0, '\x00', {0x0, @bt={0x8, 0x0, 0x0, 0x1, 0x7, 0x6, 0x1ff, 0x9, 0x80000000, 0xdb5, 0x7, 0x9, 0x2, 0x4, 0x12, 0x1, {0x3c, 0xff}, 0x7, 0x2}}}) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ibss_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16m23.37254791s ago: executing program 43 (id=3766): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x8, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) fanotify_init(0x4, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xb0, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000140), 0x4, &(0x7f0000000480)) ioctl$BLKRRPART(r4, 0x125f, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x5d, 0x2780) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f00000000c0)=""/37) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)=0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000603, r7, &(0x7f0000000240)={0x1, 0x8}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) 14m36.075826425s ago: executing program 4 (id=3977): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(r1, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 14m35.680802323s ago: executing program 4 (id=3980): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x981) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 14m35.364847756s ago: executing program 4 (id=3982): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000000)="a1540d2d205bffa0cf9387e4f2fd23f4d7e96b29ecf0f5e13284d7f7e395803b63d9f180af223a0786269065a66d272a333695eb3189298eb9c6a634d4f531c0e02ccb903b2dfbc3200149941d74a8f12bd988cf88bdb51b8fcb43f5bc21ca674c65db0d48e41c8d5a4e24e4277c563d97874090958abaced121fa752f5109c77a0ea71184ede060ade67071cfb342df3b4367b3a319785bdcb495497d4835537934249bef612df74e39d1bf093be2954461ebd3984ea6f038950a6fee0bbd88e6ef8f67012916a3d097ecbd9c60be4aad500dc1b3546575648c4b552b2761ab3efdc848032bb07d087c7ebab20b461ce72c127051d591e360", 0xf9}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000100)}, {&(0x7f00000001c0)}], 0x5, 0x5, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x1) 14m33.840042119s ago: executing program 4 (id=3984): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x5, 0x4b77ef9e, 0x8, 0x74e5, 0x8, 0x7daf, 0x991c, 0x2, 0xbd, 0x81, 0x3, 0x5, 0x1, 0xc, 0xffffffffffffffff]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff85, &(0x7f00000000c0)=ANY=[]) 14m30.528775454s ago: executing program 4 (id=3988): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(r1, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 14m29.935883576s ago: executing program 4 (id=3990): openat$rfkill(0xffffffffffffff9c, 0x0, 0x600540, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket(0x2d, 0x80000, 0x3a) clock_gettime(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002c40)=[{{&(0x7f0000000240)=@nfc, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/145}, {&(0x7f0000000680)=""/210}, {&(0x7f0000000840)=""/198}], 0x0, &(0x7f0000000940)=""/209}, 0x2}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/96}, {&(0x7f0000000a40)=""/148}, {&(0x7f0000000b00)=""/128}, {&(0x7f0000000b80)=""/68}, {&(0x7f0000000400)=""/61}, {&(0x7f0000000c00)=""/58}, {&(0x7f0000000c40)=""/88}], 0x0, &(0x7f0000000d40)=""/85}, 0x10}, {{&(0x7f0000000dc0)=@caif, 0x0, &(0x7f0000002000)=[{&(0x7f0000000e40)=""/4096}, {&(0x7f0000001e40)=""/153}, {&(0x7f0000001f00)=""/56}, {&(0x7f0000001f40)=""/34}, {&(0x7f0000001f80)=""/67}]}, 0x3}, {{&(0x7f0000002080)=@sco={0x1f, @none}, 0x0, &(0x7f0000002800)=[{&(0x7f0000002100)=""/231}, {&(0x7f0000002200)=""/36}, {&(0x7f0000002240)=""/100}, {&(0x7f00000022c0)=""/156}, {&(0x7f0000002d80)=""/259}, {&(0x7f0000002480)=""/205}, {&(0x7f0000002580)=""/74}, {&(0x7f0000002600)=""/220}, {&(0x7f0000002700)=""/204}], 0x0, &(0x7f00000028c0)=""/36}, 0x1}, {{&(0x7f0000002900)=@nfc_llcp, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002980)=""/183}, {&(0x7f0000002a40)=""/245}], 0x0, &(0x7f0000002b80)=""/165}, 0x7ffffffc}], 0x10113, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, &(0x7f00000001c0)) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000008) 14m14.796160188s ago: executing program 44 (id=3990): openat$rfkill(0xffffffffffffff9c, 0x0, 0x600540, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket(0x2d, 0x80000, 0x3a) clock_gettime(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002c40)=[{{&(0x7f0000000240)=@nfc, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/145}, {&(0x7f0000000680)=""/210}, {&(0x7f0000000840)=""/198}], 0x0, &(0x7f0000000940)=""/209}, 0x2}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/96}, {&(0x7f0000000a40)=""/148}, {&(0x7f0000000b00)=""/128}, {&(0x7f0000000b80)=""/68}, {&(0x7f0000000400)=""/61}, {&(0x7f0000000c00)=""/58}, {&(0x7f0000000c40)=""/88}], 0x0, &(0x7f0000000d40)=""/85}, 0x10}, {{&(0x7f0000000dc0)=@caif, 0x0, &(0x7f0000002000)=[{&(0x7f0000000e40)=""/4096}, {&(0x7f0000001e40)=""/153}, {&(0x7f0000001f00)=""/56}, {&(0x7f0000001f40)=""/34}, {&(0x7f0000001f80)=""/67}]}, 0x3}, {{&(0x7f0000002080)=@sco={0x1f, @none}, 0x0, &(0x7f0000002800)=[{&(0x7f0000002100)=""/231}, {&(0x7f0000002200)=""/36}, {&(0x7f0000002240)=""/100}, {&(0x7f00000022c0)=""/156}, {&(0x7f0000002d80)=""/259}, {&(0x7f0000002480)=""/205}, {&(0x7f0000002580)=""/74}, {&(0x7f0000002600)=""/220}, {&(0x7f0000002700)=""/204}], 0x0, &(0x7f00000028c0)=""/36}, 0x1}, {{&(0x7f0000002900)=@nfc_llcp, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002980)=""/183}, {&(0x7f0000002a40)=""/245}], 0x0, &(0x7f0000002b80)=""/165}, 0x7ffffffc}], 0x10113, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, &(0x7f00000001c0)) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000008) 12m1.614330086s ago: executing program 3 (id=4215): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000), 0x111, 0x5}}, 0x20) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 12m0.312165341s ago: executing program 3 (id=4216): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 11m48.294054321s ago: executing program 3 (id=4241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x16de, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000780), 0x12) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$x25(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xc, 0x7}, 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'ip6tnl0\x00', 0x47}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 11m46.039251948s ago: executing program 3 (id=4246): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000140)}, 0x20) 11m44.09234796s ago: executing program 3 (id=4248): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 11m42.084478307s ago: executing program 3 (id=4250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000027c00000400fc800f0001806d14314965356ee88b"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) setrlimit(0x8, &(0x7f00000000c0)={0x1b4c9d73, 0x52adc44c}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x103c40, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0) 11m26.627850639s ago: executing program 45 (id=4250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000027c00000400fc800f0001806d14314965356ee88b"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) setrlimit(0x8, &(0x7f00000000c0)={0x1b4c9d73, 0x52adc44c}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x103c40, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0) 8m30.905206661s ago: executing program 7 (id=4531): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{0x9}, {0xd, 0x8}}}}, 0x8) 8m29.36316932s ago: executing program 7 (id=4533): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0x95dd, 0x18288, 0x0, 0x380, 0x0, r0}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) epoll_create1(0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x204001) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x40) 8m28.673930931s ago: executing program 7 (id=4534): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x3006, 0x5, 0x1}, 0x18, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 8m16.400967492s ago: executing program 7 (id=4546): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 8m11.903061702s ago: executing program 7 (id=4552): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) syz_io_uring_setup(0x4aea, &(0x7f00000012c0)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000001340), &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 8m11.5659973s ago: executing program 7 (id=4553): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x7) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7m55.6225196s ago: executing program 46 (id=4553): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x7) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m42.28097638s ago: executing program 0 (id=4694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) 6m40.346953938s ago: executing program 0 (id=4700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x4, 0x89, &(0x7f0000001500)=""/137}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x70000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="106627a0ff0300000796323b93ddb387d8a50a51fae94d51b0b1c95505708f6ecacd5717b14d78c2a7fa5150224a8f08b0eb4de85e392fa060e26df2c6ddb0224985dca0fd1928d39cabfd018760e22200ca8c45fd7e6e3b478375a90044d1e6aa240059199325daff3ae2b2b9f6d5fac79cc3c7a6768fbfdb3129844b1b7e2916962b22ae7951e81242ecdded4c1102c17397dc490ede2088a122539f65af0964869d3634cc9bc12854159f6a34e8fe20f9b03fc713c4a1be07abd068d74d"], 0x0, 0x1, 0xe3, &(0x7f0000000440)=""/227, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000180)=[{0x1, 0x3, 0x5, 0x3}], 0x10, 0x18d}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00042dbd7000fd30ef789a1bab89bbeb31646c37d59f669087fd09700d7b69fe10a681e2f9083e4724464a1a020b9a63725a9b63fd72d226376ca8ce31a8273010"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x90, 0x4}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6m37.041691995s ago: executing program 0 (id=4705): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 6m36.098265897s ago: executing program 0 (id=4708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) semctl$SETVAL(0x0, 0x1, 0x8, 0x0) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000200)=[0x1c, 0x7, 0x9b]) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mq_open(&(0x7f0000000000)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0xad05725454c62502, &(0x7f0000000080)={0x7, 0x3, 0x5b, 0xffff000000000000}) 6m34.905753156s ago: executing program 0 (id=4712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1ddd, &(0x7f0000000200)={0x0, 0x40000000, 0x200, 0x1, 0x8}) r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 6m32.772654996s ago: executing program 0 (id=4714): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x82080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x4, 0x7fff0000}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r5, 0x1}}, 0x48) 6m16.151714881s ago: executing program 47 (id=4714): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x82080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x4, 0x7fff0000}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r5, 0x1}}, 0x48) 5m20.945884637s ago: executing program 9 (id=4834): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x40004000}, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203444, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0xf0f071, 0x6}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bond0\x00', @multicast}) 5m18.158994007s ago: executing program 9 (id=4840): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(0x0, 0xfff, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) syz_emit_ethernet(0xe, &(0x7f0000000140)={@broadcast, @local, @void, {@generic={0x6000}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0xa0000001, 0x82002) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x9208, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r2, 0x10, &(0x7f0000019300)) 5m17.467477909s ago: executing program 9 (id=4841): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) 5m17.057508006s ago: executing program 9 (id=4844): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354", 0x5}, {&(0x7f0000000240)="a43b2eaab40000000000800065", 0xd}, {&(0x7f0000000280)="f9", 0x1}], 0x4) 5m15.111540899s ago: executing program 9 (id=4848): socket(0x11, 0xa, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) preadv(r1, &(0x7f0000000b00), 0x0, 0x1001000, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) 5m6.4071945s ago: executing program 9 (id=4862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020305000000000004000000000000010800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x201, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050) 4m51.016304865s ago: executing program 48 (id=4862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020305000000000004000000000000010800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x201, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050) 1m44.206860742s ago: executing program 5 (id=5136): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), &(0x7f00000003c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000004, 0xfffffe0000000004, 0xfa14, 0x2}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x0, 0xfffffffd, 0xb49, 0x2, 0x8, 0x4, 0x3}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x3, r7, 0x0, 0x3, 0x88, &(0x7f00000002c0)="11eada93e4f354cbe0d23f7e762545795646c92f01ac2cc25f422d6e6e527d830b1da1928245f64e5282a1f69bb9329abb8eb9993534ef6464f63f8e8741064f14587617fd95fb11f091aa9d3ba52f5c49316d5efeef3868da0e1bc64a347dbac75a136d5699a93adf6d3c16a207b71414a7c61afda9ff90089bbb4e8dec04489d96cfb01faa68de"}) ioprio_get$uid(0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x97) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) 1m34.146378265s ago: executing program 5 (id=5149): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x1d) mkdir(&(0x7f0000000000)='./bus\x00', 0x84) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x400, 0x3, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x80000001, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffbc, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x2000005]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000100)={0x0}) mq_unlink(&(0x7f0000000000)='eth0\x00') socket$nl_generic(0x10, 0x3, 0x10) 1m30.379845906s ago: executing program 5 (id=5155): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000000)={0x58, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x81, 0x80, 0x20203843, 0x3, [0x2], [0x810000, 0x2, 0x0, 0x10], [0x2, 0x20, 0x80, 0x46], [0x8ac2]}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10e}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) ioctl$LOOP_CLR_FD(r2, 0x4c01) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, &(0x7f0000000080)="9a62008cce1e6abd7dd53ee959be51a7b978e2c0bf8cb0f8fa7e6335268894db3f89471651575b9d8560d495baa25c45d2280474b67a1450c7910d9a685990077945f0d160ca0eeb75168a8f48e84e359dc1849d4e87a449a5249ef93079f3f76c84354931f7e54aab667436b9c9cc79670c18faed2714587b3dc72215f8d1e703af4ba1abd83dc9e980e3887953bd3fc00f5200805eb412d73b3d837ba9169af253ab2078e355eef9e81bc9cba421115ec46333fd09637d6b338b69408a906f", 0xc0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600)="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") 1m26.34156225s ago: executing program 5 (id=5158): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), &(0x7f00000003c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000004, 0xfffffe0000000004, 0xfa14, 0x2}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x0, 0xfffffffd, 0xb49, 0x2, 0x8, 0x4, 0x3}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x3, r7, 0x0, 0x3, 0x88, &(0x7f00000002c0)="11eada93e4f354cbe0d23f7e762545795646c92f01ac2cc25f422d6e6e527d830b1da1928245f64e5282a1f69bb9329abb8eb9993534ef6464f63f8e8741064f14587617fd95fb11f091aa9d3ba52f5c49316d5efeef3868da0e1bc64a347dbac75a136d5699a93adf6d3c16a207b71414a7c61afda9ff90089bbb4e8dec04489d96cfb01faa68de"}) ioprio_get$uid(0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x97) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) 1m15.653868604s ago: executing program 5 (id=5171): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a80)="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", 0xd00}, {&(0x7f0000000000)="a1540d2d205bffa0cf9387e4f2fd23f4d7e96b29ecf0f5e13284d7f7e395803b63d9f180af223a0786269065a66d272a333695eb3189298eb9c6a634d4f531c0e02ccb903b2dfbc3200149941d74a8f12bd988cf88bdb51b8fcb43f5bc21ca674c65db0d48e41c8d5a4e24e4277c563d97874090958abaced121fa752f5109c77a0ea71184ede060ade67071cfb342df3b4367b3a319785bdcb495497d4835537934249bef612df74e39d1bf093be2954461ebd3984ea6f038950a6fee0bbd88e6ef8f67012916a3d097ecbd9c60be4aad500dc1b3546575648c4b552b2761ab3efdc848032bb07d087c7ebab20b461ce72c127051d591e360", 0xf9}, {&(0x7f0000001a80)}, {&(0x7f0000000100)}, {&(0x7f00000001c0)}], 0x5, 0x5, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r1, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x1) 1m14.047294788s ago: executing program 5 (id=5174): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r2, 0x3}, 0x8) 57.394173673s ago: executing program 49 (id=5174): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r2, 0x3}, 0x8) 10.480871872s ago: executing program 2 (id=5259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0x110}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 9.713534031s ago: executing program 2 (id=5260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000880}, 0x48000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x49af, 0x7, {{0x1e, 0x4, 0x1, 0x1, 0x78, 0x67, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2b}, {[@timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x5, [{@empty, 0x400}, {@rand_addr=0x64010101}]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x3}, {@broadcast}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xe}, {@rand_addr=0x64010101, 0xbe2}]}, @generic={0x7, 0x8, "bd8ac59527ba"}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x14, 0x94, 0x3, 0x2, [{@rand_addr=0x64010102, 0x400}, {@private=0xa010102}]}]}}}}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b1b, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000140), 0x1000, 0x3cd082) 8.074090547s ago: executing program 2 (id=5263): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, 0x0) close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 5.167038676s ago: executing program 8 (id=5275): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x5, 0x0, 0x3, 0x6, 0x1, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.87937411s ago: executing program 2 (id=5276): r0 = open$dir(&(0x7f0000000000)='./cgroup.net/cgroup.procs/../file0\x00', 0x111200, 0x2) openat(r0, &(0x7f00000001c0)='.\x00', 0x440, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f000001a440)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) 4.685261174s ago: executing program 8 (id=5279): r0 = open$dir(&(0x7f0000000000)='./cgroup.net/cgroup.procs/../file0\x00', 0x111200, 0x2) openat(r0, &(0x7f00000001c0)='.\x00', 0x440, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f000001a440)=""/102400, 0x19000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "00e600", '#\x00\x00@\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{0x0}], 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) 4.060384754s ago: executing program 2 (id=5280): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 3.536190172s ago: executing program 8 (id=5282): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000000)={0x58, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x81, 0x80, 0x20203843, 0x3, [0x2], [0x810000, 0x2, 0x0, 0x10], [0x2, 0x20, 0x80, 0x46], [0x8ac2]}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10e}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) ioctl$LOOP_CLR_FD(r2, 0x4c01) writev(r2, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, &(0x7f0000000080)="9a62008cce1e6abd7dd53ee959be51a7b978e2c0bf8cb0f8fa7e6335268894db3f89471651575b9d8560d495baa25c45d2280474b67a1450c7910d9a685990077945f0d160ca0eeb75168a8f48e84e359dc1849d4e87a449a5249ef93079f3f76c84354931f7e54aab667436b9c9cc79670c18faed2714587b3dc72215f8d1e703af4ba1abd83dc9e980e3887953bd3fc00f5200805eb412d73b3d837ba9169af253ab2078e355eef9e81bc9cba421115ec46333fd09637d6b338b69408a906f", 0xc0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600)="bf9a21f5ffe3d91fc482a75fadaaf690aac10401b37610def5a0464643ac9cae73e18a101c034b7e469b12b55ad136e5311edab5ba5b2eb1cf08e4bacbcea7feea2c78330724fcc263eb24ec67d89d642bd7a30985acbc8e09334a9fea5e5a98004cccb095793b9307a3036604d55ba91aa7caad1c8ff453a1dbaa7535ce6a82a5428dea588d94c5b75325743004cab9d529245e9536045f365acf8341b88e970df9a706372190eec902500a05dc9253668c794c42e588968de2252f2b46d24b2a3cd0fb494dabdff6668ebc28d2c46e8f3033096509e460af0a899ed0fb49dd1146c517e9999891cba1f2492260a22e4963a673dda83a14c4bae72ec83564b6321812bd7a63cdd3334910d460d20a2e8db23e87977cd1830679b27e1e9e6b042811941e5ac01e6f1c0001b64859de67b508643506710a15fea11a42de9f8b22f78000039994ab84dcf53ae6d596ab91b1e0b5bc003063cba11657b75c6ae85a92c9171ee027aa519c4aa4dd8670cb4b856896deb145dbdcc8bbc9a81e55d4d365a1855a00f8a425744a0721e3e7eef9356c11f662c9a461af71ffe135cb67ca45a3478f1b130c43499019202bfb307057cc8658fe31a0f423ef8be5e64565d96ab8e3d4eac8465c2b48858174fe6fd6bfe1b6e54c11dfb97a5ebf1fc4a117b43feffa41f5db206ef0f8f2d8d36dbccd7a60cd6a618ebe368bfc1be6408fe4d8787a5a8bbe880eaf4a7d83b4a830417cb01f402716f5a194f54942e2bb648155d0388b7b5080fdb40b80cc70bddfadbd04a86f493131fc5cf397aa18513bac8a872eecba24005925dec9453c543c64ef55f489648104c736ee1c7fca56bc756a2bd3d5b59fd94f274d4975056152fa931b97cbcb95f0069ff1e291e889231e3e2d1079b3e2fdc42177db702379553b06f23f563fb62ea9732e5904d2f08be5d825ae9f191b5f8c074dd45d66bad32f93a2e9accd3bd8a215769330047f859431bc247c1bd23ac4a897275590bb41ee80803465ff64de1be737d6bebb50de8014194dcc0f72e0d6960d9fd3f0248e5becde644e9078f93a56c9c07c33906105c9c62266058cf17c8739db0621c2d2e24a65f1c79d71461f9c9170adaffa7b7b6bb8801b8a74c2d597fa84056ab47fd210850342f18534e1adbf951e9d6b07bcbf03cabf59e3c9c3c7fde5e1cc78f46af5ed2da1c9635e141ddfc6f80e71b9f2970868b203c74ed7fb80fef1e09c60ea031d6a5a6d31705d55a000c794a4cd5622a4afb6258cb35f23a0f399d941688ad44792458024ec12c3c3921e4ec305773386f343f0d461b38569683fda689b1c96b8db6a9f497e2b2e1da58cb9d1a22dc25cb9088df4e6293e601b70b7744bd1199a52022d61ad168d6360cf74e58f155422058f66f809048f323ef8a1a23fd8b6802a442fd8164286070c8109bb8b59a09026f36aa3853d84e7e2e0a72ec1d15d964c7a65362ce5a077c4c1ec6628ac4c0249c5b165b7a34be416f221ad69513b4d6f65689b537c4ff6baa3c90ccc341200804538cca5a3d1a5b16df10a27d5371fd13420e7a1ff4ec319cc225c5ccce27047b95f52710e5f9b627aa13eb235a3b64890c8f969e3cd44c2e1ad441db6ba3ba9e5aaed2e2468d56d708573528b5acb14f9e757880f52bb4a0bea15eef21202334c69807e12f18c09ce738b27f5cc271057c5f49b98a1a2e8329696de0648698e90097999a5797792aaee0bcb35485a28859d7dfb851a21f103fada938aff2a1406e52a26cf8e68d48449c92095089479454695a27d32e83611e82c8717fd641f445f8f651d8f5b64733bdceb1efb8a3df32e42469bb41717e7602dc2f28e8113684c9ffbd57cc8cc547c2e55a92c8168482a90809fda21a2d143002e7d6a89197ed84972ea89eecaabc85867b912764e10bd3107fc6d9121e5fd5210f19c5a86d7c1126428382ac93a8ff43fa731d337e52aa6720ea0cf4811751cba1eee24d2d3058bce00de514a2d952d172e3bbe7e9a6bdfcfdbe3fdf30adc8c30118f258a6ddcb01b500d389c1783df7fe4e040a4fdafc8949cf1b785183f2c7ebffd35da141f13cc9718a094c9cff681e124b2c4fbc279d7ef46793e274ebb62eedaf8104d1150dd1e260ebacb45626567d1916f942ad23de993208723474f40531cfbd7691aa74828e69b27117984491ed0d9cebf8eddba933b35e71e44de0aad7bb492cae7146b84fbcf88ce5cabfedc8de18341caf9b68838dd98413a0c43a9cc3211cf4133940fd1191a447382d8e5fe95cd4857ee8bf9f1966fd36753b108493869b8b4436f8be35072c814be246d87e8d4ec0dedf704a0fdebb6a1b7a08caa7a99e94ae14abdf3b7c16abfde6ef56b5d8a3a6e58071df798f5143a6261292ebc03b6661083a081956be515046168316059ab557db069142605be73e0ab615428f9035021d7f43754322756f262217646c5a20d88f699dbdb81410eecac3c1dcd986fe9f19e3fc5b4eac49aa047bdb9eef1f8a59a602fd97119a5e03355786a05ddd915a8e42e769deefaae6f440d7b2d539c5eb63feacbcfcdbda8588a92885f69d7392783340acedfd52910145207a33a2f47e39a86a5ecd282a9ef35fe06a1e7696cf0c944f10d61e20a5aa24c3d45785764e4b0c7f7082a0271fb9ad6491eda2cd7bc0c1b54560aabb05272ac93872b97fafade23a3fa37d3f6d7b1b2ee9a51208c09c374cd6c5168e4f661cd0d13c3c37acb8124df9689046aee5cd97f85dc6283e143900cc143bd6ca21b749f7dccc0e86d0df032a37b683725f5fdc2b8371bbeb9a6e994dd6194b3b387dd348c0d23aac23077c38066a743111050454819ca2ddc88d4eb2608176f251ae8fa9b67034eb8cd823db8bfc650cbb2d6e2445bcea9c0ea6e6875889d845f1735b80e028da1a944d6e6fbb52d272c2e4243554172b02b4d588a5f999cb42939ae454d5a2c511016caae49f52e918cfeee4b18f14c802401c09460b817e50e57078f7636113ba9da5c647930a9314aaebe4815ae92ffad0c96621f19a486bb1a6aaf18dd680a925047503b744e89ba00ed61255113ac667fdaf22bc9937ef4b43e9472dc1c1a4292fc5265ae8b7428a02d001fe205f60eda523ef9dbfd8643d35b6f4ccd33500fda34277c95aa111daa65ac0835800457f9f040a46c8f265b937de696a44509b6be46e67f94024b533f3258ce765805f480232e84ea2685b1067caecf83882334f9806de13a4379d04f49a4fd52cd14d2594e17a89dd4cbb233e4373cefb14b592afe956d34fc7d2fc06c5eb21253ae789d7c2a18230b20894ea48808f84ffaa7c429330ba1a7896165577bdebc441def50db7e990d8fcfd849b7dc3c1197e6e154da31ae05984b3a87c10c6d4f4bba1fd850f95273df1876582aeb9bb20d483f97d76630ddc2fd104ea2ca19f017908dc75b1530109e5e9d0d07919b5599f646ed24c7c5ad7282b4f2bbe07bdc480de4868309b447b8e61674dd72787646e9a7d6d25a69fb4cf8211a1d794979a5f05c2a2e8b312745fd83ca3dedd8a0307be27b9ceb77776266d80e821838b7304fcc2b8bb338e878f8ac214c451c91f02386195fbab7895514e28b85018b32076967c50642b19fa7e59544eec670be3a3b21c28bf29211d5fac0b0f59c6e57ae6af243bedcf601e7af050df5f86cd6bd15def061fc91bf661c30d994eca1d3262b837cb04f3c2210cda34960f2e2e20bfcea718e943d5f5e5b82ae2cfb380aba58d14fbd50ba4c89f8627040d00ffaf1f5fff5be4cae809a0c46b89b802d0e633896972137ffcd91eb36bf93ef24454128a75775a40a5ea22a5d8c582083e7d5bef80782847fdc9281dabb8231178d17f1e741ebfc3a5d790395d5bcf3210b75f4f53d39f2740e8208128bc93557b2833840a47a69ff80b100fd712b633fec4c97fabc6dc7b40bf6571a16a2f5f454d272e1c87df161c45ca098d9216c272188fefed9585996b41098e73dfad2cfbf8216439bec82d75cb0c590fbf1f7fcf1c2923412022f5e2237318e3d968b41b4606429382a3e71f84d3bef3765c46ec4dbb295021ee6e7b7451823ad88637029f75b2503ea92897f9ce11ceded5d45b0f6dd5539883732122a118e66e568ebe9561482d0e42a85b7c9b9b8cecff2e262a86a937b20d76fbaa0245aea40a4797d080afdbfcb2dd9a656f2518d3b72ac6963307882d60eb29a2e7a74146895311aceb613d338318a1727cd089cc8ef81634736ca373a3e701975ef5bc0c158a52e54b48bcda469cf360b9356b555e3266e4210ff9bb9aa7a9edf4f0d0503c7b8d8e393851f833375268eab4ad5f71ed13c61b6f965d1323819ab7214764c9ae26e0b2fd5d133c155e3ad31b305b6444b75afdf4072271eaa1c59348fcde8ca982c6ca50dd1fe7aa7c1880f401155cf4371032c8fb5ec6326e9f1fa5d3c7c82555fe862cbf5bdd66f3ccc28a3a9af139577925e212b459b31316431260bb35e1c80ec189fe02c1b48080debc1830354bf9954485740adda2c6c66cfc7aec73bc9a078875af578b297d6d7d1fdeed7e2779fa88c87ad0e074fe974fa3cb1801d54b7654ea20717136e11f5b028a00fa1a0ec739f06d024f37d130f8a3e486cd7ea7259472c8984e9be0b26bca7f640ee660867eb4cac05a33761224252eaa57a286796e9687440c4091dc93cdb652586af8e97db9a07a3031008a76867cc070face92e49f7e4610b8fb21d4148d1696da65862016c0ec3a8d0d7ebbfbd7c3b0ef6cfadf083bbdc279e5c1c56a5bb3127b7e5c467627b98b2859d18a326e306492415e4e5f40ca64d27828989d47ea8a4a4dd5ee63b244e538a7fd5b4669e7c7ed2188dd6fa0eae1df8e1f6f42d1803af50de12212aa2108a3d80399c28580f440920fd7d81817f1ed27aa756072d7236ffa4520d8a79db5f6addeefb7f8652470b6fface9071409886eccb90e7290fc5ce4b95bb872a3e4a26992284170e08fb8bf700f56feafaa9aa47cdc8590d3b4f3a92ddedc24d61f4a45f2f80a6e89bba6b6e1364aa17d9de4a8e5473cf8e5c51e38c980f6c3e83f35f37973d5044fb57a17d45aaaed3392e1a38d6b0042fbc8972f420f8813222d22505a1780109290f9cfb0dedcf117893dfdb6a42751360617c38dfad8b3d6556c57dab2a5ba883ea009a794986e6ae0ed9134862791e01d88686ccde4ac63edf67d3f59e0020198a12af0c33b86fe5a33638b188b91ce2c8f481f8ce48212c593a511586c215e29cdcbd8420f2291db74bc6907aad7e2752b60d4c8d326ee4a507c474049284afc895e8071e02474f4a9c360592a52e99e8bf9ece1cfad60d71caeb1df19c9b882b45ba63349cb34686523484e4071a62c894df3f58361cc5271511169477204804efb21a37e23b00f8ca7c312d6f7eca135914fb9b12b91e29c8be88902550acb10849da3a168352f10555e8c0de60e59b43141d4b7ad2c7b6422ac214f97107a6fccc3b4c82051ce1de4bc1496f42f88f1803e6599ad4b4aff4011dbd2c1a8e88c813214722cc016f748eb98790812f3278977614512ae9be16817caf2f812dadc1b4cfc4c2abd2ce9185143e706a8ec0e375b079427b17b57a22f86e05f42ad897a2717b892448cab656a8bb41f43d9981a124e69b8adba355646ab65db3c84c689af2419ad9bb0c28914e49833a2853a6f3ce4242519bdaca72eb6b3021ad6b014c74c82aa8f30553c0df4a099f4ad80a58db8ed7ac3e84078cd0ad3c165e6ce8925dc1d9b53b98a1bd671ec1ea5748") 2.869071327s ago: executing program 6 (id=5287): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x5, 0x0, 0x3, 0x6, 0x1, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.745377191s ago: executing program 6 (id=5288): open$dir(&(0x7f0000000000)='./cgroup.net/cgroup.procs/../file0\x00', 0x111200, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f000001a440)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) 2.694643306s ago: executing program 6 (id=5289): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) listen(r3, 0x3) 2.675781044s ago: executing program 8 (id=5290): r0 = open$dir(&(0x7f0000000000)='./cgroup.net/cgroup.procs/../file0\x00', 0x111200, 0x2) openat(r0, &(0x7f00000001c0)='.\x00', 0x440, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f000001a440)=""/102400, 0x19000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "00e600", '#\x00\x00@\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{0x0}], 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) 2.087022323s ago: executing program 8 (id=5291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) socket(0x840000000002, 0x3, 0xff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020305000000000004000000000000010800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x201, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050) 2.016002958s ago: executing program 6 (id=5292): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x80000) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="528753d86bf09c7d0cfe0c969b806bdb25c596406d5bf32796a41ca1ce8472492bd9cab418db417c8da8eb2b899c5b93733632e8e98f23af634bcc6127797078cff364600ed2c804d9fafcab7192dbf8c03fc80b42ad6680e5bc6332ce415b0635af1e33a7190fb3f11a16d32a83a9e3f56137b9d76efe8cb32b3070207fa3d33a09670c62c94113395bbd539a869912e04ccbb670fd0e1c915802424aa94aa24f353cef75b5213d3ad891fd12447d5ff580b93e111b9ea901373c2dee6f9d57fa1dcc24a46f970a5c69cbb0db797af1165c74e1266412c219ca8ea74732e7b68a4b343662fc9191ca0f5f06d7e6509a1e2a5242fa545b8c50abdcc33c13fe7e4d12cc20e990a1a3c094f5f1e615efbb47413911ea19ca0d71c72abe39bd05278de3a533f0e395ffe771735e0bf559e5d5890b4567e151b3e09d072801af30446768b3427d5c0fd5ee1373b1200c52ce7dd9e14509d019fea952e506e013fe25a71ebf89a55877d89691dae7ed4cdc65c30ec9e8d30317e4a8ec619341a770bdac97d8dbfe7a326d83c4db60c10806126146d790e85f18ccce5b33d0de8a5a63da63b4db92159e5d7d9b4a232223a37417d4b7de5e465cec52feee0623b45085a05877e74a006beb324384a17856dda47038a2f4ddbd169e7f8d8e93dfc723fd6b2a0631da78da7b0a83eff3047c10dd13a939c8a3f1f2460e667735b06d6513ace7521adfe924e77fca619ddbaf04a02d706bb10feaeac36aceed44abf4309461b2d3f355ea202aa036ce1330977fbdb34be51c47121864c17d7d590e534abbd2140fdf38d84df72962a1012b12a4e7518edbf18ee26a0f96aa9d5bbad7c3a556d0b24c36a54d25fdb6e980874cee24eb3e5f2de4997f0e7db332a86c6096083f8ec3e1c3147fa58d9317ea309c3be4f3de7fc26a212a95b9502502d93280d606c5a6e563b164f1c6cb07a463ba821ba3a26ff788f9958319e1ce18647e2ad82336075ef86df94e0768d11989cc9845e7d7124e55498c1f1663b3a4211b2a17add74405be1ed04ff93ce0291a79d9044a36e0762fe9946cd40cc5399c4f1f60134f98af7dc42f2d1ea063897a2dcc5a94662564367d92261fbbf7500c7906febdfa941021a7f4462c367fc8bd25e647f1d693fa5867ac3af42edd1645174d0a08e7814819d8a3e374208454405fed68e52556093493659da20626de152a91f1f91eaec4822f862ba48b9b8370aa930ae68fe29c6601b3bfec2874233e8c747c07917250117a996780f0123d9ec6456b914bd32ac314c85f4394bc189a61e1a24da620fd1e79f618a92c02460e2b01fdafe70bb0b67caf0e44abd1e7b762e02a3a632b154f00d12c14f3c9bc6440e4eee7ec1edb611052a13a69fc13c0fa8944dcc0b210c988b710e4f1c374ad282e8c5e84682c65d6eb9fab2d0dbeb375ddb368ff12728bcd4612081e2fe85d3fc33735ca2ef6f5dab1812b0da7873ecab36cb30c4d7065a168c569a45d6fa7ea1d773760ef72cd374674d3bbca5e90e1235171f7076e7233e2b6bee421e29256f560b442af243a0b1eb249eb5634c1a6739a4f384035f3587be56704a3018d1acabf6265d0beaf6cf3f1f991d04678a13ef5bdba833887872b53f5bb3ca4babe4927c7edadb9622ade5ae4fd4a2190e881187fa02a0b03100bf2c2e496e82b3f4833302898aedf89898cc34788bc1ed2d057ce6134415604a2adc42d2c5834a686cb699a9110aecf0f4fe0479c361cfa48237caacee1f0e1b5df3552532daffcde7d225b821d31f31d70600af39ca72dfe3451056acbddc9c7b16bb2d1717836908156d8f69a6c215060f3d63693668817e76e3c282664ef28b8eafc263053d60f9b44c55ba3baf2c17f291c487f8bd201cb4e7b65ad919e8740b1b4e4e4d86ae56d88526d3657079fb7c2831ebd31b2b608b04cf12de969383d53ad75d0628d010700759d76b3867e9aa15f55b07a941888b9f675f166a4b31f27785a8e6c5ee92fcb51b4db9f33c12082d2d182bc08c9520e4835c691060e527b68518b807e51663dd5aa5f9f69adaef8e8c3ac12bd314251dfec1bde66b52e185ecbf966b1dcb6e7b1fe9a4209c38fd539506be5a8238e5cdbeba38a47368f40f2843afc6166da6f50d591f6b841f974f26bee8e909f2c244258a197280cc79c635002c8a82aae1c5db620488dd80b5d3d9a89d35860cbe582ed469b3d4e6553bc929bd44a76ffd48c188a36b6906221e710e72bdd1aeb5bf6d6242c7102a570ec91f5a7ba5e604fb7a8ca837c3e326dbe739759b61d4e6c9ac5f8049e1aa7d5f16c7bfdf5eaebd2de43e7079beb644afa34b39b15fab4134ee602171c4ce73efecffc9a980b4fe8a8684328ac1887daf1d7eb6f90af5a26d3bf270e82ea7f04a3b464d8b1687d94be6d70d2b0b8573ed19c1331f318a19f7d0b9eb71a4e15b29cea50c6dc7c93a7219e9b88d157afc0e9a5439ba5a69a716ae985216e5db94a12de0b2a2ecfea7b09944ecd69a11b8c8b1315237d79e57b9a5cd8a101ab04dd0ada962dd7c3d054bcf1382a20b5cf0e251f6fd49900f90f519f0c25ea3b9c398a96ce305924ca6577929b15aa8d2eacf0f2ae961d6df3a9a26e086cec95c6b47514bfe30a5a3d47dd13081849e163af63893823a6eeb066ba8286944b2da9e53f30eccdea3874266335311a54fe0e7d0c85d20314dc5828fb05a7d62f53d661712b8889aab03e7a6ef2a0f4d99b7503877d5bce9c635acb4e55f9e2afecc93bbed6b05555fd37ad940a172fae39ac032261e6168fb919c985eb57da0bee0b05b3a2ffa133fa18173cf3be2435b5ef75074c65e5df6536891d12043f3bf17e281a7712a184d572eb264589b9e38edf8c1b949a13f380de33b1d02654dbbc1d84dd16939375e4b7bb26f9fb414fb0a4eda1b7ec545e1915b040d8cf9ee04fcd2ed91e8620b150e7ab0eebe216e87911d689f57b7654e781a5501a1de34c39cd21312aef0ffcf7dd437e3365c1ade50ab82064a35083367e7fa07eaa3125117ec6006652e14e540b0d1cdbca136c578ae77fc903452eb51df614a9d06f68ba52cb0fa8591c7a14b0e441853b5d679275bd71585666a4960c3550931e12f77e0b62947d25152dfdb3117319d97520e25988ae562f6773a36ad2728d0eb649550e9e709e5edb007a8bf70d6cf2f2c56f39063a673d149be70e67fd3f0bdb701cf4ee4404e7fef12f4ddef2613bb058c2cb70ff06e6a351dffc45ab4d530ba3639383417f6c4b7c71149ca121a2d70d33faee21f04887ab168335c6c4b01690656240d7f17dc9d0f1c1374edc61a0f68f0fb7d41cb92cc74bc15195940d5074a2c323b4951fa9463f638a3a9ee7868568c55834474e6c89e272779f57d5676cb1c31593b7917b14538a3b71d9a9cbe6f51fa3e66f3aebe147645cac2800b54f0990147d4dfa5d69f81b9589b0bf7afc966642bebe3f768a6dbd53534af228f32d47ebd2303c60c0e1dee94959ab68f35b2e6feccda0cb04dd636e94faad24a3cac899b89a24199fe7cacd07a4a762b457d31b2342a273b858a386fcb44322459bd0aa31c2f1e7c5da617c599e34e576e5207c6c9fd283614bfa9c34ec43eb9d21fe8a46b05b3ca1898c904fc37d01454f67b5e42796fb04953b9a87f8fcadc51939ae9120917b82c42dc02985e8e5cc7fda698d3dd75c2e067bde4a531c9d9274b7292ee7be3e013a37e7971e4df1df542edeb74fa8132a2472155b61f3c343a2eda36fc8dac351419d98709a982517119f64cc7f0bf0942a03cb144078891ab423f9c26d90eb3bc8f372488e3fe92e60e01a0af8c44e45ea9e6bafa6930bb3cab8986dadce3c6e67b03c87b90b9f0dfde6674f7681bf963f617f68f38ad07971222ed53eaeee1f0fea7f495f0d1a7b2db14762bbdf53cfbdddde77d7130f1c0622e3c37c5e1c87693de50c3812aab4bb5941028729957ed10fb20f77b02c638148b5f991b4ff81155d6eb50e6164cef7a9ace17517cee00b5bff1d5d79c65753eed75443039776908c48077aeac11dfe1f7315ce352d62902c2b0035605902c06e1f6e743bc88c7ce56d3f850474605de5b72f158a101dfd7fe234ea2af05572d76f5e249a25843ec01437fe3800f73e900e94b75086dad476645d20b1298a795176564a49dce2556151a775e16e182a6bf8167b995837fc1a890656dfb38bf18395af2aa10a8da875d90a972d18747923eddfbb19571ee0de4f935c207851d112791ee1f19512207bd35811bf70c59915089e0f299036836c97a84a145d240c422e955c18494cea52668e365110a68348e1a102f3e98944bc912ffe6006d8fba62c723ee7ea775cbb580cbbdfa48791f034829a5cb8dde483f2686332042e96906247058fb7b5aad962a3c4c02e1e2b6f111af6b6bcf01a1689fd4a9d305deda8503606b6fa07c40d85ca341ad63f233cdabe41f89d1486181a598371a1955ee82b678b512b99aa8ecfa6b2ec6f40bc28bc97f51f9fbabfd9480c33acfe1930ec212f2632d24b0795a0e945067da865e3dfb42da777e35d34aba5c31273e3d05399e0d4ba9a926ee3b1a75348be07bad03be4583dcb2e00bdd03afd5b70ba611c92b5ba7e6a99bb794fea2c823789f035dff929d186c016ec8f13d19bda25e992d7752efb65592af6b525e83343bd05264d2759aa5d33ea56010d224205da5e1bb58e6f3e61513a81434a3b9e6e04be62f6a2f3fe7e29d9dc234c968c5815a9c0c67231897cc8c764cc52767eae32e0ddf21e27595e749389503ab6d4dd34410e328e79123d252eff23c20ff551ebb72fabd75f9c34cc16771cfc7b617e5887d8366b734179b272f5cd28bbe73f983f0bc9a17f593137f5a9ab2d1f7944c32e947cff9a8c962f4708e0c3f6f4c9fc38a302f064539563773396d54a9e093d16845153eff633f4c8cb7431a93872d1c88783ae6be5d8981250189cd2449d31df292f5f7f7dc20aef14f4cf72fe52ae4b70b0490641593f1020d6709c550db1db678b294205b3dc21689305f540b40490e2a8530f87326173b3fc0c059bbf34419ad677c8633806a9c360993a3bb67efe4bfb71a7c75d42308914a06ab3f03f163781d79489109fa5ac34350c0751f12ab25ed59cc1c000355e0c1667d3a3ba750e724f3670a549c6f918868bc77a607d22b03581629c82e2bf2f212216cd4d92e3a1eabf491491876f83d8db1fe80f49bb5ad1c82c1e5d35655d315bc015d529a152cf30360fdc10584d70ee4d976f3240ae72b5567cb146d1052b602652b7a588da09a65f5b5a70fdfecbf021de2c7af143924c8d0ab90de325f7a24acdd1baf4ee0fff977f8226e2f7ca89428559599bc0247f1e3782e33721277b7018829b6d9fd77cd98d61d5b0091c7619fe7294ba1cb9d0bae91110cd0d57186923845829c27d0daa19a145245b5054c4a379057c7f2eb5949239c47afe5ef4abf5179b9001b5f0126119bb7f744122a23de174f631aba81a49278b35c006d0e62c3b8402288dd1011beaf6eb84f44aaa91a8e1c235ccfa94a4909fc8073ac991a1d97c33b01f74e3b3d603260a6ac0911a8bb0888694e83d73ee6eaabb1a64343492d00f2d8b5a45f4e5c101b7d4af09f3f5b31bbf79298faba26561920344cb82d97e65cf2784f37caab069931520b21209e6516039a6db2b72d28df9792c6e796504b15db6d3c53f7caeda0be0dee2e30ddc83956e6831ce742cd20f1643cd05b4eed59b5bb0154e7f8ac4fb171c446d51269d5e042a123c04946b", @ANYRESHEX=r0, @ANYBLOB, @ANYRES16=r1, @ANYRES64=r0, @ANYRES8=r0, @ANYRES8=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.94165913s ago: executing program 6 (id=5293): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, 0x0) close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 1.855129624s ago: executing program 8 (id=5294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1ddd, &(0x7f0000000200)={0x0, 0x40000000, 0x200, 0x1, 0x8}) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0xdde6f5e34f1fb078, 0xb000, 0x2000, &(0x7f0000738000/0x2000)=nil}) timer_create(0x3, 0x0, 0x0) 93.393783ms ago: executing program 6 (id=5295): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004001}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x40305828, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 0s ago: executing program 2 (id=5296): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), &(0x7f00000003c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000004, 0xfffffe0000000004, 0xfa14, 0x2}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x0, 0xfffffffd, 0xb49, 0x2, 0x8, 0x4, 0x3}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x3, r7, 0x0, 0x3, 0x88, &(0x7f00000002c0)="11eada93e4f354cbe0d23f7e762545795646c92f01ac2cc25f422d6e6e527d830b1da1928245f64e5282a1f69bb9329abb8eb9993534ef6464f63f8e8741064f14587617fd95fb11f091aa9d3ba52f5c49316d5efeef3868da0e1bc64a347dbac75a136d5699a93adf6d3c16a207b71414a7c61afda9ff90089bbb4e8dec04489d96cfb01faa68de"}) ioprio_get$uid(0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x97) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) kernel console output (not intermixed with test programs): 0903][T16937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.380933][T16937] usb 6-1: Product: syz [ 1447.380948][T16937] usb 6-1: Manufacturer: syz [ 1447.380962][T16937] usb 6-1: SerialNumber: syz [ 1447.445975][T16937] usb 6-1: config 0 descriptor?? [ 1447.728169][T16937] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1448.208936][T17044] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1448.211046][T17044] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1448.211086][T17044] usb 1-1: can't read configurations, error -71 [ 1448.409201][T20850] loop5: detected capacity change from 0 to 7 [ 1448.842448][T16937] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1448.849591][T16937] usb 6-1: USB disconnect, device number 20 [ 1449.146064][ T5960] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1449.318248][ T5960] usb 7-1: config 0 has no interfaces? [ 1449.330332][ T5960] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1449.330355][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.330370][ T5960] usb 7-1: Product: syz [ 1449.330381][ T5960] usb 7-1: Manufacturer: syz [ 1449.330398][ T5960] usb 7-1: SerialNumber: syz [ 1449.335482][ T5960] usb 7-1: config 0 descriptor?? [ 1449.895364][ T32] blk_print_req_error: 5 callbacks suppressed [ 1449.895423][ T32] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1449.895517][ T32] buffer_io_error: 5 callbacks suppressed [ 1449.895561][ T32] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296016][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296053][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296116][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296135][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296168][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296186][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296235][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296260][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296303][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296321][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296353][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296371][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296386][T20850] ldm_validate_partition_table(): Disk read failed. [ 1450.296413][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296432][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296464][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296483][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296514][T20850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1450.296532][T20850] Buffer I/O error on dev loop5, logical block 0, async page read [ 1450.296570][T20850] Dev loop5: unable to read RDB block 0 [ 1450.296670][T20850] loop5: unable to read partition table [ 1450.296832][T20850] loop5: partition table beyond EOD, truncated [ 1450.296893][T20850] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1450.590786][T16937] usb 7-1: USB disconnect, device number 25 [ 1451.049196][T20872] ubi: mtd0 is already attached to ubi31 [ 1452.376141][T20874] sp0: Synchronizing with TNC [ 1459.645709][T17044] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1459.825569][T17044] usb 1-1: Using ep0 maxpacket: 8 [ 1459.829570][T17044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1459.829607][T17044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1459.829631][T17044] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1459.829654][T17044] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 5 [ 1459.829694][T17044] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1459.829717][T17044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.910198][T17044] usb 1-1: config 0 descriptor?? [ 1459.911076][T20893] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1460.113076][ C1] Bluetooth: hci1: Unexpected continuation: 1 bytes [ 1460.116997][T16574] Bluetooth: hci1: unexpected event 0x06 length: 0 < 3 [ 1460.386383][T17044] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1461.331926][ T37] kauditd_printk_skb: 56 callbacks suppressed [ 1461.331941][ T37] audit: type=1326 audit(1772728638.913:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20891 comm="syz.0.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6f89c799 code=0x7fc00000 [ 1461.422851][ T5114] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 1461.462973][T13185] usb 1-1: USB disconnect, device number 22 [ 1462.855903][T20924] ubi: mtd0 is already attached to ubi31 [ 1463.986248][T17044] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1463.991789][T17044] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1463.991834][T17044] usb 8-1: can't read configurations, error -71 [ 1465.309326][T20943] sp0: Synchronizing with TNC [ 1466.652078][T16937] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1466.873856][T16937] usb 1-1: device descriptor read/64, error -71 [ 1466.969879][T20968] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4558'. [ 1466.969902][T20968] netlink: 'syz.9.4558': attribute type 6 has an invalid length. [ 1466.969912][T20968] netlink: 'syz.9.4558': attribute type 5 has an invalid length. [ 1466.969921][T20968] netlink: 'syz.9.4558': attribute type 4 has an invalid length. [ 1467.142930][T16937] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1467.273344][T16937] usb 1-1: device descriptor read/64, error -71 [ 1467.382256][T16937] usb usb1-port1: attempt power cycle [ 1469.426765][T16937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1469.609438][T16937] usb 1-1: device descriptor read/8, error -71 [ 1469.874259][ T807] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1471.824572][T20998] ubi: mtd0 is already attached to ubi31 [ 1472.942515][ T807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1472.944718][ T807] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1472.944765][ T807] usb 6-1: can't read configurations, error -71 [ 1474.874732][T21025] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4571'. [ 1474.874763][T21025] netlink: 'syz.9.4571': attribute type 6 has an invalid length. [ 1474.874778][T21025] netlink: 'syz.9.4571': attribute type 5 has an invalid length. [ 1474.874793][T21025] netlink: 'syz.9.4571': attribute type 4 has an invalid length. [ 1475.091402][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1475.217819][ T9] usb 7-1: device descriptor read/64, error -71 [ 1475.323184][T21036] loop5: detected capacity change from 0 to 7 [ 1475.487672][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1475.607815][ T807] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1475.627597][ T9] usb 7-1: device descriptor read/64, error -71 [ 1475.637605][T16654] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1475.747046][ T9] usb usb7-port1: attempt power cycle [ 1475.778781][ T807] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1475.782281][ T807] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1475.782323][ T807] usb 10-1: can't read configurations, error -71 [ 1475.800323][T16654] usb 1-1: config 0 has no interfaces? [ 1475.811154][T16654] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1475.811189][T16654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.811211][T16654] usb 1-1: Product: syz [ 1475.811225][T16654] usb 1-1: Manufacturer: syz [ 1475.811239][T16654] usb 1-1: SerialNumber: syz [ 1475.858436][T16654] usb 1-1: config 0 descriptor?? [ 1476.012723][T21036] Dev loop5: unable to read RDB block 7 [ 1476.012780][T21036] loop5: unable to read partition table [ 1476.013038][T21036] loop5: partition table beyond EOD, truncated [ 1476.013078][T21036] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1476.100914][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1476.278912][ T9] usb 7-1: device descriptor read/8, error -71 [ 1476.645000][T13185] usb 1-1: USB disconnect, device number 27 [ 1476.704570][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1476.748161][ T9] usb 7-1: device descriptor read/8, error -71 [ 1476.857937][ T9] usb usb7-port1: unable to enumerate USB device [ 1478.131244][T21061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1478.378593][T21049] usb usb9: usbfs: process 21049 (syz.9.4576) did not claim interface 3 before use [ 1480.573185][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1482.304308][T17044] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1482.381692][T16574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1482.400906][T16574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1482.402983][T16574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1482.414260][T16937] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1482.433238][T16574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1482.441340][T16574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1482.474137][T17044] usb 7-1: Using ep0 maxpacket: 32 [ 1482.511260][T17044] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1482.511294][T17044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.511315][T17044] usb 7-1: Product: syz [ 1482.511328][T17044] usb 7-1: Manufacturer: syz [ 1482.511342][T17044] usb 7-1: SerialNumber: syz [ 1482.626509][T16937] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1482.634058][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1482.638254][T16937] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1482.638356][T16937] usb 10-1: can't read configurations, error -71 [ 1482.642368][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1482.642491][ T9] usb 1-1: can't read configurations, error -71 [ 1482.894464][T17044] usb 7-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1482.924222][T17044] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1483.356058][T17044] usb 7-1: USB disconnect, device number 30 [ 1483.660452][T18538] udevd[18538]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1483.760366][T16937] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1483.869444][T21113] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4589'. [ 1483.896101][T16937] usb 10-1: device descriptor read/64, error -71 [ 1484.003992][T16937] usb usb10-port1: attempt power cycle [ 1484.296528][T21096] chnl_net:caif_netlink_parms(): no params data found [ 1484.373283][T16937] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1484.394051][T16937] usb 10-1: device descriptor read/8, error -71 [ 1484.470120][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.470176][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.473188][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1484.533188][T16574] Bluetooth: hci1: command tx timeout [ 1484.642157][T16937] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1484.653104][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1484.654559][T16937] usb 10-1: device descriptor read/8, error -71 [ 1484.657060][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1484.657079][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1484.657095][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1484.657111][ T9] usb 1-1: config 1 has no interface number 0 [ 1484.657142][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1484.657162][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1484.657194][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1484.657211][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.763343][T16937] usb usb10-port1: unable to enumerate USB device [ 1484.862723][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1485.012399][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1485.323516][T21129] ubi: mtd0 is already attached to ubi31 [ 1486.283252][T16610] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1486.291800][T16610] usb 1-1: USB disconnect, device number 30 [ 1486.302835][T16610] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1486.612250][T16574] Bluetooth: hci1: command tx timeout [ 1486.907726][T21096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.907812][T21096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.908010][T21096] bridge_slave_0: entered allmulticast mode [ 1486.950278][T21096] bridge_slave_0: entered promiscuous mode [ 1486.972201][T21096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.973160][T21096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.974852][T21096] bridge_slave_1: entered allmulticast mode [ 1487.008767][T21096] bridge_slave_1: entered promiscuous mode [ 1488.691478][T16574] Bluetooth: hci1: command tx timeout [ 1489.674511][ T6511] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.852744][T21096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.874611][T21096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.409576][ T6511] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.480174][T16610] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1490.484274][T21096] team0: Port device team_slave_0 added [ 1490.488486][T21096] team0: Port device team_slave_1 added [ 1490.619642][T21150] usb usb9: usbfs: process 21150 (syz.5.4593) did not claim interface 3 before use [ 1490.647038][T16610] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1490.649118][T16610] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1490.649160][T16610] usb 7-1: can't read configurations, error -71 [ 1490.769983][T16574] Bluetooth: hci1: command tx timeout [ 1490.914966][ T6511] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.490231][T21096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.490251][T21096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.490280][T21096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.789425][T16610] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1492.850671][T21096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.850685][T21096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.850706][T21096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.406542][ T6511] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.451596][T21205] ubi: mtd0 is already attached to ubi31 [ 1495.267570][T21096] hsr_slave_0: entered promiscuous mode [ 1495.271041][T21096] hsr_slave_1: entered promiscuous mode [ 1495.276398][T21096] debugfs: 'hsr0' already exists in 'hsr' [ 1495.276428][T21096] Cannot create hsr debugfs directory [ 1495.455475][T16610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1495.460606][T16610] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1495.460655][T16610] usb 1-1: can't read configurations, error -71 [ 1497.347923][T21214] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1498.376222][T16610] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1498.452043][ T6511] bridge_slave_1: left allmulticast mode [ 1498.452074][ T6511] bridge_slave_1: left promiscuous mode [ 1498.452319][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.577701][ T6511] bridge_slave_0: left allmulticast mode [ 1498.577739][ T6511] bridge_slave_0: left promiscuous mode [ 1498.578018][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.386988][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.472453][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.511090][ T6511] bond0 (unregistering): Released all slaves [ 1499.551618][T16610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1499.553679][T16610] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1499.553725][T16610] usb 1-1: can't read configurations, error -71 [ 1504.108560][T16610] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1504.679721][T21257] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4616'. [ 1505.732661][T16593] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1505.763884][T16610] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1505.765830][T16610] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1505.765868][T16610] usb 7-1: can't read configurations, error -71 [ 1505.941957][T16593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1505.957179][T16593] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1505.957223][T16593] usb 1-1: can't read configurations, error -71 [ 1506.135201][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4619'. [ 1506.902493][ T6511] hsr_slave_0: left promiscuous mode [ 1506.942593][ T6511] hsr_slave_1: left promiscuous mode [ 1506.943494][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.943514][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.003904][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.003946][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.409064][ T6511] veth1_macvtap: left promiscuous mode [ 1507.409139][ T6511] veth0_macvtap: left promiscuous mode [ 1507.409306][ T6511] veth1_vlan: left promiscuous mode [ 1507.409435][ T6511] veth0_vlan: left promiscuous mode [ 1510.749530][T21310] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4627'. [ 1510.749570][T21310] netlink: 'syz.9.4627': attribute type 2 has an invalid length. [ 1511.151527][ T6511] team0 (unregistering): Port device team_slave_1 removed [ 1511.212203][ T6511] team0 (unregistering): Port device team_slave_0 removed [ 1513.088905][T16610] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1513.330397][T21328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4633'. [ 1513.384848][T16610] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1513.387015][T16610] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1513.387054][T16610] usb 7-1: can't read configurations, error -71 [ 1514.180952][T21096] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1514.280621][T21096] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1514.346241][T21096] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1514.438259][T16593] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1514.970118][T21096] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1516.254655][T21096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.444970][T21096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.542528][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.572805][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.728004][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.728414][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.428290][T16593] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1518.430655][T16593] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1518.430696][T16593] usb 6-1: can't read configurations, error -71 [ 1520.335570][T21384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1520.501450][T21096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.938419][T21096] veth0_vlan: entered promiscuous mode [ 1522.000877][T21096] veth1_vlan: entered promiscuous mode [ 1522.136406][T21096] veth0_macvtap: entered promiscuous mode [ 1522.163007][T21096] veth1_macvtap: entered promiscuous mode [ 1522.248506][T21096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.303192][T21096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.367337][ T1172] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.385597][ T1172] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.396873][ T1172] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.397866][ T1172] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.684133][T16610] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1522.868994][T16610] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1522.871061][T16610] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1522.871100][T16610] usb 10-1: can't read configurations, error -71 [ 1523.021718][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.021742][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.525277][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.529078][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.781553][T21432] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4648'. [ 1527.442445][T21450] loop5: detected capacity change from 0 to 7 [ 1527.481803][T16610] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1527.801287][T16593] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1527.992149][T16593] usb 6-1: config 0 has no interfaces? [ 1528.011400][T16593] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1528.012635][T16593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.012662][T16593] usb 6-1: Product: syz [ 1528.012677][T16593] usb 6-1: Manufacturer: syz [ 1528.012693][T16593] usb 6-1: SerialNumber: syz [ 1528.094885][T16593] usb 6-1: config 0 descriptor?? [ 1529.337240][T16610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1529.339770][T16610] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1529.339812][T16610] usb 1-1: can't read configurations, error -71 [ 1529.688211][ T32] blk_print_req_error: 5 callbacks suppressed [ 1529.688270][ T32] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.688367][ T32] buffer_io_error: 5 callbacks suppressed [ 1529.688413][ T32] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.941078][T13185] usb 6-1: USB disconnect, device number 25 [ 1529.981331][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981371][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981424][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981442][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981475][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981493][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981554][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981572][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981623][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981641][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981672][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981690][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981705][T21450] ldm_validate_partition_table(): Disk read failed. [ 1529.981733][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981751][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981783][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981801][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981833][T21450] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1529.981851][T21450] Buffer I/O error on dev loop5, logical block 0, async page read [ 1529.981889][T21450] Dev loop5: unable to read RDB block 0 [ 1529.981991][T21450] loop5: unable to read partition table [ 1529.982201][T21450] loop5: partition table beyond EOD, truncated [ 1529.982228][T21450] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1530.282641][T21469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.599779][T16654] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1532.724332][T16654] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1532.726540][T16654] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1532.726569][T16654] usb 6-1: can't read configurations, error -71 [ 1534.552453][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.552983][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.466084][T21492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.472471][T21492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.777006][T16610] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1538.397487][ T3184] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.403540][ T3614] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.404026][ T3614] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.404535][ T3614] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.166825][T16610] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1540.170508][T16610] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1540.170571][T16610] usb 6-1: can't read configurations, error -71 [ 1540.813508][T21544] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1541.114837][T16610] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1541.399556][T16610] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1541.401537][T16610] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1541.401579][T16610] usb 6-1: can't read configurations, error -71 [ 1541.402152][T16610] usb usb6-port1: attempt power cycle [ 1543.819609][T21563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1546.133136][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.133211][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.121657][ T6511] bridge_slave_1: left allmulticast mode [ 1548.121689][ T6511] bridge_slave_1: left promiscuous mode [ 1548.121964][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.251967][T21602] ubi: mtd0 is already attached to ubi31 [ 1549.424871][ T6511] bridge_slave_0: left allmulticast mode [ 1549.424902][ T6511] bridge_slave_0: left promiscuous mode [ 1549.425192][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.775784][T13185] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1553.671046][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.722507][T21637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1553.738867][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.759702][ T6511] bond0 (unregistering): Released all slaves [ 1553.808524][T13185] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1553.810124][T13185] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1553.810151][T13185] usb 10-1: can't read configurations, error -71 [ 1554.374961][T21645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1555.897392][T17044] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1556.057816][T17044] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1556.057847][T17044] usb 10-1: config 0 has no interface number 0 [ 1556.057917][T17044] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1556.057949][T17044] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.057972][T17044] usb 10-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.058001][T17044] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1556.058041][T17044] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1556.058065][T17044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.144990][T17044] usb 10-1: config 0 descriptor?? [ 1556.613404][T21685] ubi: mtd0 is already attached to ubi31 [ 1557.638355][T17044] uclogic 0003:145F:0212.0003: pen parameters not found [ 1557.638446][T17044] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 1557.667101][ T6511] hsr_slave_0: left promiscuous mode [ 1557.707675][ T6511] hsr_slave_1: left promiscuous mode [ 1557.708758][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.747419][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1557.848092][T16610] usb 10-1: USB disconnect, device number 20 [ 1557.859416][T13185] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1559.024223][ T6511] team0 (unregistering): Port device team_slave_1 removed [ 1559.186471][ T6511] team0 (unregistering): Port device team_slave_0 removed [ 1559.341562][T21696] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4704'. [ 1559.986317][T13185] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1559.989801][T13185] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1559.989852][T13185] usb 6-1: can't read configurations, error -71 [ 1563.900426][T21738] ubi: mtd0 is already attached to ubi31 [ 1564.844840][T21739] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4717'. [ 1567.022971][T13185] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1567.563344][T13185] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1567.565460][T13185] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1567.565500][T13185] usb 6-1: can't read configurations, error -71 [ 1567.647849][T21767] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4722'. [ 1567.647875][T21767] netlink: 'syz.9.4722': attribute type 2 has an invalid length. [ 1573.958438][T16593] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1574.122524][T16593] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.122585][T16593] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1574.122611][T16593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.184553][T16593] usb 6-1: config 0 descriptor?? [ 1574.260212][T16593] pwc: Askey VC010 type 2 USB webcam detected. [ 1574.606386][T16593] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1574.616836][T16593] pwc: recv_control_msg error -32 req 02 val 2700 [ 1574.634922][T16593] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1574.637528][T16593] pwc: recv_control_msg error -32 req 04 val 1000 [ 1574.641648][T16593] pwc: recv_control_msg error -32 req 04 val 1300 [ 1574.658243][T16593] pwc: recv_control_msg error -32 req 04 val 1400 [ 1574.661753][T16593] pwc: recv_control_msg error -32 req 02 val 2000 [ 1574.886327][T16593] pwc: recv_control_msg error -71 req 04 val 1500 [ 1574.887064][T16593] pwc: recv_control_msg error -71 req 02 val 2500 [ 1574.887568][T16593] pwc: recv_control_msg error -71 req 02 val 2400 [ 1574.910530][T16593] pwc: recv_control_msg error -71 req 02 val 2600 [ 1574.911029][T16593] pwc: recv_control_msg error -71 req 02 val 2900 [ 1574.911515][T16593] pwc: recv_control_msg error -71 req 02 val 2800 [ 1574.912292][T16593] pwc: recv_control_msg error -71 req 04 val 1100 [ 1574.947956][T16593] pwc: recv_control_msg error -71 req 04 val 1200 [ 1574.989335][T16593] pwc: Registered as video103. [ 1575.006352][T16593] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 1575.024770][T16593] usb 6-1: USB disconnect, device number 35 [ 1576.069801][T16593] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1576.261763][T16593] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1576.265373][T16593] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1576.265413][T16593] usb 7-1: can't read configurations, error -71 [ 1581.275354][T16593] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1581.720726][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1581.764773][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1581.785496][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1581.806804][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1581.807610][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1582.543101][T21861] chnl_net:caif_netlink_parms(): no params data found [ 1583.083931][T16593] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1583.261411][T16593] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1583.261443][T16593] usb 7-1: config 0 has no interface number 0 [ 1583.261536][T16593] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1583.261566][T16593] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.261591][T16593] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.261646][T16593] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1583.261683][T16593] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1583.261708][T16593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.371928][T16593] usb 7-1: config 0 descriptor?? [ 1583.853919][ T5114] Bluetooth: hci5: command tx timeout [ 1584.753762][T16593] uclogic 0003:145F:0212.0004: failed retrieving string descriptor #100: -71 [ 1584.753833][T16593] uclogic 0003:145F:0212.0004: failed retrieving pen parameters: -71 [ 1584.753851][T16593] uclogic 0003:145F:0212.0004: pen probing failed: -71 [ 1584.753870][T16593] uclogic 0003:145F:0212.0004: failed probing parameters: -71 [ 1584.753995][T16593] uclogic 0003:145F:0212.0004: probe with driver uclogic failed with error -71 [ 1584.834362][T16593] usb 7-1: USB disconnect, device number 40 [ 1585.272718][T16654] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1585.525963][T21861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.526444][T21861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.527668][T21861] bridge_slave_0: entered allmulticast mode [ 1585.527937][T16654] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1585.529899][T16654] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1585.529936][T16654] usb 10-1: can't read configurations, error -71 [ 1585.536127][T21861] bridge_slave_0: entered promiscuous mode [ 1585.557642][T21861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.562800][T21861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.563043][T21861] bridge_slave_1: entered allmulticast mode [ 1585.575342][T21861] bridge_slave_1: entered promiscuous mode [ 1585.923540][ T5114] Bluetooth: hci5: command tx timeout [ 1586.098200][T21861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.134122][T21861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.709979][T21861] team0: Port device team_slave_0 added [ 1587.923221][T21861] team0: Port device team_slave_1 added [ 1588.001494][ T5114] Bluetooth: hci5: command tx timeout [ 1588.130966][T21861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.130985][T21861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.131011][T21861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.436054][T21861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.436145][T21861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.436312][T21861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.890397][T13185] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1590.080441][ T5114] Bluetooth: hci5: command tx timeout [ 1590.087817][T13185] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1590.087851][T13185] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1590.119565][T13185] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1590.119597][T13185] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.119618][T13185] usb 9-1: Product: syz [ 1590.119633][T13185] usb 9-1: Manufacturer: syz [ 1590.119647][T13185] usb 9-1: SerialNumber: syz [ 1590.162202][T13185] usb 9-1: config 0 descriptor?? [ 1590.287324][T21861] hsr_slave_0: entered promiscuous mode [ 1590.288608][T21861] hsr_slave_1: entered promiscuous mode [ 1591.037087][ T3184] bridge_slave_1: left allmulticast mode [ 1591.037119][ T3184] bridge_slave_1: left promiscuous mode [ 1591.037441][ T3184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.114428][ T3184] bridge_slave_0: left allmulticast mode [ 1591.114459][ T3184] bridge_slave_0: left promiscuous mode [ 1591.114724][ T3184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.589597][ T5800] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1592.180387][T13185] usb 9-1: USB disconnect, device number 2 [ 1592.250773][ T3184] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1592.712328][ T3184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.804779][ T3184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.822840][ T3184] bond0 (unregistering): Released all slaves [ 1592.832912][ T3184] bond1 (unregistering): Released all slaves [ 1592.875812][ T5800] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1592.877893][ T5800] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1592.877931][ T5800] usb 6-1: can't read configurations, error -71 [ 1592.967517][T18505] udevd[18505]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1594.018337][ T5800] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1594.429897][ T5800] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1594.429924][ T5800] usb 6-1: config 0 has no interface number 0 [ 1594.429962][ T5800] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1594.429987][ T5800] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.430006][ T5800] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1594.430030][ T5800] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1594.430059][ T5800] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1594.430081][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.445521][ T5800] usb 6-1: config 0 descriptor?? [ 1595.748650][ T5800] uclogic 0003:145F:0212.0005: failed retrieving string descriptor #100: -71 [ 1595.749282][ T5800] uclogic 0003:145F:0212.0005: failed retrieving pen parameters: -71 [ 1595.749367][ T5800] uclogic 0003:145F:0212.0005: pen probing failed: -71 [ 1595.749466][ T5800] uclogic 0003:145F:0212.0005: failed probing parameters: -71 [ 1595.751702][ T5800] uclogic 0003:145F:0212.0005: probe with driver uclogic failed with error -71 [ 1596.252321][ T5800] usb 6-1: USB disconnect, device number 37 [ 1602.384290][ T3184] hsr_slave_0: left promiscuous mode [ 1602.407515][ T3184] hsr_slave_1: left promiscuous mode [ 1602.408832][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.514719][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.174559][ T3184] team0 (unregistering): Port device team_slave_1 removed [ 1603.264660][ T3184] team0 (unregistering): Port device team_slave_0 removed [ 1606.128149][T16593] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1606.284620][T16593] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.284682][T16593] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1606.284718][T16593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.340992][T16593] usb 6-1: config 0 descriptor?? [ 1606.365047][T16593] pwc: Askey VC010 type 2 USB webcam detected. [ 1607.263145][T22093] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4785'. [ 1607.303767][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.303846][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.374038][T16593] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1607.375296][T16593] pwc: recv_control_msg error -32 req 02 val 2700 [ 1607.384041][T16593] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1607.391096][T16593] pwc: recv_control_msg error -32 req 04 val 1000 [ 1607.393080][T16593] pwc: recv_control_msg error -32 req 04 val 1300 [ 1607.394127][T16593] pwc: recv_control_msg error -32 req 04 val 1400 [ 1607.396242][T16593] pwc: recv_control_msg error -32 req 02 val 2000 [ 1607.396603][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.396745][T16593] pwc: recv_control_msg error -32 req 02 val 2100 [ 1607.397112][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.397253][T16593] pwc: recv_control_msg error -32 req 04 val 1500 [ 1607.397617][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.397755][T16593] pwc: recv_control_msg error -32 req 02 val 2500 [ 1607.398119][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.398259][T16593] pwc: recv_control_msg error -32 req 02 val 2400 [ 1607.398619][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.398758][T16593] pwc: recv_control_msg error -32 req 02 val 2600 [ 1607.399122][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.399271][T16593] pwc: recv_control_msg error -32 req 02 val 2900 [ 1607.404013][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.404939][T16593] pwc: recv_control_msg error -32 req 02 val 2800 [ 1607.405538][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.408009][T16593] pwc: recv_control_msg error -32 req 04 val 1100 [ 1607.408393][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1607.408547][T16593] pwc: recv_control_msg error -32 req 04 val 1200 [ 1607.446650][T16593] pwc: Registered as video103. [ 1607.462690][T16593] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 1607.483729][T16593] usb 6-1: USB disconnect, device number 38 [ 1609.023888][T22117] overlayfs: failed to resolve './file0': -2 [ 1612.033997][T21861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1612.852081][T21861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1613.147033][T21861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1614.328408][T22145] syzkaller0: entered promiscuous mode [ 1614.328437][T22145] syzkaller0: entered allmulticast mode [ 1615.485582][T22171] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4801'. [ 1615.768554][T21861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1624.009415][T21861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.271791][T22231] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4814'. [ 1625.271819][T22231] netlink: 'syz.9.4814': attribute type 2 has an invalid length. [ 1625.358620][T21861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.403451][T18284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.403628][T18284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.448703][T18284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.448882][T18284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.466318][T22227] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1625.466341][T22227] overlayfs: failed to set xattr on upper [ 1625.466348][T22227] overlayfs: ...falling back to redirect_dir=nofollow. [ 1625.466354][T22227] overlayfs: ...falling back to index=off. [ 1625.466359][T22227] overlayfs: ...falling back to uuid=null. [ 1625.466459][T22227] overlayfs: failed to clone lowerpath [ 1625.872847][T16593] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1626.415261][T16593] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1626.415311][T16593] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1626.415330][T16593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.460151][T16593] usb 7-1: config 0 descriptor?? [ 1627.213018][T21861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.568819][T21861] veth0_vlan: entered promiscuous mode [ 1628.731982][T21861] veth1_vlan: entered promiscuous mode [ 1628.752547][T16610] usb 7-1: USB disconnect, device number 41 [ 1629.063985][T21861] veth0_macvtap: entered promiscuous mode [ 1629.147034][T21861] veth1_macvtap: entered promiscuous mode [ 1629.241738][T21861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.451099][T21861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.582959][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.613609][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.681290][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.686994][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.150191][T22288] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4827'. [ 1632.914844][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.914862][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.206718][ T1412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.206736][ T1412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.098489][T16593] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1634.759199][T16593] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1634.759232][T16593] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.763322][T16593] usb 9-1: config 0 descriptor?? [ 1634.778724][T16593] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1635.107785][T16593] gspca_spca508: reg_read err -32 [ 1635.108100][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1635.108242][T16593] gspca_spca508: reg_read err -32 [ 1635.108520][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1635.110129][T16593] gspca_spca508: reg_read err -32 [ 1635.110533][T16593] gspca_spca508: reg_read err -71 [ 1635.110918][T16593] gspca_spca508: reg_read err -71 [ 1635.111303][T16593] gspca_spca508: reg write: error -71 [ 1635.111393][T16593] spca508 9-1:0.0: probe with driver spca508 failed with error -71 [ 1635.158182][T16593] usb 9-1: USB disconnect, device number 3 [ 1635.756884][T22328] loop5: detected capacity change from 0 to 7 [ 1636.298570][T22333] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4837'. [ 1636.427176][T16593] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1636.462693][T22332] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4835'. [ 1636.462720][T22332] netlink: 'syz.5.4835': attribute type 2 has an invalid length. [ 1636.756682][T16593] usb 3-1: config 0 has no interfaces? [ 1636.777824][T16593] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1636.777856][T16593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.777876][T16593] usb 3-1: Product: syz [ 1636.777891][T16593] usb 3-1: Manufacturer: syz [ 1636.777905][T16593] usb 3-1: SerialNumber: syz [ 1636.822864][T16593] usb 3-1: config 0 descriptor?? [ 1637.334615][ T32] blk_print_req_error: 5 callbacks suppressed [ 1637.334671][ T32] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.334796][ T32] buffer_io_error: 5 callbacks suppressed [ 1637.334842][ T32] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.346300][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.346750][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.354702][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.355031][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.357641][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.357992][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.361629][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.361876][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.368309][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.368558][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.370746][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.370776][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.370803][T22328] ldm_validate_partition_table(): Disk read failed. [ 1637.371629][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.371783][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.373298][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.373476][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.374748][T22328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.374898][T22328] Buffer I/O error on dev loop5, logical block 0, async page read [ 1637.377201][T22328] Dev loop5: unable to read RDB block 0 [ 1637.383294][T22328] loop5: unable to read partition table [ 1637.405098][T22328] loop5: partition table beyond EOD, truncated [ 1637.405235][T22328] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1637.606798][T16593] usb 3-1: USB disconnect, device number 3 [ 1638.190597][T22349] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4839'. [ 1641.567554][T22396] loop5: detected capacity change from 0 to 7 [ 1641.854460][T21255] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1642.117551][T21255] usb 6-1: config 0 has no interfaces? [ 1642.131653][T21255] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1642.131739][T21255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.131800][T21255] usb 6-1: Product: syz [ 1642.131842][T21255] usb 6-1: Manufacturer: syz [ 1642.131895][T21255] usb 6-1: SerialNumber: syz [ 1642.235272][T21255] usb 6-1: config 0 descriptor?? [ 1642.630970][T22396] Dev loop5: unable to read RDB block 7 [ 1642.631023][T22396] loop5: unable to read partition table [ 1642.631190][T22396] loop5: partition table beyond EOD, truncated [ 1642.631220][T22396] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1643.933389][T16937] usb 6-1: USB disconnect, device number 39 [ 1644.841480][T22412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4852'. [ 1652.899283][T22470] loop5: detected capacity change from 0 to 7 [ 1653.338863][ T1232] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1653.592440][ T1232] usb 7-1: config 0 has no interfaces? [ 1653.595161][ T1232] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1653.595184][ T1232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.595198][ T1232] usb 7-1: Product: syz [ 1653.595209][ T1232] usb 7-1: Manufacturer: syz [ 1653.595228][ T1232] usb 7-1: SerialNumber: syz [ 1653.603697][ T1232] usb 7-1: config 0 descriptor?? [ 1654.461802][ T839] blk_print_req_error: 5 callbacks suppressed [ 1654.461823][ T839] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.461853][ T839] buffer_io_error: 5 callbacks suppressed [ 1654.461865][ T839] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468468][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468495][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468540][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468559][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468592][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468610][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468657][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468676][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468729][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468747][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468779][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468800][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468815][T22470] ldm_validate_partition_table(): Disk read failed. [ 1654.468848][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468866][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468898][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468916][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.468948][T22470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.468966][T22470] Buffer I/O error on dev loop5, logical block 0, async page read [ 1654.469004][T22470] Dev loop5: unable to read RDB block 0 [ 1654.469105][T22470] loop5: unable to read partition table [ 1654.469273][T22470] loop5: partition table beyond EOD, truncated [ 1654.469305][T22470] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1654.973241][ T1232] usb 7-1: USB disconnect, device number 42 [ 1668.707553][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.707807][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.747199][T16574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1671.777971][T16574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1671.793133][T16574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1671.820949][T16574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1671.821804][T16574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1672.100932][T22583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4891'. [ 1672.100961][T22583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4891'. [ 1674.062075][ T5114] Bluetooth: hci3: command tx timeout [ 1675.287700][T22345] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1675.452353][T22345] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.452415][T22345] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1675.452440][T22345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.462115][T22345] usb 7-1: config 0 descriptor?? [ 1675.504133][T22345] pwc: Askey VC010 type 2 USB webcam detected. [ 1675.665961][T22620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.846546][T22569] chnl_net:caif_netlink_parms(): no params data found [ 1675.906459][T22345] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1675.907580][T22345] pwc: recv_control_msg error -32 req 02 val 2700 [ 1675.908434][T22345] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1675.909270][T22345] pwc: recv_control_msg error -32 req 04 val 1000 [ 1675.910112][T22345] pwc: recv_control_msg error -32 req 04 val 1300 [ 1675.910939][T22345] pwc: recv_control_msg error -32 req 04 val 1400 [ 1676.112337][T22345] pwc: recv_control_msg error -71 req 02 val 2100 [ 1676.112824][T22345] pwc: recv_control_msg error -71 req 04 val 1500 [ 1676.113262][T22345] pwc: recv_control_msg error -71 req 02 val 2500 [ 1676.113679][T22345] pwc: recv_control_msg error -71 req 02 val 2400 [ 1676.114151][T22345] pwc: recv_control_msg error -71 req 02 val 2600 [ 1676.114630][T22345] pwc: recv_control_msg error -71 req 02 val 2900 [ 1676.115085][T22345] pwc: recv_control_msg error -71 req 02 val 2800 [ 1676.115572][T22345] pwc: recv_control_msg error -71 req 04 val 1100 [ 1676.115940][T22345] pwc: recv_control_msg error -71 req 04 val 1200 [ 1676.120287][ T5114] Bluetooth: hci3: command tx timeout [ 1676.129019][T22345] pwc: Registered as video103. [ 1676.131487][T22345] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 1676.209423][T22345] usb 7-1: USB disconnect, device number 43 [ 1676.290764][T22622] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1678.098911][T22569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.104209][T22569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.104429][T22569] bridge_slave_0: entered allmulticast mode [ 1678.135383][T22569] bridge_slave_0: entered promiscuous mode [ 1678.169839][T22569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.170064][T22569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.170326][T22569] bridge_slave_1: entered allmulticast mode [ 1678.173093][T22569] bridge_slave_1: entered promiscuous mode [ 1678.196954][ T5114] Bluetooth: hci3: command tx timeout [ 1680.275565][ T5114] Bluetooth: hci3: command tx timeout [ 1681.300717][T22569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.521624][T22569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.574211][T16937] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1682.874511][T16937] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1682.874541][T16937] usb 9-1: config 0 has no interface number 0 [ 1682.874588][T16937] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1682.874628][T16937] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.874652][T16937] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1682.874680][T16937] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1682.874715][T16937] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1682.874738][T16937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.133739][T16937] usb 9-1: config 0 descriptor?? [ 1683.135846][T22569] team0: Port device team_slave_0 added [ 1683.202702][T22569] team0: Port device team_slave_1 added [ 1683.737925][T16937] usb 9-1: can't set config #0, error -71 [ 1683.791987][ T6510] bridge_slave_1: left allmulticast mode [ 1683.792060][ T6510] bridge_slave_1: left promiscuous mode [ 1683.792882][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.838678][T16937] usb 9-1: USB disconnect, device number 4 [ 1684.424318][ T6510] bridge_slave_0: left allmulticast mode [ 1684.424341][ T6510] bridge_slave_0: left promiscuous mode [ 1684.424588][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.110105][T22688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1689.571374][ T6510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.643364][ T6510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.661490][ T6510] bond0 (unregistering): Released all slaves [ 1691.351331][T22569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.351350][T22569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.351381][T22569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.353754][T22569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.353771][T22569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.353809][T22569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.205037][T22569] hsr_slave_0: entered promiscuous mode [ 1692.211846][T22569] hsr_slave_1: entered promiscuous mode [ 1692.214412][T22569] debugfs: 'hsr0' already exists in 'hsr' [ 1692.214480][T22569] Cannot create hsr debugfs directory [ 1697.233593][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 1698.877902][T22763] loop5: detected capacity change from 0 to 7 [ 1700.333177][ T6510] hsr_slave_0: left promiscuous mode [ 1700.395157][T16937] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1700.444372][ T6510] hsr_slave_1: left promiscuous mode [ 1700.445883][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.506455][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.781638][T22763] Dev loop5: unable to read RDB block 7 [ 1700.781692][T22763] loop5: unable to read partition table [ 1700.781925][T22763] loop5: partition table beyond EOD, truncated [ 1700.781978][T22763] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1700.893717][T16937] usb 6-1: config 0 has no interfaces? [ 1700.905660][T16937] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1700.905746][T16937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.905807][T16937] usb 6-1: Product: syz [ 1700.905842][T16937] usb 6-1: Manufacturer: syz [ 1700.905884][T16937] usb 6-1: SerialNumber: syz [ 1700.935022][T16937] usb 6-1: config 0 descriptor?? [ 1702.141831][T16937] usb 6-1: USB disconnect, device number 40 [ 1702.604058][T13185] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1703.536733][T13185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.536796][T13185] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1703.536821][T13185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.579908][T13185] usb 3-1: config 0 descriptor?? [ 1703.616702][T13185] pwc: Askey VC010 type 2 USB webcam detected. [ 1704.822958][T13185] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1704.825581][T13185] pwc: recv_control_msg error -32 req 02 val 2700 [ 1704.827085][T13185] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1704.830859][T13185] pwc: recv_control_msg error -32 req 04 val 1000 [ 1704.831712][T13185] pwc: recv_control_msg error -32 req 04 val 1300 [ 1704.893097][T13185] pwc: recv_control_msg error -32 req 04 val 1400 [ 1705.383107][T13185] pwc: recv_control_msg error -32 req 02 val 2000 [ 1705.384017][T13185] pwc: recv_control_msg error -32 req 02 val 2100 [ 1705.385694][T13185] pwc: recv_control_msg error -32 req 04 val 1500 [ 1705.387037][T13185] pwc: recv_control_msg error -32 req 02 val 2500 [ 1705.388262][T13185] pwc: recv_control_msg error -32 req 02 val 2400 [ 1705.389611][T13185] pwc: recv_control_msg error -32 req 02 val 2600 [ 1705.390745][T13185] pwc: recv_control_msg error -32 req 02 val 2900 [ 1705.570124][ T6510] team0 (unregistering): Port device team_slave_1 removed [ 1705.600021][T13185] pwc: recv_control_msg error -32 req 04 val 1100 [ 1705.606389][T13185] pwc: Registered as video103. [ 1705.608642][T13185] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 1705.693280][ T6510] team0 (unregistering): Port device team_slave_0 removed [ 1706.026783][T13185] usb 3-1: USB disconnect, device number 4 [ 1707.521110][T16574] Bluetooth: hci5: command 0x0406 tx timeout [ 1710.864331][T22846] loop5: detected capacity change from 0 to 7 [ 1712.079297][T16593] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1712.197350][ T5960] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1712.231491][T16593] usb 6-1: config 0 has no interfaces? [ 1712.234868][T16593] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1712.234898][T16593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.234918][T16593] usb 6-1: Product: syz [ 1712.234944][T16593] usb 6-1: Manufacturer: syz [ 1712.234959][T16593] usb 6-1: SerialNumber: syz [ 1712.681086][ T5960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1712.681174][ T5960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1712.833741][ T5960] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1712.833776][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.833798][ T5960] usb 9-1: Product: syz [ 1712.833813][ T5960] usb 9-1: Manufacturer: syz [ 1712.833828][ T5960] usb 9-1: SerialNumber: syz [ 1712.950442][T16593] usb 6-1: config 0 descriptor?? [ 1713.036775][ T5960] usb 9-1: config 0 descriptor?? [ 1713.073689][T22846] Dev loop5: unable to read RDB block 7 [ 1713.073744][T22846] loop5: unable to read partition table [ 1713.073973][T22846] loop5: partition table beyond EOD, truncated [ 1713.074008][T22846] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1713.530572][ T807] usb 6-1: USB disconnect, device number 41 [ 1715.607767][ T5960] usb 9-1: USB disconnect, device number 5 [ 1717.197766][T16593] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1717.861072][T22785] udevd[22785]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1717.906431][T16593] usb 7-1: Using ep0 maxpacket: 8 [ 1717.913085][T16593] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1717.913116][T16593] usb 7-1: config 0 has no interface number 0 [ 1717.913160][T16593] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1717.913178][T16593] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1717.913196][T16593] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1717.913215][T16593] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1717.913247][T16593] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1717.913264][T16593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.035595][T16593] usb 7-1: config 0 descriptor?? [ 1718.234965][T16593] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1718.325310][T16593] usb 7-1: USB disconnect, device number 44 [ 1718.363599][T16593] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1728.084582][T16574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1728.088291][T16574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1728.089710][T16574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1728.090992][T16574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1728.112105][T16574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1728.341248][T16593] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1728.524321][T16593] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.524364][T16593] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1728.524382][T16593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.528341][T16593] usb 6-1: config 0 descriptor?? [ 1728.584742][T16593] pwc: Askey VC010 type 2 USB webcam detected. [ 1729.006237][T16593] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1729.007037][T16593] pwc: recv_control_msg error -32 req 02 val 2700 [ 1729.008809][T16593] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1729.010774][T16593] pwc: recv_control_msg error -32 req 04 val 1000 [ 1729.051055][T16593] pwc: recv_control_msg error -32 req 04 val 1300 [ 1729.052799][T16593] pwc: recv_control_msg error -32 req 04 val 1400 [ 1729.053466][T16593] pwc: recv_control_msg error -32 req 02 val 2000 [ 1729.058467][T16593] pwc: recv_control_msg error -32 req 02 val 2100 [ 1729.082637][T16593] pwc: recv_control_msg error -32 req 04 val 1500 [ 1729.086621][T16593] pwc: recv_control_msg error -32 req 02 val 2500 [ 1729.096748][T16593] pwc: recv_control_msg error -32 req 02 val 2400 [ 1729.115483][T16593] pwc: recv_control_msg error -32 req 02 val 2600 [ 1729.133647][T16593] pwc: recv_control_msg error -32 req 02 val 2900 [ 1729.385273][T16593] pwc: recv_control_msg error -32 req 04 val 1100 [ 1729.385780][T16593] pwc: recv_control_msg error -71 req 04 val 1200 [ 1729.550856][T16593] pwc: Registered as video103. [ 1729.554379][T16593] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 1729.613186][T16593] usb 6-1: USB disconnect, device number 42 [ 1730.344084][ T5114] Bluetooth: hci0: command tx timeout [ 1730.561099][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.561172][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.513514][ T5114] Bluetooth: hci0: command tx timeout [ 1735.139765][ T5114] Bluetooth: hci0: command tx timeout [ 1736.109329][T22960] chnl_net:caif_netlink_parms(): no params data found [ 1738.575526][ T5114] Bluetooth: hci0: command tx timeout [ 1740.247878][T22960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.252224][T22960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.252491][T22960] bridge_slave_0: entered allmulticast mode [ 1740.285984][T22960] bridge_slave_0: entered promiscuous mode [ 1740.291415][T22960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.309406][T22960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.324450][T22960] bridge_slave_1: entered allmulticast mode [ 1740.342766][T22960] bridge_slave_1: entered promiscuous mode [ 1740.715000][T22400] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1740.722844][T22960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.874946][T22400] usb 9-1: device descriptor read/64, error -71 [ 1741.317676][T22400] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1742.147986][T22400] usb 9-1: device descriptor read/64, error -71 [ 1742.277580][T22400] usb usb9-port1: attempt power cycle [ 1743.121436][T22960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.000599][T22960] team0: Port device team_slave_0 added [ 1745.027485][T22960] team0: Port device team_slave_1 added [ 1746.143730][T23089] loop5: detected capacity change from 0 to 7 [ 1746.285069][T22960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.285089][T22960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.285120][T22960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.441851][T22960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.441871][T22960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.441900][T22960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.442085][T22400] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1746.661700][T22400] usb 3-1: config 0 has no interfaces? [ 1746.675839][T22400] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1746.675874][T22400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.675896][T22400] usb 3-1: Product: syz [ 1746.675911][T22400] usb 3-1: Manufacturer: syz [ 1746.675926][T22400] usb 3-1: SerialNumber: syz [ 1746.725737][T22400] usb 3-1: config 0 descriptor?? [ 1747.133455][T22960] hsr_slave_0: entered promiscuous mode [ 1747.149544][T22960] hsr_slave_1: entered promiscuous mode [ 1747.161304][T22960] debugfs: 'hsr0' already exists in 'hsr' [ 1747.163870][T22960] Cannot create hsr debugfs directory [ 1747.726169][T22400] usb 3-1: USB disconnect, device number 5 [ 1747.921495][ T839] blk_print_req_error: 5 callbacks suppressed [ 1747.921515][ T839] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.921640][ T839] buffer_io_error: 5 callbacks suppressed [ 1747.921654][ T839] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.921771][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.921801][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.921858][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.921884][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.921932][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.921958][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922030][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.922057][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922119][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.922145][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922191][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.922218][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922240][T23089] ldm_validate_partition_table(): Disk read failed. [ 1747.922279][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.922304][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922362][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.922389][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922446][T23089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1747.922472][T23089] Buffer I/O error on dev loop5, logical block 0, async page read [ 1747.922536][T23089] Dev loop5: unable to read RDB block 0 [ 1747.922769][T23089] loop5: unable to read partition table [ 1747.922988][T23089] loop5: partition table beyond EOD, truncated [ 1747.923024][T23089] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1753.946880][ T1412] bridge_slave_1: left allmulticast mode [ 1753.946910][ T1412] bridge_slave_1: left promiscuous mode [ 1753.947782][ T1412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.107365][ T1412] bridge_slave_0: left allmulticast mode [ 1755.107389][ T1412] bridge_slave_0: left promiscuous mode [ 1755.107702][ T1412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.631318][ T1412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.958121][ T1412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.639940][ T1412] bond0 (unregistering): Released all slaves [ 1762.664204][T22715] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1762.705233][ T1412] hsr_slave_0: left promiscuous mode [ 1762.764103][ T1412] hsr_slave_1: left promiscuous mode [ 1762.765135][ T1412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.816214][T22715] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.816277][T22715] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1762.816304][T22715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.822521][T22715] usb 7-1: config 0 descriptor?? [ 1762.875661][T22715] pwc: Askey VC010 type 2 USB webcam detected. [ 1762.903987][ T1412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.245454][T22715] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1763.247855][T22715] pwc: recv_control_msg error -32 req 02 val 2700 [ 1763.258039][T22715] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1763.277668][T22715] pwc: recv_control_msg error -32 req 04 val 1000 [ 1763.290589][T22715] pwc: recv_control_msg error -32 req 04 val 1300 [ 1763.291316][T22715] pwc: recv_control_msg error -32 req 04 val 1400 [ 1763.292040][T22715] pwc: recv_control_msg error -32 req 02 val 2000 [ 1763.292740][T22715] pwc: recv_control_msg error -32 req 02 val 2100 [ 1763.293434][T22715] pwc: recv_control_msg error -32 req 04 val 1500 [ 1763.332248][T22715] pwc: recv_control_msg error -32 req 02 val 2500 [ 1763.333936][T22715] pwc: recv_control_msg error -32 req 02 val 2400 [ 1763.334963][T22715] pwc: recv_control_msg error -32 req 02 val 2600 [ 1763.335804][T22715] pwc: recv_control_msg error -32 req 02 val 2900 [ 1763.336179][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1763.340785][T22715] pwc: recv_control_msg error -32 req 02 val 2800 [ 1763.341429][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1763.383936][T22715] pwc: recv_control_msg error -32 req 04 val 1100 [ 1763.384336][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1763.403212][T22715] pwc: recv_control_msg error -32 req 04 val 1200 [ 1763.442408][T22715] pwc: Registered as video103. [ 1763.452782][T22715] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 1763.480749][T22715] usb 7-1: USB disconnect, device number 45 [ 1771.773437][ T1412] team0 (unregistering): Port device team_slave_1 removed [ 1771.836619][ T1412] team0 (unregistering): Port device team_slave_0 removed [ 1775.127200][T23198] blktrace: Concurrent blktraces are not allowed on loop12 [ 1779.860226][T22960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1781.123267][T22960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1782.015881][T23241] loop5: detected capacity change from 0 to 7 [ 1782.699826][T22960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1782.804060][T21255] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1783.137386][T21255] usb 6-1: config 0 has no interfaces? [ 1783.172288][T21255] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1783.172565][T21255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.172628][T21255] usb 6-1: Product: syz [ 1783.172680][T21255] usb 6-1: Manufacturer: syz [ 1783.172714][T21255] usb 6-1: SerialNumber: syz [ 1783.994812][T21255] usb 6-1: config 0 descriptor?? [ 1784.535914][T22960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1784.755430][T21255] usb 6-1: USB disconnect, device number 43 [ 1784.812040][ T32] blk_print_req_error: 5 callbacks suppressed [ 1784.812063][ T32] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.812093][ T32] buffer_io_error: 5 callbacks suppressed [ 1784.812105][ T32] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.923773][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.923815][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.923878][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.923907][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.923956][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.923982][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.924055][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.924082][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.924164][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.924191][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.924239][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.924266][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.924288][T23241] ldm_validate_partition_table(): Disk read failed. [ 1784.924337][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.924364][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.924412][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.924438][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1784.924486][T23241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.924512][T23241] Buffer I/O error on dev loop5, logical block 0, async page read [ 1785.496828][T23241] Dev loop5: unable to read RDB block 0 [ 1785.496945][T23241] loop5: unable to read partition table [ 1785.497119][T23241] loop5: partition table beyond EOD, truncated [ 1785.497180][T23241] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1788.956029][T16574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1788.962595][T16574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1788.971075][T16574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1788.984620][T16574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1788.989037][T16574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1791.675114][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.675202][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.456031][ T5114] Bluetooth: hci3: command tx timeout [ 1795.099996][ T5114] Bluetooth: hci3: command tx timeout [ 1797.176997][ T5114] Bluetooth: hci3: command tx timeout [ 1800.623340][ T5114] Bluetooth: hci3: command tx timeout [ 1802.434085][T23047] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1802.628046][T23047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1802.628078][T23047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1802.631058][T23047] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1802.631089][T23047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.631110][T23047] usb 3-1: Product: syz [ 1802.631125][T23047] usb 3-1: Manufacturer: syz [ 1802.631139][T23047] usb 3-1: SerialNumber: syz [ 1802.677084][T23047] usb 3-1: config 0 descriptor?? [ 1807.221323][T23285] chnl_net:caif_netlink_parms(): no params data found [ 1807.299374][T23047] usb 3-1: USB disconnect, device number 6 [ 1808.845591][T23417] udevd[23417]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1809.940498][T23047] IPVS: starting estimator thread 0... [ 1810.974737][T23435] IPVS: using max 7 ests per chain, 16800 per kthread [ 1811.202442][T23425] block nbd8: shutting down sockets [ 1811.379615][T22400] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1811.542675][T22400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1811.542709][T22400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1811.549095][T22400] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1811.549118][T22400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.549133][T22400] usb 7-1: Product: syz [ 1811.549144][T22400] usb 7-1: Manufacturer: syz [ 1811.549154][T22400] usb 7-1: SerialNumber: syz [ 1811.639988][T22400] usb 7-1: config 0 descriptor?? [ 1811.745269][T23285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.745432][T23285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.745710][T23285] bridge_slave_0: entered allmulticast mode [ 1811.749049][T23285] bridge_slave_0: entered promiscuous mode [ 1811.753672][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1811.794553][T23285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.794727][T23285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.794926][T23285] bridge_slave_1: entered allmulticast mode [ 1811.797458][T23285] bridge_slave_1: entered promiscuous mode [ 1811.913055][T23285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.935846][T23285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.013328][T23285] team0: Port device team_slave_0 added [ 1812.061625][T23285] team0: Port device team_slave_1 added [ 1812.156915][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.157036][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1812.157064][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.172286][ T9] usb 9-1: config 0 descriptor?? [ 1812.251477][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1812.414316][T23285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.414336][T23285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.414366][T23285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.491338][T23285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.491354][T23285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.491376][T23285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.609214][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1812.630783][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1812.639754][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1812.653008][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1812.655276][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1812.664555][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1812.690789][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1812.692096][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1812.696040][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1812.710332][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1812.723941][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1812.734579][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1812.937947][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1812.948019][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1812.953411][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1813.021929][ T9] pwc: Registered as video103. [ 1813.082910][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input17 [ 1813.448964][ T9] usb 9-1: USB disconnect, device number 9 [ 1813.589326][T23285] hsr_slave_0: entered promiscuous mode [ 1813.591061][T23285] hsr_slave_1: entered promiscuous mode [ 1813.591902][T23285] debugfs: 'hsr0' already exists in 'hsr' [ 1813.591924][T23285] Cannot create hsr debugfs directory [ 1813.932927][T22400] usb 7-1: USB disconnect, device number 46 [ 1815.147836][T18432] bridge_slave_1: left allmulticast mode [ 1815.147864][T18432] bridge_slave_1: left promiscuous mode [ 1815.148094][T18432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.312363][T18432] bridge_slave_0: left allmulticast mode [ 1815.312397][T18432] bridge_slave_0: left promiscuous mode [ 1815.312666][T18432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.412269][T23446] udevd[23446]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1816.843106][T18432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.991954][T18432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.100316][T18432] bond0 (unregistering): Released all slaves [ 1821.514988][T18432] hsr_slave_0: left promiscuous mode [ 1821.640955][T18432] hsr_slave_1: left promiscuous mode [ 1821.642062][T18432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.717776][T18432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.980372][T23538] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1821.980404][T23538] overlayfs: failed to set xattr on upper [ 1821.980414][T23538] overlayfs: ...falling back to redirect_dir=nofollow. [ 1821.980422][T23538] overlayfs: ...falling back to index=off. [ 1821.980431][T23538] overlayfs: ...falling back to uuid=null. [ 1823.089626][T23558] blktrace: Concurrent blktraces are not allowed on loop4 [ 1823.506626][T18432] team0 (unregistering): Port device team_slave_1 removed [ 1823.744242][T18432] team0 (unregistering): Port device team_slave_0 removed [ 1829.520564][ T807] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1829.702918][ T807] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.702979][ T807] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1829.703004][ T807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.708933][ T807] usb 9-1: config 0 descriptor?? [ 1829.773337][ T807] pwc: Askey VC010 type 2 USB webcam detected. [ 1830.260296][ T807] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1830.261443][ T807] pwc: recv_control_msg error -32 req 02 val 2700 [ 1830.267850][ T807] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1830.268589][ T807] pwc: recv_control_msg error -32 req 04 val 1000 [ 1830.283467][ T807] pwc: recv_control_msg error -32 req 04 val 1300 [ 1830.303267][ T807] pwc: recv_control_msg error -32 req 04 val 1400 [ 1830.304003][ T807] pwc: recv_control_msg error -32 req 02 val 2000 [ 1830.304862][ T807] pwc: recv_control_msg error -32 req 02 val 2100 [ 1830.305875][ T807] pwc: recv_control_msg error -32 req 04 val 1500 [ 1830.306903][ T807] pwc: recv_control_msg error -32 req 02 val 2500 [ 1830.307739][ T807] pwc: recv_control_msg error -32 req 02 val 2400 [ 1830.318328][ T807] pwc: recv_control_msg error -32 req 02 val 2600 [ 1830.783419][ T807] pwc: recv_control_msg error -71 req 02 val 2800 [ 1830.784114][ T807] pwc: recv_control_msg error -71 req 04 val 1100 [ 1830.784708][ T807] pwc: recv_control_msg error -71 req 04 val 1200 [ 1830.787635][ T807] pwc: Registered as video103. [ 1831.191199][ T807] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input18 [ 1831.521868][ T807] usb 9-1: USB disconnect, device number 10 [ 1834.238327][T22400] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1834.396198][T22400] usb 3-1: Using ep0 maxpacket: 16 [ 1834.402580][T22400] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1834.402614][T22400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.402635][T22400] usb 3-1: Product: syz [ 1834.402650][T22400] usb 3-1: Manufacturer: syz [ 1834.402665][T22400] usb 3-1: SerialNumber: syz [ 1835.219870][T22400] usb 3-1: config 0 descriptor?? [ 1835.664961][T22400] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1836.136567][T22400] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1836.165217][T22400] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1836.165349][T22400] usb 3-1: media controller created [ 1836.218047][T22400] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1836.324365][T23285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1836.394188][T22400] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1836.394329][T22400] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1836.617200][T22400] usb 3-1: USB disconnect, device number 7 [ 1836.703090][T22400] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1837.434351][T23285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1837.539600][T23285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1837.590293][T23285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1840.604971][T23047] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1840.665530][T23689] blktrace: Concurrent blktraces are not allowed on loop16 [ 1840.887629][T23047] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1840.887660][T23047] usb 7-1: config 0 has no interface number 0 [ 1840.887765][T23047] usb 7-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1840.887796][T23047] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1840.887831][T23047] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1840.887856][T23047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.921695][T23047] usb 7-1: config 0 descriptor?? [ 1841.023596][T23047] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 1841.445327][T23285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1841.454835][T23047] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1841.527141][T23285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1841.538951][T18432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.539281][T18432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.604397][T23047] usb 6-1: Using ep0 maxpacket: 16 [ 1841.609742][T18432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.609909][T18432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1841.635108][T23047] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1841.635141][T23047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.635162][T23047] usb 6-1: Product: syz [ 1841.635179][T23047] usb 6-1: Manufacturer: syz [ 1841.635194][T23047] usb 6-1: SerialNumber: syz [ 1841.641664][T23047] usb 6-1: config 0 descriptor?? [ 1842.051424][T23047] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1842.099533][T23047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1842.113813][T23047] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1842.113876][T23047] usb 6-1: media controller created [ 1842.177303][T23047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1842.297229][T23047] zl10353_read_register: readreg error (reg=127, ret==0) [ 1842.297295][T23047] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1842.297309][T23047] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1842.333561][T23047] usb 6-1: USB disconnect, device number 44 [ 1842.422887][T23047] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1842.635001][T23285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.779886][T23285] veth0_vlan: entered promiscuous mode [ 1842.823767][T23285] veth1_vlan: entered promiscuous mode [ 1843.007798][T23285] veth0_macvtap: entered promiscuous mode [ 1843.029197][T23285] veth1_macvtap: entered promiscuous mode [ 1843.668863][T23736] overlayfs: failed to resolve './file0': -2 [ 1843.726797][ T807] usb 7-1: USB disconnect, device number 47 [ 1843.883814][T23285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.904626][T23742] loop5: detected capacity change from 0 to 7 [ 1843.991524][T23285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1844.160285][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.178361][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.203327][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.238249][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.277205][T17044] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1844.467015][T17044] usb 7-1: config 0 has no interfaces? [ 1844.492692][T17044] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1844.492769][T17044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.492793][T17044] usb 7-1: Product: syz [ 1844.492809][T17044] usb 7-1: Manufacturer: syz [ 1844.492825][T17044] usb 7-1: SerialNumber: syz [ 1844.578761][T17044] usb 7-1: config 0 descriptor?? [ 1845.262623][ T32] blk_print_req_error: 5 callbacks suppressed [ 1845.262640][ T32] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.262663][ T32] buffer_io_error: 5 callbacks suppressed [ 1845.262671][ T32] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.312730][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.312769][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.312831][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.312858][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.312906][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.312932][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313001][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.313026][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313088][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.313114][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313159][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.313184][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313205][T23742] ldm_validate_partition_table(): Disk read failed. [ 1845.313243][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.313268][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313312][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.313337][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313380][T23742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1845.313471][T23742] Buffer I/O error on dev loop5, logical block 0, async page read [ 1845.313542][T23742] Dev loop5: unable to read RDB block 0 [ 1845.313694][T23742] loop5: unable to read partition table [ 1845.313923][T23742] loop5: partition table beyond EOD, truncated [ 1845.313957][T23742] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1846.465557][T22336] usb 7-1: USB disconnect, device number 48 [ 1848.006894][ T3184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.006913][ T3184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1850.269183][T23769] blktrace: Concurrent blktraces are not allowed on loop10 [ 1851.674491][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1851.689222][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1851.702816][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1851.717415][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1851.725988][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1852.925015][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.925096][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.791598][T16574] Bluetooth: hci0: command tx timeout [ 1855.553747][T23813] loop5: detected capacity change from 0 to 7 [ 1855.880716][T16574] Bluetooth: hci0: command tx timeout [ 1856.067333][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1856.300827][ T9] usb 3-1: config 0 has no interfaces? [ 1856.321034][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1856.321069][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.321089][ T9] usb 3-1: Product: syz [ 1856.321105][ T9] usb 3-1: Manufacturer: syz [ 1856.321120][ T9] usb 3-1: SerialNumber: syz [ 1856.388935][ T9] usb 3-1: config 0 descriptor?? [ 1857.918249][ T32] blk_print_req_error: 5 callbacks suppressed [ 1857.918316][ T32] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1857.918445][ T32] buffer_io_error: 5 callbacks suppressed [ 1857.918492][ T32] Buffer I/O error on dev loop5, logical block 0, async page read [ 1857.920980][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1857.921037][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1857.921415][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1857.921466][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1857.921771][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1857.921821][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1857.977331][T16574] Bluetooth: hci0: command tx timeout [ 1858.135775][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1858.135863][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1858.137344][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1858.137397][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1858.137844][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1858.137893][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1858.138029][T23813] ldm_validate_partition_table(): Disk read failed. [ 1858.138485][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1858.138534][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1858.138786][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1858.138836][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1858.139402][T23813] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1858.139450][T23813] Buffer I/O error on dev loop5, logical block 0, async page read [ 1858.140120][T23813] Dev loop5: unable to read RDB block 0 [ 1858.142565][T23813] loop5: unable to read partition table [ 1858.161199][T23813] loop5: partition table beyond EOD, truncated [ 1858.161907][T23813] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1859.141442][T23830] blktrace: Concurrent blktraces are not allowed on loop16 [ 1860.025407][T16574] Bluetooth: hci0: command tx timeout [ 1860.072049][ T9] usb 3-1: USB disconnect, device number 8 [ 1860.104116][T23832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5144'. [ 1861.860070][ T3184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.941385][T23778] chnl_net:caif_netlink_parms(): no params data found [ 1862.932883][T23848] overlayfs: failed to resolve './file0': -2 [ 1866.285158][ T3184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.424074][T23876] blktrace: Concurrent blktraces are not allowed on loop16 [ 1867.531493][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1867.686760][ T9] usb 6-1: config 0 has no interfaces? [ 1867.691001][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1867.691033][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.691054][ T9] usb 6-1: Product: syz [ 1867.691068][ T9] usb 6-1: Manufacturer: syz [ 1867.691082][ T9] usb 6-1: SerialNumber: syz [ 1867.757153][ T9] usb 6-1: config 0 descriptor?? [ 1868.484768][ T9] usb 6-1: USB disconnect, device number 45 [ 1868.546752][ T3184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.196585][ T3184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.262633][T23778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.283295][T23778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.283551][T23778] bridge_slave_0: entered allmulticast mode [ 1869.286836][T23778] bridge_slave_0: entered promiscuous mode [ 1869.325465][T23778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.325697][T23778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.350895][T23778] bridge_slave_1: entered allmulticast mode [ 1869.367797][T23778] bridge_slave_1: entered promiscuous mode [ 1869.538386][T23778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.603139][T23778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.071923][T23778] team0: Port device team_slave_0 added [ 1870.097744][T23778] team0: Port device team_slave_1 added [ 1870.199644][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 1870.599213][T23778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.599234][T23778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.599265][T23778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1870.667397][T23778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1870.667413][T23778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.667435][T23778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.624487][ T3184] bridge_slave_1: left allmulticast mode [ 1872.624518][ T3184] bridge_slave_1: left promiscuous mode [ 1872.624770][ T3184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.056868][ T3184] bridge_slave_0: left allmulticast mode [ 1873.057056][ T3184] bridge_slave_0: left promiscuous mode [ 1873.080147][ T3184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.711152][T23917] overlayfs: failed to resolve './file0': -2 [ 1875.670595][T23930] loop5: detected capacity change from 0 to 7 [ 1875.938336][T23935] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 1875.938374][T23935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1875.944793][T23935] vhci_hcd vhci_hcd.0: Device attached [ 1875.987940][T23047] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1876.170705][T23047] usb 7-1: config 0 has no interfaces? [ 1876.173846][T23047] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1876.173879][T23047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.173907][T23047] usb 7-1: Product: syz [ 1876.173917][T23047] usb 7-1: Manufacturer: syz [ 1876.173928][T23047] usb 7-1: SerialNumber: syz [ 1876.199283][ T9] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1876.267457][T23047] usb 7-1: config 0 descriptor?? [ 1876.471983][T23930] Dev loop5: unable to read RDB block 7 [ 1876.472040][T23930] loop5: unable to read partition table [ 1876.472333][T23930] loop5: partition table beyond EOD, truncated [ 1876.472367][T23930] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1877.030002][T22345] usb 7-1: USB disconnect, device number 49 [ 1878.167522][T23936] vhci_hcd: connection reset by peer [ 1878.174951][ T6511] vhci_hcd vhci_hcd.8: stop threads [ 1878.176390][ T6511] vhci_hcd vhci_hcd.8: release socket [ 1878.221133][ T6511] vhci_hcd vhci_hcd.8: disconnect device [ 1878.756055][ T3184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1878.885936][ T3184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1878.956053][ T3184] bond0 (unregistering): Released all slaves [ 1879.018058][T23778] hsr_slave_0: entered promiscuous mode [ 1879.037969][T23778] hsr_slave_1: entered promiscuous mode [ 1879.061943][T23778] debugfs: 'hsr0' already exists in 'hsr' [ 1879.061973][T23778] Cannot create hsr debugfs directory [ 1879.154902][T23938] pimreg: entered allmulticast mode [ 1879.210432][T23940] pimreg: left allmulticast mode [ 1882.192488][ T9] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1885.273955][T23987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1887.057584][ T3184] hsr_slave_0: left promiscuous mode [ 1887.137948][ T3184] hsr_slave_1: left promiscuous mode [ 1887.138823][ T3184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.138843][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.159147][ T3184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.159227][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.308639][ T3184] veth1_macvtap: left promiscuous mode [ 1887.308724][ T3184] veth0_macvtap: left promiscuous mode [ 1887.308905][ T3184] veth1_vlan: left promiscuous mode [ 1887.309023][ T3184] veth0_vlan: left promiscuous mode [ 1890.736417][ T3184] team0 (unregistering): Port device team_slave_1 removed [ 1890.804690][ T3184] team0 (unregistering): Port device team_slave_0 removed [ 1899.058440][T24052] overlayfs: failed to resolve './bus': -2 [ 1900.001520][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1900.023001][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1900.033959][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1900.092902][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1900.112895][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1902.164306][T16574] Bluetooth: hci3: command tx timeout [ 1904.274041][T16574] Bluetooth: hci3: command tx timeout [ 1905.060868][T24065] chnl_net:caif_netlink_parms(): no params data found [ 1905.265963][T24117] netlink: 216 bytes leftover after parsing attributes in process `syz.8.5198'. [ 1905.265987][T24117] netlink: 'syz.8.5198': attribute type 2 has an invalid length. [ 1905.358578][T24118] ubi: mtd0 is already attached to ubi31 [ 1906.126568][T23778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1906.322129][T16574] Bluetooth: hci3: command tx timeout [ 1906.508963][T23778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1906.616951][T23778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1907.303871][T23778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1907.610760][T24065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.611095][T24065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.631184][T24065] bridge_slave_0: entered allmulticast mode [ 1908.394136][T24065] bridge_slave_0: entered promiscuous mode [ 1908.418017][T16574] Bluetooth: hci3: command tx timeout [ 1908.568294][T24065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.568786][T24065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.568993][T24065] bridge_slave_1: entered allmulticast mode [ 1908.611576][T24065] bridge_slave_1: entered promiscuous mode [ 1908.884334][T24065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.888883][T24065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.443543][T24065] team0: Port device team_slave_0 added [ 1909.645706][T24065] team0: Port device team_slave_1 added [ 1910.434133][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1910.523072][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1910.562765][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1910.981996][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1911.039242][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1911.297580][T24065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1911.297600][T24065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1911.297629][T24065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1911.897515][T24065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1911.897529][T24065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1911.897551][T24065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1912.123060][ T6511] bridge_slave_1: left allmulticast mode [ 1912.123082][ T6511] bridge_slave_1: left promiscuous mode [ 1912.123390][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.204158][ T6511] bridge_slave_0: left allmulticast mode [ 1912.204181][ T6511] bridge_slave_0: left promiscuous mode [ 1912.204416][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.278659][T16574] Bluetooth: hci4: command tx timeout [ 1913.878833][ T6511] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1914.128718][ T6511] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1914.326412][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.326487][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.431658][ T6511] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1914.592519][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.668874][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1915.823643][T16574] Bluetooth: hci4: command tx timeout [ 1915.825336][ T6511] bond0 (unregistering): Released all slaves [ 1915.903337][ T6511] bond1 (unregistering): Released all slaves [ 1915.975254][ T6511] bond2 (unregistering): Released all slaves [ 1916.553656][ T6511] bond3 (unregistering): Released all slaves [ 1917.876671][T16574] Bluetooth: hci4: command tx timeout [ 1919.559380][T24065] hsr_slave_0: entered promiscuous mode [ 1919.560859][T24065] hsr_slave_1: entered promiscuous mode [ 1919.561838][T24065] debugfs: 'hsr0' already exists in 'hsr' [ 1919.561863][T24065] Cannot create hsr debugfs directory [ 1919.923419][T16574] Bluetooth: hci4: command tx timeout [ 1921.586077][ T6511] hsr_slave_0: left promiscuous mode [ 1921.609885][ T6511] hsr_slave_1: left promiscuous mode [ 1921.610667][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1921.635147][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.860667][ T6511] team0 (unregistering): Port device team_slave_1 removed [ 1922.928509][ T6511] team0 (unregistering): Port device team_slave_0 removed [ 1924.763157][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1924.915077][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.915150][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1924.915185][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.055951][ T9] usb 9-1: config 0 descriptor?? [ 1925.545496][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1925.796667][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1925.800855][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1925.822592][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1925.827533][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1925.847933][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1925.851618][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1925.869061][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1925.880337][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1925.889059][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1925.909868][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1925.910626][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1925.932768][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1926.142570][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1926.143320][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1926.143798][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1926.196505][ T9] pwc: Registered as video103. [ 1926.200052][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input19 [ 1926.238547][ T9] usb 9-1: USB disconnect, device number 11 [ 1929.486798][T24180] chnl_net:caif_netlink_parms(): no params data found [ 1929.489832][T24363] loop5: detected capacity change from 0 to 7 [ 1929.870777][T22345] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1930.023101][T22345] usb 9-1: config 0 has no interfaces? [ 1930.026884][T22345] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1930.026918][T22345] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.026940][T22345] usb 9-1: Product: syz [ 1930.026955][T22345] usb 9-1: Manufacturer: syz [ 1930.026970][T22345] usb 9-1: SerialNumber: syz [ 1930.102682][T22345] usb 9-1: config 0 descriptor?? [ 1930.262326][T24363] Dev loop5: unable to read RDB block 7 [ 1930.262365][T24363] loop5: unable to read partition table [ 1930.262515][T24363] loop5: partition table beyond EOD, truncated [ 1930.262578][T24363] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1930.965010][ T5960] usb 9-1: USB disconnect, device number 12 [ 1935.358897][T24180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.359130][T24180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.359365][T24180] bridge_slave_0: entered allmulticast mode [ 1935.362216][T24180] bridge_slave_0: entered promiscuous mode [ 1935.365811][T24180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.366028][T24180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.366240][T24180] bridge_slave_1: entered allmulticast mode [ 1935.369666][T24180] bridge_slave_1: entered promiscuous mode [ 1936.233208][T24180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1936.294945][T24180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.417073][ T9] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1938.297755][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1938.299752][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1938.299793][ T9] usb 9-1: can't read configurations, error -71 [ 1940.506370][T24448] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5249'. [ 1940.552125][T24180] team0: Port device team_slave_0 added [ 1941.558592][T24180] team0: Port device team_slave_1 added [ 1942.593889][ T9] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1943.158567][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1943.160621][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1943.160678][ T9] usb 9-1: can't read configurations, error -71 [ 1943.986208][T24180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1943.986226][T24180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1943.986257][T24180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1945.442694][T24180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1945.442708][T24180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1945.442730][T24180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1946.336502][T24489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1948.217919][T24065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1948.431360][T22715] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1948.515992][T24180] hsr_slave_0: entered promiscuous mode [ 1948.529062][T24180] hsr_slave_1: entered promiscuous mode [ 1948.541360][T24180] debugfs: 'hsr0' already exists in 'hsr' [ 1948.541391][T24180] Cannot create hsr debugfs directory [ 1948.546176][T24065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1949.049539][T24065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1949.150728][T24065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1950.833084][T24550] overlayfs: missing 'lowerdir' [ 1951.490367][T22715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1951.536063][T22715] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1951.536385][T22715] usb 3-1: can't read configurations, error -71 [ 1952.682473][ T6511] bridge_slave_1: left allmulticast mode [ 1952.682501][ T6511] bridge_slave_1: left promiscuous mode [ 1952.682786][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.800808][ T6511] bridge_slave_0: left allmulticast mode [ 1952.800840][ T6511] bridge_slave_0: left promiscuous mode [ 1952.801127][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.816265][T24577] loop5: detected capacity change from 0 to 7 [ 1953.059098][T22715] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1953.199007][T22715] usb 3-1: device descriptor read/64, error -71 [ 1953.309265][T22715] usb usb3-port1: attempt power cycle [ 1953.346771][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.410540][T24577] Dev loop5: unable to read RDB block 7 [ 1953.410598][T24577] loop5: unable to read partition table [ 1953.410865][T24577] loop5: partition table beyond EOD, truncated [ 1953.410906][T24577] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1953.512125][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.692845][T22715] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1953.750641][T22715] usb 3-1: device descriptor read/8, error -71 [ 1954.047482][ T6511] bond0 (unregistering): Released all slaves [ 1954.109035][T22715] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1954.132749][T22715] usb 3-1: device descriptor read/8, error -71 [ 1954.249229][T22715] usb usb3-port1: unable to enumerate USB device [ 1956.287510][T13185] ------------[ cut here ]------------ [ 1956.287522][T13185] in_task() && kcov_mode_enabled(mode) [ 1956.287532][T13185] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/0:17/13185 [ 1956.287600][T13185] Modules linked in: [ 1956.287636][T13185] CPU: 0 UID: 0 PID: 13185 Comm: kworker/0:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1956.287655][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1956.287666][T13185] Workqueue: usb_hub_wq hub_event [ 1956.287789][T13185] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1956.287810][T13185] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 42 2d d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ea cc 5d 09 89 c0 48 c7 c7 20 94 4e [ 1956.287824][T13185] RSP: 0000:ffffc900049c77e8 EFLAGS: 00010202 [ 1956.287843][T13185] RAX: 0000000000000002 RBX: ffff888031ca1e80 RCX: 0000000000000000 [ 1956.287854][T13185] RDX: 0000000000000000 RSI: ffffffff8ba64be0 RDI: ffffffff8ba64ba0 [ 1956.287866][T13185] RBP: ffffc900049c7af0 R08: ffffffff8b2461d0 R09: ffffffff8ddcd780 [ 1956.287878][T13185] R10: dffffc0000000000 R11: fffffbfff1ed4717 R12: ffff88802976a000 [ 1956.287891][T13185] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff88802976d000 [ 1956.287904][T13185] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1956.287917][T13185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1956.287928][T13185] CR2: 00007fe2b00f6980 CR3: 000000003b38a000 CR4: 00000000003526f0 [ 1956.287944][T13185] Call Trace: [ 1956.287951][T13185] [ 1956.287962][T13185] hub_event+0x150/0x4f60 [ 1956.287991][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.288019][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.288037][T13185] ? look_up_lock_class+0x57/0x110 [ 1956.288065][T13185] ? register_lock_class+0x31/0x2e0 [ 1956.288095][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.288122][T13185] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1956.288148][T13185] ? __pfx_hub_event+0x10/0x10 [ 1956.288181][T13185] ? process_scheduled_works+0xa25/0x1830 [ 1956.288204][T13185] ? process_scheduled_works+0xa25/0x1830 [ 1956.288236][T13185] process_scheduled_works+0xb02/0x1830 [ 1956.288282][T13185] ? __pfx_process_scheduled_works+0x10/0x10 [ 1956.288311][T13185] ? assign_work+0x3d5/0x5e0 [ 1956.288338][T13185] worker_thread+0xa50/0xfc0 [ 1956.288383][T13185] kthread+0x388/0x470 [ 1956.288401][T13185] ? __pfx_worker_thread+0x10/0x10 [ 1956.288429][T13185] ? __pfx_kthread+0x10/0x10 [ 1956.288448][T13185] ret_from_fork+0x51e/0xb90 [ 1956.288474][T13185] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.288497][T13185] ? __switch_to+0xc7d/0x1450 [ 1956.288522][T13185] ? __pfx_kthread+0x10/0x10 [ 1956.288540][T13185] ret_from_fork_asm+0x1a/0x30 [ 1956.288570][T13185] [ 1956.288581][T13185] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1956.288593][T13185] CPU: 0 UID: 0 PID: 13185 Comm: kworker/0:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1956.288611][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1956.288623][T13185] Workqueue: usb_hub_wq hub_event [ 1956.288647][T13185] Call Trace: [ 1956.288653][T13185] [ 1956.288659][T13185] vpanic+0x56c/0xa60 [ 1956.288690][T13185] ? __pfx__printk+0x10/0x10 [ 1956.288708][T13185] ? __pfx_vpanic+0x10/0x10 [ 1956.288733][T13185] ? is_bpf_text_address+0x292/0x2b0 [ 1956.288769][T13185] ? is_bpf_text_address+0x26/0x2b0 [ 1956.288805][T13185] panic+0xc5/0xd0 [ 1956.288832][T13185] ? __pfx_panic+0x10/0x10 [ 1956.288866][T13185] ? ret_from_fork_asm+0x1a/0x30 [ 1956.288887][T13185] __warn+0x315/0x4f0 [ 1956.288912][T13185] ? kcov_remote_start+0x5d8/0x710 [ 1956.288939][T13185] ? kcov_remote_start+0x5d8/0x710 [ 1956.288959][T13185] __report_bug+0x29a/0x540 [ 1956.289020][T13185] ? kcov_remote_start+0x5d8/0x710 [ 1956.289040][T13185] ? __pfx___report_bug+0x10/0x10 [ 1956.289065][T13185] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1956.289088][T13185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1956.289118][T13185] ? kcov_remote_start+0x5d8/0x710 [ 1956.289137][T13185] report_bug+0x16a/0x220 [ 1956.289160][T13185] ? kcov_remote_start+0x5d8/0x710 [ 1956.289177][T13185] ? kcov_remote_start+0x5da/0x710 [ 1956.289196][T13185] handle_bug+0x9c/0x200 [ 1956.289212][T13185] exc_invalid_op+0x1a/0x50 [ 1956.289234][T13185] asm_exc_invalid_op+0x1a/0x20 [ 1956.289263][T13185] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1956.289283][T13185] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 42 2d d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ea cc 5d 09 89 c0 48 c7 c7 20 94 4e [ 1956.289297][T13185] RSP: 0000:ffffc900049c77e8 EFLAGS: 00010202 [ 1956.289311][T13185] RAX: 0000000000000002 RBX: ffff888031ca1e80 RCX: 0000000000000000 [ 1956.289322][T13185] RDX: 0000000000000000 RSI: ffffffff8ba64be0 RDI: ffffffff8ba64ba0 [ 1956.289333][T13185] RBP: ffffc900049c7af0 R08: ffffffff8b2461d0 R09: ffffffff8ddcd780 [ 1956.289346][T13185] R10: dffffc0000000000 R11: fffffbfff1ed4717 R12: ffff88802976a000 [ 1956.289358][T13185] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff88802976d000 [ 1956.289376][T13185] ? rt_spin_lock+0x1e0/0x400 [ 1956.289400][T13185] ? kcov_remote_start+0xe0/0x710 [ 1956.289421][T13185] hub_event+0x150/0x4f60 [ 1956.289449][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.289467][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.289485][T13185] ? look_up_lock_class+0x57/0x110 [ 1956.289508][T13185] ? register_lock_class+0x31/0x2e0 [ 1956.289538][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.289565][T13185] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1956.289591][T13185] ? __pfx_hub_event+0x10/0x10 [ 1956.289623][T13185] ? process_scheduled_works+0xa25/0x1830 [ 1956.289645][T13185] ? process_scheduled_works+0xa25/0x1830 [ 1956.289670][T13185] process_scheduled_works+0xb02/0x1830 [ 1956.289715][T13185] ? __pfx_process_scheduled_works+0x10/0x10 [ 1956.289746][T13185] ? assign_work+0x3d5/0x5e0 [ 1956.289773][T13185] worker_thread+0xa50/0xfc0 [ 1956.289817][T13185] kthread+0x388/0x470 [ 1956.289834][T13185] ? __pfx_worker_thread+0x10/0x10 [ 1956.289857][T13185] ? __pfx_kthread+0x10/0x10 [ 1956.289875][T13185] ret_from_fork+0x51e/0xb90 [ 1956.289901][T13185] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.289923][T13185] ? __switch_to+0xc7d/0x1450 [ 1956.289947][T13185] ? __pfx_kthread+0x10/0x10 [ 1956.289965][T13185] ret_from_fork_asm+0x1a/0x30 [ 1956.289993][T13185] [ 1956.290621][T13185] Kernel Offset: disabled