last executing test programs: 18m24.690105402s ago: executing program 32 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15b04f38}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m12.775185554s ago: executing program 33 (id=144): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)}], 0x1}}], 0x2, 0x2090) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'nicvf0\x00', @local}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 17m8.003792608s ago: executing program 34 (id=153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002000000000000"], 0x10}}, 0x0) 12m56.727319497s ago: executing program 35 (id=658): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 10m37.262604327s ago: executing program 1 (id=1018): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) syz_emit_vhci(0x0, 0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 10m36.080299855s ago: executing program 1 (id=1021): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000b909000000ffffffffffffff180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) io_setup(0x5, &(0x7f0000000240)=0x0) r2 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) readv(r2, &(0x7f0000000140), 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 10m34.970472587s ago: executing program 1 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r2, 0xc0184d16, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0}) 10m33.714531483s ago: executing program 1 (id=1027): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000440)=0xa) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)={0x7fffffffffffe8d, 0x0, [{0x70000, 0xaa, &(0x7f0000000380)=""/170}, {0xeeef0000, 0xbb, &(0x7f00000004c0)=""/187}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x50000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x10, 0xffffffffffffffff, 0xcc86000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000373000/0x2000)=nil, 0x2000, 0x10000, 0x3, &(0x7f00001e0000/0x10000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f00000002c0)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0703c579"]}]}) syz_usb_connect(0x5, 0xc0b, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x8d, 0x4, 0x6, 0x10, 0x3}, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="050f1300020b10010c2900064007006f03100b2f02"], 0x1, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x81a}}]}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000040)="ff02046b00fafffffffdff1e0006d3aecdf6000000000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000100)) r6 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000300)={0x0, 0xb, 0x4, 0x2, 0x8, {}, {0x3, 0x8, 0x2, 0x7, 0x5, 0x8, "19dbc780"}, 0x6, 0x4, {}, 0x5}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 10m30.278837052s ago: executing program 1 (id=1033): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x4010, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 10m28.756222891s ago: executing program 1 (id=1040): inotify_init() r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) signalfd4(r1, 0x0, 0x0, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x94}, 0x1, 0x0, 0x0, 0x4881}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = inotify_init1(0x80800) close(r6) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x541b, 0xfffffffffffffffa) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000a59000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) syz_usb_connect(0x2, 0x2d, &(0x7f0000004a80)=ANY=[], 0x0) 10m28.390917062s ago: executing program 7 (id=1042): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x4, 0xfffff001, 0x9, 0x8000003, 0x20, "3eccd2000500000000000e00"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 10m24.349396973s ago: executing program 7 (id=1048): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="ff000000000000000a004e2200000e57fc000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2100000187fe8000000000000000000000000000aa07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000006fe8000000000000000000000000000430800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008237be8ca33c254b0000000000000000000000000000000000000000000a004e2000000007fc00000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22fffffff3fe8800000000000000000000000000016fca0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000400000000000000000000000000000000c90200"/686], 0x310) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000055090118000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000029500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 10m21.649815093s ago: executing program 7 (id=1054): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 10m13.440808282s ago: executing program 36 (id=1040): inotify_init() r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) signalfd4(r1, 0x0, 0x0, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x94}, 0x1, 0x0, 0x0, 0x4881}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = inotify_init1(0x80800) close(r6) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x541b, 0xfffffffffffffffa) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000a59000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) syz_usb_connect(0x2, 0x2d, &(0x7f0000004a80)=ANY=[], 0x0) 10m9.648282956s ago: executing program 7 (id=1073): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 10m9.222174832s ago: executing program 7 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x96}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 10m8.692951713s ago: executing program 7 (id=1077): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) fdatasync(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, 0x0], 0x2}) 10m7.687791133s ago: executing program 37 (id=1077): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) fdatasync(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, 0x0], 0x2}) 5m47.037980469s ago: executing program 9 (id=1714): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0) close(r1) 5m45.587952732s ago: executing program 9 (id=1724): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m33.428960454s ago: executing program 9 (id=1758): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x05', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfffffffffffffc55}) 5m33.093713771s ago: executing program 9 (id=1760): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r0 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r0, 0x3, 0x0, 0x200000) 5m32.237274642s ago: executing program 9 (id=1761): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000039c0)=""/204) 5m30.136459134s ago: executing program 9 (id=1763): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x33}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) close_range(r4, r6, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) 5m13.859077147s ago: executing program 38 (id=1763): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x33}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) close_range(r4, r6, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) 4m38.589923019s ago: executing program 3 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd"], 0x0) 4m36.930468011s ago: executing program 3 (id=1870): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) 4m33.999910682s ago: executing program 3 (id=1874): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 4m33.229576189s ago: executing program 3 (id=1875): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000440)=0xa) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)={0x7fffffffffffe8d, 0x0, [{0x70000, 0xaa, &(0x7f0000000380)=""/170}, {0xeeef0000, 0xbb, &(0x7f00000004c0)=""/187}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x50000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x10, 0xffffffffffffffff, 0xcc86000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000373000/0x2000)=nil, 0x2000, 0x10000, 0x3, &(0x7f00001e0000/0x10000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f00000002c0)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0703c579"]}]}) syz_usb_connect(0x5, 0xc0b, 0x0, &(0x7f0000001040)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x8d, 0x4, 0x6, 0x10, 0x3}, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="050f1300020b10010c2900064007006f03100b2f02"], 0x1, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x81a}}]}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000100)) r6 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000300)={0x0, 0xb, 0x4, 0x2, 0x8, {}, {0x3, 0x8, 0x2, 0x7, 0x5, 0x8, "19dbc780"}, 0x6, 0x4, {}, 0x5}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 4m28.367054257s ago: executing program 3 (id=1882): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4m26.660323898s ago: executing program 3 (id=1889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xffff0000, 0x4) 4m10.73045246s ago: executing program 39 (id=1889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xffff0000, 0x4) 2m25.827871791s ago: executing program 2 (id=2177): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00", @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="140002", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2f9c14766de23884b7dd405"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m23.050029113s ago: executing program 2 (id=2183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x8}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) 2m22.755464541s ago: executing program 8 (id=2184): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x80, 0x0, 0x7, {[@end, @lsrr={0x83, 0x13, 0x31, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010102]}, @lsrr={0x83, 0x2b, 0x25, [@multicast1, @multicast1, @remote, @private=0xa010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}, @end, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0xe, [{@private=0xa010101, 0x4}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local}]}, @ra={0x94, 0x4, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}], 0x80, 0x4c00}, 0x0) 2m22.239890368s ago: executing program 2 (id=2187): lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @time={0x6, 0x9}, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$FUSE(r5, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2008040) socket(0x10, 0x3, 0x0) 2m20.597957313s ago: executing program 2 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) 2m20.361922057s ago: executing program 8 (id=2190): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x10) 2m18.998645729s ago: executing program 2 (id=2192): openat(0xffffffffffffffff, 0x0, 0x2c91a42f0cba2025, 0x11) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 2m16.572449557s ago: executing program 2 (id=2195): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2m16.555691286s ago: executing program 8 (id=2196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2m14.678365248s ago: executing program 8 (id=2201): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x80, 0x0, 0x7, {[@end, @lsrr={0x83, 0x13, 0x31, [@private=0xa010102, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010102]}, @lsrr={0x83, 0x2b, 0x25, [@multicast1, @multicast1, @remote, @private=0xa010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}, @end, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0xe, [{@private=0xa010101, 0x4}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local}]}, @ra={0x94, 0x4, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}], 0x80, 0x4c00}, 0x0) 2m13.009077986s ago: executing program 8 (id=2207): openat(0xffffffffffffffff, 0x0, 0x2c91a42f0cba2025, 0x11) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 2m10.747227729s ago: executing program 8 (id=2209): userfaultfd(0x80001) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 2m3.47073885s ago: executing program 4 (id=2220): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_getnetconf={0x34, 0x52, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_RP_FILTER={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000042c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfd, {0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020605000000000000000000000000005e8deae89283c19f4c02851a76c251b87399107c19c4a0a3a2a4996c613be6863ae9ea00dfbc876230f75f3e892dfa0791c2999944e55009d1c57bde1195d6d42045f09246110baf73ca4d8ec3473b96ef336fcaa0a942fb133367365891a3bb8f8162884066a23904c6db2732b0b1037a6ba60bd991dcd29de4d19d09d60eeb5465c2acccd479f8c99f1e70115cab200ccf1cc8d9fa8dabe9fe022788c8816fa3b8749ecb0e49c4dee8f49ce6ae7ed2a86f6ca8c7c311c63166c620"], 0x14}}, 0x840) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000000000000080007000000", @ANYRES8, @ANYBLOB="59fa36e2f505010541270800"], 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x20004091) fchdir(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 1m59.327864599s ago: executing program 40 (id=2195): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m59.311111721s ago: executing program 4 (id=2226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1m57.480241843s ago: executing program 4 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}], 0x4}, 0x4}, {{0x0, 0x0, 0x0}, 0x8000d3a7}], 0x4, 0x2030, 0x0) 1m55.114066772s ago: executing program 41 (id=2209): userfaultfd(0x80001) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 1m55.044812284s ago: executing program 4 (id=2233): socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006}, 0x94) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x901b01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000006980)={&(0x7f0000000080)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, &(0x7f0000005840)=[{0x0}, {&(0x7f00000014c0)="58be5f9bdc6e19fe68cad3274ee08d07dd9047bd", 0x14}, {&(0x7f0000001500)="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", 0x9a0}], 0x3, &(0x7f00000058c0)}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffe, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) 1m52.221049358s ago: executing program 4 (id=2237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m48.614570393s ago: executing program 4 (id=2242): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 1m32.143568773s ago: executing program 42 (id=2242): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 13.415236064s ago: executing program 0 (id=2395): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68800040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a001000002010101000000000000000c00028005000100110000000c000280050001002f00000014000180080001000000000008000200ac1414bb0c000280050001003a000000060003400003ff000c000280050001003a00000006007640000300000600034000040000840002802c00018014000300fe80000000000000000000000000002314000400200100000000000000000000000000001400018008000100ac14142d080002000a0101021400018008000100ac1e010108000200ac1e00012c00018014000300fe8000000000000000000000000000aa1400040f20010000000000000000000000000002100001800c000280050001002100000014001880080002400000000108000340000000048400018006000340000100002c000180140003000000000000000000000000000000000014000400fc0100000000000000000000000000000c000280050001000100000006000340000300002c00018014000300fe88000000000000000000000000010114000400fc0000000000000000000000000000000c000280050001002f000000000000000000000000e6f49fc5b5c0376b6cfb45a9c4d35cc47c0370604b946e4b2a74b803fdbcd3c9d7abda4e844a3f10a463fd41e8908be336a9284f3201889cf4e4e069fd7ecc235c3099e95c6d11197162a1dd8f01964fc4ae5f01a94fd13bf6d33c99bc1911d6a99065842cbd0d15fdaefa5ebfa22d090b0f5c6aeb56d853ef17c73afaa170b74e641633d46763938d14a565a836cf3920695cb458c54046d05437f3ff88cc2484906dd1eeb3dc319e832c8862fa8e323ead6eaff0f8a1aa0b69a84128a1730e77ae2f862cd52c36a41f5a3d6c05422534fc914ab4f3cc43d3274c26111ba00199e266de87c5a167a8009aaf6f564c3b035d72cbc45c83c089acdbfc04d0c8d2a08a49521ae9656eaa477ce6b3ecc3b93c0ae1069c80be5bfea92720"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup\x00', &(0x7f0000000a00), 0x2000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) 12.250781524s ago: executing program 5 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2030, 0x0) 10.147272058s ago: executing program 5 (id=2402): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, r3, 0x1004, &(0x7f0000002b40)=""/4100}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 10.100958369s ago: executing program 0 (id=2403): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x4}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0x9}, r2, 0x9dffffff}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 10.009859529s ago: executing program 6 (id=2404): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 9.919619187s ago: executing program 0 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x10002) 9.101261704s ago: executing program 6 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c091}, 0x20040004) 8.059006382s ago: executing program 6 (id=2407): process_mrelease(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 8.058311181s ago: executing program 0 (id=2408): prctl$PR_GET_SECUREBITS(0x1b) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0xf9, &(0x7f0000001100)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @gre={{0x29, 0x4, 0x1, 0x6, 0xeb, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0xb1, [@loopback, @empty, @empty, @remote, @multicast1, @broadcast, @private=0xa010101, @multicast1]}, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x9, [0x3, 0x9b, 0x80, 0xa8, 0x3, 0x4, 0x9]}, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0x6, 0x8, "f0c0cc0eb5b4"}, {0x2, 0x2}, {0x1, 0x8, "532aa6c3a0d7"}, {0x5, 0xb, "2a285014176a8f4289"}, {0x6, 0xc, "be5f39f0b3ebc16ce1df"}, {0x7, 0x4, "e321"}, {0x2, 0xb, "70031a7b18f2486d15"}, {0x5, 0xa, "0ac356ab002bf6f2"}, {0x1, 0x5, "36cfab"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "f80f83"}}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000a40)={{&(0x7f00000009c0)={'Accelerator0\x00', {&(0x7f0000000880)=@adf_dec={@format={'Dc', '0', 'RingRx\x00'}, {0x7}, {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {0x9}}}}}, {&(0x7f0000000940)={'Accelerator1\x00'}}}}, 0x8}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newae={0x48, 0x1e, 0x1, 0x70bd27, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x0, 0x7796104ed4756248}, @in6=@remote, 0xfffffffb, 0x3501}, [@etimer_thresh={0x8, 0xc, 0x400}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x10c, r8, 0x802, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7171eb40}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80c4}, 0x4004005) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 6.978142268s ago: executing program 6 (id=2409): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x50cdd9a4, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x80}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x24010}, 0x4) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/91, 0x1f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 6.780150183s ago: executing program 0 (id=2410): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x100000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x2, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e20, 0x1, 'sh\x00', 0x1c, 0xfffffff9, 0x24}, 0x2c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 6.757794381s ago: executing program 5 (id=2411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2030, 0x0) 4.928676074s ago: executing program 6 (id=2412): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB='f'], 0x48) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.530325312s ago: executing program 5 (id=2413): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68800040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup\x00', &(0x7f0000000a00), 0x2000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) 4.12468373s ago: executing program 5 (id=2414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x4c) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.115136156s ago: executing program 5 (id=2415): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.048180628s ago: executing program 0 (id=2416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x6, &(0x7f0000000100)={0x21, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 0s ago: executing program 6 (id=2417): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x99, 0xa000, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdf8e, 0x4000, 0x0, 0x0}], 0x3}) kernel console output (not intermixed with test programs): in process `syz.6.1753'. [ 894.201506][ T9574] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 894.361622][ T9574] usb 7-1: Using ep0 maxpacket: 8 [ 894.374575][T13485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1759'. [ 894.409151][ T9574] usb 7-1: unable to get BOS descriptor or descriptor too short [ 894.461744][ T9574] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 894.689886][ T9574] usb 7-1: can't read configurations, error -71 [ 894.842479][ T5751] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 895.225764][ T5751] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 895.285772][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.320758][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.348174][ T5751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 895.396806][ T5751] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 895.443533][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.480394][T13499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1773'. [ 895.537889][ T5751] usb 4-1: config 0 descriptor?? [ 897.994214][ T5751] usbhid 4-1:0.0: can't add hid device: -71 [ 898.990179][ T5751] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 900.181807][ T5751] usb 4-1: USB disconnect, device number 36 [ 903.279685][T13544] usb usb8: usbfs: process 13544 (syz.8.1770) did not claim interface 0 before use [ 904.433355][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 904.961806][ T5774] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 905.481480][ T5774] usb 5-1: Using ep0 maxpacket: 8 [ 906.421194][ T5774] usb 5-1: unable to get BOS descriptor or descriptor too short [ 906.480105][ T5774] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 906.576579][ T5774] usb 5-1: can't read configurations, error -71 [ 906.587936][T13577] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1779'. [ 908.163292][ T5773] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 908.737872][ T5773] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 908.754284][ T5773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.820925][ T5773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.874622][ T5773] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.945082][ T5773] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.000011][ T5773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.049601][ T5773] usb 7-1: config 0 descriptor?? [ 910.124550][ T5773] usbhid 7-1:0.0: can't add hid device: -71 [ 910.138855][ T5773] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 910.153634][ T5773] usb 7-1: USB disconnect, device number 11 [ 910.336246][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 911.812604][T13616] NILFS (nullb0): couldn't find nilfs on the device [ 912.643090][ T5774] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 917.254961][T13652] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1795'. [ 917.342711][T13657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.360975][T13657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.369725][T13657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.378764][T13657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.405134][T13657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 919.471480][T13657] Bluetooth: hci5: command tx timeout [ 921.553460][T13657] Bluetooth: hci5: command tx timeout [ 922.292857][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1805'. [ 922.325192][ T1148] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.282782][T13720] usb usb8: usbfs: process 13720 (syz.3.1808) did not claim interface 0 before use [ 923.372059][T13723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1810'. [ 923.631696][T13657] Bluetooth: hci5: command tx timeout [ 923.923440][ T1148] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.711861][T13657] Bluetooth: hci5: command tx timeout [ 926.389082][ T1148] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.704021][ T1148] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.846124][ T29] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 929.224240][T13775] netlink: 'syz.8.1820': attribute type 4 has an invalid length. [ 929.787187][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.839802][ T29] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 929.995927][T13778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1823'. [ 930.013868][ T29] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 930.077861][ T29] usb 5-1: Manufacturer: syz [ 930.134768][ T29] usb 5-1: config 0 descriptor?? [ 930.240365][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 930.916082][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.922631][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.486051][ T1148] bridge_slave_1: left allmulticast mode [ 931.518625][ T1148] bridge_slave_1: left promiscuous mode [ 931.547584][ T29] usb 5-1: USB disconnect, device number 47 [ 931.556656][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.636688][ T1148] bridge_slave_0: left allmulticast mode [ 931.661105][ T1148] bridge_slave_0: left promiscuous mode [ 931.676653][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.177411][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.267513][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.353282][ T1148] bond0 (unregistering): Released all slaves [ 936.086145][T13847] netlink: 'syz.4.1835': attribute type 4 has an invalid length. [ 936.736377][T13852] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1837'. [ 937.571397][ T29] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 937.933517][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.954093][ T29] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 937.963650][ T29] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 937.983053][ T29] usb 4-1: Manufacturer: syz [ 938.018478][ T29] usb 4-1: config 0 descriptor?? [ 938.060286][ T29] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 938.123197][T13654] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.153128][T13654] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.178501][T13654] bridge_slave_0: entered allmulticast mode [ 938.205591][T13654] bridge_slave_0: entered promiscuous mode [ 938.376154][ T1148] hsr_slave_0: left promiscuous mode [ 938.428291][ T1148] hsr_slave_1: left promiscuous mode [ 938.449971][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.486976][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.773457][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.773551][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1845'. [ 938.824311][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.190931][ T1148] veth0_macvtap: left promiscuous mode [ 939.228732][ T1148] veth1_vlan: left promiscuous mode [ 939.259125][ T1148] veth0_vlan: left promiscuous mode [ 942.713581][ T9574] usb 4-1: USB disconnect, device number 38 [ 943.107208][T13914] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 943.146062][ T1148] team_slave_1 (unregistering): left promiscuous mode [ 943.188415][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 943.263672][ T1148] team_slave_0 (unregistering): left promiscuous mode [ 943.285507][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 943.922637][ T9574] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 943.933773][T13654] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.942858][T13654] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.950226][T13654] bridge_slave_1: entered allmulticast mode [ 943.972202][T13654] bridge_slave_1: entered promiscuous mode [ 944.103313][ T9574] usb 4-1: Using ep0 maxpacket: 16 [ 944.119562][ T9574] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 944.151765][ T9574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.173041][T13654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.215158][ T9574] usb 4-1: config 0 has no interface number 0 [ 944.219734][T13654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.259335][ T9574] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 944.292289][ T9574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.328862][ T9574] usb 4-1: Product: syz [ 944.340719][ T9574] usb 4-1: Manufacturer: syz [ 944.366917][ T9574] usb 4-1: SerialNumber: syz [ 944.408928][T13926] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1854'. [ 944.427828][ T9574] usb 4-1: config 0 descriptor?? [ 944.464605][ T9574] uvcvideo 4-1:0.105: Found Unit with invalid ID 0 [ 944.490585][T13654] team0: Port device team_slave_0 added [ 944.504717][ T30] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 944.560545][T13654] team0: Port device team_slave_1 added [ 944.693749][ T9574] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 944.734741][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 944.738690][ T9574] uvcvideo 4-1:0.105: No valid video chain found. [ 944.797212][ T9574] usb 4-1: USB disconnect, device number 39 [ 944.809287][ T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 944.857093][ T30] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 944.893587][T13654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.906577][ T30] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 945.219104][ T30] usb 3-1: Product: syz [ 945.224901][ T30] usb 3-1: Manufacturer: syz [ 945.229557][ T30] usb 3-1: SerialNumber: syz [ 945.245457][ T30] usb 3-1: config 0 descriptor?? [ 945.252626][T13922] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.271451][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.337080][ T30] hub 3-1:0.0: bad descriptor, ignoring hub [ 945.363140][ T30] hub 3-1:0.0: probe with driver hub failed with error -5 [ 945.394472][T13654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.459539][T13654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.492326][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.560860][T13654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.641665][ T30] usb 3-1: USB disconnect, device number 18 [ 945.971716][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 946.637911][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 946.651029][ T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 947.263165][ T30] usb 3-1: string descriptor 0 read error: -71 [ 947.268214][T13654] hsr_slave_0: entered promiscuous mode [ 947.303748][T13654] hsr_slave_1: entered promiscuous mode [ 947.324950][T13654] debugfs: 'hsr0' already exists in 'hsr' [ 947.864977][T13654] Cannot create hsr debugfs directory [ 947.906094][ T30] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 948.028244][ T30] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 948.126808][ T30] usb 3-1: config 0 descriptor?? [ 948.179618][ T30] usb 3-1: can't set config #0, error -71 [ 948.238504][ T30] usb 3-1: USB disconnect, device number 19 [ 948.641656][ T30] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 948.915209][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.315351][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.464968][ T30] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 949.528145][ T30] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 949.607525][ T30] usb 3-1: Manufacturer: syz [ 949.649870][ T30] usb 3-1: config 0 descriptor?? [ 949.717520][T13983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1866'. [ 950.104987][ T30] usbhid 3-1:0.0: can't add hid device: -32 [ 950.124306][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 951.504909][ T5774] usb 3-1: USB disconnect, device number 20 [ 953.851467][ T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 954.041430][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 954.083640][ T30] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 954.131238][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.179471][ T30] usb 3-1: config 0 has no interface number 0 [ 954.218984][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 954.250691][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.288814][ T30] usb 3-1: Product: syz [ 954.309465][ T30] usb 3-1: Manufacturer: syz [ 954.338740][ T30] usb 3-1: SerialNumber: syz [ 954.395327][ T30] usb 3-1: config 0 descriptor?? [ 954.439509][ T30] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 954.587690][T13654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 954.652877][ T30] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 954.664295][T13654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.689356][ T30] uvcvideo 3-1:0.105: No valid video chain found. [ 954.703997][T13654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 954.736465][ T30] usb 3-1: USB disconnect, device number 21 [ 954.785503][T13654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.834536][T13654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 954.919294][T13654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 954.955364][ T5773] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 954.978599][T13654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 955.065525][T13654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 955.165644][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 955.199660][ T5773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 955.274429][ T5773] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 955.325971][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 955.377240][ T5773] usb 4-1: Product: syz [ 955.404813][ T5773] usb 4-1: Manufacturer: syz [ 955.435649][ T5773] usb 4-1: SerialNumber: syz [ 955.487811][ T5773] usb 4-1: config 0 descriptor?? [ 955.526900][T14015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 955.580645][ T5773] hub 4-1:0.0: bad descriptor, ignoring hub [ 955.638668][T13654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.646482][ T5773] hub 4-1:0.0: probe with driver hub failed with error -5 [ 955.763098][T13654] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.023222][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.030483][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.157208][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.164364][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.191446][ T5773] usb 4-1: USB disconnect, device number 40 [ 957.158574][ T5773] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 957.381472][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 957.419794][ T5773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 957.485348][ T5773] usb 4-1: string descriptor 0 read error: -22 [ 957.719421][ T5773] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 958.539918][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 958.636906][ T5773] usb 4-1: config 0 descriptor?? [ 958.748882][ T5773] usb 4-1: can't set config #0, error -71 [ 958.814904][ T5773] usb 4-1: USB disconnect, device number 41 [ 958.818995][T14046] team0: entered promiscuous mode [ 958.874131][T14046] team_slave_0: entered promiscuous mode [ 958.901677][T14046] team_slave_1: entered promiscuous mode [ 958.986596][T14050] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1881'. [ 959.713826][T14059] usb usb8: usbfs: process 14059 (syz.8.1884) did not claim interface 0 before use [ 960.504305][ T5774] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 960.731558][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.809306][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.880225][ T5774] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 961.040884][T14074] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1887'. [ 961.751054][ T5774] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 961.760008][ T5774] usb 3-1: Manufacturer: syz [ 961.826317][ T5774] usb 3-1: config 0 descriptor?? [ 962.554994][ T5774] usbhid 3-1:0.0: can't add hid device: -32 [ 962.570931][ T5774] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 963.045693][T13654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.456089][T13654] veth0_vlan: entered promiscuous mode [ 963.567965][T13654] veth1_vlan: entered promiscuous mode [ 966.229420][T13654] veth0_macvtap: entered promiscuous mode [ 966.277421][T13654] veth1_macvtap: entered promiscuous mode [ 966.290156][ T9574] usb 3-1: USB disconnect, device number 22 [ 966.380217][T13654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.483313][T13654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.190613][T14111] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1896'. [ 967.217200][ T6010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.248469][ T6010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.401138][ T6010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.475343][ T6010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.083716][ T6814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.139537][ T6814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.937138][T10651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.070459][T10651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.681396][ T30] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 970.814786][ T30] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 971.413967][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 971.514571][ T30] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 971.581504][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 971.830503][ T30] usb 3-1: Product: syz [ 972.640866][ T30] usb 3-1: Manufacturer: syz [ 972.648802][ T30] usb 3-1: SerialNumber: syz [ 972.662060][ T30] usb 3-1: config 0 descriptor?? [ 972.896497][ T30] usb 3-1: can't set config #0, error -71 [ 972.955222][ T30] usb 3-1: USB disconnect, device number 23 [ 973.168189][ T5751] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 974.243364][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.254954][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.266111][ T5751] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 974.275395][ T5751] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 975.087784][ T5751] usb 1-1: Manufacturer: syz [ 975.128956][ T5751] usb 1-1: config 0 descriptor?? [ 975.388713][ T9574] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 975.696672][ T5751] usbhid 1-1:0.0: can't add hid device: -32 [ 975.975925][ T5751] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 976.005800][ T9574] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.023963][ T9574] usb 3-1: config 0 has no interfaces? [ 976.052239][ T9574] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 976.073883][ T9574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.108512][ T9574] usb 3-1: Product: syz [ 976.581011][ T9574] usb 3-1: Manufacturer: syz [ 976.591640][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1914'. [ 976.617788][ T9574] usb 3-1: SerialNumber: syz [ 976.668456][ T9574] usb 3-1: config 0 descriptor?? [ 976.939372][ T9574] usb 1-1: USB disconnect, device number 4 [ 977.610765][ T9574] usb 3-1: USB disconnect, device number 24 [ 977.920956][ T4938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 977.935878][ T4938] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 977.957659][ T4938] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 977.970614][ T4938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 977.992253][ T4938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 978.531779][T12617] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 978.734272][T12617] usb 3-1: Using ep0 maxpacket: 8 [ 978.786359][T12617] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 978.840995][T12617] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.908384][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.978109][T12617] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 979.058156][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 979.128319][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 979.195516][T12617] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 979.279901][T12617] usb 3-1: config 168 interface 0 has no altsetting 0 [ 979.321749][T13449] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 979.363282][T12617] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 979.408847][T12617] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 979.473122][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 979.533438][T13449] usb 5-1: Using ep0 maxpacket: 16 [ 979.550983][T12617] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 979.597606][T13449] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 979.640867][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 979.673616][T13449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 979.722726][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 979.929046][T12617] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 979.943987][T12617] usb 3-1: config 168 interface 0 has no altsetting 0 [ 980.004292][T12617] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 980.027638][T12617] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 980.041593][T13657] Bluetooth: hci6: command tx timeout [ 980.069082][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 980.081129][T13449] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 980.099644][T13449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.111257][T12617] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.128150][T13449] usb 5-1: Product: syz [ 980.135577][T13449] usb 5-1: Manufacturer: syz [ 980.148838][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.163610][T13449] usb 5-1: SerialNumber: syz [ 980.188115][T13449] usb 5-1: config 0 descriptor?? [ 980.208538][T12617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 980.271013][T13449] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 980.289778][T12617] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 980.340533][T13449] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 980.368516][T12617] usb 3-1: config 168 interface 0 has no altsetting 0 [ 980.410003][T12617] usb 3-1: string descriptor 0 read error: -22 [ 980.435218][T12617] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 980.481567][T12617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.761003][T12617] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 980.915079][T13449] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 981.127821][T13449] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 981.191032][T13449] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 981.201532][ T9574] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 981.235735][T13449] em28xx 5-1:0.0: No AC97 audio processor [ 981.305923][T13449] usb 5-1: USB disconnect, device number 48 [ 981.323360][T13449] em28xx 5-1:0.0: Disconnecting em28xx [ 981.425226][ T9574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.428970][T13449] em28xx 5-1:0.0: Freeing device [ 981.508633][ T9574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.560825][ T9574] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 981.600830][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 981.626350][ T9574] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 981.658504][ T9574] usb 7-1: Manufacturer: syz [ 981.694435][ T9574] usb 7-1: config 0 descriptor?? [ 981.857570][T13449] usb 3-1: USB disconnect, device number 25 [ 981.990230][T14253] tipc: Started in network mode [ 982.040236][T14253] tipc: Node identity e624f76094d5, cluster identity 4711 [ 982.092521][T14253] tipc: Enabled bearer , priority 0 [ 982.113072][T13657] Bluetooth: hci6: command tx timeout [ 982.174503][ T9574] usbhid 7-1:0.0: can't add hid device: -32 [ 982.203994][T14256] syzkaller0: entered promiscuous mode [ 982.216451][ T9574] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 982.241904][T14256] syzkaller0: entered allmulticast mode [ 982.266505][T14258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1929'. [ 982.633512][T14253] tipc: Resetting bearer [ 982.819868][T14252] tipc: Resetting bearer [ 982.983986][T14252] tipc: Disabling bearer [ 983.931432][T10353] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 984.067828][ T5751] usb 7-1: USB disconnect, device number 12 [ 984.163329][T10353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.191648][T13657] Bluetooth: hci6: command tx timeout [ 984.220769][T10353] usb 1-1: config 0 has no interfaces? [ 984.288629][T14281] ref_ctr_offset mismatch. inode: 0x1d6 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x1002 [ 984.311044][T10353] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 984.330925][ T6727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.350112][T10353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.387017][T10353] usb 1-1: Product: syz [ 984.406426][T10353] usb 1-1: Manufacturer: syz [ 984.439488][T10353] usb 1-1: SerialNumber: syz [ 984.499946][T10353] usb 1-1: config 0 descriptor?? [ 984.708142][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.760269][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.802348][T14200] bridge_slave_0: entered allmulticast mode [ 985.021220][T14200] bridge_slave_0: entered promiscuous mode [ 985.031896][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.047000][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.067350][T14200] bridge_slave_1: entered allmulticast mode [ 985.848777][T14200] bridge_slave_1: entered promiscuous mode [ 986.190846][ T6727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.272685][T13657] Bluetooth: hci6: command tx timeout [ 987.157690][T14308] usb usb8: usbfs: process 14308 (syz.4.1940) did not claim interface 0 before use [ 987.302792][T14200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.326657][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1941'. [ 987.388789][T14200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.443095][ T30] usb 1-1: USB disconnect, device number 5 [ 987.668125][ T6727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.776921][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 987.893573][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 988.476316][T14200] team0: Port device team_slave_0 added [ 988.498529][T14200] team0: Port device team_slave_1 added [ 988.729096][ T6727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.772481][T10353] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 988.979767][T10353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.004521][T10353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.008586][T14200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.039902][T10353] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 989.041393][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.148022][T10353] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 989.153999][T14200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.202018][T10353] usb 9-1: Manufacturer: syz [ 989.214310][T14329] tipc: Started in network mode [ 989.219487][T14329] tipc: Node identity 02c6ecb7f6db, cluster identity 4711 [ 989.243624][T14329] tipc: Enabled bearer , priority 0 [ 989.258188][T10353] usb 9-1: config 0 descriptor?? [ 989.295519][T14332] syzkaller0: entered promiscuous mode [ 989.315540][T14332] syzkaller0: entered allmulticast mode [ 989.351865][T14200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.382981][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.456473][T14200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.622390][T14335] tipc: Resetting bearer [ 989.688514][T14328] tipc: Resetting bearer [ 989.769931][T10353] usbhid 9-1:0.0: can't add hid device: -32 [ 989.795036][T14328] tipc: Disabling bearer [ 989.816801][T10353] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 990.316095][T14200] hsr_slave_0: entered promiscuous mode [ 990.343226][T14200] hsr_slave_1: entered promiscuous mode [ 990.375713][T14200] debugfs: 'hsr0' already exists in 'hsr' [ 990.394544][T14200] Cannot create hsr debugfs directory [ 992.373953][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.391123][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.427205][T14365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1958'. [ 992.464009][ T30] usb 9-1: USB disconnect, device number 31 [ 993.332222][ T6727] bridge_slave_1: left allmulticast mode [ 993.400510][ T6727] bridge_slave_1: left promiscuous mode [ 993.476432][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.210382][T14376] ref_ctr_offset mismatch. inode: 0x83e offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x1002 [ 995.499902][T14389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1964'. [ 997.330795][ T6727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.356594][ T6727] bond_slave_0: left allmulticast mode [ 997.387102][ T6727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.412046][ T6727] bond_slave_1: left allmulticast mode [ 997.424940][ T6727] bond0 (unregistering): Released all slaves [ 997.649189][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 997.898326][ T6727] tipc: Left network mode [ 1000.725791][T14428] usb usb8: usbfs: process 14428 (syz.2.1974) did not claim interface 0 before use [ 1001.990991][T14443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1978'. [ 1002.131372][T12617] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1002.318801][T12617] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1002.350187][T12617] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.400033][T12617] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.450703][T12617] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1002.518589][T12617] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1002.554839][T12617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.639258][T12617] usb 9-1: config 0 descriptor?? [ 1002.717971][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 1002.729541][ T6727] hsr_slave_0: left promiscuous mode [ 1002.760821][ T6727] hsr_slave_1: left promiscuous mode [ 1002.773386][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.827259][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.880380][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.913116][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.966782][ T6727] veth0_macvtap: left promiscuous mode [ 1002.978727][ T6727] veth1_vlan: left promiscuous mode [ 1003.002332][ T6727] veth0_vlan: left promiscuous mode [ 1003.333564][T12617] usbhid 9-1:0.0: can't add hid device: -71 [ 1003.346329][T12617] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1003.979783][T12617] usb 9-1: USB disconnect, device number 32 [ 1005.142514][ T6727] team0 (unregistering): Port device team_slave_1 removed [ 1005.202305][ T6727] team0 (unregistering): Port device team_slave_0 removed [ 1008.224934][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1008.310500][T14486] usb usb8: usbfs: process 14486 (syz.8.1989) did not claim interface 0 before use [ 1009.270124][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1991'. [ 1009.366478][T14498] input: syz0 as /devices/virtual/input/input25 [ 1009.602637][T14494] veth0_macvtap: left promiscuous mode [ 1009.971380][T13449] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1010.045341][ T6727] IPVS: stop unused estimator thread 0... [ 1010.155881][T13449] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1010.187828][T13449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.226599][T13449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.287571][T13449] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.305324][T14200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1010.563941][T13449] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.637075][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.672108][T13449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.130898][T13449] usb 1-1: config 0 descriptor?? [ 1011.188918][T14200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1011.270450][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1012.001713][T13449] usbhid 1-1:0.0: can't add hid device: -71 [ 1012.032035][T14200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1012.159978][T13449] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1012.277558][T13449] usb 1-1: USB disconnect, device number 6 [ 1012.532949][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1012.785365][T14200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1012.946734][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.100396][T14547] usb usb8: usbfs: process 14547 (syz.2.2003) did not claim interface 0 before use [ 1014.062995][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2007'. [ 1016.150451][T14200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.257241][T14200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.280143][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2010'. [ 1016.328384][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.335692][T12900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.446646][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.454018][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.732265][T14595] ubi: mtd0 is already attached to ubi16 [ 1018.760399][T14595] netlink: 'syz.8.2014': attribute type 10 has an invalid length. [ 1018.772251][T14595] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2014'. [ 1019.368286][T14595] bridge0: port 3(veth1_macvtap) entered blocking state [ 1019.381742][T14595] bridge0: port 3(veth1_macvtap) entered disabled state [ 1019.491073][T14595] veth1_macvtap: entered allmulticast mode [ 1019.520043][T14605] usb usb8: usbfs: process 14605 (syz.6.2018) did not claim interface 0 before use [ 1019.582049][T14595] veth1_macvtap: left allmulticast mode [ 1019.618392][T14595] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1019.983173][T14611] netlink: 'syz.2.2019': attribute type 4 has an invalid length. [ 1022.494868][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 1023.043986][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2026'. [ 1025.024929][T14641] input: syz0 as /devices/virtual/input/input26 [ 1026.430120][T14659] usb usb8: usbfs: process 14659 (syz.6.2033) did not claim interface 0 before use [ 1026.522014][T14662] netlink: 'syz.8.2032': attribute type 4 has an invalid length. [ 1028.784670][T14200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.175855][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1033.429888][T14711] input: syz0 as /devices/virtual/input/input27 [ 1034.134283][T14200] veth0_vlan: entered promiscuous mode [ 1034.208038][T14719] netlink: 'syz.4.2048': attribute type 4 has an invalid length. [ 1034.695723][T14200] veth1_vlan: entered promiscuous mode [ 1035.026994][T14725] usb usb8: usbfs: process 14725 (syz.0.2050) did not claim interface 0 before use [ 1035.064234][T14200] veth0_macvtap: entered promiscuous mode [ 1035.749529][T14200] veth1_macvtap: entered promiscuous mode [ 1035.824425][T14200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.912972][T14200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.015160][ T139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.053145][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.106856][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.193754][ T139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.271580][ T5773] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1038.675689][ T5773] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1038.702248][ T5773] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1038.737815][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.769307][ T5773] usb 5-1: Product: syz [ 1038.789432][ T5773] usb 5-1: Manufacturer: syz [ 1038.818213][ T5773] usb 5-1: SerialNumber: syz [ 1038.873419][ T5773] usb 5-1: config 0 descriptor?? [ 1039.128496][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 1039.605506][ T5774] usb 5-1: USB disconnect, device number 49 [ 1040.011851][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1040.025762][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1040.037864][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1040.051253][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1040.074085][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.721858][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 1040.903225][T14773] netlink: 'syz.2.2062': attribute type 4 has an invalid length. [ 1042.177296][T13657] Bluetooth: hci1: command tx timeout [ 1042.815630][T14788] usb usb8: usbfs: process 14788 (syz.4.2066) did not claim interface 0 before use [ 1045.479667][ T5630] Bluetooth: hci1: command tx timeout [ 1046.457056][T12900] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.520847][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 1046.681395][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1046.835779][T12900] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.872087][ T29] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1046.923580][ T29] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1047.054041][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.216062][ T29] usb 1-1: Product: syz [ 1047.313904][ T29] usb 1-1: Manufacturer: syz [ 1047.423163][ T29] usb 1-1: SerialNumber: syz [ 1047.552170][ T5630] Bluetooth: hci1: command tx timeout [ 1047.747099][ T29] usb 1-1: config 0 descriptor?? [ 1048.797482][T12900] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.068815][T14838] input: syz0 as /devices/virtual/input/input28 [ 1049.641653][ T5630] Bluetooth: hci1: command tx timeout [ 1050.117488][T12900] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.157512][ T5774] usb 1-1: USB disconnect, device number 7 [ 1050.761518][T13449] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1050.782806][T14858] usb usb8: usbfs: process 14858 (syz.0.2082) did not claim interface 0 before use [ 1050.989244][T13449] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1051.007259][T13449] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1051.056283][T13449] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.085900][T13449] usb 5-1: config 220 has no interface number 2 [ 1051.095407][T13449] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1051.120988][T13449] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1051.132118][T12900] bridge_slave_1: left allmulticast mode [ 1051.132505][T13449] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1051.146420][T13449] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1051.158305][T13449] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1051.172726][T13449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.177399][T12900] bridge_slave_1: left promiscuous mode [ 1051.180964][T13449] usb 5-1: Product: syz [ 1051.218466][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.243883][T13449] usb 5-1: Manufacturer: syz [ 1051.250051][T13449] usb 5-1: SerialNumber: syz [ 1051.285029][T12900] bridge_slave_0: left allmulticast mode [ 1051.300214][T12900] bridge_slave_0: left promiscuous mode [ 1051.323839][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.514226][T13449] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1051.539662][T13449] uvcvideo 5-1:220.0: No valid video chain found. [ 1051.549326][T13449] usb 5-1: selecting invalid altsetting 0 [ 1051.631082][T13449] usb 5-1: selecting invalid altsetting 0 [ 1051.645854][T13449] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1052.490780][T13449] usb 5-1: USB disconnect, device number 50 [ 1053.811137][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.817874][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.343701][T14904] input: syz0 as /devices/virtual/input/input29 [ 1054.422133][T12900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.484604][T12900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.570352][T12900] bond0 (unregistering): Released all slaves [ 1055.083249][ T5813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1055.276164][ T5813] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1055.671903][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.884802][T14929] usb usb8: usbfs: process 14929 (syz.8.2099) did not claim interface 0 before use [ 1056.207999][ T5813] usb 1-1: Product: syz [ 1056.212838][ T5813] usb 1-1: Manufacturer: syz [ 1056.217474][ T5813] usb 1-1: SerialNumber: syz [ 1056.349761][ T5813] usb 1-1: config 0 descriptor?? [ 1056.390323][ T5813] hub 1-1:0.0: bad descriptor, ignoring hub [ 1056.418864][ T5813] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1056.505317][T12900] hsr_slave_0: left promiscuous mode [ 1056.544954][T12900] hsr_slave_1: left promiscuous mode [ 1056.580355][T12900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.610488][ T5813] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1056.615939][T12900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.677569][T12900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.694606][T12900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.752328][ T5813] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1056.791156][ T5813] dib0700: firmware download failed at 7 with -22 [ 1056.810614][T12900] veth1_macvtap: left promiscuous mode [ 1056.859975][T12900] veth0_macvtap: left promiscuous mode [ 1056.874546][ T5813] usb 1-1: USB disconnect, device number 8 [ 1056.878557][T12900] veth1_vlan: left promiscuous mode [ 1056.914253][T12900] veth0_vlan: left promiscuous mode [ 1059.848888][T12900] team0 (unregistering): Port device team_slave_1 removed [ 1059.900705][T12900] team0 (unregistering): Port device team_slave_0 removed [ 1060.033519][T14981] usb usb8: usbfs: process 14981 (syz.0.2114) did not claim interface 0 before use [ 1062.729038][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2119'. [ 1063.416281][T14757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.455542][T14757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.484844][T14757] bridge_slave_0: entered allmulticast mode [ 1063.540413][T14757] bridge_slave_0: entered promiscuous mode [ 1063.605061][T14757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.612404][T13449] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1063.667161][T14757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.690099][T14757] bridge_slave_1: entered allmulticast mode [ 1063.715091][T14757] bridge_slave_1: entered promiscuous mode [ 1063.965215][T14757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.006670][T13449] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1064.034714][T13449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.061433][T13449] usb 1-1: Product: syz [ 1064.061485][T14757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.077111][T13449] usb 1-1: Manufacturer: syz [ 1064.100140][T13449] usb 1-1: SerialNumber: syz [ 1064.139173][T13449] usb 1-1: config 0 descriptor?? [ 1064.287011][T14757] team0: Port device team_slave_0 added [ 1064.338393][T14757] team0: Port device team_slave_1 added [ 1064.399100][T13449] hub 1-1:0.0: bad descriptor, ignoring hub [ 1064.421391][T13449] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1064.542196][T14757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.569186][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.660014][T13449] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1064.730550][T13449] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1064.744786][T13449] dib0700: firmware download failed at 7 with -22 [ 1064.816961][T14757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.847142][T13449] usb 1-1: USB disconnect, device number 9 [ 1065.044719][T14757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.125239][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.909241][T14757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.132462][T15034] usb usb8: usbfs: process 15034 (syz.2.2126) did not claim interface 0 before use [ 1068.044114][T14757] hsr_slave_0: entered promiscuous mode [ 1068.084073][T14757] hsr_slave_1: entered promiscuous mode [ 1072.231363][T13449] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1072.406922][T13449] usb 9-1: Using ep0 maxpacket: 8 [ 1072.754323][T13449] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.766340][T13449] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1072.809500][T13449] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1073.016506][T13449] usb 9-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 1073.356398][T13449] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.433063][T13449] usb 9-1: config 0 descriptor?? [ 1073.812030][T15086] usb usb8: usbfs: process 15086 (syz.6.2142) did not claim interface 0 before use [ 1073.921362][ T5774] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1074.578276][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.588928][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.601891][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.609550][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.619173][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.632130][ T5774] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1074.644806][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.682901][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.683828][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.714314][ T5774] usb 5-1: Product: syz [ 1074.732887][ T5774] usb 5-1: Manufacturer: syz [ 1074.737539][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.763465][ T5774] usb 5-1: SerialNumber: syz [ 1074.796102][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.817867][ T5774] usb 5-1: config 0 descriptor?? [ 1074.823898][T13449] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 1074.840143][ T5774] hub 5-1:0.0: bad descriptor, ignoring hub [ 1074.865567][ T5774] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1074.879108][T13449] waltop 0003:172F:0502.0026: hidraw0: USB HID v2.40 Device [HID 172f:0502] on usb-dummy_hcd.8-1/input0 [ 1074.939651][T13449] usb 9-1: USB disconnect, device number 33 [ 1075.059251][ T5774] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1075.145603][ T5774] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1075.196567][ T5774] dib0700: firmware download failed at 7 with -22 [ 1075.268890][T15094] fido_id[15094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1075.294342][ T5774] usb 5-1: USB disconnect, device number 51 [ 1075.479185][T14757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1075.558618][T14757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.594146][T14757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1075.641815][T14757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.675450][T14757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1075.736912][T14757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.776623][T14757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1075.830656][T14757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.876042][T15106] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2148'. [ 1075.963434][T15106] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1076.016175][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 1076.266565][T14757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.377177][T14757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.588503][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.595754][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.680738][T15129] usb usb8: usbfs: process 15129 (syz.4.2154) did not claim interface 0 before use [ 1076.709050][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.716337][T12900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.511643][T10353] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1078.739187][T10353] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1078.838238][T10353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.954845][T10353] usb 5-1: Product: syz [ 1079.019963][T10353] usb 5-1: Manufacturer: syz [ 1079.068988][T10353] usb 5-1: SerialNumber: syz [ 1079.127728][T10353] usb 5-1: config 0 descriptor?? [ 1079.186222][T10353] hub 5-1:0.0: bad descriptor, ignoring hub [ 1079.213821][T10353] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1079.416536][T10353] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1079.476507][T10353] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1079.483767][T15167] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2163'. [ 1079.522058][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2164'. [ 1079.523573][T10353] dib0700: firmware download failed at 7 with -22 [ 1079.570341][T15167] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1079.614127][T10353] usb 5-1: USB disconnect, device number 52 [ 1079.771444][ T5354] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1079.953714][ T5354] usb 7-1: Using ep0 maxpacket: 16 [ 1079.981699][ T5354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.034945][ T5354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.073819][ T5354] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1080.091347][ T5354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.127584][ T5354] usb 7-1: config 0 descriptor?? [ 1080.628243][ T5354] apple 0003:05AC:024B.0027: fixing up MacBook JIS keyboard report descriptor [ 1080.682701][ T5354] apple 0003:05AC:024B.0027: unknown global tag 0xe [ 1080.713370][ T5354] apple 0003:05AC:024B.0027: item 0 1 1 14 parsing failed [ 1080.740630][ T5354] apple 0003:05AC:024B.0027: parse failed [ 1080.771637][ T5354] apple 0003:05AC:024B.0027: probe with driver apple failed with error -22 [ 1080.841224][ T5354] usb 7-1: USB disconnect, device number 13 [ 1080.954753][T14757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.030355][T15199] usb usb8: usbfs: process 15199 (syz.2.2172) did not claim interface 0 before use [ 1084.436256][T14757] veth0_vlan: entered promiscuous mode [ 1084.446073][T15234] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2180'. [ 1084.508468][T14757] veth1_vlan: entered promiscuous mode [ 1084.548984][T15234] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1084.561572][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2182'. [ 1084.700577][T14757] veth0_macvtap: entered promiscuous mode [ 1084.748901][T14757] veth1_macvtap: entered promiscuous mode [ 1084.866662][T14757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.961440][T10353] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1085.221055][T14757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.249411][ T151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.268397][ T151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.311631][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.439091][T10353] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1085.455679][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.511775][T10353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.543744][T10353] usb 1-1: Product: syz [ 1085.555655][T10353] usb 1-1: Manufacturer: syz [ 1085.593353][T10353] usb 1-1: SerialNumber: syz [ 1085.670379][T10353] usb 1-1: config 0 descriptor?? [ 1086.822195][T10353] hub 1-1:0.0: bad descriptor, ignoring hub [ 1086.830187][T10353] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1086.909883][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.964907][T10353] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1086.977364][T10353] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1086.986304][T10353] dib0700: firmware download failed at 7 with -22 [ 1086.993552][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.042199][T10353] usb 1-1: USB disconnect, device number 10 [ 1087.231091][T15263] usb usb8: usbfs: process 15263 (syz.6.2189) did not claim interface 0 before use [ 1087.265906][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.304431][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.740006][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2197'. [ 1092.358107][T15298] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2198'. [ 1092.395691][T15298] openvswitch: netlink: Message has 8 unknown bytes. [ 1093.134824][T15305] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1093.162545][T15305] CIFS mount error: No usable UNC path provided in device string! [ 1093.162545][T15305] [ 1093.173125][T15305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1094.161711][T15309] usb usb8: usbfs: process 15309 (syz.6.2205) did not claim interface 0 before use [ 1094.431452][ T9574] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1094.615221][ T9574] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1094.669974][ T9574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.710477][ T9574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.750455][ T9574] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1094.834035][ T9574] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1094.861478][T13449] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1094.875569][ T9574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.722015][ T9574] usb 6-1: config 0 descriptor?? [ 1096.873405][T13449] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1096.923883][T13449] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.973649][T13449] usb 7-1: Product: syz [ 1096.992124][T13449] usb 7-1: Manufacturer: syz [ 1097.024927][T13449] usb 7-1: SerialNumber: syz [ 1097.064899][T13449] usb 7-1: config 0 descriptor?? [ 1097.099416][T13449] hub 7-1:0.0: bad descriptor, ignoring hub [ 1097.138563][T13449] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1097.331934][T13449] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1097.372979][ T9574] usbhid 6-1:0.0: can't add hid device: -71 [ 1097.379824][T13449] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1097.411427][ T9574] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1097.420780][T13449] dib0700: firmware download failed at 7 with -22 [ 1097.446918][ T9574] usb 6-1: USB disconnect, device number 11 [ 1097.504382][T13449] usb 7-1: USB disconnect, device number 14 [ 1098.495486][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033a28c00: rx timeout, send abort [ 1098.726601][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1098.995663][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054df5c00: rx timeout, send abort [ 1099.003963][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033a28c00: abort rx timeout. Force session deactivation [ 1099.503937][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054df5c00: abort rx timeout. Force session deactivation [ 1102.847864][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1103.700753][T15368] syz.5.2217 (15368) used greatest stack depth: 19424 bytes left [ 1104.040458][T15372] usb usb8: usbfs: process 15372 (syz.5.2219) did not claim interface 0 before use [ 1105.693956][T15384] netlink: 'syz.4.2220': attribute type 4 has an invalid length. [ 1109.107221][T13657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1109.164343][T13657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1109.181777][T13657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1109.198856][T13657] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1109.210811][T13657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1109.920694][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1109.947595][T13449] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1110.279689][T13449] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1110.331493][T13449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.379040][T13449] usb 1-1: Product: syz [ 1110.407406][T13449] usb 1-1: Manufacturer: syz [ 1110.442708][T13449] usb 1-1: SerialNumber: syz [ 1110.664054][T13449] usb 1-1: config 0 descriptor?? [ 1110.680176][T13449] hub 1-1:0.0: bad descriptor, ignoring hub [ 1110.689369][T13449] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1110.980018][T13449] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1111.314389][T13657] Bluetooth: hci6: command tx timeout [ 1111.570664][T13449] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1111.645617][T13449] dib0700: firmware download failed at 7 with -22 [ 1111.993466][T13449] usb 1-1: USB disconnect, device number 11 [ 1113.391537][T13657] Bluetooth: hci6: command tx timeout [ 1113.816749][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.837864][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.850775][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1113.863712][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1113.872689][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1113.961416][T13449] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1114.146412][T13449] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1114.167838][T13449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.182046][T13449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.204073][T13449] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.231382][T13449] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.252391][T13449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.301422][T13449] usb 6-1: config 0 descriptor?? [ 1114.742813][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1114.931407][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 1114.939044][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.951884][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.962607][ T30] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1114.972183][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.990959][T13449] usbhid 6-1:0.0: can't add hid device: -71 [ 1115.010605][T13449] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1115.019930][ T30] usb 7-1: config 0 descriptor?? [ 1115.077002][T13449] usb 6-1: USB disconnect, device number 12 [ 1115.120111][T15403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.198200][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.236402][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.246492][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.259731][T15403] bridge_slave_0: entered allmulticast mode [ 1115.336427][T15403] bridge_slave_0: entered promiscuous mode [ 1115.419932][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.462883][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.472432][T13657] Bluetooth: hci6: command tx timeout [ 1115.517226][T15403] bridge_slave_1: entered allmulticast mode [ 1115.557841][ T30] hid_parser_main: 30 callbacks suppressed [ 1115.557875][ T30] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 1115.565010][T15403] bridge_slave_1: entered promiscuous mode [ 1115.651208][ T30] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 1115.669391][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1115.691784][ T30] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 1115.743884][ T30] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 1115.801102][ T30] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 1115.870632][ T30] hid-multitouch 0003:1FD2:6007.0028: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 1115.955043][T13657] Bluetooth: hci3: command tx timeout [ 1115.989453][ T30] usb 7-1: USB disconnect, device number 15 [ 1116.497729][T15485] netlink: 'syz.5.2238': attribute type 4 has an invalid length. [ 1117.381647][T15403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.399425][T15480] fido_id[15480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1117.551446][T13657] Bluetooth: hci6: command tx timeout [ 1118.004603][T15403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.031464][T13657] Bluetooth: hci3: command tx timeout [ 1118.995832][ T151] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.331892][T15403] team0: Port device team_slave_0 added [ 1119.412213][T15403] team0: Port device team_slave_1 added [ 1119.916714][ T151] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.941412][ T5354] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1120.085987][T15403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.116932][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.121942][T13657] Bluetooth: hci3: command tx timeout [ 1120.212011][ T5354] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1120.254064][ T5354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.290551][T15403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.310001][ T5354] usb 6-1: Product: syz [ 1120.325628][ T5354] usb 6-1: Manufacturer: syz [ 1120.350966][ T5354] usb 6-1: SerialNumber: syz [ 1120.412147][ T5354] usb 6-1: config 0 descriptor?? [ 1120.422053][T15403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.457076][ T5354] hub 6-1:0.0: bad descriptor, ignoring hub [ 1120.467911][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.511683][ T5354] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1120.601727][T15403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.664211][ T5354] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1120.727152][ T5354] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1120.775514][ T5354] dib0700: firmware download failed at 7 with -22 [ 1121.023074][ T30] usb 6-1: USB disconnect, device number 13 [ 1121.140007][ T151] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.706371][T15403] hsr_slave_0: entered promiscuous mode [ 1122.164225][T15403] hsr_slave_1: entered promiscuous mode [ 1122.200975][T13657] Bluetooth: hci3: command tx timeout [ 1122.205074][T15403] debugfs: 'hsr0' already exists in 'hsr' [ 1122.266103][T15403] Cannot create hsr debugfs directory [ 1122.697920][ T151] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.855359][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1125.191420][ T5773] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1125.373479][ T5773] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1125.381731][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.395249][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.405163][ T5773] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1125.418357][ T5773] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1125.427497][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.443684][ T5773] usb 6-1: config 0 descriptor?? [ 1126.117961][ T151] bridge_slave_1: left allmulticast mode [ 1126.124621][ T5773] usbhid 6-1:0.0: can't add hid device: -71 [ 1126.153531][ T151] bridge_slave_1: left promiscuous mode [ 1126.159305][ T5773] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1126.174410][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.192235][ T5773] usb 6-1: USB disconnect, device number 14 [ 1126.235199][ T151] bridge_slave_0: left allmulticast mode [ 1126.249956][ T151] bridge_slave_0: left promiscuous mode [ 1126.277055][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.309509][T15563] netlink: 'syz.5.2251': attribute type 4 has an invalid length. [ 1128.156289][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.233830][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.271667][ T151] bond0 (unregistering): Released all slaves [ 1130.272304][ T151] tipc: Left network mode [ 1130.852826][ T30] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1131.042078][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1131.063933][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1131.106388][ T30] usb 6-1: config 3 has an invalid interface number: 145 but max is 0 [ 1131.205442][ T30] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.258341][ T30] usb 6-1: config 3 has no interface number 0 [ 1131.308801][ T30] usb 6-1: config 3 interface 145 has no altsetting 0 [ 1131.359309][ T30] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=c8.3f [ 1131.401162][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.448219][ T30] usb 6-1: Product: syz [ 1131.461572][ T30] usb 6-1: Manufacturer: syz [ 1131.466341][ T30] usb 6-1: SerialNumber: syz [ 1131.749253][ T30] qmi_wwan 6-1:3.145: bogus CDC Union: master=0, slave=0 [ 1131.812499][ T30] qmi_wwan 6-1:3.145: probe with driver qmi_wwan failed with error -22 [ 1131.874850][ T30] usb 6-1: USB disconnect, device number 15 [ 1131.922633][ T5354] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1132.139181][ T5354] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1132.175000][ T5354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.220104][ T5354] usb 1-1: Product: syz [ 1132.244507][ T5354] usb 1-1: Manufacturer: syz [ 1132.268374][ T5354] usb 1-1: SerialNumber: syz [ 1132.288577][ T5354] usb 1-1: config 0 descriptor?? [ 1132.317839][ T5354] hub 1-1:0.0: bad descriptor, ignoring hub [ 1132.354905][ T5354] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1132.406023][T15448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.418252][T15448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.441081][T15448] bridge_slave_0: entered allmulticast mode [ 1132.512562][T15448] bridge_slave_0: entered promiscuous mode [ 1132.585140][T15448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.615308][T15448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.623092][ T5354] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1132.732893][T15448] bridge_slave_1: entered allmulticast mode [ 1133.107623][ T5354] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1133.149108][T15448] bridge_slave_1: entered promiscuous mode [ 1133.185809][ T5354] dib0700: firmware download failed at 7 with -22 [ 1133.246727][ T5354] usb 1-1: USB disconnect, device number 12 [ 1135.199997][ T151] hsr_slave_0: left promiscuous mode [ 1135.239711][ T151] hsr_slave_1: left promiscuous mode [ 1135.253489][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.260977][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.421073][ T151] veth1_vlan: left promiscuous mode [ 1135.450322][ T151] veth0_vlan: left promiscuous mode [ 1136.122612][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1136.145616][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1136.161087][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1136.198164][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1136.210300][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1137.363863][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1137.509031][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1138.272258][T13657] Bluetooth: hci0: command tx timeout [ 1138.350004][T15448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.435935][T15448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.717141][T15448] team0: Port device team_slave_0 added [ 1138.766224][T15448] team0: Port device team_slave_1 added [ 1140.080319][T15448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.138612][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.245683][T15448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.328326][T15448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.367774][T13657] Bluetooth: hci0: command tx timeout [ 1140.373029][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.500594][T15448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.596765][T15448] hsr_slave_0: entered promiscuous mode [ 1141.623762][T15448] hsr_slave_1: entered promiscuous mode [ 1141.639144][T15448] debugfs: 'hsr0' already exists in 'hsr' [ 1141.666231][T15448] Cannot create hsr debugfs directory [ 1141.721444][ T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1141.774233][T15403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1141.790233][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1141.809068][T15403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1141.820087][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1141.865973][T15403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1141.879606][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1141.887816][T15403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1141.893048][T10353] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1141.924538][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.945036][ T30] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1141.960274][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.975444][ T30] usb 1-1: Product: syz [ 1141.979929][ T30] usb 1-1: Manufacturer: syz [ 1141.995279][ T30] usb 1-1: SerialNumber: syz [ 1142.010879][ T30] usb 1-1: config 0 descriptor?? [ 1142.021452][ T30] hub 1-1:0.0: bad descriptor, ignoring hub [ 1142.030844][ T30] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1142.063623][T10353] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.088129][T10353] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.091026][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.099335][T10353] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1142.128865][T10353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1142.147590][T10353] usb 6-1: SerialNumber: syz [ 1142.284684][ T30] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1142.389902][ T30] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1142.423227][ T30] dib0700: firmware download failed at 7 with -22 [ 1142.437628][T13657] Bluetooth: hci0: command tx timeout [ 1142.441153][T10353] usb 6-1: 0:2 : does not exist [ 1142.789628][ T30] usb 1-1: USB disconnect, device number 13 [ 1142.950049][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.086055][T10353] usb 6-1: USB disconnect, device number 16 [ 1144.130239][ T7434] udevd[7434]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.218222][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.881112][T13657] Bluetooth: hci0: command tx timeout [ 1145.099933][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.402033][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1146.710883][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.805897][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1146.888966][ T30] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1146.926212][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1147.036169][ T30] usb 7-1: SerialNumber: syz [ 1147.475793][ T30] usb 7-1: 0:2 : does not exist [ 1148.860701][ T30] usb 7-1: USB disconnect, device number 16 [ 1149.330613][ T7434] udevd[7434]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1149.385088][ T151] bridge_slave_1: left allmulticast mode [ 1149.401261][ T151] bridge_slave_1: left promiscuous mode [ 1149.419076][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.562183][ T151] bridge_slave_0: left allmulticast mode [ 1149.831547][ T151] bridge_slave_0: left promiscuous mode [ 1149.852706][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.511097][ T29] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1151.883978][ T29] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1151.899233][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.907644][ T29] usb 1-1: Product: syz [ 1151.915149][ T29] usb 1-1: Manufacturer: syz [ 1151.920005][ T29] usb 1-1: SerialNumber: syz [ 1151.979310][ T29] usb 1-1: config 0 descriptor?? [ 1152.013035][ T29] hub 1-1:0.0: bad descriptor, ignoring hub [ 1152.023753][ T29] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1152.088844][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.109312][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.125499][ T151] bond0 (unregistering): Released all slaves [ 1152.140606][ T151] bond1 (unregistering): Released all slaves [ 1152.182846][ T151] bond2 (unregistering): Released all slaves [ 1152.220882][ T29] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1152.239486][ T29] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1152.249224][ T29] dib0700: firmware download failed at 7 with -22 [ 1152.562874][ T9574] usb 1-1: USB disconnect, device number 14 [ 1152.593873][T15403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.705395][T15619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.888945][T15619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.112953][T15619] bridge_slave_0: entered allmulticast mode [ 1155.316543][T15619] bridge_slave_0: entered promiscuous mode [ 1155.378243][T15619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.395194][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.412640][T15619] bridge_slave_1: entered allmulticast mode [ 1155.424119][T15619] bridge_slave_1: entered promiscuous mode [ 1155.731771][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1155.971530][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1156.112899][ T29] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1156.154922][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.213505][ T29] usb 6-1: Product: syz [ 1156.225574][ T29] usb 6-1: Manufacturer: syz [ 1156.241605][ T29] usb 6-1: SerialNumber: syz [ 1156.267366][ T29] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1156.284801][ T29] r8152-cfgselector 6-1: config 0 descriptor?? [ 1156.406210][T15619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.168418][T15619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.237988][T15403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.454717][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.461957][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.573831][ T30] r8152-cfgselector 6-1: USB disconnect, device number 17 [ 1157.632635][T15448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1157.644082][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.674345][T15619] team0: Port device team_slave_0 added [ 1157.697064][T15403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1157.712995][T15403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1157.857897][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.865149][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.932735][ T151] hsr_slave_0: left promiscuous mode [ 1157.942273][T15779] input: syz0 as /devices/virtual/input/input30 [ 1157.949473][ T151] hsr_slave_1: left promiscuous mode [ 1157.964267][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.975486][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.994540][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.012753][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.054849][ T151] veth0_macvtap: left promiscuous mode [ 1158.060762][ T151] veth1_vlan: left promiscuous mode [ 1158.071750][ T151] veth0_vlan: left promiscuous mode [ 1160.402017][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1160.434119][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1160.655744][T15448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1160.670392][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1160.680129][T15448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1160.696025][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1160.704315][T15448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1160.714755][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1160.775593][T15619] team0: Port device team_slave_1 added [ 1160.919676][T15619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.940313][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.979839][T15806] netlink: 'syz.5.2307': attribute type 4 has an invalid length. [ 1161.049917][T15619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.115290][T15619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.173581][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.259519][T15619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.151160][T15619] hsr_slave_0: entered promiscuous mode [ 1163.165915][T15619] hsr_slave_1: entered promiscuous mode [ 1163.183510][T15619] debugfs: 'hsr0' already exists in 'hsr' [ 1163.201811][T15619] Cannot create hsr debugfs directory [ 1163.290664][ T151] IPVS: stop unused estimator thread 0... [ 1163.954694][T15448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.989168][T15823] IPv4: Oversized IP packet from 172.20.20.24 [ 1163.996839][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1164.003953][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1164.356625][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 1164.408202][T15448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.518866][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.526120][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.021159][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.028419][ T6814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.576670][T15403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.880241][ T5354] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1166.062078][ T5354] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 7 [ 1166.092615][ T5354] usb 7-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 1166.118945][ T5354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.147375][ T5354] usb 7-1: Product: syz [ 1166.160284][ T5354] usb 7-1: Manufacturer: syz [ 1166.167960][ T5354] usb 7-1: SerialNumber: syz [ 1166.237463][T15403] veth0_vlan: entered promiscuous mode [ 1166.237637][ T5354] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.273255][ T5354] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1166.461044][ T5354] usb 7-1: USB disconnect, device number 17 [ 1166.517134][T15403] veth1_vlan: entered promiscuous mode [ 1166.783874][T15403] veth0_macvtap: entered promiscuous mode [ 1166.936290][T15403] veth1_macvtap: entered promiscuous mode [ 1168.952994][T15619] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1169.039332][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1169.078280][T15619] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1169.317594][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.465606][T15619] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1171.061479][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.116760][T15619] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1171.295815][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.330731][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1171.350624][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1171.364320][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1171.373110][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1171.382568][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1171.740235][T15448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.967404][T15619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.681361][T15619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.904525][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.911776][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.429218][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.436587][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.471698][T13657] Bluetooth: hci4: command tx timeout [ 1174.032456][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1174.047015][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1174.055698][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1174.071732][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1174.080671][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1177.259840][T13657] Bluetooth: hci4: command tx timeout [ 1177.261148][ T5630] Bluetooth: hci6: command tx timeout [ 1177.267044][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.295949][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.596890][T15949] netlink: 'syz.0.2328': attribute type 10 has an invalid length. [ 1177.683320][T15949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.708060][T15949] team0: Port device netdevsim1 added [ 1179.057877][T15966] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2331'. [ 1179.311571][T13657] Bluetooth: hci6: command tx timeout [ 1179.312195][ T5630] Bluetooth: hci4: command tx timeout [ 1179.722464][ T6816] bridge_slave_1: left allmulticast mode [ 1179.743667][ T6816] bridge_slave_1: left promiscuous mode [ 1179.771595][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.780963][T15972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1179.816352][ T6816] bridge_slave_0: left allmulticast mode [ 1179.825743][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.837612][T15972] block device autoloading is deprecated and will be removed. [ 1179.858753][ T6816] bridge_slave_0: left promiscuous mode [ 1179.882479][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.222341][T10353] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1180.353592][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.366078][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.379038][ T6816] bond0 (unregistering): Released all slaves [ 1180.475941][T15619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.605084][T10353] usb 7-1: Using ep0 maxpacket: 32 [ 1180.613086][T10353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.631417][T10353] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1180.661850][T10353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1180.674094][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.695279][T10353] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.740609][T10353] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1180.776548][T10353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.807317][T10353] usb 7-1: Product: syz [ 1180.822691][T10353] usb 7-1: Manufacturer: syz [ 1180.837607][T10353] usb 7-1: SerialNumber: syz [ 1180.913658][ T6816] hsr_slave_0: left promiscuous mode [ 1180.926410][ T6816] hsr_slave_1: left promiscuous mode [ 1180.957642][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.970008][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.004342][ T6816] veth1_macvtap: left promiscuous mode [ 1181.016439][ T6816] veth0_macvtap: left promiscuous mode [ 1181.028636][ T6816] veth1_vlan: left promiscuous mode [ 1181.040520][ T6816] veth0_vlan: left promiscuous mode [ 1181.078627][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.103470][T10353] usb 7-1: config 0 descriptor?? [ 1181.141220][T10353] usb 7-1: no audio or video endpoints found [ 1181.787590][ T5630] Bluetooth: hci6: command tx timeout [ 1181.794084][ T5630] Bluetooth: hci4: command tx timeout [ 1182.129060][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.251384][T10353] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1182.392298][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 1182.425994][T10353] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1182.450374][T10353] usb 1-1: not running at top speed; connect to a high speed hub [ 1182.476638][T10353] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1182.487057][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 1182.499083][T10353] usb 1-1: config 0 has no interface number 0 [ 1182.516503][T10353] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 65535, setting to 64 [ 1182.538001][T10353] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1182.562879][T10353] usb 1-1: string descriptor 0 read error: -22 [ 1182.574398][T10353] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1182.595930][T10353] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1182.633828][T10353] usb 1-1: config 0 descriptor?? [ 1182.649919][T16008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1182.686883][T10353] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input31 [ 1182.721263][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 1182.973521][T10353] usb 1-1: USB disconnect, device number 15 [ 1183.081496][ T29] usb 7-1: USB disconnect, device number 18 [ 1183.178613][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.590251][T16036] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2341'. [ 1185.344224][T13657] Bluetooth: hci6: command tx timeout [ 1185.346182][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.360741][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.050807][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.180564][T16042] netlink: 'syz.5.2341': attribute type 1 has an invalid length. [ 1186.218661][T16042] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2341'. [ 1186.268693][T16042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.348680][T15877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.378977][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.387824][T15877] bridge_slave_0: entered allmulticast mode [ 1186.408326][T15877] bridge_slave_0: entered promiscuous mode [ 1187.040512][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'. [ 1187.285289][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803622b400: rx timeout, send abort [ 1187.785764][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888036229800: rx timeout, send abort [ 1187.794140][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803622b400: abort rx timeout. Force session deactivation [ 1188.221455][ T9574] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1188.246773][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.268378][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.294126][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888036229800: abort rx timeout. Force session deactivation [ 1188.334908][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.358138][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.366229][T15877] bridge_slave_1: entered allmulticast mode [ 1188.368524][T15877] bridge_slave_1: entered promiscuous mode [ 1188.461820][ T9574] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1188.589858][ T9574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.608056][ T9574] usb 7-1: Product: syz [ 1188.621326][ T9574] usb 7-1: Manufacturer: syz [ 1188.625987][ T9574] usb 7-1: SerialNumber: syz [ 1188.659111][ T9574] usb 7-1: config 0 descriptor?? [ 1188.674497][ T9574] hub 7-1:0.0: bad descriptor, ignoring hub [ 1188.698071][T15877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.709105][ T9574] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1188.728873][T15877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.885715][ T9574] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1188.916778][ T9574] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1188.931182][T15877] team0: Port device team_slave_0 added [ 1188.940510][ T9574] dib0700: firmware download failed at 7 with -22 [ 1188.968600][T15877] team0: Port device team_slave_1 added [ 1189.385979][T15877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.427558][T13449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.436318][ T30] usb 7-1: USB disconnect, device number 19 [ 1189.445871][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.478791][T15877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.496336][T15877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.510243][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.547423][T15877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.608687][T15619] veth0_vlan: entered promiscuous mode [ 1190.046407][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2348'. [ 1190.458877][T15877] hsr_slave_0: entered promiscuous mode [ 1190.493658][T15877] hsr_slave_1: entered promiscuous mode [ 1190.527368][T15877] debugfs: 'hsr0' already exists in 'hsr' [ 1190.547248][T15877] Cannot create hsr debugfs directory [ 1190.560184][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.626964][T15619] veth1_vlan: entered promiscuous mode [ 1191.414350][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.551787][T15918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.589160][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.600121][T15918] bridge_slave_0: entered allmulticast mode [ 1191.608384][T15918] bridge_slave_0: entered promiscuous mode [ 1191.648637][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.831862][T15918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.022560][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.874125][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.025199][T15918] bridge_slave_1: entered allmulticast mode [ 1193.029423][ T5797] kworker/1:6 (5797) used greatest stack depth: 18120 bytes left [ 1193.033853][T15918] bridge_slave_1: entered promiscuous mode [ 1194.683955][T13449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.693715][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.702476][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.049764][T15918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.109999][T15918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.301490][T13449] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1195.487921][T15918] team0: Port device team_slave_0 added [ 1195.504585][T13449] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1195.560215][T15918] team0: Port device team_slave_1 added [ 1195.569149][T13449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.604405][T13449] usb 6-1: Product: syz [ 1195.620729][T13449] usb 6-1: Manufacturer: syz [ 1195.633208][T13449] usb 6-1: SerialNumber: syz [ 1195.667658][T13449] usb 6-1: config 0 descriptor?? [ 1195.690961][T13449] hub 6-1:0.0: bad descriptor, ignoring hub [ 1195.723495][T13449] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1195.742203][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.826243][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 1195.832397][T15918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.889338][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.926638][T13449] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1195.975516][T15918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.004175][T13449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1196.050589][T13449] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1196.096868][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1196.108222][T13449] usb 6-1: media controller created [ 1196.212237][T13449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.245822][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1196.257568][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1196.268297][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1196.279465][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1196.328989][T15918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.357535][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.430831][T15918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.496822][T13449] DVB: Unable to find symbol dib7000p_attach() [ 1196.529869][T13449] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1196.691440][ T5354] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1196.770448][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.781945][T13449] rc_core: IR keymap rc-dib0700-rc5 not found [ 1196.789812][T13449] Registered IR keymap rc-empty [ 1196.800516][T13449] dvb-usb: could not initialize remote control. [ 1196.818877][T13449] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1196.893416][ T5354] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1196.907720][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.925535][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.961707][T15918] hsr_slave_0: entered promiscuous mode [ 1196.967608][ T5354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1196.979862][T15918] hsr_slave_1: entered promiscuous mode [ 1196.987254][T15918] debugfs: 'hsr0' already exists in 'hsr' [ 1196.992212][ T5354] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1196.995315][T15918] Cannot create hsr debugfs directory [ 1197.007029][ T5354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.040108][ T5354] usb 1-1: config 0 descriptor?? [ 1197.064155][T13449] usb 6-1: USB disconnect, device number 18 [ 1197.205038][T13449] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1197.297357][ T6816] bridge_slave_1: left allmulticast mode [ 1197.307211][ T6816] bridge_slave_1: left promiscuous mode [ 1197.319503][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.356685][ T6816] bridge_slave_0: left allmulticast mode [ 1197.372367][ T6816] bridge_slave_0: left promiscuous mode [ 1197.378333][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.499557][ T5354] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1197.711562][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.807782][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.369406][T13657] Bluetooth: hci3: command tx timeout [ 1198.493226][ T5354] usb 1-1: USB disconnect, device number 16 [ 1198.603978][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.660677][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.290858][T16184] program syz.5.2366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.304754][T16184] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1200.427228][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.436155][T13657] Bluetooth: hci3: command tx timeout [ 1200.620915][ T6816] bond0 (unregistering): Released all slaves [ 1200.753875][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.840333][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.088895][T16204] input: syz0 as /devices/virtual/input/input33 [ 1202.213660][ T6816] hsr_slave_0: left promiscuous mode [ 1202.236889][ T6816] hsr_slave_1: left promiscuous mode [ 1202.248061][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.279343][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.511591][T13657] Bluetooth: hci3: command tx timeout [ 1204.366388][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.374847][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.407044][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.591427][T13657] Bluetooth: hci3: command tx timeout [ 1204.756524][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 1204.807458][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 1205.172192][T16203] veth0_macvtap: left promiscuous mode [ 1205.523112][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.688356][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.971487][ T5354] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1207.154026][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1207.175707][ T5354] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1207.195500][ T5354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.210152][ T5354] usb 7-1: Product: syz [ 1207.220930][ T5354] usb 7-1: Manufacturer: syz [ 1207.231422][ T5354] usb 7-1: SerialNumber: syz [ 1207.247623][ T5354] usb 7-1: config 0 descriptor?? [ 1207.259380][ T5354] hub 7-1:0.0: bad descriptor, ignoring hub [ 1207.280829][ T5354] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1207.341839][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 1207.358795][ T29] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1207.415445][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1207.431325][ T29] usb 6-1: Product: syz [ 1207.439990][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.470955][ T5354] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1207.484607][ T29] usb 6-1: Manufacturer: syz [ 1207.494819][ T29] usb 6-1: SerialNumber: syz [ 1207.520215][ T29] usb 6-1: config 0 descriptor?? [ 1207.534934][ T5354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1207.550405][ T29] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1207.568348][ T5354] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1207.578738][ T5354] usb 7-1: media controller created [ 1207.606781][ T5354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1207.724552][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.756416][ T5354] DVB: Unable to find symbol dib7000p_attach() [ 1207.764977][ T29] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1207.790321][ T29] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 1207.808380][ T5354] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1207.839620][ T29] usb 6-1: USB disconnect, device number 19 [ 1207.961414][ T5354] rc_core: IR keymap rc-dib0700-rc5 not found [ 1207.985300][ T5354] Registered IR keymap rc-empty [ 1208.003061][ T5354] dvb-usb: could not initialize remote control. [ 1208.020432][ T5354] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1208.257511][ T29] usb 7-1: USB disconnect, device number 20 [ 1208.383600][ T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1208.881873][T16275] input: syz0 as /devices/virtual/input/input35 [ 1208.938536][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.930865][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 1210.081788][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.096212][T15918] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1210.158475][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1210.199373][T15918] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1210.259862][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.332163][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.367920][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 1211.444546][T16142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.516938][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.527081][T16142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.597484][T16142] bridge_slave_0: entered allmulticast mode [ 1211.637932][T16142] bridge_slave_0: entered promiscuous mode [ 1211.680817][T15918] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1211.730184][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.749192][T15918] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1211.778409][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.795782][T16142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.804780][T16142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.819040][T16142] bridge_slave_1: entered allmulticast mode [ 1211.830409][T16142] bridge_slave_1: entered promiscuous mode [ 1213.299984][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.304652][T16142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.438463][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.727201][T16142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.770387][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.818713][T13449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.925297][ T6816] bridge_slave_1: left allmulticast mode [ 1214.965365][ T6816] bridge_slave_1: left promiscuous mode [ 1214.998379][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.036809][ T6816] bridge_slave_0: left allmulticast mode [ 1215.042819][ T6816] bridge_slave_0: left promiscuous mode [ 1215.048613][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.087290][T16344] input: syz0 as /devices/virtual/input/input36 [ 1215.972008][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.390341][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.402407][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.414090][ T6816] bond0 (unregistering): Released all slaves [ 1216.992177][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.107103][T15918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.130576][T15918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.190533][T15918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1217.213177][T15918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1217.239329][T16142] team0: Port device team_slave_0 added [ 1217.286796][T16142] team0: Port device team_slave_1 added [ 1217.303954][T15877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1217.350241][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1217.374536][T15877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1217.422893][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1217.459216][T16359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1217.473763][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.480908][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.504059][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.511233][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.792667][ T9574] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1218.032651][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.040844][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.182062][ T9574] usb 6-1: device descriptor read/64, error -71 [ 1218.193969][T15877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1218.222248][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.306476][ T6816] hsr_slave_0: left promiscuous mode [ 1218.326416][ T6816] hsr_slave_1: left promiscuous mode [ 1218.344630][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.376526][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.423382][ T6816] veth1_vlan: left promiscuous mode [ 1218.437826][ T6816] veth0_vlan: left promiscuous mode [ 1218.441399][ T9574] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1218.596306][ T9574] usb 6-1: device descriptor read/64, error -71 [ 1218.716419][ T9574] usb usb6-port1: attempt power cycle [ 1218.867910][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 1218.909926][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 1219.072508][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.081374][ T9574] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1219.113687][ T9574] usb 6-1: device descriptor read/8, error -71 [ 1219.125894][T16142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.132946][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.194542][T16142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.213389][T15877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1219.227741][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1219.250124][T16142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.284511][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.334743][T16142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.361392][ T9574] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1219.404792][ T9574] usb 6-1: device descriptor read/8, error -71 [ 1219.534112][ T9574] usb usb6-port1: unable to enumerate USB device [ 1219.606844][T16142] hsr_slave_0: entered promiscuous mode [ 1219.624842][T16142] hsr_slave_1: entered promiscuous mode [ 1219.691375][T16410] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1220.198915][T13449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.429977][T16142] debugfs: 'hsr0' already exists in 'hsr' [ 1220.436850][T16142] Cannot create hsr debugfs directory [ 1222.499529][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.569575][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.755972][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.013606][T15877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.077320][T16431] input: syz0 as /devices/virtual/input/input37 [ 1223.230048][T15877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.335995][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.343230][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.393983][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.443685][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.449319][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.459186][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.469067][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.503466][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.370427][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.532267][T15918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.552960][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.093698][T16142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1226.141213][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.175376][T16142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1226.218188][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.254800][T16142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1226.298303][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.358114][T16142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1226.400381][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.474597][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.861673][ T30] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1226.968239][T16142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.079589][ T30] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1227.091752][T15918] veth0_vlan: entered promiscuous mode [ 1227.110642][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.135888][ T30] usb 1-1: Product: syz [ 1227.147936][ T30] usb 1-1: Manufacturer: syz [ 1227.173918][ T30] usb 1-1: SerialNumber: syz [ 1227.180085][T16142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.193135][ T30] usb 1-1: config 0 descriptor?? [ 1227.209572][ T30] hub 1-1:0.0: bad descriptor, ignoring hub [ 1227.227420][ T30] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1227.305145][T15918] veth1_vlan: entered promiscuous mode [ 1227.371118][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.378317][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.427991][ T30] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1227.459534][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.466729][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.515610][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1227.541248][ T30] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1227.577652][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.603904][ T30] usb 1-1: media controller created [ 1227.610251][T16481] ------------[ cut here ]------------ [ 1227.616315][T16481] usb 1-1: BOGUS control dir, pipe 80001180 doesn't match bRequestType c0 [ 1227.625133][T16481] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.6.2417/16481 [ 1227.625894][T15918] veth0_macvtap: entered promiscuous mode [ 1227.635889][T16481] Modules linked in: [ 1227.645350][T16481] CPU: 1 UID: 0 PID: 16481 Comm: syz.6.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.656473][T16481] Tainted: [L]=SOFTLOCKUP [ 1227.661211][T16481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1227.671685][T16481] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1227.677366][T16481] Code: d2 74 5d 48 89 54 24 40 e8 3f 6d b3 fa 4c 89 ef e8 27 51 df fe 48 89 c6 48 8d 3d 2d f8 8f 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 13 6d b3 fa 89 ee bf ff 00 00 00 [ 1227.697400][T16481] RSP: 0018:ffffc90003b6f968 EFLAGS: 00010287 [ 1227.704662][T16481] RAX: ffffffff8c82ad20 RBX: ffff88802b16c600 RCX: 0000000080001180 [ 1227.713128][T16481] RDX: ffff88801dbf7b40 RSI: ffffffff8c82ad20 RDI: ffffffff90e51bc0 [ 1227.721320][T16481] RBP: ffff888054c81058 R08: 00000000000000c0 R09: 0000000000000000 [ 1227.729695][T16481] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805aba3d80 [ 1227.737784][T16481] R13: ffff888054c810b0 R14: 0000000080001180 R15: 00000000000000c0 [ 1227.746514][T16481] FS: 00007f98f09a36c0(0000) GS:ffff88812446a000(0000) knlGS:0000000000000000 [ 1227.755979][T16481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1227.763092][T16481] CR2: 0000200000001a80 CR3: 0000000056104000 CR4: 0000000000350ef0 [ 1227.771475][T16481] Call Trace: [ 1227.774764][T16481] [ 1227.777712][T16481] ? __init_swait_queue_head+0xca/0x150 [ 1227.783389][T16481] usb_start_wait_urb+0x10e/0x580 [ 1227.788495][T16481] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1227.794292][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.800001][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.805766][T16481] ? __asan_memset+0x23/0x50 [ 1227.810395][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.816168][T16481] usb_control_msg+0x328/0x4b0 [ 1227.821010][T16481] ? __pfx_usb_control_msg+0x10/0x10 [ 1227.826444][T16481] dib0700_ctrl_rd+0x1b5/0x320 [ 1227.831256][T16481] dib0700_i2c_xfer+0x460/0xd90 [ 1227.836228][T16481] __i2c_transfer+0x5e9/0x1780 [ 1227.841064][T16481] ? srso_alias_safe_ret+0x3/0x7 [ 1227.844302][T15918] veth1_macvtap: entered promiscuous mode [ 1227.846097][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.857451][T16481] ? __pfx___i2c_transfer+0x10/0x10 [ 1227.862751][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.868849][T16481] ? rt_mutex_slowtrylock+0x93/0x100 [ 1227.875445][T16481] i2c_transfer+0x15f/0x380 [ 1227.880325][T16481] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1227.885381][T16481] i2cdev_ioctl+0x19d/0x830 [ 1227.889930][T16481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1227.895095][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.900772][T16481] ? __fget_files+0x21f/0x3d0 [ 1227.905571][T16481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1227.910631][T16481] __x64_sys_ioctl+0x18e/0x210 [ 1227.915555][T16481] do_syscall_64+0x10b/0x860 [ 1227.920209][T16481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.926837][T16481] RIP: 0033:0x7f98efb9ce59 [ 1227.931313][T16481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.951066][T16481] RSP: 002b:00007f98f09a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1227.960864][T16481] RAX: ffffffffffffffda RBX: 00007f98efe15fa0 RCX: 00007f98efb9ce59 [ 1227.969324][T16481] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000003 [ 1227.977671][T16481] RBP: 00007f98efc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1227.985740][T16481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.993787][T16481] R13: 00007f98efe16038 R14: 00007f98efe15fa0 R15: 00007ffebf453f18 [ 1228.001891][T16481] [ 1228.004930][T16481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1228.012233][T16481] CPU: 1 UID: 0 PID: 16481 Comm: syz.6.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.023201][T16481] Tainted: [L]=SOFTLOCKUP [ 1228.027529][T16481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1228.037585][T16481] Call Trace: [ 1228.040862][T16481] [ 1228.043828][T16481] dump_stack_lvl+0x100/0x190 [ 1228.048529][T16481] vpanic+0x552/0x970 [ 1228.052533][T16481] ? __pfx_vpanic+0x10/0x10 [ 1228.057060][T16481] panic+0xd1/0xe0 [ 1228.060793][T16481] ? __pfx_panic+0x10/0x10 [ 1228.065240][T16481] check_panic_on_warn.cold+0x19/0x34 [ 1228.070634][T16481] ? usb_submit_urb+0x1573/0x1910 [ 1228.075698][T16481] __warn.cold+0x191/0x328 [ 1228.080145][T16481] __report_bug+0x296/0x3d0 [ 1228.084681][T16481] ? usb_submit_urb+0x1573/0x1910 [ 1228.089741][T16481] ? __pfx___report_bug+0x10/0x10 [ 1228.094795][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.100483][T16481] ? mark_held_locks+0x40/0x70 [ 1228.105277][T16481] ? stack_depot_save_flags+0x479/0x9d0 [ 1228.110857][T16481] report_bug_entry+0xe1/0x290 [ 1228.115656][T16481] ? usb_submit_urb+0x157e/0x1910 [ 1228.120712][T16481] handle_bug+0x1cd/0x2a0 [ 1228.125059][T16481] exc_invalid_op+0x17/0x50 [ 1228.129584][T16481] asm_exc_invalid_op+0x1a/0x20 [ 1228.134443][T16481] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1228.140107][T16481] Code: d2 74 5d 48 89 54 24 40 e8 3f 6d b3 fa 4c 89 ef e8 27 51 df fe 48 89 c6 48 8d 3d 2d f8 8f 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 13 6d b3 fa 89 ee bf ff 00 00 00 [ 1228.159752][T16481] RSP: 0018:ffffc90003b6f968 EFLAGS: 00010287 [ 1228.165828][T16481] RAX: ffffffff8c82ad20 RBX: ffff88802b16c600 RCX: 0000000080001180 [ 1228.173829][T16481] RDX: ffff88801dbf7b40 RSI: ffffffff8c82ad20 RDI: ffffffff90e51bc0 [ 1228.181805][T16481] RBP: ffff888054c81058 R08: 00000000000000c0 R09: 0000000000000000 [ 1228.189784][T16481] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805aba3d80 [ 1228.197758][T16481] R13: ffff888054c810b0 R14: 0000000080001180 R15: 00000000000000c0 [ 1228.205753][T16481] ? usb_submit_urb+0x1569/0x1910 [ 1228.210818][T16481] ? __init_swait_queue_head+0xca/0x150 [ 1228.216399][T16481] usb_start_wait_urb+0x10e/0x580 [ 1228.221462][T16481] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1228.227037][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.232704][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.238355][T16481] ? __asan_memset+0x23/0x50 [ 1228.242961][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.248618][T16481] usb_control_msg+0x328/0x4b0 [ 1228.253418][T16481] ? __pfx_usb_control_msg+0x10/0x10 [ 1228.258748][T16481] dib0700_ctrl_rd+0x1b5/0x320 [ 1228.263535][T16481] dib0700_i2c_xfer+0x460/0xd90 [ 1228.268413][T16481] __i2c_transfer+0x5e9/0x1780 [ 1228.273200][T16481] ? srso_alias_safe_ret+0x3/0x7 [ 1228.278160][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.283817][T16481] ? __pfx___i2c_transfer+0x10/0x10 [ 1228.289034][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.294683][T16481] ? rt_mutex_slowtrylock+0x93/0x100 [ 1228.299997][T16481] i2c_transfer+0x15f/0x380 [ 1228.304524][T16481] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1228.309494][T16481] i2cdev_ioctl+0x19d/0x830 [ 1228.314017][T16481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1228.319058][T16481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.324713][T16481] ? __fget_files+0x21f/0x3d0 [ 1228.329409][T16481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1228.334450][T16481] __x64_sys_ioctl+0x18e/0x210 [ 1228.339249][T16481] do_syscall_64+0x10b/0x860 [ 1228.343853][T16481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.349756][T16481] RIP: 0033:0x7f98efb9ce59 [ 1228.354178][T16481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.373797][T16481] RSP: 002b:00007f98f09a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.382226][T16481] RAX: ffffffffffffffda RBX: 00007f98efe15fa0 RCX: 00007f98efb9ce59 [ 1228.390201][T16481] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000003 [ 1228.398174][T16481] RBP: 00007f98efc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1228.406148][T16481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.414146][T16481] R13: 00007f98efe16038 R14: 00007f98efe15fa0 R15: 00007ffebf453f18 [ 1228.422150][T16481] [ 1228.425457][T16481] Kernel Offset: disabled [ 1228.429777][T16481] Rebooting in 86400 seconds..