last executing test programs: 7m53.271511591s ago: executing program 32 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000004c0)={{0x0, 0x6, 0xffffffffffff0000, 0x7, 0x5f, 0x64, 0x2, 0xc4b, 0x60a5, 0x5, 0x7, 0x2, 0x20000000000000, 0x1, 0x8001}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r5, 0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x6637, 0x526ac54b, 0x5d, 0x1, [], [0x0, 0x9, 0x6, 0x8], [0x7, 0x7fff, 0x2, 0x957], [0x80000000, 0x9a77, 0x6000000000000, 0x8]}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 6m29.097987537s ago: executing program 1 (id=452): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x10003, 0x7, 0x40000003, 0x89, 0xcaa3, 0xfff, 0x20001e5b, 0x8000000, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xf73f728008fec34a}, 0x801) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 6m28.123626122s ago: executing program 1 (id=454): socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x5409, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10, 0x40089}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f00000005c0)={r3, r4+60000000}) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) 6m26.927539627s ago: executing program 1 (id=458): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x3, 0x10000000000102}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) read(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e26, 0x10001, @local, 0xb}, r6}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r6, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) 6m24.395229451s ago: executing program 5 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_emit_ethernet(0x8e, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700582c0020010000000000000000000000000001ff0200000000000000000000000000013a00000000000000020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356da805a7020776df627f8243b728111c761c8b7d35730cf2388ec08226f7f8e7e88877d8b1a0cf627d6919a2f777e023bb164499c9cfc53da83b39c84987fe122a5936948efe696d0c352afe02af6cf29643b70702984f1360737bd5ce9cf4515fd95705"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 6m23.303118275s ago: executing program 5 (id=464): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x10003, 0x7, 0x40000003, 0x89, 0xcaa3, 0xfff, 0x20001e5b, 0x8000000, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xf73f728008fec34a}, 0x801) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) 6m23.245310115s ago: executing program 1 (id=465): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x6, 0xe5, 0x0, 0x5}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00241500000015ad000000498052d2bfa492aae3370d37cf748840"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6m21.723623831s ago: executing program 5 (id=466): syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a777382010203010902240001000000000904"], 0x0) 6m20.554592321s ago: executing program 1 (id=467): syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xffff, 0x62, &(0x7f0000000240)=""/98, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0x401}, 0x10, 0x1efbf, r4, 0x1, 0x0, &(0x7f0000000500)=[{0x2, 0x1, 0x9, 0x5}]}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 6m19.519863314s ago: executing program 1 (id=469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) io_destroy(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r3, &(0x7f0000000740)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)}], 0x2, &(0x7f0000002400)=[{0x5d0, 0x1, 0x8, "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"}, {0x20, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072e"}, {0xf8, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a"}], 0x6e8}, 0x40000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x2, 0x1) 6m19.084763026s ago: executing program 5 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000000000008) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x2ff, 0xec000000, 0xca}]}) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getown(r1, 0x9) 6m13.821650909s ago: executing program 5 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_emit_ethernet(0x8e, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700582c0020010000000000000000000000000001ff0200000000000000000000000000013a00000000000000020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356da805a7020776df627f8243b728111c761c8b7d35730cf2388ec08226f7f8e7e88877d8b1a0cf627d6919a2f777e023bb164499c9cfc53da83b39c84987fe122a5936948efe696d0c352afe02af6cf29643b70702984f1360737bd5ce9cf4515fd95705"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 6m13.171513322s ago: executing program 5 (id=475): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x3, 0x10000000000102}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) read(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e26, 0x10001, @local, 0xb}, r6}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r6, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) 6m12.033577698s ago: executing program 33 (id=455): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x20000, 0x10000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005e00010028bd", @ANYBLOB="0e"], 0x1c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000002fc0)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000240)=0x2028, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r6, 0x0, 0x0, 0x2, 0x0, 0x60) fremovexattr(r6, &(0x7f0000000180)=@random={'trusted.', '\x00'}) syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f8e400905080aff03f70709090587"], 0x0) 6m8.909721546s ago: executing program 0 (id=480): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, '\x00'}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 6m8.645149008s ago: executing program 0 (id=481): socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x5409, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10, 0x40089}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000"], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f00000005c0)={r3, r4+60000000}) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) 6m7.361394597s ago: executing program 34 (id=463): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x3, 0x10000000000102}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) read(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e26, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r5, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) 6m4.245075572s ago: executing program 0 (id=483): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x46) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x9802, 0x40) write$FUSE_LSEEK(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6m4.204225125s ago: executing program 35 (id=469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) io_destroy(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r3, &(0x7f0000000740)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)}], 0x2, &(0x7f0000002400)=[{0x5d0, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e8069185956aaa7c34217597ab9c93e3ac647542aab63a11dce2a50d9ae996bb2477afc23d2456f36c58a8ca9308aea7548ea875ed4159d2df58cc3edcc0f1afd5fbed7e8fd540a9e97009a801e6d1397670d528f6c8ebbfce8ac7196efb13d05df6d95942f3a5f7629c857e558f0f408cfe6c5d7b9b3c07ac388904b79ffa7f947c0738b1722e6c817cb87cbee4d26d29ac34205523c121677cf55e891a681e9e4a1847ff29a8f440a427ebb9fa040f212b558c0932ad7f7e1115f48c52adcfbfb13ca9fe08f5507a74b04fee211674865f4ffa3f5cfba2fa7640a055efb6e848f4b6f9222bbe3b26a3721ddabc492c0586ca63fb03cc73007bef0e35606cfc629fa1c551eee50593712449e31c730042128ecdf57b35c79d040c6c23c663c5d30e2f3e711c8a9b9949814afee7117207a2b3ee989dd8edf72d997b3baa3ad5b700a8bf3c29d347094df4864bd4f4c234d5ef682b20f2664f7af13ec91c2490b0ddaff7cb2214d84a0a4486e6c51db48c21b6ef2bccf637bd589204716b019f976491ec9eedea1e67d48521a6e42cbc77c808e597a876226ba352c79e5f485ce3dd499f7eb22831a3951b70c5c869c90596fa211a1b9844c8a80e3fccaef546d08c4599f43b08bf198d8ed3b666088b191103f477bcf885bee9e280c9c126f1a2ddff0963ef5da8136f405dd5479e121fccbfa18c290acbee162a13006fcca07773a3da5db87b29c6ee7d66d2340bc053b83d600b5aaab198965f691aa52be98fda0998bb6a330f54575429a3cb7dcca97db0cdf3a2f1003514b1c213875e5306feb23a1528"}, {0x20, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072e"}, {0xf8, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a"}], 0x6e8}, 0x40000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x2, 0x1) 6m4.109737468s ago: executing program 0 (id=485): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000022000000", @ANYRES16=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 6m3.939142337s ago: executing program 0 (id=486): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x6, 0xe5, 0x0, 0x5}) 6m2.487306621s ago: executing program 0 (id=487): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) close(r5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f00000000c0)={0x2, 0x203, 0x2}) 5m57.442356112s ago: executing program 36 (id=475): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x3, 0x10000000000102}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) read(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e26, 0x10001, @local, 0xb}, r6}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r6, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) 5m47.121738879s ago: executing program 37 (id=487): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) close(r5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f00000000c0)={0x2, 0x203, 0x2}) 5m2.203012107s ago: executing program 7 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000000000008) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) read(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x2ff, 0xec000000, 0xca}]}) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getown(r1, 0x9) 5m0.835675238s ago: executing program 7 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_emit_ethernet(0x8b, &(0x7f00000006c0)={@remote, @random="8ac7338622af", @void, {@llc={0x4, {@snap={0xab, 0x2, "c2", "251a4e", 0x88b5, "1541422837c338c3c81b9614c79fd7d8c293277e790f8ad90a510cde0183b607f33334ca1eea45aa3ad933652b978ab941e4efd968dc28d5122a95644488d2e6e1b84890950cacfcc766ac63adb9056ee9ca1a1f3ed7e4b65d0b5d8c814bf7630d2ab22a0afbc266731ad538374ddd006ebb6a5579"}}}}}, &(0x7f0000000780)={0x1, 0x3, [0xcc5, 0x59d, 0x22f, 0xad4]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x405}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x44000) r2 = getpid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000600)=r2) syz_clone3(&(0x7f0000000440)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x41}, &(0x7f0000000100)=""/99, 0x63, &(0x7f0000000240)=""/77, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) kexec_load(0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4m59.813316352s ago: executing program 7 (id=534): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000022000000", @ANYRES16=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 4m59.419721509s ago: executing program 7 (id=535): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0e"], 0x22) syz_usb_connect$uac1(0x2, 0x9b, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0xa4, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x24}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x4], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x4, 0x80, 0x7, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0xff, 0x50, {0x7, 0x25, 0x1, 0x4, 0xd, 0xffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0x9, 0x1001}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xff, 0x5, {0x7, 0x25, 0x1, 0x4, 0x1, 0x7f}}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0xc, &(0x7f0000000780)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x5, 0xce}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = dup(r0) open(0x0, 0x109cc2, 0x5c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) sendmsg$inet(r2, 0x0, 0x4000004) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xb, 0x12, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f00)={0x2c, &(0x7f0000000c80)={0x80, 0x15, 0x81, "6128077d47db9080474f6543af4744b27656f881d517243fad7314faa2a93b26be7382fef44b0d347fe044dfebe0c1242406f68b07cff6f0177abb2096ff9e916ee358228702f71eb068583dcd0a4feaa9a5af70f7448d1581b38e710aa7c46c0a80eaaa14f017363e95175467d4a99315c4dbd6ec68af1a6c538c7ba7c55ae2f1"}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2da1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf38}, @map_fd], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xff, 0x0, 0x0, 0x40f00, 0x99, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc1cb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4m57.388938869s ago: executing program 7 (id=539): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') read$msr(r2, &(0x7f0000000200)=""/48, 0x30) 4m55.36555399s ago: executing program 7 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) 4m39.353586553s ago: executing program 38 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) 3m23.435563497s ago: executing program 6 (id=719): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/64) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 3m22.147954142s ago: executing program 6 (id=721): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x15, "61a2d5189e115caceb712574ce7043bb2e699e12e1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000007c0)={0x0, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) 3m17.018742557s ago: executing program 6 (id=732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40804) 3m15.39097922s ago: executing program 6 (id=736): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5], 0xac}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) 3m11.518474763s ago: executing program 6 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3m9.79873414s ago: executing program 6 (id=742): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001940)=ANY=[@ANYBLOB="120100008d1e502039102021a70201020301090212000100bfc0000904"], 0x0) tgkill(0xffffffffffffffff, 0x0, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x7, 0x0, 0x7) chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0x0, &(0x7f00000002c0)) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0xa) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000080)) 2m53.51863776s ago: executing program 39 (id=742): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001940)=ANY=[@ANYBLOB="120100008d1e502039102021a70201020301090212000100bfc0000904"], 0x0) tgkill(0xffffffffffffffff, 0x0, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x7, 0x0, 0x7) chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0x0, &(0x7f00000002c0)) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0xa) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000080)) 1m42.939981716s ago: executing program 9 (id=865): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.632566901s ago: executing program 9 (id=881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) io_destroy(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x2, 0x1) 1m32.449682513s ago: executing program 9 (id=884): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e657720656372797074667320747275737465643a2c2f23b72f2c203030303030000000003030303030303030303038"], 0x31, 0x0) get_robust_list(0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) dup3(0xffffffffffffffff, r0, 0x80000) keyctl$read(0xb, r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) socket(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1200, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0xfffffff9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x7, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffffb, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0xe8d, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x1ff, 0x2851, 0x4, 0x20000001, 0x5, 0x5, 0x2000a80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='vfat\x00', 0x0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x80\x00') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_extract_tcp_res(&(0x7f0000000080), 0x1ff, 0x5) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x100}], @generic="1806a2f5e3b7677d"}}}}, 0x0) 1m29.613928456s ago: executing program 9 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xd, 0x4, 0x5d}, 0x2c) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1m28.499442663s ago: executing program 9 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m27.00804523s ago: executing program 9 (id=891): syz_io_uring_setup(0x2688, &(0x7f0000000140)={0x0, 0x8206, 0x20442, 0x43, 0x2ef}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0x5d3f803a, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r4, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=virtio,po']) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) fcntl$dupfd(r3, 0x406, r3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100070000001ff2205fe937769458ee57432ed782"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m11.807522778s ago: executing program 40 (id=891): syz_io_uring_setup(0x2688, &(0x7f0000000140)={0x0, 0x8206, 0x20442, 0x43, 0x2ef}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0x5d3f803a, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r4, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=virtio,po']) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) fcntl$dupfd(r3, 0x406, r3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100070000001ff2205fe937769458ee57432ed782"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 37.891167851s ago: executing program 4 (id=971): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x46) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x9802, 0x40) write$FUSE_LSEEK(r3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 35.454988127s ago: executing program 4 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40804) 32.022488641s ago: executing program 4 (id=979): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 29.914045786s ago: executing program 4 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r6 = getpid() r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x10) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r8, 0x7}) 24.262018055s ago: executing program 4 (id=989): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 24.212409147s ago: executing program 8 (id=990): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21.502730042s ago: executing program 4 (id=994): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x2000, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x3000006, 0xa3b749903f41249d, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r6, &(0x7f0000003b80)={0x2020}, 0x2020) 15.158702075s ago: executing program 8 (id=1002): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 13.727881415s ago: executing program 8 (id=1003): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 12.642759026s ago: executing program 8 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80045017, 0x1000000000000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',\x00']) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) bind$alg(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaf68cfb8206ba86dd6064103c"], 0x0) ioctl$TIOCGWINSZ(r5, 0x545d, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x40, 0xe, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x235, 0x4, 0x1, {0x22, 0x8d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xd, 0x40}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0xbe, 0x9, 0x20}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0x2, &(0x7f00000006c0)=@string={0x2}}, {0x0, 0x0}]}) 10.552547575s ago: executing program 3 (id=1007): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180), &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x3}, 0x4, 0x0, &(0x7f0000000040)={{0x0, 0x5, 0x8b2}}, 0x0, 0x0}}) 9.305972297s ago: executing program 2 (id=1009): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000680)={'trans=virtio,', {[{@cache_readahead}, {@uname={'uname', 0x3d, 'syz2\x00'}}, {@cache_readahead}, {@loose}, {@mmap}, {@access_any}, {@cachetag={'cachetag', 0x3d, 'sched_switch\x00'}}], [{@fowner_lt={'fowner<', r1}}, {@obj_type={'obj_type', 0x3d, '(\'){'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x35, 0x31, 0x33, 0x64, 0x65, 0x39], 0x2d, [0x35, 0x64, 0x54, 0x33], 0x2d, [0x32, 0x39, 0x39, 0x66], 0x2d, [0x38, 0x66, 0x38, 0x66], 0x2d, [0x37, 0x65, 0x37, 0x33, 0x31, 0x36, 0x65, 0x30]}}}, {@obj_user={'obj_user', 0x3d, ',&\'\x15\xea\x95\xb0\x99\x93O\xc5V\x05x\xcd\r'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r2}}, {@seclabel}, {@seclabel}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff8001}]}, 0x3c}}, 0x10) 7.361028303s ago: executing program 3 (id=1010): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0xffffffff}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 6.803513581s ago: executing program 2 (id=1011): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000004c0)="1e3b2b7202b24cb8a97383d3517520ce6f71645ec54c1d3ab0c58f691ff4f84aa0aad9ca4a6a24cc11395e0888ac32623e2919587d79a3d82333", 0x3a, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 6.800901951s ago: executing program 8 (id=1012): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000600)={0x3, @null}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 6.118009296s ago: executing program 41 (id=994): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x2000, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x3000006, 0xa3b749903f41249d, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r6, &(0x7f0000003b80)={0x2020}, 0x2020) 6.063771696s ago: executing program 3 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r6 = getpid() r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x10) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r8, 0x7}) 4.742935525s ago: executing program 2 (id=1015): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40804) 4.073118253s ago: executing program 8 (id=1016): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5], 0xac}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) 3.763340337s ago: executing program 3 (id=1017): socket(0x8000000010, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_io_uring_setup(0x109, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x6, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0x6, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) 3.702089886s ago: executing program 2 (id=1018): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x6, 0x8, 0x9, 0xfdff, 0x7}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) accept4(r0, 0x0, 0x0, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) 2.96178791s ago: executing program 3 (id=1019): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x3}, 0x4, 0x0, &(0x7f0000000040)={{0x0, 0x5, 0x8b2}}, 0x0, 0x0}}) 2.625082479s ago: executing program 2 (id=1020): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/64) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x5345) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.14941944s ago: executing program 2 (id=1021): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) r1 = socket$inet_sctp(0x2, 0x3, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="2dab4fc57d393d6706cfaf87f8eff56a31ec16523838735a752742ca64a72bc541d7d699ce472714cd3cdc3ba4d772aa0203acc8e0377841ed59a32a2e943149d07f9fc19d9120a9830c79fdfc985b493d4a0ad8268de1d97b44b8168af6a7dc6d8b92a28ff5b1dbc112d19cd6e9cb3e64e2802e", 0x74}, {&(0x7f00000002c0)="2e983b2f1778bb9ed0e4361c7f42139c8e201cfa4d874dd2705cd5e4a24a3102d9db232ab10304133f067cb31781a9483ae9fb3e53ddbf35", 0x38}], 0x2, &(0x7f0000000380), 0x0, 0x48000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x55, &(0x7f00000002c0)=""/85, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd1e2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x1b31, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1004000, 0x800, 0x3, 0x3}, 0x20) 0s ago: executing program 3 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r6 = getpid() r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x2, 0x10) socket$isdn(0x22, 0x2, 0x2) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r9, &(0x7f0000000280)={0xffffffffffffffff, r8, 0x7}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) kernel console output (not intermixed with test programs): vice strings: Mfr=1, Product=2, SerialNumber=3 [ 389.245024][ T5472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.253132][ T6486] netdevsim netdevsim2 netdevsim5: renamed from eth10 [ 389.261998][ T5472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.326850][ T6486] netdevsim netdevsim2 netdevsim6: renamed from eth11 [ 389.363086][ T14] usbhid 7-1:1.0: can't add hid device: -71 [ 389.370123][ T14] usbhid: probe of 7-1:1.0 failed with error -71 [ 389.405860][ T14] usb 7-1: USB disconnect, device number 3 [ 389.420023][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.458308][ T6486] netdevsim netdevsim2 netdevsim7: renamed from eth12 [ 389.664530][ T6486] netdevsim netdevsim3 netdevsim10: renamed from eth7 [ 389.731808][ T4316] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 389.807313][ T6486] netdevsim netdevsim3 netdevsim11: renamed from eth8 [ 390.009750][ T4316] usb 10-1: config 2 has an invalid interface number: 74 but max is 0 [ 390.103698][ T5712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.116942][ T5712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.208274][ T4316] usb 10-1: config 2 has no interface number 0 [ 390.231634][ T4316] usb 10-1: config 2 interface 74 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 390.249740][ T4316] usb 10-1: config 2 interface 74 altsetting 12 endpoint 0x9 has an invalid bInterval 255, changing to 4 [ 390.288849][ T4316] usb 10-1: config 2 interface 74 altsetting 12 endpoint 0x9 has invalid maxpacket 1024, setting to 1023 [ 390.305046][ T4316] usb 10-1: config 2 interface 74 has no altsetting 0 [ 390.318948][ T4316] usb 10-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice=10.ce [ 390.338819][ T4316] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.351610][ T4316] usb 10-1: Product: syz [ 390.355922][ T4316] usb 10-1: Manufacturer: syz [ 390.371938][ T4316] usb 10-1: SerialNumber: syz [ 390.422697][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.726174][ T4316] usb 10-1: USB disconnect, device number 2 [ 390.800414][ T6486] netdevsim netdevsim1 netdevsim12: renamed from eth13 [ 390.810437][ T4407] udevd[4407]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:2.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.857294][ T6701] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 390.864342][ T6701] PKCS7: Only support pkcs7_signedData type [ 390.930542][ T6486] netdevsim netdevsim1 netdevsim13: renamed from eth14 [ 391.577644][ T6486] netdevsim netdevsim1 netdevsim14: renamed from eth15 [ 391.721083][ T6486] netdevsim netdevsim1 netdevsim15: renamed from eth16 [ 391.835815][ T6486] netdevsim netdevsim5 netdevsim16: renamed from eth4 [ 391.947439][ T6486] netdevsim netdevsim5 netdevsim17: renamed from eth17 [ 391.972449][ T6486] netdevsim netdevsim5 netdevsim18: renamed from eth18 [ 392.003778][ T6486] netdevsim netdevsim5 netdevsim19: renamed from eth19 [ 392.112496][ T6486] netdevsim netdevsim4 netdevsim20: renamed from eth1 [ 392.141512][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 392.296948][ T6486] netdevsim netdevsim4 netdevsim21: renamed from eth22 [ 392.356177][ T6486] netdevsim netdevsim4 netdevsim22: renamed from eth23 [ 392.363424][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 392.373574][ T22] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 392.381928][ T4326] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 392.405072][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 392.412372][ T22] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 392.422440][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.435891][ T22] usb 7-1: config 0 descriptor?? [ 392.591633][ T4326] usb 10-1: Using ep0 maxpacket: 8 [ 392.601115][ T4326] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 392.636583][ T4326] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 392.648693][ T4326] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.670808][ T4326] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.702547][ T4326] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.714449][ T4326] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.793955][ T6486] netdevsim netdevsim4 netdevsim23: renamed from eth24 [ 392.961955][ T4326] usb 10-1: GET_CAPABILITIES returned 0 [ 392.979066][ T4326] usbtmc 10-1:16.0: can't read capabilities [ 393.245429][ T4360] usb 10-1: USB disconnect, device number 3 [ 393.252002][ T22] corsair-psu 0003:1B1C:1C09.0008: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 393.354300][ T46] device hsr_slave_0 left promiscuous mode [ 393.372169][ T46] device hsr_slave_1 left promiscuous mode [ 393.393068][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.400595][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.428378][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.436427][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.464829][ T46] device hsr_slave_0 left promiscuous mode [ 393.473808][ T46] device hsr_slave_1 left promiscuous mode [ 393.483953][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.492417][ T4315] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 393.502350][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.510545][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.524669][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.542871][ T46] bridge0: port 3(batadv0) entered disabled state [ 393.552634][ T46] device bridge_slave_1 left promiscuous mode [ 393.558939][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.577784][ T46] device bridge_slave_0 left promiscuous mode [ 393.590960][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.655082][ T46] device hsr_slave_0 left promiscuous mode [ 393.661516][ T22] corsair-psu 0003:1B1C:1C09.0008: unable to initialize device (-110) [ 393.679187][ T22] corsair-psu: probe of 0003:1B1C:1C09.0008 failed with error -110 [ 393.679352][ T46] device hsr_slave_1 left promiscuous mode [ 393.693021][ T4315] usb 8-1: config 1 interface 0 has no altsetting 0 [ 393.706227][ T4315] usb 8-1: string descriptor 0 read error: -22 [ 393.714674][ T4315] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 393.724193][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.733241][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.748929][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.756990][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.768000][ T22] usb 7-1: USB disconnect, device number 4 [ 393.774270][ T46] bridge0: port 3(batadv0) entered disabled state [ 393.783660][ T46] device bridge_slave_1 left promiscuous mode [ 393.810455][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.829063][ T4315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.892642][ T46] device bridge_slave_0 left promiscuous mode [ 393.909258][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.998819][ T46] device hsr_slave_0 left promiscuous mode [ 394.035263][ T46] device hsr_slave_1 left promiscuous mode [ 394.042285][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.049791][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.088284][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.097375][ T4315] usbhid 8-1:1.0: can't add hid device: -71 [ 394.115927][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.124340][ T4315] usbhid: probe of 8-1:1.0 failed with error -71 [ 394.141809][ T4315] usb 8-1: USB disconnect, device number 3 [ 394.251053][ T6729] fido_id[6729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 394.342569][ T46] bridge0: port 3(batadv0) entered disabled state [ 394.394127][ T46] device bridge_slave_1 left promiscuous mode [ 394.430887][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.462919][ T46] device bridge_slave_0 left promiscuous mode [ 395.461487][ T6738] capability: warning: `syz.9.515' uses deprecated v2 capabilities in a way that may be insecure [ 397.315119][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.743368][ T46] device veth1_macvtap left promiscuous mode [ 397.787694][ T46] device veth0_macvtap left promiscuous mode [ 397.821735][ T46] device veth1_vlan left promiscuous mode [ 397.871948][ T46] device veth0_vlan left promiscuous mode [ 397.916568][ T46] device veth1_macvtap left promiscuous mode [ 397.937676][ T46] device veth0_macvtap left promiscuous mode [ 397.958181][ T46] device veth1_vlan left promiscuous mode [ 397.986849][ T46] device veth0_vlan left promiscuous mode [ 398.004747][ T46] device veth1_macvtap left promiscuous mode [ 398.025299][ T46] device veth0_macvtap left promiscuous mode [ 398.047032][ T46] device veth1_vlan left promiscuous mode [ 398.053449][ T46] device veth0_vlan left promiscuous mode [ 398.079660][ T46] device veth1_macvtap left promiscuous mode [ 398.087738][ T46] device veth0_macvtap left promiscuous mode [ 398.100526][ T46] device veth1_vlan left promiscuous mode [ 398.110501][ T46] device veth0_vlan left promiscuous mode [ 398.261659][ T4326] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 398.937541][ T4326] usb 10-1: config 0 has no interfaces? [ 398.959572][ T4326] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 399.028329][ T4326] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.090119][ T4326] usb 10-1: config 0 descriptor?? [ 399.308660][ T4326] usb 10-1: USB disconnect, device number 4 [ 400.621567][ T4326] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 400.817316][ T4326] usb 10-1: unable to get BOS descriptor or descriptor too short [ 400.831741][ T4326] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 400.899145][ T4326] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 400.941898][ T4326] usb 10-1: string descriptor 0 read error: -22 [ 400.948302][ T4326] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 400.987775][ T46] bond1 (unregistering): Released all slaves [ 401.017392][ T4326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.099568][ T4326] usb 10-1: can't set config #1, error -71 [ 401.158019][ T4326] usb 10-1: USB disconnect, device number 5 [ 404.033742][ T46] team0 (unregistering): Port device team_slave_1 removed [ 404.095339][ T46] team0 (unregistering): Port device team_slave_0 removed [ 404.164142][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.228581][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.886233][ T46] bond0 (unregistering): Released all slaves [ 405.221674][ T4317] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 405.415800][ T46] team0 (unregistering): Port device team_slave_1 removed [ 405.424361][ T4317] usb 9-1: config 1 interface 0 has no altsetting 0 [ 405.449395][ T4317] usb 9-1: string descriptor 0 read error: -22 [ 405.460414][ T4317] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 405.478716][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.496787][ T46] team0 (unregistering): Port device team_slave_0 removed [ 405.564691][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.614409][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.737378][ T4317] usbhid 9-1:1.0: can't add hid device: -71 [ 405.745244][ T4317] usbhid: probe of 9-1:1.0 failed with error -71 [ 405.766168][ T4317] usb 9-1: USB disconnect, device number 2 [ 405.977531][ T46] bond0 (unregistering): Released all slaves [ 406.567004][ T46] team0 (unregistering): Port device team_slave_1 removed [ 406.614913][ T46] team0 (unregistering): Port device team_slave_0 removed [ 406.629137][ T4317] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 406.663115][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.708679][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.851627][ T4317] usb 9-1: Using ep0 maxpacket: 32 [ 406.858834][ T4317] usb 9-1: config 32 has an invalid interface number: 85 but max is 0 [ 406.870865][ T4317] usb 9-1: config 32 has no interface number 0 [ 406.878829][ T4317] usb 9-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.890341][ T4317] usb 9-1: config 32 interface 85 has no altsetting 0 [ 406.906479][ T4317] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 406.919050][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.931580][ T4317] usb 9-1: Product: syz [ 406.935879][ T4317] usb 9-1: Manufacturer: syz [ 406.940505][ T4317] usb 9-1: SerialNumber: syz [ 407.129764][ T46] bond0 (unregistering): Released all slaves [ 407.372367][ T4317] appletouch 9-1:32.85: Geyser mode initialized. [ 407.381951][ T46] bond1 (unregistering): Released all slaves [ 407.389326][ T4317] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:32.85/input/input24 [ 407.902295][ T46] team0 (unregistering): Port device team_slave_1 removed [ 407.944439][ T46] team0 (unregistering): Port device team_slave_0 removed [ 407.992376][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.037101][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.358924][ T46] bond0 (unregistering): Released all slaves [ 408.470372][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.518'. [ 409.578324][ T4360] usb 9-1: USB disconnect, device number 3 [ 409.631924][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.639906][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.676543][ T4360] appletouch 9-1:32.85: input: appletouch disconnected [ 409.758306][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.904716][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.937868][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.999555][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.006732][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.084783][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.163477][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.182845][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.217156][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.224402][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.318768][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.522344][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.978233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.033110][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.184063][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.213801][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.282095][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.342807][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.370742][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.448992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.481034][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.696431][ T49] Bluetooth: hci6: unexpected subevent 0x0e length: 30 > 15 [ 411.982240][ T4317] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 412.232618][ T4317] usb 8-1: not running at top speed; connect to a high speed hub [ 412.260000][ T4317] usb 8-1: string descriptor 0 read error: -22 [ 412.536850][ T4317] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 412.546582][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.618412][ T4317] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 412.777743][ T4317] usb 8-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 412.802868][ T4317] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 412.921648][ T4317] usb 8-1: USB disconnect, device number 4 [ 415.060067][ T49] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 415.069919][ T49] Bluetooth: hci7: Injecting HCI hardware error event [ 415.078271][ T4279] Bluetooth: hci7: hardware error 0x00 [ 415.678811][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 415.699659][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 415.802501][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.008500][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.022965][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.775058][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.803679][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.850246][ T6486] device veth0_vlan entered promiscuous mode [ 416.878643][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.943342][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.025763][ T6486] device veth1_vlan entered promiscuous mode [ 417.179940][ T4279] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 417.925043][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.948852][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.000908][ T6486] device veth0_macvtap entered promiscuous mode [ 418.055595][ T6486] device veth1_macvtap entered promiscuous mode [ 418.218119][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.259991][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.309753][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.330854][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.388707][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.449155][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.459787][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.485357][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.649188][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.821094][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.8.540'. [ 419.313163][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.321888][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.344331][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.393423][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.442001][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.499008][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.568052][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.613561][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.634549][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.645397][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.656082][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.667548][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.693362][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.708128][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.771034][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.846328][ T6486] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.887778][ T6486] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.271314][ T6486] netdevsim netdevsim3 netdevsim10: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.341660][ T6486] netdevsim netdevsim3 netdevsim11: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.350520][ T6486] netdevsim netdevsim2 netdevsim4: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.480192][ T6486] netdevsim netdevsim2 netdevsim5: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.610200][ T6486] netdevsim netdevsim2 netdevsim6: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.976248][ T6486] netdevsim netdevsim2 netdevsim7: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.986118][ T6486] netdevsim netdevsim1 netdevsim12: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.995407][ T6486] netdevsim netdevsim1 netdevsim13: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.122337][ T6486] netdevsim netdevsim1 netdevsim14: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.142337][ T6486] netdevsim netdevsim1 netdevsim15: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.169863][ T6486] netdevsim netdevsim5 netdevsim16: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.212110][ T6486] netdevsim netdevsim5 netdevsim17: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.236258][ T6486] netdevsim netdevsim5 netdevsim18: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.312707][ T6486] netdevsim netdevsim5 netdevsim19: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.323919][ T6486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.335520][ T6486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.347746][ T6486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.357074][ T6486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.366389][ T6486] netdevsim netdevsim4 netdevsim20: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.378211][ T6486] netdevsim netdevsim4 netdevsim21: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.387509][ T6486] netdevsim netdevsim4 netdevsim22: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.397295][ T6486] netdevsim netdevsim4 netdevsim23: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.929375][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.979119][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.008569][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.122195][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.130112][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.203728][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.474878][ T6935] netlink: 'syz.6.560': attribute type 1 has an invalid length. [ 427.544069][ T6935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.768467][ T6940] bond1: (slave vlan2): making interface the new active one [ 427.874552][ T6940] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 427.936390][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 430.450434][ T6833] Set syz1 is full, maxelem 65536 reached [ 430.465876][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.563'. [ 430.586324][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.563'. [ 431.534018][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.563'. [ 431.613251][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.563'. [ 431.672990][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.563'. [ 433.915575][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.926649][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.934925][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.943584][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.952118][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 433.959456][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.836318][ T6976] block device autoloading is deprecated and will be removed. [ 434.890052][ T4331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.187253][ T4331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.389279][ T4331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.567470][ T4331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.880654][ T4331] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.948454][ T4331] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.972032][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 437.591685][ T4331] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.786656][ T4331] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.928087][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 438.058036][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 439.111759][ T4326] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 439.165202][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.213415][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.245715][ T6985] device bridge_slave_0 entered promiscuous mode [ 439.311546][ T4326] usb 10-1: Using ep0 maxpacket: 16 [ 439.318826][ T4326] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 439.382840][ T4326] usb 10-1: config 1 has no interface number 0 [ 439.389103][ T4326] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 439.404075][ T4326] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 439.417152][ T4326] usb 10-1: config 1 interface 105 has no altsetting 0 [ 439.433456][ T4326] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 439.455151][ T4326] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 439.472643][ T4326] usb 10-1: Product: syz [ 439.492212][ T4326] usb 10-1: Manufacturer: syz [ 439.502280][ T4326] usb 10-1: SerialNumber: syz [ 439.522758][ T7024] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 439.560394][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.570943][ T7024] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 439.591303][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.609950][ T6985] device bridge_slave_1 entered promiscuous mode [ 439.743364][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.751796][ T4366] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 439.812143][ T4326] aqc111: probe of 10-1:1.105 failed with error -71 [ 439.841572][ T4326] usb 10-1: USB disconnect, device number 6 [ 439.910768][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.917168][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.951630][ T4366] usb 7-1: Using ep0 maxpacket: 8 [ 439.959000][ T4366] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 441.363989][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 441.393677][ T4366] usb 7-1: config 179 has no interface number 0 [ 441.400017][ T4366] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 441.416561][ T4366] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 441.429817][ T4366] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.530630][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.541604][ T4366] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 442.462042][ T4366] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 442.476026][ T4366] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 442.485530][ T4366] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.636991][ T7043] netlink: 60 bytes leftover after parsing attributes in process `syz.9.579'. [ 442.647477][ T4366] usb 7-1: can't set config #179, error -71 [ 442.657343][ T4366] usb 7-1: USB disconnect, device number 5 [ 443.318816][ T6985] team0: Port device team_slave_0 added [ 443.349218][ T6985] team0: Port device team_slave_1 added [ 443.421937][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 443.611655][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.581'. [ 443.649261][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.661372][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.773245][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.182280][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.189302][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.308145][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.468802][ T4331] device hsr_slave_0 left promiscuous mode [ 447.487509][ T4331] device hsr_slave_1 left promiscuous mode [ 447.542159][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.591535][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.635249][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.651944][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.125605][ T4331] device bridge_slave_1 left promiscuous mode [ 448.192503][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.224526][ T4331] device bridge_slave_0 left promiscuous mode [ 448.230853][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.380982][ T4331] device veth1_macvtap left promiscuous mode [ 448.426477][ T4331] device veth0_macvtap left promiscuous mode [ 448.433098][ T4331] device veth1_vlan left promiscuous mode [ 448.438978][ T4331] device veth0_vlan left promiscuous mode [ 449.345619][ T7084] fuse: Unknown parameter '00000000000000000000' [ 450.313884][ T7089] ubi: mtd0 is already attached to ubi31 [ 450.531733][ T7090] comedi comedi2: board detection failed [ 450.826155][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.9.590'. [ 457.047111][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 457.138063][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 457.229631][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.296766][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.420530][ T4331] bond0 (unregistering): Released all slaves [ 459.074986][ T7126] netdevsim netdevsim8: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 459.191088][ T6985] device hsr_slave_0 entered promiscuous mode [ 459.198907][ T6985] device hsr_slave_1 entered promiscuous mode [ 459.258425][ T7147] fuse: Unknown parameter '00000000000000000000' [ 459.478373][ T7150] capability: warning: `syz.9.601' uses 32-bit capabilities (legacy support in use) [ 461.078773][ T6985] netdevsim netdevsim2 netdevsim7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.325197][ T7169] fuse: Unknown parameter '00000000000000000000' [ 461.419116][ T6985] netdevsim netdevsim2 netdevsim6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.471773][ T4360] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 461.624247][ T7172] sd 0:0:1:0: device reset [ 461.931778][ T4360] usb 5-1: Using ep0 maxpacket: 32 [ 461.959810][ T4360] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 461.984171][ T7170] ubi: mtd0 is already attached to ubi31 [ 462.026644][ T4360] usb 5-1: config 0 has no interface number 0 [ 462.043261][ T4360] usb 5-1: config 0 interface 184 has no altsetting 0 [ 462.084262][ T4360] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 462.106411][ T4360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.130237][ T4360] usb 5-1: Product: syz [ 462.181566][ T4360] usb 5-1: Manufacturer: syz [ 462.189878][ T4360] usb 5-1: SerialNumber: syz [ 462.251979][ T4360] usb 5-1: config 0 descriptor?? [ 462.282117][ T4360] smsc75xx v1.0.0 [ 462.451538][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 462.459784][ T6985] netdevsim netdevsim2 netdevsim5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.536463][ T7176] netlink: 60 bytes leftover after parsing attributes in process `syz.8.608'. [ 462.950672][ T4360] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 463.001516][ T4360] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 463.213572][ T4360] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 463.299521][ T4360] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 463.461516][ T4360] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 463.471090][ T4360] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 463.633040][ T6985] netdevsim netdevsim2 netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.741655][ T7181] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 464.147957][ T6985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.184694][ T6985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.555068][ T6985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.721883][ T6709] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 464.748528][ T6985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.936125][ T4360] usb 5-1: USB disconnect, device number 4 [ 465.004398][ T6709] usb 9-1: unable to get BOS descriptor or descriptor too short [ 465.033055][ T6709] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 465.078137][ T6709] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 466.322036][ T6709] usb 9-1: string descriptor 0 read error: -22 [ 466.514632][ T6709] usb 9-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice= 0.40 [ 466.645819][ T6709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.675532][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.707132][ T6709] snd-usb-audio: probe of 9-1:1.0 failed with error -2 [ 466.752461][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.760372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.778651][ T6709] snd-usb-audio: probe of 9-1:1.1 failed with error -2 [ 466.793462][ T6985] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.837030][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.879289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.918270][ T6709] snd-usb-audio: probe of 9-1:1.2 failed with error -2 [ 466.930916][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.938167][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.987782][ T6709] usb 9-1: USB disconnect, device number 4 [ 467.031872][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.057906][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.072382][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.087557][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.095003][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.111733][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.127549][ T7197] nfs: Unknown parameter 'ÿÿÿÿ' [ 467.138407][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.200357][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.213753][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.612763][ T7091] udevd[7091]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.672052][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.725920][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.777808][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.818673][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.847814][ T6985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.902100][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.013236][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.096385][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.137712][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.815275][ T7233] netdevsim netdevsim9: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 471.231477][ T4360] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 471.442086][ T4360] usb 7-1: Using ep0 maxpacket: 32 [ 471.489068][ T4360] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 471.558627][ T4360] usb 7-1: config 0 has no interface number 0 [ 471.676682][ T4360] usb 7-1: config 0 interface 184 has no altsetting 0 [ 471.736893][ T4360] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 471.769960][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.785741][ T4360] usb 7-1: Product: syz [ 471.798625][ T4360] usb 7-1: Manufacturer: syz [ 471.804553][ T4360] usb 7-1: SerialNumber: syz [ 471.819553][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.837107][ T4360] usb 7-1: config 0 descriptor?? [ 471.842607][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.856923][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.880248][ T4360] smsc75xx v1.0.0 [ 471.963663][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.992880][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.077381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.085623][ T5573] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 472.100939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.130730][ T6985] device veth0_vlan entered promiscuous mode [ 472.143025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.161780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.186686][ T6985] device veth1_vlan entered promiscuous mode [ 472.246650][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 472.266880][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 472.280360][ T5573] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 472.299151][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.307759][ T5573] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.328483][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.336821][ T5573] usb 9-1: Product: syz [ 472.351272][ T5573] usb 9-1: Manufacturer: syz [ 472.356567][ T6985] device veth0_macvtap entered promiscuous mode [ 472.371673][ T5573] usb 9-1: SerialNumber: syz [ 472.385883][ T6985] device veth1_macvtap entered promiscuous mode [ 472.393293][ T5573] usb 9-1: config 0 descriptor?? [ 472.429687][ T5573] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input25 [ 472.459299][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.489780][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.500546][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 472.537628][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 472.541357][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.583487][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.602303][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.624222][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.645174][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.656334][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.671374][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.693376][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.708534][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.734051][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.763654][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.794687][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.805823][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 472.823249][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 472.836312][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.854070][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 472.867725][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.887593][ T4360] smsc75xx: probe of 7-1:0.184 failed with error -61 [ 472.900184][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.929928][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.955217][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.969510][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.996004][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.030606][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.056867][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.086789][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.124965][ T6985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.143948][ T6985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.165685][ T6985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.189265][ T6985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.268282][ T7272] block device autoloading is deprecated and will be removed. [ 473.880119][ T5573] usb 9-1: USB disconnect, device number 5 [ 475.401455][ T4506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.409321][ T4506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.488905][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 475.532670][ T14] usb 7-1: USB disconnect, device number 6 [ 475.563572][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.589329][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.628058][ T7282] sp0: Synchronizing with TNC [ 475.644974][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.482434][ T7301] netdevsim netdevsim8: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 477.812549][ T4279] Bluetooth: hci8: command 0x0406 tx timeout [ 479.240693][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.8.642'. [ 481.124618][ T7345] netdevsim netdevsim9: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 483.681503][ T4326] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 483.952791][ T4326] usb 10-1: unable to get BOS descriptor or descriptor too short [ 483.997496][ T4326] usb 10-1: not running at top speed; connect to a high speed hub [ 484.096921][ T4326] usb 10-1: config 10 has an invalid interface number: 173 but max is 1 [ 484.143350][ T4326] usb 10-1: config 10 has an invalid interface number: 3 but max is 1 [ 484.154534][ T4326] usb 10-1: config 10 has no interface number 0 [ 484.160948][ T4326] usb 10-1: config 10 has no interface number 1 [ 484.205858][ T4326] usb 10-1: config 10 interface 3 has no altsetting 0 [ 484.251184][ T4326] usb 10-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 484.324150][ T4326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.364892][ T4326] usb 10-1: Product: syz [ 484.388080][ T4326] usb 10-1: Manufacturer: syz [ 484.427032][ T4326] usb 10-1: SerialNumber: syz [ 484.642060][ T7386] fuse: Unknown parameter '0x0000000000000004' [ 484.686456][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.843286][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.495167][ T7403] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 486.476979][ T4326] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 486.620120][ T2309] pvrusb2: Invalid write control endpoint [ 486.832242][ T4326] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 486.840251][ T4326] usb 10-1: selecting invalid altsetting 0 [ 487.149641][ T4326] usb 10-1: USB disconnect, device number 7 [ 488.051550][ T4279] Bluetooth: hci9: command 0x0406 tx timeout [ 488.396873][ T2309] pvrusb2: Invalid write control endpoint [ 488.472094][ T2309] pvrusb2: Invalid write control endpoint [ 488.478005][ T7437] fuse: Unknown parameter '0x0000000000000004' [ 488.511348][ T2309] pvrusb2: Invalid write control endpoint [ 488.520457][ T2309] pvrusb2: Invalid write control endpoint [ 488.581485][ T7433] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 488.654207][ T2309] pvrusb2: Invalid write control endpoint [ 488.734485][ T2309] pvrusb2: Invalid write control endpoint [ 488.893865][ T2309] pvrusb2: Invalid write control endpoint [ 488.987258][ T2309] pvrusb2: Invalid write control endpoint [ 489.564599][ T2309] pvrusb2: Invalid write control endpoint [ 489.570430][ T2309] pvrusb2: Invalid write control endpoint [ 489.623529][ T2309] pvrusb2: Invalid write control endpoint [ 489.649757][ T2309] pvrusb2: Invalid write control endpoint [ 489.656020][ T2309] pvrusb2: Invalid write control endpoint [ 489.667184][ T2309] pvrusb2: Invalid write control endpoint [ 489.677678][ T2309] pvrusb2: Invalid write control endpoint [ 489.686889][ T2309] pvrusb2: Invalid write control endpoint [ 489.700674][ T2309] pvrusb2: Invalid write control endpoint [ 489.716499][ T2309] pvrusb2: Invalid write control endpoint [ 489.736044][ T2309] pvrusb2: Invalid write control endpoint [ 489.934404][ T7452] IPVS: sed: FWM 3 0x00000003 - no destination available [ 490.056001][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 490.275737][ T2309] pvrusb2: Invalid write control endpoint [ 490.392231][ T2309] pvrusb2: Invalid write control endpoint [ 490.398082][ T2309] pvrusb2: Invalid write control endpoint [ 490.501717][ T2309] pvrusb2: Invalid write control endpoint [ 490.548607][ T2309] pvrusb2: Invalid write control endpoint [ 490.581999][ T2309] pvrusb2: Invalid write control endpoint [ 490.587797][ T2309] pvrusb2: Invalid write control endpoint [ 490.649795][ T2309] pvrusb2: Invalid write control endpoint [ 490.676331][ T2309] pvrusb2: Invalid write control endpoint [ 492.081233][ T2309] pvrusb2: Invalid write control endpoint [ 492.102047][ T2309] pvrusb2: Invalid write control endpoint [ 492.107842][ T2309] pvrusb2: Invalid write control endpoint [ 492.125169][ T2309] pvrusb2: Invalid write control endpoint [ 492.131318][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 492.368906][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 492.376161][ T2309] pvrusb2: Invalid write control endpoint [ 492.397429][ T2309] pvrusb2: Invalid write control endpoint [ 492.470742][ T4360] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 492.500654][ T2309] pvrusb2: Invalid write control endpoint [ 492.520932][ T2309] pvrusb2: Invalid write control endpoint [ 492.529158][ T2309] pvrusb2: Invalid write control endpoint [ 493.281474][ T2309] pvrusb2: Invalid write control endpoint [ 493.287284][ T2309] pvrusb2: Invalid write control endpoint [ 493.331924][ T2309] pvrusb2: Invalid write control endpoint [ 493.347290][ T2309] pvrusb2: Invalid write control endpoint [ 493.366029][ T4360] usb 7-1: config 0 has no interfaces? [ 493.374023][ T4360] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 493.388877][ T2309] pvrusb2: Invalid write control endpoint [ 493.409307][ T2309] pvrusb2: Invalid write control endpoint [ 493.425679][ T4360] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.427655][ T2309] pvrusb2: Invalid write control endpoint [ 493.465100][ T4360] usb 7-1: Manufacturer: syz [ 493.504572][ T4360] usb 7-1: config 0 descriptor?? [ 493.510645][ T2309] pvrusb2: Invalid write control endpoint [ 493.539189][ T2309] pvrusb2: Invalid write control endpoint [ 493.559412][ T2309] pvrusb2: Invalid write control endpoint [ 493.606977][ T2309] pvrusb2: Invalid write control endpoint [ 493.657424][ T2309] pvrusb2: Invalid write control endpoint [ 493.670071][ T2309] pvrusb2: Invalid write control endpoint [ 493.691626][ T2309] pvrusb2: Invalid write control endpoint [ 493.697561][ T2309] pvrusb2: Invalid write control endpoint [ 493.757411][ T4360] usb 7-1: USB disconnect, device number 7 [ 493.761908][ T2309] pvrusb2: Invalid write control endpoint [ 493.785689][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 493.915063][ T7487] x_tables: duplicate underflow at hook 1 [ 495.862024][ T2309] pvrusb2: Invalid write control endpoint [ 496.037185][ T2309] pvrusb2: Invalid write control endpoint [ 496.147232][ T2309] pvrusb2: Invalid write control endpoint [ 496.172080][ T2309] pvrusb2: Invalid write control endpoint [ 496.206633][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 496.316786][ T2309] pvrusb2: Device being rendered inoperable [ 496.346346][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 496.400747][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 496.556395][ T2309] pvrusb2: Invalid write control endpoint [ 497.620838][ T7500] sctp: failed to load transform for md5: -2 [ 498.135176][ T2309] pvrusb2: Invalid write control endpoint [ 498.146722][ T2309] pvrusb2: Invalid write control endpoint [ 498.171996][ T2309] pvrusb2: Invalid write control endpoint [ 498.201755][ T2309] pvrusb2: Invalid write control endpoint [ 498.234878][ T2309] pvrusb2: Invalid write control endpoint [ 498.261185][ T2309] pvrusb2: Invalid write control endpoint [ 498.271721][ T2309] pvrusb2: Invalid write control endpoint [ 498.277517][ T2309] pvrusb2: Invalid write control endpoint [ 498.332372][ T2309] pvrusb2: Invalid write control endpoint [ 498.375249][ T2309] pvrusb2: Invalid write control endpoint [ 498.381485][ T6687] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 498.438077][ T2309] pvrusb2: Invalid write control endpoint [ 498.461788][ T2309] pvrusb2: Invalid write control endpoint [ 498.487304][ T2309] pvrusb2: Invalid write control endpoint [ 498.516905][ T2309] pvrusb2: Invalid write control endpoint [ 498.545554][ T2309] pvrusb2: Invalid write control endpoint [ 498.564646][ T2309] pvrusb2: Invalid write control endpoint [ 498.570445][ T2309] pvrusb2: Invalid write control endpoint [ 498.581436][ T2309] pvrusb2: Invalid write control endpoint [ 498.587284][ T2309] pvrusb2: Invalid write control endpoint [ 498.597402][ T2309] pvrusb2: Invalid write control endpoint [ 498.609735][ T6687] usb 7-1: unable to get BOS descriptor or descriptor too short [ 498.629307][ T2309] pvrusb2: Invalid write control endpoint [ 498.741490][ T6687] usb 7-1: not running at top speed; connect to a high speed hub [ 498.769895][ T2309] pvrusb2: Invalid write control endpoint [ 498.776310][ T2309] pvrusb2: Invalid write control endpoint [ 498.799063][ T2309] pvrusb2: Invalid write control endpoint [ 498.805980][ T2309] pvrusb2: Invalid write control endpoint [ 498.807889][ T6687] usb 7-1: config 10 has an invalid interface number: 173 but max is 1 [ 498.824998][ T2309] pvrusb2: Invalid write control endpoint [ 498.830830][ T2309] pvrusb2: Invalid write control endpoint [ 498.847472][ T2309] pvrusb2: Invalid write control endpoint [ 498.872426][ T2309] pvrusb2: Invalid write control endpoint [ 498.880710][ T2309] pvrusb2: Invalid write control endpoint [ 498.889116][ T6687] usb 7-1: config 10 has an invalid interface number: 3 but max is 1 [ 498.906316][ T2309] pvrusb2: Invalid write control endpoint [ 498.917056][ T2309] pvrusb2: Invalid write control endpoint [ 498.928304][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 498.930051][ T6687] usb 7-1: config 10 has no interface number 0 [ 499.050362][ T6687] usb 7-1: config 10 has no interface number 1 [ 499.069820][ T6687] usb 7-1: config 10 interface 3 has no altsetting 0 [ 499.113525][ T6687] usb 7-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 499.143169][ T6687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.151337][ T6687] usb 7-1: Product: syz [ 499.191186][ T6687] usb 7-1: Manufacturer: syz [ 499.206407][ T6687] usb 7-1: SerialNumber: syz [ 499.277016][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 499.287978][ T2309] pvrusb2: Invalid write control endpoint [ 499.314214][ T2309] pvrusb2: Invalid write control endpoint [ 499.338294][ T2309] pvrusb2: Invalid write control endpoint [ 499.389948][ T2309] pvrusb2: Invalid write control endpoint [ 499.417046][ T2309] pvrusb2: Invalid write control endpoint [ 499.429482][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.453636][ T2309] pvrusb2: Invalid write control endpoint [ 499.459417][ T2309] pvrusb2: Invalid write control endpoint [ 499.466196][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.660264][ T2309] pvrusb2: Invalid write control endpoint [ 499.698612][ T2309] pvrusb2: Invalid write control endpoint [ 499.731862][ T2309] pvrusb2: Invalid write control endpoint [ 499.737696][ T2309] pvrusb2: Invalid write control endpoint [ 499.820157][ T2309] pvrusb2: Invalid write control endpoint [ 500.058157][ T2309] pvrusb2: Invalid write control endpoint [ 500.120756][ T7549] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 500.132832][ T7549] hpfs: Bad magic ... probably not HPFS [ 501.429642][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.441740][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.458708][ T6687] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 501.484425][ T6687] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 501.492517][ T6687] usb 7-1: selecting invalid altsetting 0 [ 501.501301][ T6687] usb 7-1: USB disconnect, device number 8 [ 501.508446][ T2309] pvrusb2: Invalid write control endpoint [ 501.530277][ T6687] pvrusb2: Device being rendered inoperable [ 501.538186][ T6687] pvrusb2: Device being rendered inoperable [ 501.581329][ T2309] pvrusb2: Invalid write control endpoint [ 501.656203][ T2309] pvrusb2: Invalid write control endpoint [ 501.685535][ T2309] pvrusb2: Invalid write control endpoint [ 501.696790][ T2309] pvrusb2: Invalid write control endpoint [ 501.802547][ T4279] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 501.850817][ T4279] Bluetooth: hci3: Injecting HCI hardware error event [ 501.869437][ T4287] Bluetooth: hci3: hardware error 0x00 [ 501.907684][ T2309] pvrusb2: Invalid write control endpoint [ 503.323323][ T2309] pvrusb2: Invalid write control endpoint [ 503.329139][ T2309] pvrusb2: Invalid write control endpoint [ 503.451061][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 503.493453][ T7573] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.971532][ T4287] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 505.611342][ T7583] Cannot find add_set index 0 as target [ 506.136352][ T2309] pvrusb2: Invalid write control endpoint [ 506.142309][ T2309] pvrusb2: Invalid write control endpoint [ 506.148073][ T2309] pvrusb2: Invalid write control endpoint [ 506.247903][ T2309] pvrusb2: Invalid write control endpoint [ 506.355058][ T7583] delete_channel: no stack [ 506.883324][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 507.071977][ T2309] pvrusb2: Device being rendered inoperable [ 507.077964][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 507.229885][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 508.691617][ T4326] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 509.164804][ T4326] usb 10-1: unable to get BOS descriptor or descriptor too short [ 509.227680][ T4326] usb 10-1: not running at top speed; connect to a high speed hub [ 509.300847][ T4326] usb 10-1: config 10 has an invalid interface number: 173 but max is 1 [ 509.321582][ T4326] usb 10-1: config 10 has an invalid interface number: 3 but max is 1 [ 509.377594][ T4326] usb 10-1: config 10 has no interface number 0 [ 509.442540][ T4326] usb 10-1: config 10 has no interface number 1 [ 509.448908][ T4326] usb 10-1: config 10 interface 3 has no altsetting 0 [ 509.593125][ T4326] usb 10-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 509.619378][ T4326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.698422][ T4326] usb 10-1: Product: syz [ 509.728771][ T4326] usb 10-1: Manufacturer: syz [ 509.735478][ T4326] usb 10-1: SerialNumber: syz [ 509.761492][ T4360] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 509.972580][ T4287] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 509.981547][ T4360] usb 7-1: Using ep0 maxpacket: 32 [ 509.987219][ T4287] Bluetooth: hci9: Injecting HCI hardware error event [ 510.000353][ T4279] Bluetooth: hci9: hardware error 0x00 [ 510.012861][ T4360] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 510.021620][ T4360] usb 7-1: config 0 has no interface number 0 [ 510.027924][ T4360] usb 7-1: config 0 interface 184 has no altsetting 0 [ 510.054995][ T4360] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.071541][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.072357][ T6687] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 510.080019][ T4360] usb 7-1: Product: syz [ 510.096968][ T4360] usb 7-1: Manufacturer: syz [ 510.101719][ T4360] usb 7-1: SerialNumber: syz [ 510.397343][ T4360] usb 7-1: config 0 descriptor?? [ 510.470233][ T4360] smsc75xx v1.0.0 [ 510.480446][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.536797][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.841471][ T6687] usb 9-1: Using ep0 maxpacket: 16 [ 510.864480][ T6687] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 510.886889][ T6687] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.938270][ T6687] usb 9-1: config 0 has no interface number 0 [ 512.038309][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 512.044088][ T6687] usb 9-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 512.136185][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 512.147681][ T4326] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 512.211684][ T2309] pvrusb2: Invalid write control endpoint [ 512.231593][ T4326] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 512.241790][ T6687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.250731][ T6687] usb 9-1: Product: syz [ 512.256406][ T4326] usb 10-1: selecting invalid altsetting 0 [ 512.266962][ T4326] usb 10-1: USB disconnect, device number 8 [ 512.273360][ T6687] usb 9-1: Manufacturer: syz [ 512.278120][ T6687] usb 9-1: SerialNumber: syz [ 512.285637][ T6687] usb 9-1: config 0 descriptor?? [ 512.333313][ T6687] usb 9-1: Found UVC 0.00 device syz (046d:08d3) [ 512.339765][ T6687] usb 9-1: No valid video chain found. [ 512.641698][ T4279] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 512.857566][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.157706][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 513.274029][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 513.354886][ T4360] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 513.422332][ T4360] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 513.495357][ T2309] pvrusb2: Invalid write control endpoint [ 513.501151][ T2309] pvrusb2: Invalid write control endpoint [ 513.549752][ T4360] usb 7-1: USB disconnect, device number 9 [ 513.589088][ T2309] pvrusb2: Invalid write control endpoint [ 513.678209][ T2309] pvrusb2: Invalid write control endpoint [ 513.746841][ T2309] pvrusb2: Invalid write control endpoint [ 513.821590][ T2309] pvrusb2: Invalid write control endpoint [ 513.827397][ T2309] pvrusb2: Invalid write control endpoint [ 513.971656][ T2309] pvrusb2: Invalid write control endpoint [ 513.977452][ T2309] pvrusb2: Invalid write control endpoint [ 514.062398][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.098192][ T2309] pvrusb2: Invalid write control endpoint [ 514.136858][ T2309] pvrusb2: Invalid write control endpoint [ 514.217019][ T2309] pvrusb2: Invalid write control endpoint [ 514.282841][ T2309] pvrusb2: Invalid write control endpoint [ 514.766299][ T4366] usb 9-1: USB disconnect, device number 6 [ 514.871620][ T2309] pvrusb2: Invalid write control endpoint [ 514.877435][ T2309] pvrusb2: Invalid write control endpoint [ 514.961359][ T2309] pvrusb2: Invalid write control endpoint [ 515.001725][ T2309] pvrusb2: Invalid write control endpoint [ 515.045596][ T2309] pvrusb2: Invalid write control endpoint [ 515.073295][ T2309] pvrusb2: Invalid write control endpoint [ 515.093559][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 515.111520][ T2309] pvrusb2: Invalid write control endpoint [ 515.118295][ T2309] pvrusb2: Invalid write control endpoint [ 515.152522][ T2309] pvrusb2: Invalid write control endpoint [ 515.158552][ T2309] pvrusb2: Invalid write control endpoint [ 515.168698][ T2309] pvrusb2: Invalid write control endpoint [ 515.177128][ T2309] pvrusb2: Invalid write control endpoint [ 515.186329][ T2309] pvrusb2: Invalid write control endpoint [ 515.208919][ T2309] pvrusb2: Invalid write control endpoint [ 515.222544][ T2309] pvrusb2: Invalid write control endpoint [ 515.228486][ T2309] pvrusb2: Invalid write control endpoint [ 515.238592][ T2309] pvrusb2: Invalid write control endpoint [ 515.248125][ T2309] pvrusb2: Invalid write control endpoint [ 515.259654][ T2309] pvrusb2: Invalid write control endpoint [ 515.269427][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 515.397889][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 515.405594][ T2309] pvrusb2: Invalid write control endpoint [ 515.412868][ T2309] pvrusb2: Invalid write control endpoint [ 515.419917][ T2309] pvrusb2: Invalid write control endpoint [ 515.429603][ T2309] pvrusb2: Invalid write control endpoint [ 515.435805][ T2309] pvrusb2: Invalid write control endpoint [ 515.442643][ T2309] pvrusb2: Invalid write control endpoint [ 515.448559][ T2309] pvrusb2: Invalid write control endpoint [ 515.456590][ T2309] pvrusb2: Invalid write control endpoint [ 515.473493][ T2309] pvrusb2: Invalid write control endpoint [ 515.489828][ T2309] pvrusb2: Invalid write control endpoint [ 515.506098][ T2309] pvrusb2: Invalid write control endpoint [ 515.519696][ T2309] pvrusb2: Invalid write control endpoint [ 515.528928][ T2309] pvrusb2: Invalid write control endpoint [ 515.535701][ T2309] pvrusb2: Invalid write control endpoint [ 515.542911][ T2309] pvrusb2: Invalid write control endpoint [ 515.548828][ T2309] pvrusb2: Invalid write control endpoint [ 515.564177][ T2309] pvrusb2: Invalid write control endpoint [ 515.572644][ T2309] pvrusb2: Invalid write control endpoint [ 515.578543][ T2309] pvrusb2: Invalid write control endpoint [ 515.585566][ T2309] pvrusb2: Invalid write control endpoint [ 515.591674][ T2309] pvrusb2: Invalid write control endpoint [ 515.600084][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 516.066252][ T2309] pvrusb2: Invalid write control endpoint [ 516.072853][ T2309] pvrusb2: Invalid write control endpoint [ 516.078611][ T2309] pvrusb2: Invalid write control endpoint [ 516.116985][ T2309] pvrusb2: Invalid write control endpoint [ 516.144907][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 517.556476][ T4318] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 517.640753][ T2309] pvrusb2: Device being rendered inoperable [ 517.681536][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 517.793156][ T4318] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.831536][ T4318] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.846295][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 517.904833][ T4318] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.960656][ T2309] pvrusb2: Invalid write control endpoint [ 517.985620][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.242102][ T4318] usb 7-1: usb_control_msg returned -32 [ 518.250473][ T4318] usbtmc 7-1:16.0: can't read capabilities [ 518.330569][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 518.825927][ T2309] pvrusb2: Invalid write control endpoint [ 518.837937][ T2309] pvrusb2: Invalid write control endpoint [ 518.838057][ T4318] usb 7-1: USB disconnect, device number 10 [ 518.843838][ T2309] pvrusb2: Invalid write control endpoint [ 518.843858][ T2309] pvrusb2: Invalid write control endpoint [ 518.869808][ T2309] pvrusb2: Invalid write control endpoint [ 518.892044][ T2309] pvrusb2: Invalid write control endpoint [ 518.932143][ T2309] pvrusb2: Invalid write control endpoint [ 518.937930][ T2309] pvrusb2: Invalid write control endpoint [ 519.005374][ T2309] pvrusb2: Invalid write control endpoint [ 519.027590][ T2309] pvrusb2: Invalid write control endpoint [ 519.051754][ T2309] pvrusb2: Invalid write control endpoint [ 519.057556][ T2309] pvrusb2: Invalid write control endpoint [ 519.125302][ T2309] pvrusb2: Invalid write control endpoint [ 519.156002][ T2309] pvrusb2: Invalid write control endpoint [ 519.174582][ T2309] pvrusb2: Invalid write control endpoint [ 519.229813][ T2309] pvrusb2: Invalid write control endpoint [ 519.244214][ T2309] pvrusb2: Invalid write control endpoint [ 519.270463][ T2309] pvrusb2: Invalid write control endpoint [ 519.320184][ T2309] pvrusb2: Invalid write control endpoint [ 519.341373][ T2309] pvrusb2: Invalid write control endpoint [ 519.596513][ T2309] pvrusb2: Invalid write control endpoint [ 519.621920][ T2309] pvrusb2: Invalid write control endpoint [ 519.682173][ T2309] pvrusb2: Invalid write control endpoint [ 522.720926][ T2309] pvrusb2: Invalid write control endpoint [ 522.826386][ T2309] pvrusb2: Invalid write control endpoint [ 522.871548][ T2309] pvrusb2: Invalid write control endpoint [ 522.887620][ T2309] pvrusb2: Invalid write control endpoint [ 522.897735][ T2309] pvrusb2: Invalid write control endpoint [ 522.910403][ T2309] pvrusb2: Invalid write control endpoint [ 522.916717][ T2309] pvrusb2: Invalid write control endpoint [ 522.922864][ T2309] pvrusb2: Invalid write control endpoint [ 522.928710][ T2309] pvrusb2: Invalid write control endpoint [ 522.935456][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 523.132549][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 523.159395][ T2309] pvrusb2: Invalid write control endpoint [ 523.177457][ T2309] pvrusb2: Invalid write control endpoint [ 523.689471][ T2309] pvrusb2: Invalid write control endpoint [ 523.925728][ T2309] pvrusb2: Invalid write control endpoint [ 523.966293][ T2309] pvrusb2: Invalid write control endpoint [ 523.997076][ T2309] pvrusb2: Invalid write control endpoint [ 526.154851][ T7723] x_tables: duplicate underflow at hook 1 [ 527.714015][ T2309] pvrusb2: Invalid write control endpoint [ 527.720566][ T2309] pvrusb2: Invalid write control endpoint [ 527.726423][ T2309] pvrusb2: Invalid write control endpoint [ 527.751100][ T2309] pvrusb2: Invalid write control endpoint [ 527.791497][ T2309] pvrusb2: Invalid write control endpoint [ 527.797280][ T2309] pvrusb2: Invalid write control endpoint [ 527.921157][ T2309] pvrusb2: Invalid write control endpoint [ 527.994599][ T2309] pvrusb2: Invalid write control endpoint [ 528.271787][ T5142] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 528.348950][ T2309] pvrusb2: Invalid write control endpoint [ 528.511965][ T2309] pvrusb2: Invalid write control endpoint [ 528.517756][ T2309] pvrusb2: Invalid write control endpoint [ 528.552446][ T2309] pvrusb2: Invalid write control endpoint [ 528.552656][ T5142] usb 9-1: config 4 has an invalid interface number: 121 but max is 0 [ 528.570339][ T2309] pvrusb2: Invalid write control endpoint [ 528.601560][ T2309] pvrusb2: Invalid write control endpoint [ 528.607635][ T2309] pvrusb2: Invalid write control endpoint [ 528.621432][ T5142] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 528.632895][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 528.661545][ T5142] usb 9-1: config 4 has no interface number 0 [ 528.667712][ T5142] usb 9-1: config 4 interface 121 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.767211][ T5142] usb 9-1: config 4 interface 121 has no altsetting 0 [ 528.795700][ T5142] usb 9-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 528.850490][ T5142] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.900258][ T2309] pvrusb2: Invalid write control endpoint [ 528.906429][ T2309] pvrusb2: Invalid write control endpoint [ 528.922972][ T5142] usb 9-1: Product: syz [ 528.927238][ T5142] usb 9-1: Manufacturer: syz [ 529.001590][ T2309] pvrusb2: Invalid write control endpoint [ 529.007405][ T2309] pvrusb2: Invalid write control endpoint [ 529.034592][ T5142] usb 9-1: SerialNumber: syz [ 529.097781][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 529.174001][ T2309] pvrusb2: Device being rendered inoperable [ 529.202011][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 529.238466][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 529.304619][ T5142] usb 9-1: USB disconnect, device number 7 [ 533.181530][ T6687] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 533.371546][ T6687] usb 7-1: Using ep0 maxpacket: 32 [ 533.386224][ T6687] usb 7-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 533.490652][ T6687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.525392][ T6687] usb 7-1: Product: syz [ 533.535339][ T6687] usb 7-1: Manufacturer: syz [ 533.561476][ T6687] usb 7-1: SerialNumber: syz [ 533.609072][ T6687] usb 7-1: config 0 descriptor?? [ 533.681992][ T7775] misc userio: The device must be registered before sending interrupts [ 533.837719][ T7767] tmpfs: Unknown parameter 'usrquota' [ 533.860872][ T6687] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 534.571705][ T6687] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 534.804604][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bf2000: rx timeout, send abort [ 534.808711][ T7784] x_tables: duplicate underflow at hook 1 [ 535.312887][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bf2000: abort rx timeout. Force session deactivation [ 535.846764][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 535.891451][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 535.901251][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 535.914112][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 535.925299][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 535.936665][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 535.946785][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 536.597230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805868d000: rx timeout, send abort [ 537.105541][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805868d000: abort rx timeout. Force session deactivation [ 537.270109][ T6687] usb 7-1: [UEAGLE-ATM] interface 1 not found [ 537.282958][ T6687] ueagle-atm 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 537.404074][ T6687] usb 7-1: USB disconnect, device number 11 [ 537.899020][ T7806] netlink: 'syz.8.761': attribute type 1 has an invalid length. [ 537.906984][ T7806] netlink: 'syz.8.761': attribute type 2 has an invalid length. [ 538.484525][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805695d800: rx timeout, send abort [ 538.992848][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805695d800: abort rx timeout. Force session deactivation [ 540.160268][ T4598] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.519295][ T4598] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.197695][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 544.208791][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 544.218491][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 544.228707][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 544.237052][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 544.248130][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 544.282191][ T4598] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.431537][ T4360] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 544.942932][ T4360] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.968297][ T4598] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.979648][ T4360] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.060487][ T4360] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.107498][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.339194][ T4598] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.395033][ T4360] usb 5-1: usb_control_msg returned -32 [ 545.400868][ T4360] usbtmc 5-1:16.0: can't read capabilities [ 545.476666][ T4598] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.593564][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 547.087102][ T4598] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.135997][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 547.146860][ T4318] usb 5-1: USB disconnect, device number 5 [ 547.190752][ T4598] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.303830][ T7837] chnl_net:caif_netlink_parms(): no params data found [ 548.832520][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 550.492548][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.572776][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.931700][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 551.228689][ T7837] device bridge_slave_0 entered promiscuous mode [ 551.368261][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.384708][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.413667][ T7837] device bridge_slave_1 entered promiscuous mode [ 551.444809][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 551.715731][ T7837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.759382][ T7884] misc userio: The device must be registered before sending interrupts [ 551.883208][ T7837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.088018][ T7837] team0: Port device team_slave_0 added [ 552.219900][ T7837] team0: Port device team_slave_1 added [ 552.753390][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.827211][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.935911][ T7837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.958034][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a409000: rx timeout, send abort [ 553.061548][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 553.116956][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.131327][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.157584][ T7837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.946443][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a409000: abort rx timeout. Force session deactivation [ 554.201654][ T7837] device hsr_slave_0 entered promiscuous mode [ 554.232870][ T7837] device hsr_slave_1 entered promiscuous mode [ 554.276651][ T7837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.286947][ T7837] Cannot create hsr debugfs directory [ 557.042291][ T4598] device hsr_slave_0 left promiscuous mode [ 557.068749][ T4598] device hsr_slave_1 left promiscuous mode [ 557.123754][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.241944][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.275676][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.289453][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.367971][ T4598] device bridge_slave_1 left promiscuous mode [ 557.387741][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.456200][ T4598] device bridge_slave_0 left promiscuous mode [ 557.469150][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.714651][ T4598] device veth1_macvtap left promiscuous mode [ 557.720942][ T4598] device veth0_macvtap left promiscuous mode [ 557.947716][ T7942] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 557.954670][ T7942] PKCS7: Only support pkcs7_signedData type [ 558.483195][ T4598] device veth1_vlan left promiscuous mode [ 558.491761][ T4598] device veth0_vlan left promiscuous mode [ 559.036005][ T4598] bond1 (unregistering): (slave vlan2): Releasing active interface [ 559.538672][ T4598] bond1 (unregistering): Released all slaves [ 559.721669][ T4315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 559.736359][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 559.911552][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 559.918753][ T4315] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 559.943137][ T4315] usb 3-1: config 0 has no interface number 0 [ 559.961280][ T4315] usb 3-1: config 0 interface 184 has no altsetting 0 [ 559.983539][ T4315] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 560.006004][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.014483][ T4315] usb 3-1: Product: syz [ 560.018809][ T4315] usb 3-1: Manufacturer: syz [ 560.023804][ T4315] usb 3-1: SerialNumber: syz [ 560.051797][ T4315] usb 3-1: config 0 descriptor?? [ 560.080155][ T4315] smsc75xx v1.0.0 [ 560.679979][ T4315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 560.704021][ T4315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 561.370527][ T4315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 561.382038][ T4315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 561.394757][ T4315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 561.407804][ T4315] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 561.807168][ T4598] team0 (unregistering): Port device team_slave_1 removed [ 563.129681][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.140565][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.223045][ T4360] usb 3-1: USB disconnect, device number 12 [ 563.264487][ T4598] team0 (unregistering): Port device team_slave_0 removed [ 563.349355][ T4598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.450251][ T4598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.891743][ T7989] random: crng reseeded on system resumption [ 564.659563][ T4598] bond0 (unregistering): Released all slaves [ 565.109380][ T7926] tipc: Enabling of bearer rejected, failed to enable media [ 565.692074][ T8010] misc userio: The device must be registered before sending interrupts [ 565.946693][ T7837] netdevsim netdevsim3 netdevsim11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.789242][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805657f800: rx timeout, send abort [ 567.056708][ T7837] netdevsim netdevsim3 netdevsim10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.297566][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805657f800: abort rx timeout. Force session deactivation [ 567.348038][ T7837] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.769855][ T7837] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.104203][ T7837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.136315][ T7837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 568.185776][ T7837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 568.227000][ T7837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 568.438355][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.730042][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.758648][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.798648][ T7837] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.930241][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.955226][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.995351][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.002547][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.062208][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 569.097825][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.123049][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.180176][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.187365][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.230947][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 569.256268][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 569.295327][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 569.314595][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 569.332511][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 569.366290][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 569.395261][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.432549][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.457272][ T7837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.479833][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 569.502628][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 569.512505][ T5142] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 569.522444][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.543256][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.711584][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 569.727561][ T5142] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 569.754272][ T5142] usb 3-1: config 0 has no interface number 0 [ 569.777519][ T5142] usb 3-1: config 0 interface 184 has no altsetting 0 [ 569.808754][ T5142] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 569.846003][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.892822][ T5142] usb 3-1: Product: syz [ 569.917667][ T5142] usb 3-1: Manufacturer: syz [ 569.942224][ T5142] usb 3-1: SerialNumber: syz [ 569.996337][ T5142] usb 3-1: config 0 descriptor?? [ 570.034120][ T5142] smsc75xx v1.0.0 [ 570.384428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 570.401223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.430841][ T7837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.495997][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 570.507042][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.695677][ T5142] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 570.849363][ T5142] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 570.981982][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.082239][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.155698][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.208007][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.245555][ T7837] device veth0_vlan entered promiscuous mode [ 571.317540][ T7837] device veth1_vlan entered promiscuous mode [ 571.404492][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.432477][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.474762][ T7837] device veth0_macvtap entered promiscuous mode [ 571.479523][ T5142] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 571.493026][ T5142] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 571.507612][ T5142] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 571.534097][ T5142] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 571.711145][ T7837] device veth1_macvtap entered promiscuous mode [ 571.780957][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.102535][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.189014][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.372312][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.483636][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.531562][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.541819][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.552534][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.563107][ T4360] usb 3-1: USB disconnect, device number 13 [ 572.568486][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.586881][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.598090][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.608472][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.624926][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.736892][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.765641][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.781581][ T8087] misc userio: The device must be registered before sending interrupts [ 572.839516][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.848657][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.873242][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 572.886454][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.897498][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.913512][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.928991][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.953684][ T7837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.972661][ T7837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.994123][ T7837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.049799][ T7837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.111538][ T5142] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 573.284205][ T7745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.309512][ T7745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.321508][ T5142] usb 9-1: Using ep0 maxpacket: 16 [ 573.329589][ T5142] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.358857][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 573.389805][ T5142] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.429148][ T7745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.441832][ T5142] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 573.455279][ T7745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.473368][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.482964][ T5142] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.512571][ T5142] usb 9-1: config 0 descriptor?? [ 573.974203][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058717000: rx timeout, send abort [ 574.482608][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058717000: abort rx timeout. Force session deactivation [ 577.253414][ T5142] usbhid 9-1:0.0: can't add hid device: -71 [ 577.262943][ T5142] usbhid: probe of 9-1:0.0 failed with error -71 [ 577.307488][ T5142] usb 9-1: USB disconnect, device number 8 [ 580.996682][ T8159] misc userio: The device must be registered before sending interrupts [ 581.169016][ T8162] SET target dimension over the limit! [ 587.087527][ T8216] misc userio: The device must be registered before sending interrupts [ 589.014045][ T8226] comedi comedi3: Buffer allocation failed [ 594.962432][ T8269] misc userio: The device must be registered before sending interrupts [ 595.144175][ T8282] ax25_connect(): syz.3.840 uses autobind, please contact jreuter@yaina.de [ 597.251663][ T49] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 597.261574][ T49] Bluetooth: hci8: Injecting HCI hardware error event [ 597.271577][ T4279] Bluetooth: hci8: hardware error 0x00 [ 599.257023][ T8308] 9pnet: Could not find request transport: virt [ 599.731659][ T4279] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 603.808493][ T8344] misc userio: The device must be registered before sending interrupts [ 604.570369][ T8349] ax25_connect(): syz.3.858 uses autobind, please contact jreuter@yaina.de [ 605.027185][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805640c800: rx timeout, send abort [ 605.920564][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805640c800: abort rx timeout. Force session deactivation [ 611.461615][ T8395] 9pnet: Could not find request transport: virt [ 612.131536][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 612.151482][ T4279] Bluetooth: hci1: Injecting HCI hardware error event [ 612.159717][ T49] Bluetooth: hci1: hardware error 0x00 [ 614.068237][ T4362] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 614.221701][ T49] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 614.303641][ T4362] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.316301][ T4362] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.025799][ T4362] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.039020][ T4362] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.068504][ T4362] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.128429][ T4362] usb 10-1: config 0 descriptor?? [ 616.272800][ T4362] usb 10-1: can't set config #0, error -71 [ 616.281137][ T4362] usb 10-1: USB disconnect, device number 9 [ 618.735875][ T8455] netlink: 'syz.9.884': attribute type 39 has an invalid length. [ 619.138441][ T8458] input: syz1 as /devices/virtual/input/input27 [ 624.217683][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.225285][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.649006][ T8523] random: crng reseeded on system resumption [ 629.001054][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554c7400: rx timeout, send abort [ 629.509399][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554c7400: abort rx timeout. Force session deactivation [ 632.535528][ T8559] 9pnet_virtio: no channels available for device syz [ 633.132192][ T8563] genirq: Flags mismatch irq 6. 00000000 (das16m1) vs. 00000000 (pcl812) [ 639.885645][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ed97800: rx timeout, send abort [ 640.393987][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ed97800: abort rx timeout. Force session deactivation [ 641.026270][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 641.039656][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 641.068001][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 641.103928][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 641.154502][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 641.163627][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 643.148576][ T4331] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.262947][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 643.426191][ T8629] sd 0:0:1:0: device reset [ 645.331889][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 645.367218][ T4331] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.823798][ T4331] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.366024][ T4331] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.421422][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 647.858455][ T4331] netdevsim netdevsim9 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.975973][ T4331] netdevsim netdevsim9 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.019113][ T8608] chnl_net:caif_netlink_parms(): no params data found [ 648.080268][ T4331] netdevsim netdevsim9 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.194677][ T4331] netdevsim netdevsim9 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.387704][ T8666] genirq: Flags mismatch irq 6. 00000000 (das16m1) vs. 00000000 (pcl812) [ 649.502667][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 649.791297][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880771fd000: rx timeout, send abort [ 649.825234][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.860389][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.884045][ T8608] device bridge_slave_0 entered promiscuous mode [ 650.029152][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.045430][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.064624][ T8608] device bridge_slave_1 entered promiscuous mode [ 650.299652][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880771fd000: abort rx timeout. Force session deactivation [ 652.467577][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.652043][ T8690] random: crng reseeded on system resumption [ 654.622514][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.477035][ T8608] team0: Port device team_slave_0 added [ 655.900940][ T8608] team0: Port device team_slave_1 added [ 656.068861][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.083800][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.189344][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.321669][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.405999][ T8716] genirq: Flags mismatch irq 6. 00000000 (das16m1) vs. 00000000 (pcl812) [ 656.502843][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.731557][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.060480][ T8608] device hsr_slave_0 entered promiscuous mode [ 661.094620][ T8608] device hsr_slave_1 entered promiscuous mode [ 661.116674][ T8608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.130385][ T8608] Cannot create hsr debugfs directory [ 661.607365][ T4331] device hsr_slave_0 left promiscuous mode [ 661.639909][ T4331] device hsr_slave_1 left promiscuous mode [ 661.660421][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.677790][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.698916][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.724291][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.731607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801853d000: rx timeout, send abort [ 661.876469][ T4331] device bridge_slave_1 left promiscuous mode [ 661.954267][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.184873][ T4331] device bridge_slave_0 left promiscuous mode [ 662.231694][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801853d000: abort rx timeout. Force session deactivation [ 662.331523][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.198295][ T4331] device veth1_macvtap left promiscuous mode [ 663.371496][ T4331] device veth0_macvtap left promiscuous mode [ 663.378120][ T4331] device veth1_vlan left promiscuous mode [ 664.249760][ T4331] device veth0_vlan left promiscuous mode [ 665.522279][ T8777] random: crng reseeded on system resumption [ 667.597665][ T8790] genirq: Flags mismatch irq 6. 00000000 (das16m1) vs. 00000000 (pcl812) [ 669.236022][ T8816] Cannot find add_set index 0 as target [ 670.581065][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 670.776786][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 670.911657][ T8842] random: crng reseeded on system resumption [ 670.958687][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.157382][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.597903][ T4331] bond0 (unregistering): Released all slaves [ 676.287092][ T8608] netdevsim netdevsim1 netdevsim15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.481657][ T8895] random: crng reseeded on system resumption [ 680.741799][ T8608] netdevsim netdevsim1 netdevsim14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.622537][ T4362] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 681.906475][ T4362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.007912][ T4362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.151075][ T4362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.228465][ T4362] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 682.251067][ T4362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.361009][ T4362] usb 4-1: config 0 descriptor?? [ 682.404509][ T8608] netdevsim netdevsim1 netdevsim13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.638715][ T8608] netdevsim netdevsim1 netdevsim12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.815562][ T4362] wacom 0003:056A:0010.0009: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 682.846542][ T4362] wacom 0003:056A:0010.0009: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 682.874686][ T4362] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0009/input/input33 [ 683.016324][ T4362] usb 4-1: USB disconnect, device number 8 [ 683.096330][ T8608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 683.147244][ T8608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 683.175137][ T8608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 683.207161][ T8608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 683.965896][ T8945] comedi comedi3: aio_iiro_16: I/O port conflict (0x8005,8) [ 684.806775][ T8950] sp0: Synchronizing with TNC [ 684.817654][ T8942] fido_id[8942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 684.910432][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.255434][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 685.391646][ T8956] random: crng reseeded on system resumption [ 685.549663][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.623953][ T8608] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.660589][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.667030][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.691340][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 685.795157][ T8958] SET target dimension over the limit! [ 685.854677][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.907308][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.914490][ T5712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.029694][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.368949][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 686.424502][ T8967] binder: 8965:8967 ioctl c0306201 0 returned -14 [ 686.529062][ T8952] delete_channel: no stack [ 686.613935][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.622661][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.629791][ T5712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.656354][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 686.702428][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 686.752415][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 686.772634][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.800189][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 686.820507][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.832574][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 686.852464][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 687.018603][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 687.820272][ T8608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.872265][ T8608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 687.906712][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 687.989902][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.028306][ T9007] random: crng reseeded on system resumption [ 692.304427][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.333372][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.366727][ T8608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.952010][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 692.980443][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.140594][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.181731][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.205768][ T9017] Cannot find add_set index 0 as target [ 693.869933][ T9021] comedi comedi3: aio_iiro_16: I/O port conflict (0x8005,8) [ 694.681016][ T8608] device veth0_vlan entered promiscuous mode [ 694.728171][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 694.754445][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 695.636456][ T8608] device veth1_vlan entered promiscuous mode [ 695.794567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 695.812301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 695.867947][ T8608] device veth0_macvtap entered promiscuous mode [ 695.905875][ T8608] device veth1_macvtap entered promiscuous mode [ 696.044471][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.108696][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.529363][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.731360][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.741232][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.901435][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.947575][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.991464][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.072967][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.082233][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 697.134349][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 697.179030][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 697.277070][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.331500][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.391396][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.448616][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.499912][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.567608][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.627375][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.679356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 697.713097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 697.780566][ T8608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.828120][ T8608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.883950][ T8608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.940957][ T8608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.309489][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.391367][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.448391][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 698.681231][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.732968][ T4039] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 699.014554][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.014834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 699.111536][ T952] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 699.137926][ T4039] usb 3-1: Using ep0 maxpacket: 16 [ 699.186259][ T4039] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.234833][ T4039] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.291765][ T4039] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.298534][ T4039] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 699.352809][ T4039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.361670][ T952] usb 9-1: Using ep0 maxpacket: 32 [ 699.374907][ T952] usb 9-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 699.437539][ T4039] usb 3-1: config 0 descriptor?? [ 699.443279][ T952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.634349][ T952] usb 9-1: Product: syz [ 700.003284][ T952] usb 9-1: Manufacturer: syz [ 700.032876][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.250142][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.346275][ T952] usb 9-1: SerialNumber: syz [ 700.366330][ T4039] hid (null): global environment stack underflow [ 700.384459][ T4039] hid (null): bogus close delimiter [ 700.509811][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 700.755316][ T952] usb 9-1: palm_os_4_probe - error -110 getting connection info [ 700.887685][ T952] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 700.890171][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.904035][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.946617][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 700.975942][ T952] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 700.990998][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.013999][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.061195][ T952] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 701.070418][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.112019][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.119052][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.126705][ T952] usb 9-1: USB disconnect, device number 9 [ 701.157449][ T952] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 701.171555][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.221446][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.230719][ T952] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 701.260617][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.270771][ T952] visor 9-1:1.0: device disconnected [ 701.291001][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.340847][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.373821][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.434860][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.480920][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.539638][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.622559][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.632880][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.640690][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.640687][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.658875][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.667353][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 701.801013][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.808198][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 701.817695][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 702.522017][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.529052][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.561645][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.568692][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.591408][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.606367][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.640335][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.652297][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.659379][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.700976][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.722138][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.729160][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.758563][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.779063][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.786846][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.807001][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.815627][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.833107][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 702.840130][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.098119][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.105212][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.112694][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.120462][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.127661][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.152145][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.159158][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.181852][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.202932][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.210040][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.229990][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 703.239191][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.259506][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.281608][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.288616][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.323806][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.340551][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.381558][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.397536][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.423096][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.445257][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.478872][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.521788][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.561393][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.580350][ T9075] device bridge_slave_0 entered promiscuous mode [ 703.610748][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.655665][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.663356][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.670719][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.682784][ T9098] ax25_connect(): syz.3.1010 uses autobind, please contact jreuter@yaina.de [ 703.691646][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.691676][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x4 [ 703.691700][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x4 [ 703.691740][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 703.691824][ T4039] cougar 0003:060B:500A.000A: unknown main item tag 0x7 [ 703.702776][ T9075] device bridge_slave_1 entered promiscuous mode [ 703.748735][ T4039] cougar 0003:060B:500A.000A: global environment stack underflow [ 703.778792][ T4039] cougar 0003:060B:500A.000A: item 0 2 1 11 parsing failed [ 703.802235][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.810205][ T4039] cougar 0003:060B:500A.000A: parse failed [ 703.818582][ T4039] cougar: probe of 0003:060B:500A.000A failed with error -22 [ 703.828052][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.874933][ T4039] usb 3-1: USB disconnect, device number 14 [ 703.968787][ T9075] team0: Port device team_slave_0 added [ 704.340010][ T9075] team0: Port device team_slave_1 added [ 704.607134][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.704542][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.779232][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.802093][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.818183][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.939456][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.092114][ T9113] SET target dimension over the limit! [ 705.366935][ T5472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.966530][ T9075] device hsr_slave_0 entered promiscuous mode [ 706.051553][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 706.060304][ T9075] device hsr_slave_1 entered promiscuous mode [ 706.193501][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.205236][ T9075] Cannot create hsr debugfs directory [ 706.317121][ T9110] delete_channel: no stack [ 706.380532][ T5472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.647447][ T5472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.832815][ T5472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.874233][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.884385][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.893536][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.922919][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.930739][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 706.938361][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.210919][ T5472] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.752899][ T5472] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.838714][ T9135] sp0: Synchronizing with TNC [ 707.922888][ T5472] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.011379][ T4315] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 708.067366][ T5472] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.131639][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 708.231909][ T4315] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 708.279348][ T4315] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.326263][ T4315] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.365974][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.585690][ T4315] usbtmc 9-1:16.0: bulk endpoints not found [ 709.011592][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 709.130404][ T9075] netdevsim netdevsim1 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.322959][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1016'. [ 709.879971][ T9075] netdevsim netdevsim1 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.222666][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 710.925210][ T9075] netdevsim netdevsim1 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.094086][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 711.214494][ T9075] netdevsim netdevsim1 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.252902][ C1] ------------[ cut here ]------------ [ 711.258961][ C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 711.270280][ C1] WARNING: CPU: 1 PID: 9115 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 711.280370][ C1] Modules linked in: [ 711.284351][ C1] CPU: 1 PID: 9115 Comm: syz.3.1014 Not tainted syzkaller #0 [ 711.291813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 711.301915][ C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 711.308260][ C1] Code: ef e8 48 cc bd fd 4c 8b 45 00 48 c7 c7 c0 18 df 8a 48 c7 c6 80 15 df 8a 48 c7 c2 20 1a df 8a 8b 0c 24 4d 89 e9 e8 34 52 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a5 7a 0a [ 711.327971][ C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246 [ 711.334122][ C1] RAX: 7d55832aad7b0f00 RBX: ffffffff96e60458 RCX: ffff88801d278000 [ 711.342192][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 711.350195][ C1] RBP: ffffffff8a8def40 R08: ffffc900001e0687 R09: 1ffff9200003c0d0 [ 711.358234][ C1] R10: dffffc0000000000 R11: fffff5200003c0d1 R12: ffff8880581f6e00 [ 711.366257][ C1] R13: ffffffff892aadc0 R14: ffff8880581f6000 R15: ffff8880581f6c90 [ 711.374304][ C1] FS: 00007f2b8b8136c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 711.383321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.389929][ C1] CR2: 0000200000009000 CR3: 00000000788c4000 CR4: 00000000003506e0 [ 711.398030][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 711.406046][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 711.414059][ C1] Call Trace: [ 711.417367][ C1] [ 711.420245][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 711.425654][ C1] ? rose_timer_expiry+0x4a7/0x5d0 [ 711.430775][ C1] __kmem_cache_free+0xb6/0x1f0 [ 711.435699][ C1] rose_timer_expiry+0x4a7/0x5d0 [ 711.440651][ C1] ? call_timer_fn+0x194/0x670 [ 711.445565][ C1] call_timer_fn+0x1ac/0x670 [ 711.450187][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 711.455243][ C1] ? call_timer_fn+0xcf/0x670 [ 711.459929][ C1] ? __run_timers+0x800/0x800 [ 711.464833][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 711.470039][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 711.475262][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 711.480330][ C1] __run_timers+0x53e/0x800 [ 711.484882][ C1] ? detach_timer+0x350/0x350 [ 711.489569][ C1] ? lock_chain_count+0x20/0x20 [ 711.494494][ C1] run_timer_softirq+0x63/0xf0 [ 711.499259][ C1] handle_softirqs+0x2a1/0x930 [ 711.504173][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 711.509037][ C1] ? do_softirq+0x210/0x210 [ 711.513585][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 711.518800][ C1] __irq_exit_rcu+0x13b/0x230 [ 711.523539][ C1] ? irq_exit_rcu+0x20/0x20 [ 711.528084][ C1] irq_exit_rcu+0x5/0x20 [ 711.532373][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 711.538014][ C1] [ 711.540951][ C1] [ 711.543897][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 711.549894][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 711.555734][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e a0 2d f7 48 89 df e8 96 68 2e f7 e8 c1 bc 51 f7 fb bf 01 00 00 00 86 cb 21 f7 65 8b 05 47 50 cb 75 85 c0 74 02 5b c3 e8 94 64 c9 [ 711.575379][ C1] RSP: 0018:ffffc90003276d50 EFLAGS: 00000282 [ 711.581498][ C1] RAX: 7d55832aad7b0f00 RBX: ffff888054b6c290 RCX: 7d55832aad7b0f00 [ 711.589567][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 711.597631][ C1] RBP: ffffc90003276ee0 R08: ffffffff90af62e7 R09: 1ffffffff215ec5c [ 711.605637][ C1] R10: dffffc0000000000 R11: fffffbfff215ec5d R12: ffffea000114f548 [ 711.613652][ C1] R13: 00000003fffffffc R14: 0000000000000cc0 R15: dffffc0000000000 [ 711.621691][ C1] shmem_add_to_page_cache+0xa91/0x1c50 [ 711.627286][ C1] ? xas_load+0x127/0x140 [ 711.631764][ C1] ? put_page+0x270/0x270 [ 711.636124][ C1] ? mark_lock+0x94/0x320 [ 711.640469][ C1] shmem_get_folio_gfp+0x158e/0x3400 [ 711.645805][ C1] shmem_write_begin+0xee/0x3f0 [ 711.650672][ C1] generic_perform_write+0x2fa/0x5c0 [ 711.656001][ C1] ? generic_file_direct_write+0x330/0x330 [ 711.661862][ C1] ? __file_remove_privs+0x5f0/0x5f0 [ 711.667176][ C1] ? rwsem_write_trylock+0x135/0x1c0 [ 711.672498][ C1] ? clear_nonspinnable+0x60/0x60 [ 711.677528][ C1] ? generic_write_checks_count+0x3d9/0x4c0 [ 711.683537][ C1] __generic_file_write_iter+0x148/0x2a0 [ 711.689182][ C1] generic_file_write_iter+0xab/0x2e0 [ 711.694582][ C1] __kernel_write_iter+0x285/0x650 [ 711.699714][ C1] ? vfs_read+0xa00/0xa00 [ 711.704094][ C1] ? dump_user_range+0x2a7/0x850 [ 711.709039][ C1] ? iov_iter_bvec+0x4a/0x1f0 [ 711.713747][ C1] dump_user_range+0x412/0x850 [ 711.718535][ C1] ? dump_skip+0x40/0x40 [ 711.722806][ C1] ? dump_emit+0x74/0xe0 [ 711.727061][ C1] ? elf_core_dump+0x2b18/0x35d0 [ 711.732025][ C1] ? dump_emit+0xa2/0xe0 [ 711.736288][ C1] ? elf_core_dump+0x2a8b/0x35d0 [ 711.741234][ C1] elf_core_dump+0x30a6/0x35d0 [ 711.746051][ C1] ? load_elf_binary+0x2800/0x2800 [ 711.751172][ C1] ? verify_lock_unused+0x140/0x140 [ 711.756404][ C1] ? mas_next_entry+0xe41/0xed0 [ 711.761353][ C1] ? rcu_read_lock_any_held+0xb0/0x130 [ 711.766845][ C1] ? 0xffffffffff600000 [ 711.771033][ C1] ? getname_kernel+0x142/0x2f0 [ 711.775953][ C1] do_coredump+0x165b/0x22f0 [ 711.780599][ C1] ? nfs_stat_to_errno+0x190/0x190 [ 711.785768][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 711.791165][ C1] get_signal+0x10aa/0x1350 [ 711.795715][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 711.801397][ C1] ? _raw_spin_unlock+0x40/0x40 [ 711.806291][ C1] ? get_sigframe_size+0x10/0x10 [ 711.811235][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 711.817280][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 711.822802][ C1] exit_to_user_mode_loop+0x70/0x110 [ 711.828123][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 711.833729][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 711.839196][ C1] exc_page_fault+0x88/0x100 [ 711.843813][ C1] asm_exc_page_fault+0x22/0x30 [ 711.848672][ C1] RIP: 0033:0x7f2b8a99c7a1 [ 711.853115][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 711.872780][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 711.878857][ C1] RAX: 0000000000000000 RBX: 00007f2b8ac16180 RCX: 00007f2b8a99c799 [ 711.886853][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 711.894956][ C1] RBP: 00007f2b8aa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 711.902961][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 711.911028][ C1] R13: 00007f2b8ac16218 R14: 00007f2b8ac16180 R15: 00007ffc42894b98 [ 711.919045][ C1] [ 711.922089][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 711.929366][ C1] CPU: 1 PID: 9115 Comm: syz.3.1014 Not tainted syzkaller #0 [ 711.936737][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 711.946805][ C1] Call Trace: [ 711.950093][ C1] [ 711.952943][ C1] dump_stack_lvl+0x188/0x24e [ 711.957655][ C1] ? memcpy+0x3c/0x60 [ 711.961646][ C1] ? show_regs_print_info+0x12/0x12 [ 711.966855][ C1] ? load_image+0x400/0x400 [ 711.971395][ C1] panic+0x2e5/0x730 [ 711.975320][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 711.979843][ C1] __warn+0x2f8/0x4f0 [ 711.983826][ C1] ? debug_check_no_obj_freed+0x43c/0x530 [ 711.989668][ C1] ? debug_check_no_obj_freed+0x43c/0x530 [ 711.995391][ C1] report_bug+0x2ba/0x4f0 [ 711.999733][ C1] ? debug_check_no_obj_freed+0x43c/0x530 [ 712.005462][ C1] handle_bug+0x3a/0x70 [ 712.009716][ C1] exc_invalid_op+0x16/0x40 [ 712.014235][ C1] asm_exc_invalid_op+0x16/0x20 [ 712.019093][ C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 712.025528][ C1] Code: ef e8 48 cc bd fd 4c 8b 45 00 48 c7 c7 c0 18 df 8a 48 c7 c6 80 15 df 8a 48 c7 c2 20 1a df 8a 8b 0c 24 4d 89 e9 e8 34 52 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a5 7a 0a [ 712.045141][ C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246 [ 712.051214][ C1] RAX: 7d55832aad7b0f00 RBX: ffffffff96e60458 RCX: ffff88801d278000 [ 712.059188][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 712.067177][ C1] RBP: ffffffff8a8def40 R08: ffffc900001e0687 R09: 1ffff9200003c0d0 [ 712.075165][ C1] R10: dffffc0000000000 R11: fffff5200003c0d1 R12: ffff8880581f6e00 [ 712.083145][ C1] R13: ffffffff892aadc0 R14: ffff8880581f6000 R15: ffff8880581f6c90 [ 712.091160][ C1] ? rose_transmit_link+0x730/0x730 [ 712.096408][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 712.101793][ C1] ? rose_timer_expiry+0x4a7/0x5d0 [ 712.106927][ C1] __kmem_cache_free+0xb6/0x1f0 [ 712.111815][ C1] rose_timer_expiry+0x4a7/0x5d0 [ 712.116801][ C1] ? call_timer_fn+0x194/0x670 [ 712.121603][ C1] call_timer_fn+0x1ac/0x670 [ 712.126442][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 712.131495][ C1] ? call_timer_fn+0xcf/0x670 [ 712.136198][ C1] ? __run_timers+0x800/0x800 [ 712.140898][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 712.146140][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 712.151437][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 712.156496][ C1] __run_timers+0x53e/0x800 [ 712.161013][ C1] ? detach_timer+0x350/0x350 [ 712.165722][ C1] ? lock_chain_count+0x20/0x20 [ 712.170586][ C1] run_timer_softirq+0x63/0xf0 [ 712.175358][ C1] handle_softirqs+0x2a1/0x930 [ 712.180126][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 712.184978][ C1] ? do_softirq+0x210/0x210 [ 712.189484][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 712.194683][ C1] __irq_exit_rcu+0x13b/0x230 [ 712.199359][ C1] ? irq_exit_rcu+0x20/0x20 [ 712.203876][ C1] irq_exit_rcu+0x5/0x20 [ 712.208121][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 712.213760][ C1] [ 712.216706][ C1] [ 712.219652][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.225642][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 712.231465][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e a0 2d f7 48 89 df e8 96 68 2e f7 e8 c1 bc 51 f7 fb bf 01 00 00 00 86 cb 21 f7 65 8b 05 47 50 cb 75 85 c0 74 02 5b c3 e8 94 64 c9 [ 712.251090][ C1] RSP: 0018:ffffc90003276d50 EFLAGS: 00000282 [ 712.257165][ C1] RAX: 7d55832aad7b0f00 RBX: ffff888054b6c290 RCX: 7d55832aad7b0f00 [ 712.265136][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 712.273109][ C1] RBP: ffffc90003276ee0 R08: ffffffff90af62e7 R09: 1ffffffff215ec5c [ 712.281084][ C1] R10: dffffc0000000000 R11: fffffbfff215ec5d R12: ffffea000114f548 [ 712.289060][ C1] R13: 00000003fffffffc R14: 0000000000000cc0 R15: dffffc0000000000 [ 712.291588][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 712.303037][ C1] shmem_add_to_page_cache+0xa91/0x1c50 [ 712.308625][ C1] ? xas_load+0x127/0x140 [ 712.313063][ C1] ? put_page+0x270/0x270 [ 712.317402][ C1] ? mark_lock+0x94/0x320 [ 712.321741][ C1] shmem_get_folio_gfp+0x158e/0x3400 [ 712.327052][ C1] shmem_write_begin+0xee/0x3f0 [ 712.331943][ C1] generic_perform_write+0x2fa/0x5c0 [ 712.337249][ C1] ? generic_file_direct_write+0x330/0x330 [ 712.343071][ C1] ? __file_remove_privs+0x5f0/0x5f0 [ 712.348373][ C1] ? rwsem_write_trylock+0x135/0x1c0 [ 712.353668][ C1] ? clear_nonspinnable+0x60/0x60 [ 712.358705][ C1] ? generic_write_checks_count+0x3d9/0x4c0 [ 712.364621][ C1] __generic_file_write_iter+0x148/0x2a0 [ 712.370269][ C1] generic_file_write_iter+0xab/0x2e0 [ 712.375659][ C1] __kernel_write_iter+0x285/0x650 [ 712.380802][ C1] ? vfs_read+0xa00/0xa00 [ 712.385145][ C1] ? dump_user_range+0x2a7/0x850 [ 712.390088][ C1] ? iov_iter_bvec+0x4a/0x1f0 [ 712.394772][ C1] dump_user_range+0x412/0x850 [ 712.399556][ C1] ? dump_skip+0x40/0x40 [ 712.403820][ C1] ? dump_emit+0x74/0xe0 [ 712.408074][ C1] ? elf_core_dump+0x2b18/0x35d0 [ 712.413062][ C1] ? dump_emit+0xa2/0xe0 [ 712.417315][ C1] ? elf_core_dump+0x2a8b/0x35d0 [ 712.422256][ C1] elf_core_dump+0x30a6/0x35d0 [ 712.427073][ C1] ? load_elf_binary+0x2800/0x2800 [ 712.432218][ C1] ? verify_lock_unused+0x140/0x140 [ 712.437449][ C1] ? mas_next_entry+0xe41/0xed0 [ 712.442445][ C1] ? rcu_read_lock_any_held+0xb0/0x130 [ 712.448021][ C1] ? 0xffffffffff600000 [ 712.452183][ C1] ? getname_kernel+0x142/0x2f0 [ 712.457053][ C1] do_coredump+0x165b/0x22f0 [ 712.461767][ C1] ? nfs_stat_to_errno+0x190/0x190 [ 712.466941][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 712.472334][ C1] get_signal+0x10aa/0x1350 [ 712.476864][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 712.482519][ C1] ? _raw_spin_unlock+0x40/0x40 [ 712.487379][ C1] ? get_sigframe_size+0x10/0x10 [ 712.492336][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 712.498334][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 712.503807][ C1] exit_to_user_mode_loop+0x70/0x110 [ 712.509106][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 712.514666][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 712.520130][ C1] exc_page_fault+0x88/0x100 [ 712.524734][ C1] asm_exc_page_fault+0x22/0x30 [ 712.529661][ C1] RIP: 0033:0x7f2b8a99c7a1 [ 712.534145][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 712.553853][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 712.559930][ C1] RAX: 0000000000000000 RBX: 00007f2b8ac16180 RCX: 00007f2b8a99c799 [ 712.567910][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 712.575891][ C1] RBP: 00007f2b8aa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 712.583867][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 712.591843][ C1] R13: 00007f2b8ac16218 R14: 00007f2b8ac16180 R15: 00007ffc42894b98 [ 712.599828][ C1] [ 712.603442][ C1] Kernel Offset: disabled [ 712.607859][ C1] Rebooting in 86400 seconds..