last executing test programs: 26m55.476252125s ago: executing program 32 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000170a0108"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 25m39.154627973s ago: executing program 33 (id=624): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001980)={0x2, 0x0, [{0x5, 0x1000, &(0x7f0000000980)=""/4096}, {0x5000, 0x33, &(0x7f0000000000)=""/51}]}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 21m17.480165506s ago: executing program 1 (id=1230): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b00"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xa0, 0xc0, 0x68}}]}}, 0x0) 21m13.79612702s ago: executing program 1 (id=1243): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 21m13.195519991s ago: executing program 1 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x9f7d, 0xffffffffea110f45, 0x6, 0x4, 0x10, 0xfffffffd, 0x0, 0x0, 0x40, 0x4}}, 0x9e) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) openat$pidfd(0xffffffffffffff9c, 0x0, 0x80080, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x3628, 0x65, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x18, 0xe}, {0xc, 0xb}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x72, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0xf0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_matchall={{0xd}, {0x3580, 0x2, [@TCA_MATCHALL_ACT={0x210c, 0x2, [@m_gact={0x100, 0x19, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x196a, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x8, 0x20000000, 0x81, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0xc, 0x1, 0xb, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f63, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x262, 0x9, 0x4, 0x9, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8000, 0x5, 0x2, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x7ff, 0x1, 0x100, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x94d, 0x2, 0x2, 0xfffffffe, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x81, 0x3, 0x6, 0x401}}]}, {0x14, 0x6, "f369b0de6cbc4f024fc2a33d21a08585"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1d74, 0xe, 0x0, 0x0, {{0xa}, {0x1cbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x9ab, 0x1345c895, 0x1, 0x7, 0x398c}, 0x5, 0x4a, [{0x4, 0xfffffffc, 0x10000, 0x9, 0x4, 0xffffe768}, {0x5, 0x2, 0xa, 0x7, 0x9, 0x8}, {0x3ff, 0x81, 0xfffffffd, 0x3, 0x0, 0x8}]}, [{0xe65, 0x7, 0xa5, 0x100, 0x100, 0xffffffff}, {0x7fff, 0xfffffffa, 0x1, 0x1000, 0x2, 0xf2}, {0x1, 0x4b, 0x2, 0x7fff, 0x800, 0x8}, {0x7, 0x5, 0x1, 0x7, 0x4, 0x8}, {0x40, 0x80000001, 0xfffffffe, 0xfff, 0x11e, 0x9}, {0x9, 0x9, 0x1, 0xc, 0x4, 0xfffffffb}, {0x7bba, 0x800, 0x6, 0x97cb, 0x1, 0x3}, {0xfffffff6, 0xb29, 0x3, 0x5, 0x9, 0x3}, {0x2, 0xc9, 0x3, 0x8, 0xccc7, 0x8d2}, {0x1, 0x6, 0x8001, 0x9, 0x9, 0x6}, {0x5, 0x4, 0x5, 0xfffffffa, 0x800, 0x81}, {0x3, 0x2, 0xd51, 0x1ff, 0xc4, 0x40}, {0xfc, 0x9, 0x8000, 0x800, 0x71, 0x3}, {0xab2, 0xf47, 0x4d2, 0x7fff, 0x4, 0x400}, {0x200000, 0x40, 0x1d2, 0x4, 0x3, 0xd}, {0x9, 0x0, 0x1, 0x1, 0xf, 0x104}, {0x6, 0x9, 0x8, 0x9, 0x81, 0x7ad1}, {0x1, 0x8b, 0xc, 0x7fffffff, 0x7fff, 0x6}, {0x215, 0x2, 0x2, 0xffffffff, 0x3, 0x1}, {0x8000, 0x6, 0x7, 0x2, 0x9, 0xc}, {0x1, 0x100, 0x2fc1, 0x5a, 0x0, 0x2d7c77bf}, {0x3, 0x5, 0x2, 0x3, 0x5, 0x8001}, {0x3, 0x6, 0x7, 0x765, 0x6, 0xfffffffe}, {0x7, 0x3, 0x401, 0x0, 0x80000001, 0x1}, {0x9, 0x6d9, 0xb, 0x6, 0x0, 0xffffffff}, {0x6, 0x10000, 0xfc7bbf7, 0x1, 0xe7b7, 0x7fff}, {0x0, 0x10001, 0x3, 0x2, 0x0, 0x3}, {0xa, 0x0, 0x1, 0x7, 0xdc8, 0x4}, {0x7f, 0x1, 0x0, 0x200, 0x1000, 0x1}, {0x80000001, 0xa, 0x8, 0x7, 0x1, 0x5}, {0x4, 0x1000, 0x7, 0xe, 0xd, 0x7}, {0x101, 0x495d, 0x8, 0x8, 0x6, 0x2}, {0xff, 0x4, 0xc, 0xc1a, 0x9, 0x3}, {0xc0000000, 0x4, 0x400, 0x81, 0x7, 0x7f}, {0xfffffff9, 0x3, 0x8, 0x40, 0x6, 0x9}, {0x0, 0xd, 0xdb1a, 0x6, 0x4, 0x20009}, {0xf, 0x0, 0x3, 0x1, 0x2, 0x2}, {0x3, 0x3, 0x2, 0x1, 0x80000000, 0x6}, {0x401, 0x5, 0x401, 0xfffffeff, 0x0, 0x4}, {0x2, 0x5, 0xe, 0x4, 0xffff30d3, 0xd8}, {0x40, 0x9, 0x4, 0x9, 0x1000, 0x6}, {0x3, 0xe90, 0x1, 0xfffff2ec, 0x7f, 0x98e}, {0x6, 0x7, 0xe5, 0x2000, 0x3, 0x3}, {0x2, 0x7, 0x28000000, 0x4, 0x5, 0x9d0}, {0x81, 0x6, 0x8001, 0x1, 0xffffffff}, {0x9, 0x0, 0xc60b, 0x3, 0x0, 0x5}, {0xba2d, 0x97, 0xfffffff8, 0x9, 0x2, 0x6}, {0x3, 0xc8d8, 0x9, 0x1, 0x2}, {0x2, 0x6, 0x1, 0x1, 0x6, 0x6}, {0x9, 0x5, 0xe7, 0x5e96, 0xfffffffd, 0x2}, {0xb1, 0x200000, 0x1, 0x2, 0x9}, {0x5, 0xb07, 0x100, 0x80, 0x3ff, 0x2}, {0x80000001, 0x401, 0x1cc, 0xd23, 0x6, 0x6}, {0xfffff800, 0x1, 0x7ff, 0x0, 0x40, 0x882}, {0x4, 0xf, 0x7, 0x101, 0x8, 0xffff7e42}, {0xffff, 0x7fff, 0x7, 0x40, 0x9, 0x10000}, {0x6, 0x8, 0x20000000, 0x1, 0x0, 0x7fff}, {0x5e, 0x2, 0x9, 0x7, 0xe, 0xac}, {0xfffffff8, 0x7, 0x0, 0x413b, 0x6, 0x4}, {0x6, 0x5, 0x8, 0x81, 0x6, 0x180}, {0x8, 0xeae, 0x5, 0xa, 0x1, 0xfff}, {0x8, 0x2, 0x6, 0x4, 0x3, 0xe79}, {0x7fffffff, 0x2, 0x3, 0x7f, 0xe, 0xfff}, {0xf5, 0x0, 0x7, 0x10, 0x8, 0x3}, {0xd59a, 0x9, 0x7f, 0x6, 0x6}, {0x8, 0xf778, 0x3, 0x3, 0x3ff, 0x3c}, {0x6, 0x7, 0x2, 0x5, 0x4, 0x4}, {0x5, 0x1, 0x1ff, 0x3a4, 0xd70, 0x2}, {0x2, 0x7ff, 0x4f, 0x4, 0x2}, {0x7fffffff, 0x8b365ee, 0x8001, 0xfffff800, 0x6b6, 0x2ae113f1}, {0x8, 0x1ff, 0xa, 0x81, 0x6, 0x3}, {0xf396, 0x7, 0x2d7, 0x40, 0x3}, {0x4, 0x44902a58, 0x9, 0x10000, 0x8, 0x4}, {0xffffff81, 0x9, 0x80, 0x800, 0x6292}, {0x39, 0x6, 0xa, 0x8, 0x1, 0x1}, {0x0, 0x2b23, 0x7, 0x8e, 0x100, 0x9}, {0x4, 0x1, 0x9, 0xfffffffd, 0x5, 0xfffffffe}, {0x1f2, 0x7, 0x2, 0x2, 0x6, 0x80000001}, {0x128, 0x173c, 0x2, 0x7, 0x8001, 0xf}, {0x3, 0x6, 0x7, 0x1, 0x10001}, {0x7, 0x2, 0x6, 0x1, 0x2}, {0x60, 0x4, 0x1d, 0x8, 0x0, 0xff}, {0x240, 0xfffffffe, 0x1c, 0xc, 0x0, 0x40}, {0x6, 0x8000, 0x8, 0xfffffff7, 0x0, 0x4}, {0x9, 0x3, 0x10000, 0x8, 0x8e0, 0x800}, {0x0, 0xa, 0x3, 0x2800000, 0x8, 0x6}, {0x8, 0x9, 0x1ff, 0x0, 0x9}, {0x6, 0x8, 0x9, 0x9, 0x800, 0x5}, {0x59, 0x6, 0x7, 0x1, 0x800000, 0x2}, {0x1, 0x9, 0xbbb5, 0x9, 0x9}, {0xfea2, 0x1, 0x7, 0x5, 0x0, 0xffffff50}, {0xff, 0x8b4d, 0xf, 0x6, 0xe5e3, 0x4}, {0x0, 0x7, 0x2, 0x2, 0x8000, 0xffff}, {0x8, 0x2, 0x9, 0x6, 0x4, 0x5}, {0x1, 0x5, 0x48b, 0x1, 0x1, 0x8}, {0x0, 0x9, 0x9, 0x10, 0x2, 0x127}, {0x0, 0x840, 0x10, 0xf, 0xfffffffd}, {0x4, 0x7ff, 0x80000001, 0x6, 0x3ff, 0x5}, {0x7, 0x76, 0x9, 0x8, 0xd}, {0x200, 0x100, 0xffff, 0x10001, 0x9, 0x9}, {0x64, 0x81, 0x5, 0x6, 0xffffff77, 0x60b}, {0xe, 0x5, 0x2, 0xfff, 0x0, 0xdb04}, {0x9, 0x360, 0x2, 0x10, 0xfffff22e, 0xf54f}, {0x1, 0x1, 0x4, 0x8, 0x4, 0x1}, {0x3, 0x6, 0xec, 0x6, 0x9, 0x1}, {0x9, 0x8000, 0x5, 0x101, 0x2, 0x7}, {0x86, 0x2, 0x7fffffff, 0xa6b, 0xefd9, 0xffffff81}, {0x4, 0x3, 0x3, 0xffffff00, 0xfffffff8, 0x80000001}, {0x7, 0x3, 0x5, 0x2, 0x7, 0x7fff}, {0x0, 0xb, 0x7, 0x0, 0x2, 0x4}, {0xe81, 0x5, 0x3ff, 0x5, 0x8, 0x101}, {0x200, 0x2, 0x5, 0x9, 0x401, 0x7ff}, {0x7, 0x0, 0x2, 0xff, 0x3}, {0x3, 0x82ba, 0x5, 0x6, 0x6, 0x10000}, {0x2, 0xb, 0xa, 0x78a, 0x337ee609, 0x8}, {0x8, 0xb7, 0x1, 0x200, 0x3, 0x9b}, {0x294944d1, 0x86, 0x7f, 0x1, 0xfffffc00, 0x9}, {0x5, 0x8, 0x100, 0x1, 0xd, 0x7ff}, {0xbb, 0x1d6, 0x4, 0xe, 0x80, 0x6}, {0xa4, 0xfffffbff, 0x41, 0x1, 0x8, 0x4}, {0x2, 0x2, 0x1, 0x7, 0xffff5030, 0x8}, {0x0, 0x6, 0x3c, 0x5, 0x9, 0x2}, {0xffff, 0x8, 0x7fff, 0xc36e, 0x3f5, 0x55}, {0x0, 0x3, 0x80000001, 0x9, 0x7, 0x9}, {0x1, 0x101, 0x4, 0x401, 0x0, 0x1ff}, {0x7, 0xfff, 0x2, 0x5, 0x4, 0x10001}, {0x6, 0x0, 0x7, 0x4, 0xffff, 0x401}, {0x7, 0xfffffffe, 0x3, 0x7f, 0xca, 0x2}], [{0x4}, {0x1, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {}, {0x2}, {0x5}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x96ad4a16f9994b8f}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x36f55a629f72f5d4}, {}, {0x4}, {0x0, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0xcd59, 0x0, 0x7, 0x2}, 0x4, 0xd5, [{0xdb, 0x5, 0x101, 0x5, 0x7fffffff, 0x5}, {0x5, 0x8, 0xff, 0x3, 0x2, 0x80000000}]}, [{0x4, 0x81, 0x5, 0x7f, 0x3, 0x5}, {0xfffffff9, 0x5, 0x0, 0x8, 0x200, 0xa36adec}, {0x3ff, 0x10000, 0x0, 0x5, 0x4, 0xffffffff}, {0x2, 0x9, 0x1c0000, 0xfffff801, 0x6, 0x6}, {0x7d, 0x1ff, 0x3, 0x688, 0x100, 0x8}, {0x7fffffff, 0xc9e, 0x7, 0x4, 0x3, 0x3}, {0x9, 0x2, 0x9c, 0x8, 0x5, 0x1}, {0x2, 0x5, 0xa, 0x3, 0x3, 0x2}, {0x9, 0x7f, 0x578, 0x332, 0xe, 0x40000000}, {0x9, 0x5, 0x400, 0x221, 0xffffaa13, 0x4}, {0x0, 0x2, 0xfffffff7, 0x1d, 0xdd5, 0xd}, {0x9, 0x5, 0x4, 0x6, 0x5, 0x4}, {0x1, 0x10000, 0x1ff, 0x1, 0xb3, 0xbc}, {0x9, 0x419, 0xff, 0x9, 0xffffae27, 0x60}, {0x100, 0x8, 0x1800, 0x7, 0x0, 0x8001}, {0xe12, 0x81, 0xb7a8, 0xffff, 0xffffff00, 0x2}, {0x0, 0x9, 0x7ff8000, 0x3, 0x7, 0xffffffff}, {0x4, 0x8, 0x716a, 0x7, 0x6a7, 0xf}, {0x6, 0xfffffffb, 0xc, 0x200000, 0x400, 0x800}, {0x8000, 0x10000, 0x2, 0xfffffffb, 0xfffffff8}, {0xec, 0xb6, 0x7, 0x6, 0x9, 0x8}, {0x1c000, 0x0, 0x8, 0x7, 0xc, 0x8}, {0x1, 0x4, 0x1, 0x7, 0x5, 0x1}, {0x81, 0x2, 0xd, 0x3ff, 0x5, 0x6}, {0x0, 0xc7f, 0xada6, 0x0, 0x101, 0x7}, {0xfffffff9, 0x1, 0x9, 0xe71c, 0x56, 0x401}, {0xfff, 0x91c6, 0x24, 0x9, 0x8, 0x7}, {0x3, 0x8, 0x8, 0x80000, 0x95, 0x1}, {0x8, 0x3ff, 0x8000, 0xdf8, 0x10001, 0x80}, {0x6, 0x80, 0x8, 0x8, 0x5}, {0x6, 0x6, 0x2, 0x7c, 0x7c, 0x40}, {0x2a7, 0x4, 0x4, 0x1, 0xed, 0x80}, {0x1, 0x89d8, 0x6, 0x80000000, 0x6, 0x7}, {0x6, 0xa, 0x9, 0x8, 0x3c000003, 0x5}, {0x3, 0x0, 0x401, 0xd, 0xffff, 0x5e}, {0x8000, 0x3, 0x800, 0x9, 0x5}, {0x2, 0xac3f, 0x3, 0x4d4, 0x282, 0x7}, {0xfffff888, 0x9, 0x3, 0x8, 0x7fffffff, 0xd}, {0x5, 0x9, 0xbf63, 0x4e13, 0x4, 0xfffffffa}, {0xd, 0x652, 0x9, 0x2, 0x8, 0xe}, {0xf, 0xe, 0x0, 0x734, 0x9, 0x3}, {0x3ff, 0x0, 0x200, 0x8, 0x7, 0x5}, {0x210, 0x5, 0xf7e, 0xffffffca, 0x1000, 0x40}, {0x5, 0xc859, 0x7, 0x9, 0x3, 0x3}, {0x7, 0x9, 0xfffffffa, 0x4c96, 0x7, 0x31}, {0x5, 0x8001, 0x1, 0x5452, 0x5, 0xffffffff}, {0x80000, 0x1, 0x200, 0x3, 0x8}, {0xb65, 0x7, 0x8, 0x10001, 0x9, 0x9}, {0x401, 0x0, 0x401, 0x7, 0x400, 0xff}, {0x10, 0xfff, 0x6, 0x40, 0x3, 0x1}, {0x4, 0x4, 0x1f4f, 0x869, 0x5, 0x401}, {0x2, 0x6, 0x5, 0x6, 0x3, 0x6}, {0x9f, 0xfffffe00, 0xfffffffd, 0x1, 0x3, 0x3ff}, {0xe3b, 0x7, 0x0, 0xf, 0x3a46485a}, {0x7, 0x70, 0x2, 0x5, 0x0, 0xffff3607}, {0x80000001, 0x8, 0x9, 0x8, 0x2, 0x3}, {0x45c39d9c, 0x4d2, 0x7fff, 0x8, 0x8, 0xd}, {0x5, 0x3, 0x2, 0x4, 0x3, 0x1}, {0x0, 0x4, 0x8001, 0x6, 0x800, 0x8}, {0x5, 0x5, 0x8, 0x7, 0x9, 0x2}, {0x372, 0x3, 0xb4ac, 0xa, 0x9, 0x5}, {0x2a, 0x6, 0x101, 0x2, 0x7, 0x8}, {0x9, 0x6, 0x2, 0x8, 0x2, 0x9}, {0x70, 0x7, 0xf, 0x0, 0xa4, 0x8}, {0xfd09, 0x7, 0x3, 0x8000, 0x0, 0x101}, {0x8, 0x3, 0x4, 0x80000000, 0x7, 0x2}, {0x7fff, 0xfffffff8, 0xe32, 0xffff0d42, 0x1, 0xecc}, {0x6, 0xfff, 0x7fffffff, 0x1ad7, 0x9, 0x7fffffff}, {0x3, 0x80000001, 0xb, 0x6, 0x10001, 0xf}, {0x1, 0x1, 0xfffffff8, 0x8, 0x3, 0x1}, {0x9, 0x7, 0xb0, 0x7, 0x800, 0xa30f}, {0x4, 0x4, 0x81, 0xfffffffb, 0x8, 0x2}, {0x4, 0xfffff800, 0x7, 0x200, 0x4, 0x1000}, {0x5, 0xc4, 0x8001, 0x6, 0x1, 0x2}, {0x7ff, 0x7f, 0x9, 0x200, 0x2, 0x8}, {0x2, 0x7, 0x1ff, 0x4, 0x4, 0x6}, {0x401, 0x7, 0xfff, 0x3, 0x3800, 0x8}, {0x63, 0x2c, 0x53b3, 0x2, 0x5, 0x1}, {0x2f2, 0x280000, 0x7, 0x200, 0x9, 0x7d2}, {0x9, 0x6, 0x1000, 0x5, 0x9, 0x9}, {0x2, 0x5, 0x6, 0xfff, 0x8, 0x8}, {0x8, 0x6, 0x6d049286, 0x81, 0x4, 0x4}, {0x3, 0x4, 0xfffff000, 0x4, 0x5, 0x7}, {0x5, 0x0, 0xa34, 0x40000000, 0x4, 0x8001}, {0xffffffff, 0x3, 0x9f, 0x2, 0x5, 0xfffffffa}, {0xf1, 0x8, 0x3, 0xfff, 0x6, 0x7}, {0x1, 0x40, 0x7, 0x4, 0x2, 0x6}, {0xfffffac4, 0xfffffeff, 0xd9, 0x9, 0x81, 0x42}, {0xffff, 0x9, 0x7c, 0x3, 0x9, 0x400}, {0x8, 0x80000, 0x8, 0x80000000, 0x200, 0xf94}, {0x800, 0x6, 0x7fffffff, 0x1, 0x8, 0x4}, {0x0, 0x9c8, 0x9, 0x6, 0xb60}, {0x4b0e, 0x5, 0x9, 0x9, 0x1ff, 0xe3d}, {0x8, 0xfffff000, 0x3, 0x6, 0x1, 0x1}, {0x4000000, 0x7, 0xffffffff, 0x1, 0x7, 0xf2a3}, {0x8, 0xffffff43, 0x3, 0x4, 0x1, 0x2}, {0xfffffff7, 0xfffffffc, 0x6, 0x7, 0x0, 0xfffffff7}, {0xc, 0x80000001, 0x2f77, 0x7, 0x7}, {0x10000, 0x0, 0x6, 0x5, 0xffff, 0x4}, {0x7, 0x6, 0x27cf5890, 0x4, 0x200, 0x2}, {0x5, 0x3efc, 0x3, 0x9, 0x47, 0x80}, {0x9, 0xa0, 0xb, 0x4, 0x3, 0x8}, {0x3, 0x8, 0x4c1, 0x1ff, 0x7ff, 0x3}, {0xff, 0xf1, 0xa, 0x7fffffff, 0x2, 0x9}, {0x4a, 0x8, 0x6, 0x9fc9, 0x800, 0x80000000}, {0x5, 0x1, 0x804, 0x2, 0x7, 0x9}, {0x8, 0x1, 0x664, 0xfffffffc, 0x5, 0x4}, {0xa1b, 0x28, 0x0, 0xf412, 0x2, 0x5}, {0xffffffff, 0x1400, 0x4, 0x7f, 0xfffffffb, 0xfff}, {0x6, 0x2, 0x1, 0x3, 0x7ff, 0xfffffff9}, {0xf, 0x9, 0x0, 0x10001, 0x10039b, 0x9}, {0x56e2, 0x6, 0x5, 0xfdb, 0x1, 0x80000001}, {0x39, 0xfffffffe, 0x5, 0x24, 0x8, 0x5}, {0x3, 0x5, 0x9, 0xe, 0x9, 0x40}, {0x101, 0x7, 0xc5, 0x49e}, {0x6370d89a, 0xffffffff, 0xc, 0x6f6d, 0x5466832c, 0x4}, {0x5, 0x5, 0x3, 0x4, 0x37fd, 0x3}, {0x5, 0x0, 0x9, 0x5f8, 0x0, 0x3}, {0x8, 0x24, 0x10000, 0x37, 0x40, 0x6}, {0x3, 0x5, 0x1, 0x6, 0x8, 0x1}, {0x4, 0x1, 0x5, 0xff, 0x3, 0x7}, {0x40, 0x0, 0x80000000, 0x5, 0xa58, 0xff}, {0x101, 0x6, 0x55e, 0x2, 0x4, 0x8000}, {0x4, 0x7ff, 0x80000000, 0x200, 0x200000, 0xb4a3}, {0x400, 0xf162f3c, 0xeb7, 0x80000001, 0x3, 0x8}, {0x5d20, 0x0, 0x753, 0x101, 0xba4, 0x7}, {0x80000000, 0x6, 0x6, 0x0, 0x800, 0x7}, {0x7, 0x7, 0x10, 0x7ff, 0x6, 0x92d}], [{0x3, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x5}, {0x3}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4}], 0x1}}]}, {0x8e, 0x6, "d78e582d6d591d5864c8e65cd7ab58905b93c9d76f97a3c8ee033db4e54aaf57999932787855d5f1705d91c649297152f3f8de028c26221fb604f3eb26e803c8e4bd61dff6c66bc60f52131a3767136e442372f02603c44198547d5cc290719c20af16654299bb0a51b0f3244564a4d0a1d5ea50c4f0e4de5ca60f6be602fd8280aabb5a1604b41f159c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x11c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0xb, 0x10000000, 0x2, 0x9}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x6, 0x10000000, 0x1}, 0x1, r6}}]}, {0xaf, 0x6, "37b606c2229a767009087c9596fdf06f32becad2673764d531a4e5fe1b710d88bf218858e3d1e9054e66c5930e9bdd40f6711bea53d4e961f05fc98b79e372ee3ca75a036e38bccedc18780a0f8b116b905d53f361d6c0a4d07e30b36ae6bfce05b57e86ef1e6eb016fe37d8737a09556fa431f5a530d2f1e223221d7973d7cc6aac492ad6faaea63ee3393f75f97b4a6ee9b17f1fe4c405df320dbd5442022657d9bb345125ccce071e8f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x178, 0x11, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0xffffffffffffffff, 0xddf0, 0x9}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x2, 0x6, 0x9}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x1, 0x2, 0x1, 0x5}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x7, 0x5, 0x497d}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3b, 0x9, 0x7, 0x10001, 0x19f68352}, 0x54}}]}, {0xbd, 0x6, "e84490188f1ee3da6a7391beb3086f3b1714714d7ea9b22683ca9b5f3913df38b4182fe0aacdcdc2735964458e347f038c5e887cb8b13dca5f96bf3ca70d37d932a4b0d5ea59ec7a52c4328b73e3d4b25108b10a4470797ea73c0aad7f50b6cbc3e8d02bd44180a65fd784e5e449ce90bb4f8c7ce8f6a7f7060464e40176a2602266c1991a1f27694efd722b9821adbcf95ab8509b810b4096f832170efe8a307844e21791090d6b21a0db3c0c1f8f2bd5cd544ec74304d3aa"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x1458, 0x2, [@m_ctinfo={0x108, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}]}, {0xd2, 0x6, "c0a6bfdf824d84112eb5ab7877c0de950edf14acb8f214f549d225b84a0ead1e4f11c7756bcf77f712f1ba767d911e41c350bbdc995195752ff01a7f68fe450b3c0173abe9e1eb517798f364fcc203422ba5b0868eea74bb9dad82b0125fe8be0b376cb6daf87586973e0b3cfb4885b548ec84bb8977e27bad1f72bb246bb616fc72292d9cf5327f9aaf89d424d3982e86199cb2de21f9c01234d51a50f52e23dd7b8df3971af93dc30c5bb20c2939450f6670f439d8ca6ddf9fa235b2f0ea23f36e8229ffdec5f5ceb2f2fbbab0"}, {0xc}, {0xc}}}, @m_skbmod={0x108, 0x2, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffff, 0x8, 0x20000000, 0xdb}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x0, 0x10000000, 0x100000, 0xe}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x5, 0x4, 0x200000, 0x5}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x4d, 0x6, "7d37a2827cb579efc2c0f56bd471543acb4bd8f3b43ccbca8e9ae15772fb2db0810c1798807c1bda9d936a1b13543f435f82ab4ff541ba432c960814afa1541354f613a8dcbd4dbf31"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xd0, 0x6, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x98, 0x6, "4f2f59c5f994d0765379c5c419465407a54f62044a1909c807233b2ba30ce06a01640e82221d06a8e9f6f03625b4a3cbb39b5f5a95d91a5fce5793f9ad4d5dfc8e081cac8a653b79d26d07944369581632462f6113f5affe9bff846cc864805b2f79161505b0d35e66eb902be2ea4aab01beb80d162001845b6ff118000dd4bbb3127bd2042507c969bb66575bb282d7078f0e8c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x14c, 0x1c, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0xeb, 0x6, "979b0c74026861fa13a65344ea0d6ff02029c013a0a0777880751788b14dd9929aeb5a7b62af96b563eea1e4c49b2d729d429b85c99fdb7402da76c5708344aa66cb779fe058fb7acc2ff06cd1a757c3b293f01b05cdb48b2de4c84cd4c606646b5a0e8388f2bd068dedbbdf5540a423bd98d79b4b8ed62bb46e78564ea4862522478820b6b72ec131581c6ca51e5b63195f6e8e02af121ae26754a5e0f8ee07d76ae70e53497cf093124c147e051c1505c3fd8ad05353202c30d62276f021e288cfef549c5845476db665db546dbae4354f4b6eae40017afbd80c495c967666107e063ce6b5f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_ife={0x1028, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xb}, @TCA_IFE_DMAC={0xa}]}, {0xfe4, 0x6, "7e5e7051c77c9f3bdeb6d74c4fb52d7ce9fa62c481f06b1b10de87c2c417a1733e23d45c7523d4ff72896ad11707ba6819620c1cd5e581b58ca39da0b1c5b48326b1c94ffd22750c9ab7fc9c576876ea33ab672c5d30dd89350a9fb69393768394b2827081cdf87f87cb4399089622f424734b014c020465148bd9d7c8183fd08ff55a1d8ae8962e7e2972f9e918de7b95f040c46f88b7e17097ed18ea77933c18ab09fd5b09de68abb1c1f0b57482c52b8dccd1b69a9911ad090a26ff91332ad7c06cd444d357c42c327df4554d271651ea2799da30e4521ead57ca047731c0b1c1405412ba0c357a9385bb8fc5025f6de80fa50f3034d6b8cdfc870ef002112d8dc0cbea619f38305e64744c7f7e1e2556b93696cde960bba8a16fe85c2a30e54bf5756bd53456287fcfa8eb842a4214b69c54d18cab864d4c1c05bd72821c18b0186f0b76ca4550ba153be34c4b7e230125cb2a74e7e590df626367cf0757422e26335c4d9dae308dcd514984ae7b51483eb0544a1acc468e2faff41619abe7e27ad9ee07e25aa5b9af9770a0b38a5e65210f8b023ee4d3054e954072389433c3b2711c8cf45c00cbfb0778590695ec2ac6ec64afaebe619ab8995a9c82d50ea87e60e403af1817ca1e10e9fd1b037d2be098051bf5ceb44e1405c344a2c36f96319450400c39c0d8928d1a50e5df01b33c3c2d1f0368cbf1f9963a9601e81464f3173cd03b199ddbc46fbf56c9dc1b1dd46460fb38babbefa4b47206b8d25a14e1a647f74d8c20c9ccc505bd4bb5d5e3fcb41a4b94a5f7fb106c72364f1b9d18186a819e6e41401539aa9b421a1a489e80d49f0305f3e4c67dd7087fadc9dc9352ed48caafc69c682cb119954bf052a5f2a823c868ad8cb84f9269ebf7ec9f25a4b3d328498d56b16047b6ae7f330df3fe50be6fbd6efd4359605d2523d93b27b51e31010fd89cd0a1a5fdb75c6b3f9af010a2f91629669f818e9aeedc9a486e9b48b95c2f368aa434c02f7d91a7495aa9ca62e968c3a3f0a2e72828cdaaf9d8486a809c4a74f82747fe1ea2c037b4af5ba11c07227cd0aef07d04ad8cfe8b0bb097450b88af198ce1ae0abc5c2c76e135a9b1d6e2e922a702c400f280a09d88f21937b8bf65ed38e3fa019a1d09bc81adbbd72b4a6c3a7894d13c377efd7616370f6f26800f387db7a0317595bc03acbd279bb674260f3c9c479b9e5348a8086a6b363f3b3651493bca56879dd22095cae9ba312a6b6e3dd7140d44c5313c471a5d7e581e912d5c603b16932e0ba33b7a76407fae96d973b61eb939cb97e3256309c788b50d29127e3dada8a347da61f3df9318e6a0b7fe330975050f9f9a66ce4d5d3fa847b633f1cb12496a2de2861ef093d42976c4b95428d749287889c43397d245430d7d53871287dbb32b101ae7d46dbf801d7946bc87705736f3fb6620772e11632247cbb669d60a43792952f71447f4cae949d2253c4b8c926bd4f5411aac61eef9b341b7ebc11cf6fecc7e20f7342d8773b3013ea73ea45e8da0ed16fdfce3650b45cd05ae2122177fb0b252642e728e4c003113f136325eaa21f6c4faf7d6cf1101d3ac5c9d647b6f657c6dcb666ef9f625f6fdaed10f59f7e7013c11e008be4b343a03ddd259f99a1438fc34a912fd158d3dc8d37166aecb23bba6fb15aec0efab121e5160d454133664f9030dcd7c9ad4a6ea87bc5b7280db2d4e3ba942df8308e3b04d9ec1f661448d0ef115c6ed340005c55bb70a360a53873af219dc617f2724000bd7567c366c8814f2078fb44051d7b3e537abb5ee53c53919d57d971ded1becb93fcdc2758eec76c371453ac9c2c95a5157b3a48be7c49ab170762a548e7d9255b9dc33dcc57dbfa404152492ea5528e0148ec7efd615e8a0937fa17f9bfa005c4afedb123cfb8f33041e6035ba364a095bae21a38b604a9770b722a8d8e2df1dae925fd48b56a076d0dac0f2b90397ac4f1e0518f75795a48325d4e62f09f0ff48ee19167994bd143d2b74f8c3c80c401550566fb04c476b5b2a21359244ddf9480723b278e0e242b28ad4cf2c4859b9efb31cfc1ca1cf2f424903cee31070400f592e9215a516096dd4ae4dc1e0f8bd9163f232a85feb8c4933581b916041dcefe515d945cdfd7b71c8733bf3dd42ba44a2ee605bcf92db7bbc9ddd53d014618ddbf2905047a5cc32bc1d4f1c212461be4e6c5ddc5c39d403198cf1fdb3956d9ac2e1861206b42e8599ecef0de3a66a9ee254bda0f91592e94722a2e57268b0bbc7bad70abeea5660149c1bc5578270b380f2d7795d73bd446840a801709f21149e274af58274918c3aa06b7bfe1e2baa40fd34cacd714dd7bfd3733371ef59c9451cd296174fcad10a9987e86db12fa3a67bba049092b9f8a337b9c5c9772d632cd0062202b176deea762266a636142ca6b144a93ddada19829bd6a3d8a5f71e6b238279896c359e3c3f28c4e0be424f6951159452b7f7122b1fe388c4bdca178afd076aa494949f4749e5585934b2439eb13994ecc9132932b71f4d112fa38e98b625c455d39fa8f75671833d57d0bcff5bcdbd9e824f0f113f2533cc6ec223b5afb1eaea4e4e9bf14e8df6c20e4c77d1cc340e4cf9ce0be61913140eee7dc11b18c045b5eb1d219d8873799957a05b71b60d9d44d7bfd3f7318936b211c13e76f681c3f020e5037f3202725bc2f6d5b82a0f0f9034e407b78e2fe90e53d707de1cc3b289717562fc52bdc95c5104e89035f3e77fb8e24973893482e9cafb2e7fb9b8b693c397d758d8f1ef10d2d3dc84cf5b666c9a212d00934e0446c3e4a78c7b3d9b49b3abb4d97455da3b85f41523831ad90f2eef5b72236f32b5e00630697fcaa95167f5238724e3ac9404d31a6dfaae53b20fefbec07cdc2a36537cb966502a1a772e7b9dfe02e368a7ca1f56ab95d3c6938516e8abc63981f47e662aea917173d4a8f023bd5e01052b8aff2515e75810d5779882f30cdfee379efd328dab12010bc86b967e210cf156c83320af7b7490d79166d9be7bdc438dfae47b4e0106544310097cf0474eaa5a13cf0faad4d2ddfdc524fe90702fb607c95db9b63f3c16c4beb97ef4a69c138f78f1b95c9bbdbcc71b5bbd859e382f310c0dcca26840b1d1d518f6e68e4f8c055a7e7b20563215295108ff1801d9628f32e77104cfc5dedbfd275bce6c0e4d22716e25a4c0450a0d978b6b884ca8c6ca954e3a32f6193229dafffaf5fa0cdce4e483acac23835b3b0b5f985a41eaac23c268ffeb731cb10428eed935e3e282604b80236babf967f55248fe38d5a6bb0d9fe88a7a2d0e5d32c8245328d48a1a4036cecf7bff26c32bcbba1b43a1e7c5c3f6a18a231c52fca46a16dfcbd8653922eae19be3c63ffecb1ef19d4d9e6f1d20f957ccd7d53fca6376395e3030ff1a9b5db7e3d61bbfa5d792201abc167a1a191d3785bf5cbebd2c4b60154d1d67f1c554402e85ea4d890f92c99f9708baaa010d390dd21de072a7e53df945f917d186d2677e82b006848891a9102870c5019dc798f572a21a23360e5488311b73352485079f9c14de5612bf05deeafd551ca0fa794c426772cf7b83f987bd45160417ce7ddf6f25dd99eb0b2373842a7df5a7e012026664d9161fd3e3b8714b31fa7ff69feccf46da884c2655ee6c84e7284645f20c9fa847421ba10621738eafe14102b50c0d95071e8c22249777970740fa4667374e46a9772a20ee4240264d7bca97110f84d26f040c9329d75ba8029b8c9fa448ec0ee1b72d46bbf09f310717e73f500262ab9bd34f7a5fe5256ab2f3990288a175478f934ec8b6de79bd1ca6a518424c6c176c9434c4ce53212c0b9f90c386ced997ec59517b2848c1a3f91173352de98846aeb7030ebefc74223da5cc6b4db67f89054994910d9a58761b20156dd743c9447f17e85a0de4f860d17afe813ebddfd82aa214cb3df9848610e59592b4d6e8ff243aebd7407f26f5754811249a1f48afd7af6e04010a02d3b68250255b3359987a026827d2fcb94badc02d6668a3bb9425b5857381245b7ad10a9ab46a96cde5b254daa60c8f6e1b5479768f3ce80327c730f88b1d19928474eb247ef3135ad2a1e5838ab949832ad2713e3296fc82a083742dfa6d5ebb3d2b63e60cc20ff4e575d6097645f4c545ed14b6d0cacb307009ce9c74cd87baaf84f22a67d203a19b0bba5f08e4fa7f6083e09c46a26669be1411ff4ba39a2c86652d89725f69941996b778431876e731c01a0bcb0105bec811122e3d6def2d733cd803834f24d13f2edddcb4acc9b0d291343d4cf2969f8801ac6348705a02605296ce3fafc4a82d613a34de6bd5023f3012f2ce9f86f3c971cb2028d086783ec7fc1a79a31cd04e345f401815297ac7d45349e81bced573bcb011bcaf04172d80d145340604b79aeb37758b526b22b09771051301acfe40b52ed7d32ecad484206c47f36eab0ee0c0b33b1cffa1430f791bcb3780597833e8c0b867422a94b4255267dd1f66435d28d09a83e9d9e2a26671a9d81962b83b2891771097b88375272e176cddd760378f95f1c00b441fc2f07f39929e214a4b1336db4e4a2420ccdc4d77ad552638d9c320a42823ff422f22f2cc2ebb4b7875d0c4fe3433b8a7ee48a8595ccd63b05a9c618c8e239259df67d5db8b25c46c60d27ca592922587cc79364d80985eae0c1d3670319c91870dffe25a540d895c9586b2b55d272d78fb51a34720b828cda18075dadf2544a8b5e39467672f23a6d698c8f14eb26da095e8eac0202be412558ba40b1fa1a864e9a77f5384f1e5dde23cff03b384d7f233962c03b9e9eaac227ba006185254c04acc3191e213b75be5902fb83d260174f992ca41276adaf2f23650e88b63fc76427452b8d081dbfb6813ae441ca74454b3ad0026136fe6486b900237839f05d3d7ee9ebe5354e0ff286787210ed99dc893ad14fd2ca5f9f3eb3197c09497ce4ef33e1a800ea9d8c7bc4df01b1286de3d6d9209ff8f3daf31ed4cda3a4329f9fe9503ff792427fdd4b92938d55915dd42ded2913dad8fc760771b3285898c12860aad157df0e6021dc21d1c8214cbc818ed3b8954b9bea2a2f34cfef6ced30f5e39155c6e492576f1dfb3afb247ce52b7e58ee618b68c0062d4b3747d9e18624031c92536b2b7cb6d1401eeed7b79a309b77f76bf02499a123f1c71de6e888716224588fba340ddb31dee9bc9d69ecb928746e6aa34fee4058f44d047cd67a0c9494cdcb25cf5404daea3480d988f7b29f614ba86bed53975e69f88399688c9f5ec25b31428c06e26fd9a68d6654e748af34336922cff62c1bfdba3a320af1cad42ae794b7e861e2cdbace9ff03bf2c827345a5f89f74ec36ef8ce87305eb6981a3df3be218f2f6eb597fc3ebd2fcac6e25c31a6b56fb8835634e1af8e19e359f325e0b23dcced91374aef780d0aeaddf625824c3d3171fdbe0e3c245a5130df73bdf08b81004361873b74b3329867afda6e16fb93cadd6d18d403f3dd5da28321fba69723e7bf8613551590710c39f2fb96716a6cf1165d78a4b721f890d01b10899dacbcc8ba52f98f1d2ce069c018268c68da8b3cb0e7e3492c97aee1b4681751cae4ed957a4ba9d58361ff93a0735b1340dfdde410895d953af67af41f464d176673f78a3b21bb2e6a23cbe6d7afc8b18296dfd126c91a19da08029ba0ebe5725d518a6e45a4751ef93e0c9212416400cf0a1b6587811632c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}]}}]}, 0x3628}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xe) 21m12.047781759s ago: executing program 1 (id=1249): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 21m11.445753609s ago: executing program 1 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffffff, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 21m10.52641141s ago: executing program 1 (id=1256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0xfff}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 20m55.114721728s ago: executing program 34 (id=1256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0xfff}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10m53.783266286s ago: executing program 5 (id=2222): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x0) 10m51.079014468s ago: executing program 5 (id=2229): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 10m49.311880536s ago: executing program 5 (id=2233): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x20000600) close(0x3) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 10m49.074211274s ago: executing program 5 (id=2235): prctl$PR_CAPBSET_DROP(0x18, 0xf52d) 10m48.89177376s ago: executing program 5 (id=2236): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002140), 0x8004, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$cgroup2(0x0, &(0x7f0000002300)='./file0/file0\x00', 0x0, 0x50c12, 0x0) 10m47.929421602s ago: executing program 5 (id=2238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = syz_open_dev$media(&(0x7f0000002b00), 0x733, 0x280) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000002b40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd, 0x2}, {0xfff8}}}}, 0xf) 10m32.605463992s ago: executing program 35 (id=2238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = syz_open_dev$media(&(0x7f0000002b00), 0x733, 0x280) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000002b40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd, 0x2}, {0xfff8}}}}, 0xf) 8m48.60108126s ago: executing program 4 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) getpgid(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000) 8m46.412379703s ago: executing program 4 (id=2379): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "340b7832acefd131f807498c25fd6fad99877a033cbabdf73f8500004e22aa2f"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 8m45.675587197s ago: executing program 4 (id=2380): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x10ffff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) 8m43.763742161s ago: executing program 4 (id=2381): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000180)={[{@index_off}]}) 8m42.538317752s ago: executing program 4 (id=2384): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 8m38.39797519s ago: executing program 4 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) getpgid(r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000) 8m23.083846561s ago: executing program 36 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) getpgid(r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000) 6m18.847586348s ago: executing program 0 (id=2562): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004800) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 6m13.6788505s ago: executing program 0 (id=2569): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 6m11.746158065s ago: executing program 0 (id=2571): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x11) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xa123, 0x40001) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0}], 0x1, 0x8000, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000900)={0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000058c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x4040, 0x1) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000000)) 6m4.463142297s ago: executing program 0 (id=2579): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 6m0.395354383s ago: executing program 0 (id=2584): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 5m59.102674566s ago: executing program 0 (id=2588): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x11) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xa123, 0x40001) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0}], 0x1, 0x8000, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000900)={0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000058c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x4040, 0x1) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000000)) 5m43.70841178s ago: executing program 37 (id=2588): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x11) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xa123, 0x40001) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0}], 0x1, 0x8000, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000900)={0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000058c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x4040, 0x1) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000000)) 3m52.451935303s ago: executing program 8 (id=2735): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer], 0x0, 0x0, 0x0}) 3m52.211983891s ago: executing program 8 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a80)={@val={0x0, 0x4}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote}}}}}}, 0x66) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m50.468228099s ago: executing program 8 (id=2739): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000180), 0xffffffff, 0x2) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060500000000000000e0ff000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 3m49.189783032s ago: executing program 8 (id=2741): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) 3m44.833754918s ago: executing program 8 (id=2745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb, [{0x9, 0x5, 0x0, 0x3, 0x6, 0xfffffffb}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="dab050ab", 0x4}], 0x1}, 0x4000880) 3m44.473765249s ago: executing program 6 (id=2746): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) clock_adjtime(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) 3m42.859891883s ago: executing program 6 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a80)={@val={0x0, 0x4}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote}}}}}}, 0x66) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m42.296068082s ago: executing program 8 (id=2750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0xa6ff}}, 0x18}, 0x1, 0x0, 0x0, 0x28004010}, 0x20041040) 3m40.840819001s ago: executing program 6 (id=2753): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000080)=@generic={0xa, "b704e23b0230ec5547cb9d39b541177c2624047cdfbb1183e37a472edac14ed1f62fb01983111172d9fb0690eabb9ebc9bceb1c74212721ca59952e9cffa4005f2eab850139f1d84d13af2977f6d6284def2415254ad7188efd400d337d9272e0fa9e31051bbce00647a040627a7e0d3f6ad4319066929d5f578afb23137"}, 0x80, &(0x7f00000002c0)}}], 0x1, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m38.284180326s ago: executing program 6 (id=2755): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x20044048) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4000084) acct(0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 3m37.949570987s ago: executing program 6 (id=2756): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 3m35.267092417s ago: executing program 6 (id=2758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb, [{0x9, 0x5, 0x0, 0x3, 0x6, 0xfffffffb}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="dab050ab", 0x4}], 0x1}, 0x4000880) 3m27.143983148s ago: executing program 38 (id=2750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0xa6ff}}, 0x18}, 0x1, 0x0, 0x0, 0x28004010}, 0x20041040) 3m20.129743762s ago: executing program 39 (id=2758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb, [{0x9, 0x5, 0x0, 0x3, 0x6, 0xfffffffb}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="dab050ab", 0x4}], 0x1}, 0x4000880) 12.570190031s ago: executing program 3 (id=3006): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x7, 0x40000003, 0x89, 0xcaa3, 0xffe, 0x20001e5b, 0x8000000, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 11.451926948s ago: executing program 9 (id=3007): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x800000080000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='smb3\x00', 0x0, 0x0) 10.018914536s ago: executing program 9 (id=3010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer], 0x0, 0x0, 0x0}) 8.875544304s ago: executing program 7 (id=3012): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 8.817711656s ago: executing program 9 (id=3013): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x10ffff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) 8.786436837s ago: executing program 2 (id=3014): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x3800000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080)=0x12, &(0x7f00000001c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) ioprio_set$uid(0x3, 0x0, 0x0) 8.660300661s ago: executing program 7 (id=3015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.367988191s ago: executing program 7 (id=3016): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x4004809) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000032680)=""/102389, 0xffffff17}], 0x1, 0x19039}}], 0x48}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x3, 0x1, 0x8a5, 0x100, 0x1, 0x5, 0xc}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000001c0)={0x5, 0x2, 0xd, 0x10, 0x1000, 0xffff, 0x4}) 8.367707631s ago: executing program 2 (id=3017): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) socket$inet(0x2b, 0x801, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) r4 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x2]}, 0x8) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) close(r4) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) 7.19086916s ago: executing program 3 (id=3018): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x800000080000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='smb3\x00', 0x0, 0x0) 7.074616154s ago: executing program 2 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) 5.149103938s ago: executing program 2 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x601, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 4.968967924s ago: executing program 9 (id=3021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer], 0x0, 0x0, 0x0}) 4.763410151s ago: executing program 9 (id=3022): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x182) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0xfffffffffffffde8) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1}, 0x40002160) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 4.539854659s ago: executing program 3 (id=3023): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 4.463706791s ago: executing program 9 (id=3024): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sync_file_range(0xffffffffffffffff, 0x0, 0x5, 0x7) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0xff}], 0x1) 4.302286136s ago: executing program 7 (id=3025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2000, 0x8, 0x4}, {0x2, 0xfe, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}}, 0x20000084) 4.301551457s ago: executing program 3 (id=3026): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x7, 0x40000003, 0x89, 0xcaa3, 0xffe, 0x20001e5b, 0x8000000, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 3.528322403s ago: executing program 7 (id=3027): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) socket$inet(0x2b, 0x801, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) r4 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x2]}, 0x8) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) close(r4) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) 3.187325884s ago: executing program 3 (id=3028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) 1.098636054s ago: executing program 3 (id=3029): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x10ffff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) 868.039612ms ago: executing program 2 (id=3030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer], 0x0, 0x0, 0x0}) 769.108495ms ago: executing program 7 (id=3031): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x800000080000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='smb3\x00', 0x0, 0x0) 0s ago: executing program 2 (id=3032): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) kernel console output (not intermixed with test programs): 1.501451][ T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1101.594060][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1101.601814][ T8] usb 7-1: no configurations [ 1101.606428][ T8] usb 7-1: can't read configurations, error -22 [ 1103.429509][ T8] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1103.656314][ T8] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1103.688109][ T8] usb 7-1: config 74 has an invalid interface number: 240 but max is 0 [ 1103.738296][ T8] usb 7-1: config 74 has no interface number 0 [ 1103.766444][ T8] usb 7-1: config 74 interface 240 has no altsetting 0 [ 1104.676752][T14279] overlayfs: failed to resolve './file1/file0': -2 [ 1105.345538][T14281] comedi comedi0: Minor 3 could not be opened [ 1105.613780][ T8] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1105.680570][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.698843][T14284] overlayfs: missing 'workdir' [ 1105.738813][ T8] usb 7-1: can't set config #74, error -71 [ 1105.751712][ T8] usb 7-1: USB disconnect, device number 20 [ 1108.019493][ T5848] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1108.249506][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 1108.307808][ T5848] usb 1-1: no configurations [ 1108.318649][ T5848] usb 1-1: can't read configurations, error -22 [ 1108.509559][ T5848] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1108.796526][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 1108.836585][ T5848] usb 1-1: no configurations [ 1108.888416][ T5848] usb 1-1: can't read configurations, error -22 [ 1108.936390][ T5848] usb usb1-port1: attempt power cycle [ 1109.431830][ T5848] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1109.535214][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 1110.229985][ T5848] usb 1-1: no configurations [ 1110.234660][ T5848] usb 1-1: can't read configurations, error -22 [ 1110.509568][ T5848] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1110.613367][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 1110.635114][ T5848] usb 1-1: no configurations [ 1110.687149][ T5848] usb 1-1: can't read configurations, error -22 [ 1110.699583][ T5848] usb usb1-port1: unable to enumerate USB device [ 1111.947031][T14312] comedi comedi0: Minor 3 could not be opened [ 1112.031234][T14316] overlayfs: missing 'workdir' [ 1113.355581][T11078] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1114.239736][ T8] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 1114.695684][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2074'. [ 1116.174495][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.180990][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.329098][ T8] usb 1-1: device descriptor read/all, error -71 [ 1116.757216][T14338] overlayfs: failed to resolve './file1/file0': -2 [ 1117.589435][ T5812] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1117.793488][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 1117.973869][ T5812] usb 7-1: no configurations [ 1118.019532][ T5812] usb 7-1: can't read configurations, error -22 [ 1118.427775][ T5812] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1118.899466][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 1118.979891][ T5812] usb 7-1: no configurations [ 1118.984527][ T5812] usb 7-1: can't read configurations, error -22 [ 1119.164818][ T5812] usb usb7-port1: attempt power cycle [ 1119.254621][T14354] overlayfs: missing 'workdir' [ 1119.579526][ T5812] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1119.642437][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 1119.719549][ T5812] usb 7-1: no configurations [ 1119.737998][ T5812] usb 7-1: can't read configurations, error -22 [ 1119.909508][ T5812] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1119.990140][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 1119.995952][ T5812] usb 7-1: no configurations [ 1120.000948][ T5812] usb 7-1: can't read configurations, error -22 [ 1120.029752][ T5812] usb usb7-port1: unable to enumerate USB device [ 1120.809543][T11078] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1121.301378][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 1124.685280][T14391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1126.572282][T14399] overlayfs: failed to resolve './file1/file0': -2 [ 1133.054815][T14429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1133.109515][ T5812] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1133.309681][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1133.316718][ T5812] usb 1-1: no configurations [ 1133.323073][ T5812] usb 1-1: can't read configurations, error -22 [ 1133.479470][ T5812] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1133.669431][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1133.821731][ T5812] usb 1-1: no configurations [ 1133.827134][ T5812] usb 1-1: can't read configurations, error -22 [ 1133.871192][ T5812] usb usb1-port1: attempt power cycle [ 1134.429541][ T5812] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1134.480175][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1134.509033][ T5812] usb 1-1: no configurations [ 1134.519008][ T5812] usb 1-1: can't read configurations, error -22 [ 1134.652724][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2103'. [ 1134.699671][ T5812] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1134.780090][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1134.789165][ T5812] usb 1-1: no configurations [ 1134.816501][ T5812] usb 1-1: can't read configurations, error -22 [ 1134.850382][ T5812] usb usb1-port1: unable to enumerate USB device [ 1136.785147][T11078] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1140.055170][T14471] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1140.949421][ T7035] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1141.179548][ T7035] usb 7-1: Using ep0 maxpacket: 8 [ 1141.205921][ T7035] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1141.299799][ T7035] usb 7-1: can't read configurations, error -61 [ 1141.589460][ T7035] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1141.779618][ T7035] usb 7-1: Using ep0 maxpacket: 8 [ 1141.787331][ T7035] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1141.819795][ T7035] usb 7-1: can't read configurations, error -61 [ 1141.847117][ T7035] usb usb7-port1: attempt power cycle [ 1142.329598][ T7035] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1142.529578][ T7035] usb 7-1: Using ep0 maxpacket: 8 [ 1142.550074][ T7035] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1143.319028][ T7035] usb 7-1: can't read configurations, error -61 [ 1143.565373][ T7035] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1143.617539][ T7035] usb 7-1: Using ep0 maxpacket: 8 [ 1144.679021][ T7035] usb 7-1: device descriptor read/all, error -71 [ 1144.696824][ T7035] usb usb7-port1: unable to enumerate USB device [ 1145.522740][T11078] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1146.250927][T14508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1146.799450][ T7035] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1147.003529][ T7035] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1147.087045][ T7035] usb 5-1: config 74 has an invalid interface number: 240 but max is 0 [ 1147.124800][ T7035] usb 5-1: config 74 has no interface number 0 [ 1147.172928][ T7035] usb 5-1: config 74 interface 240 has no altsetting 0 [ 1147.892136][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2121'. [ 1149.921398][ T7035] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1149.959372][ T7035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.006109][ T7035] usb 5-1: can't set config #74, error -71 [ 1150.049742][ T7035] usb 5-1: USB disconnect, device number 41 [ 1150.388910][ T5811] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1150.599671][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 1150.615648][ T5811] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1150.635990][ T5811] usb 7-1: can't read configurations, error -61 [ 1151.239446][ T5811] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1151.472629][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 1151.484920][T14548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1151.552869][ T5811] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1151.714216][ T5811] usb 7-1: can't read configurations, error -61 [ 1151.772044][ T5811] usb usb7-port1: attempt power cycle [ 1153.211775][ T5811] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1153.489493][ T5811] usb 7-1: device not accepting address 31, error -71 [ 1154.153263][T11078] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1158.773104][T14581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1161.288173][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2140'. [ 1165.287173][T11078] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1165.610836][T14635] geneve2: entered promiscuous mode [ 1165.616172][T14635] geneve2: entered allmulticast mode [ 1169.143488][T14652] ceph: No mds server is up or the cluster is laggy [ 1171.365272][T14681] binder: 14679:14681 ioctl c0306201 0 returned -14 [ 1171.405458][T14681] binder: 14679:14681 ioctl c0306201 0 returned -14 [ 1173.439487][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2155'. [ 1173.808331][T11078] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1173.999572][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1174.199506][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1174.210423][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1174.249467][ T9] usb 1-1: config 0 has no interface number 0 [ 1174.269745][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1174.284909][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.312169][ T9] usb 1-1: Product: syz [ 1174.326666][ T9] usb 1-1: Manufacturer: syz [ 1174.336711][ T9] usb 1-1: SerialNumber: syz [ 1174.361766][ T9] usb 1-1: config 0 descriptor?? [ 1174.433132][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1174.575441][ T9] usb 1-1: selecting invalid altsetting 1 [ 1174.591047][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1174.621356][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1174.680696][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1174.700954][ T9] usb 1-1: media controller created [ 1174.747023][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1174.901115][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1174.926011][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1174.965343][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1175.183031][ T9] usb 1-1: USB disconnect, device number 75 [ 1175.808884][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1176.319510][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1176.357639][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.386830][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.437509][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.521116][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.614365][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1176.639409][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.909487][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 1176.916227][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1177.120046][ T9] usb 1-1: USB disconnect, device number 76 [ 1177.703784][T14720] CIFS mount error: No usable UNC path provided in device string! [ 1177.703784][T14720] [ 1177.714412][T14720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1178.017192][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.023810][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.519461][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1180.376005][T14732] binder: 14730:14732 ioctl c0306201 2000000004c0 returned -14 [ 1184.139751][T11078] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1185.105632][T14749] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2181'. [ 1185.162811][T14749] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2181'. [ 1185.234389][T14749] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2181'. [ 1190.539397][T11078] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1192.083346][T14788] netlink: 'syz.0.2193': attribute type 4 has an invalid length. [ 1192.091163][T14788] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2193'. [ 1196.356639][T11078] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1197.569017][T14829] netlink: 'syz.0.2203': attribute type 4 has an invalid length. [ 1197.577230][T14829] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2203'. [ 1200.321884][T14856] netlink: 'syz.5.2214': attribute type 4 has an invalid length. [ 1200.329984][T14856] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2214'. [ 1203.719869][T11078] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1204.579373][ T5848] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1204.840257][ T5848] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1204.848714][ T5848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.917790][ T5848] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1204.956989][ T5848] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1204.991148][ T5848] usb 7-1: Manufacturer: syz [ 1204.998587][ T5848] usb 7-1: config 0 descriptor?? [ 1205.060450][T14895] netlink: 'syz.4.2224': attribute type 4 has an invalid length. [ 1205.068300][T14895] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2224'. [ 1205.322341][ T5848] rc_core: IR keymap rc-hauppauge not found [ 1205.328318][ T5848] Registered IR keymap rc-empty [ 1205.365489][ T5848] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1205.428066][ T5848] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 1206.041303][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1206.055126][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1206.080302][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1206.102126][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1206.116860][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1206.124725][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1206.177100][T12940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.286855][T14913] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2222'. [ 1206.342455][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2222'. [ 1206.376033][T12940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.544699][T12940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.866492][T11078] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1207.989534][ T5784] block nbd5: Receive control failed (result -32) [ 1208.031100][T14920] block nbd5: shutting down sockets [ 1208.066150][T12940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.103007][ T787] usb 7-1: USB disconnect, device number 33 [ 1208.253624][ T5784] Bluetooth: hci3: command tx timeout [ 1208.310436][T14925] netlink: 'syz.6.2232': attribute type 4 has an invalid length. [ 1208.318270][T14925] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2232'. [ 1209.147087][T14908] chnl_net:caif_netlink_parms(): no params data found [ 1211.156502][ T5784] Bluetooth: hci3: command tx timeout [ 1211.204228][T14963] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1211.213679][T14963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1211.223333][T14963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1211.434297][T14908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.455733][T14908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.479658][T14908] bridge_slave_0: entered allmulticast mode [ 1211.499886][T14908] bridge_slave_0: entered promiscuous mode [ 1211.541149][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.548349][T14908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.585566][T14908] bridge_slave_1: entered allmulticast mode [ 1211.613718][T14908] bridge_slave_1: entered promiscuous mode [ 1211.959246][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.979677][T14968] netlink: 'syz.6.2241': attribute type 4 has an invalid length. [ 1211.987462][T14968] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1212.118539][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.301406][T14908] team0: Port device team_slave_0 added [ 1212.326689][T14908] team0: Port device team_slave_1 added [ 1212.439626][ T5811] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1212.510323][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.517331][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.579571][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.651654][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.658789][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.709586][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.733039][ T5811] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1212.749414][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.760590][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.791759][ T5811] usb 7-1: config 0 descriptor?? [ 1212.847159][T12940] hsr_slave_0: left promiscuous mode [ 1212.856993][T12940] hsr_slave_1: left promiscuous mode [ 1212.863957][T12940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.872003][T12940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.890977][T12940] dummy0: left allmulticast mode [ 1212.897037][T12940] dummy0: left promiscuous mode [ 1212.909748][T12940] bridge0: port 3(dummy0) entered disabled state [ 1212.919757][T12940] bridge_slave_1: left allmulticast mode [ 1212.925511][T12940] bridge_slave_1: left promiscuous mode [ 1212.932645][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.942871][T12940] bridge_slave_0: left allmulticast mode [ 1212.948581][T12940] bridge_slave_0: left promiscuous mode [ 1212.957277][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.041715][T12940] veth1_macvtap: left promiscuous mode [ 1213.047375][T12940] veth0_macvtap: left promiscuous mode [ 1213.059626][T12940] veth1_vlan: left promiscuous mode [ 1213.075560][T12940] veth0_vlan: left promiscuous mode [ 1213.226119][ T5784] Bluetooth: hci3: command tx timeout [ 1213.255436][ T5811] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 1213.278194][ T5811] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0002/input/input13 [ 1213.328218][T12940] infiniband syz2: set down [ 1213.546225][ T5811] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1214.220199][ T23] usb 7-1: USB disconnect, device number 34 [ 1214.467900][T14999] fido_id[14999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1215.964101][ T5784] Bluetooth: hci3: command tx timeout [ 1217.260176][T12940] bond1 (unregistering): Released all slaves [ 1218.746808][T12940] team0 (unregistering): Port device team_slave_1 removed [ 1218.821098][T12940] team0 (unregistering): Port device team_slave_0 removed [ 1218.887764][T12940] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.959205][T12940] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.028434][ T1097] smc: removing ib device syz2 [ 1219.416643][T12940] .` (unregistering): Released all slaves [ 1219.556866][ T9] infiniband syz2: ib_query_port failed (-19) [ 1219.625583][T15009] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1219.634997][T15009] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1219.644628][T15009] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1219.816822][T15017] netlink: 'syz.6.2249': attribute type 4 has an invalid length. [ 1219.865700][T15017] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2249'. [ 1220.004779][T14908] hsr_slave_0: entered promiscuous mode [ 1220.112203][T14908] hsr_slave_1: entered promiscuous mode [ 1220.158066][T14908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.174400][T14908] Cannot create hsr debugfs directory [ 1220.379738][ T5812] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1220.612003][ T5812] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.619803][ T5812] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1220.654429][ T5812] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1220.686158][ T5812] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.704574][ T5812] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1220.716073][ T5812] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1220.749613][ T5812] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.768046][ T5812] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1220.800958][ T5812] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1220.870319][ T5812] usb 7-1: string descriptor 0 read error: -22 [ 1220.876842][ T5812] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1220.909769][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.974227][ T5812] adutux 7-1:168.0: interrupt endpoints not found [ 1221.302729][ T5812] usb 7-1: USB disconnect, device number 35 [ 1221.456127][T12940] IPVS: stop unused estimator thread 0... [ 1221.764187][T15047] overlayfs: failed to resolve './file0': -2 [ 1222.982388][T14908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1223.021278][T14908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1223.136731][T14908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1223.190068][T14908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1223.843753][T14908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.957801][T14908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.024545][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.031906][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.089020][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.096360][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.311591][T14908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1226.173849][T11078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.186794][T11078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.199624][T11078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.212318][T11078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.250537][T11078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1226.260073][T11078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1226.543288][ T6924] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.596764][T14908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.905532][ T6924] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.402411][T15095] netlink: 'syz.4.2258': attribute type 4 has an invalid length. [ 1227.439672][T15095] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2258'. [ 1227.641502][ T6924] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.959885][ T5784] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1228.972385][T11078] Bluetooth: hci1: command tx timeout [ 1229.024632][ T6924] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.162174][T14908] veth0_vlan: entered promiscuous mode [ 1229.259244][T14908] veth1_vlan: entered promiscuous mode [ 1231.054581][T11078] Bluetooth: hci1: command tx timeout [ 1231.359880][T14908] veth0_macvtap: entered promiscuous mode [ 1231.416426][T14908] veth1_macvtap: entered promiscuous mode [ 1231.547854][T15084] chnl_net:caif_netlink_parms(): no params data found [ 1231.592221][T14908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.654018][T14908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.679411][T14908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.699860][T14908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.729429][T14908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.749359][T14908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.779665][T14908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.801184][T14908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.950043][T14908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.958908][T14908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.029379][T14908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.038161][T14908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.844125][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.891107][T15084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.898495][T15084] bridge_slave_0: entered allmulticast mode [ 1232.933502][T15084] bridge_slave_0: entered promiscuous mode [ 1232.957605][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.967073][T15084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.999709][T15084] bridge_slave_1: entered allmulticast mode [ 1233.007218][T15084] bridge_slave_1: entered promiscuous mode [ 1233.129634][T11078] Bluetooth: hci1: command tx timeout [ 1233.253480][T15152] syz.4.2265: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1233.310446][T15152] CPU: 0 PID: 15152 Comm: syz.4.2265 Not tainted syzkaller #0 [ 1233.318001][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.328108][T15152] Call Trace: [ 1233.331423][T15152] [ 1233.334372][T15152] dump_stack_lvl+0x18c/0x250 [ 1233.339158][T15152] ? show_regs_print_info+0x20/0x20 [ 1233.344386][T15152] ? load_image+0x400/0x400 [ 1233.348919][T15152] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1233.355386][T15152] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1233.361915][T15152] warn_alloc+0x246/0x340 [ 1233.366334][T15152] ? stack_trace_save+0xaa/0x100 [ 1233.371347][T15152] ? zone_watermark_ok_safe+0x230/0x230 [ 1233.376957][T15152] ? kasan_set_track+0x5f/0x70 [ 1233.381814][T15152] ? kasan_set_track+0x4e/0x70 [ 1233.386620][T15152] ? __kasan_kmalloc+0x8f/0xa0 [ 1233.391436][T15152] ? xsk_init_queue+0xad/0x100 [ 1233.396432][T15152] ? xsk_setsockopt+0x42e/0x760 [ 1233.401332][T15152] ? do_sock_setsockopt+0x175/0x1a0 [ 1233.406691][T15152] ? __x64_sys_setsockopt+0x182/0x200 [ 1233.412113][T15152] __vmalloc_node_range+0x126/0x1330 [ 1233.417451][T15152] ? free_vm_area+0x50/0x50 [ 1233.421989][T15152] vmalloc_user+0x74/0x80 [ 1233.426365][T15152] ? xskq_create+0xbf/0x170 [ 1233.430891][T15152] xskq_create+0xbf/0x170 [ 1233.435280][T15152] xsk_init_queue+0xad/0x100 [ 1233.441038][T15152] xsk_setsockopt+0x42e/0x760 [ 1233.446192][T15152] ? xsk_poll+0x680/0x680 [ 1233.450551][T15152] ? __fget_files+0x28/0x4b0 [ 1233.455195][T15152] ? __fget_files+0x28/0x4b0 [ 1233.459810][T15152] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1233.465473][T15152] ? security_socket_setsockopt+0x7e/0xa0 [ 1233.471244][T15152] ? xsk_poll+0x680/0x680 [ 1233.475607][T15152] do_sock_setsockopt+0x175/0x1a0 [ 1233.480644][T15152] ? __fdget+0x180/0x210 [ 1233.484904][T15152] __x64_sys_setsockopt+0x182/0x200 [ 1233.490127][T15152] do_syscall_64+0x55/0xa0 [ 1233.494566][T15152] ? clear_bhb_loop+0x40/0x90 [ 1233.499449][T15152] ? clear_bhb_loop+0x40/0x90 [ 1233.504140][T15152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1233.510062][T15152] RIP: 0033:0x7fa20af9c819 [ 1233.514490][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.534109][T15152] RSP: 002b:00007fa20bd70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1233.542555][T15152] RAX: ffffffffffffffda RBX: 00007fa20b216090 RCX: 00007fa20af9c819 [ 1233.550758][T15152] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1233.558749][T15152] RBP: 00007fa20b032c91 R08: 0000000000000004 R09: 0000000000000000 [ 1233.566762][T15152] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.574876][T15152] R13: 00007fa20b216128 R14: 00007fa20b216090 R15: 00007ffc3b1f87d8 [ 1233.582968][T15152] [ 1233.723447][T15084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.766764][T15152] Mem-Info: [ 1233.773430][T15152] active_anon:29327 inactive_anon:6993 isolated_anon:0 [ 1233.773430][T15152] active_file:18543 inactive_file:40422 isolated_file:0 [ 1233.773430][T15152] unevictable:768 dirty:39 writeback:0 [ 1233.773430][T15152] slab_reclaimable:11658 slab_unreclaimable:94144 [ 1233.773430][T15152] mapped:24618 shmem:30567 pagetables:803 [ 1233.773430][T15152] sec_pagetables:0 bounce:0 [ 1233.773430][T15152] kernel_misc_reclaimable:0 [ 1233.773430][T15152] free:1294368 free_pcp:7245 free_cma:0 [ 1233.842552][T15084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.903006][T15152] Node 0 active_anon:114408kB inactive_anon:27972kB active_file:74136kB inactive_file:161488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97736kB dirty:156kB writeback:0kB shmem:118132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no [ 1233.983056][T15152] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1234.029598][T15152] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1234.110911][T15152] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1234.135329][T15152] Node 0 DMA32 free:1267720kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:107072kB inactive_anon:27972kB active_file:74136kB inactive_file:160660kB unevictable:1536kB writepending:152kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:16188kB local_pcp:5208kB free_cma:0kB [ 1234.166878][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.198649][T15152] lowmem_reserve[]: 0 0 0 0 0 [ 1234.199833][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.203758][T15152] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.266291][T15084] team0: Port device team_slave_0 added [ 1234.269382][T15152] lowmem_reserve[]: 0 0 0 0 0 [ 1234.277189][T15152] Node 1 Normal free:3893476kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23996kB local_pcp:12424kB free_cma:0kB [ 1234.292373][T15084] team0: Port device team_slave_1 added [ 1234.313301][T15152] lowmem_reserve[]: 0 0 0 0 0 [ 1234.318199][T15152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1234.395104][T15152] Node 0 DMA32: 227*4kB (UME) 709*8kB (UME) 1150*16kB (UME) 840*32kB (UME) 516*64kB (UME) 284*128kB (UME) 142*256kB (UME) 112*512kB (UM) 105*1024kB (UME) 57*2048kB (M) 202*4096kB (UM) = 1266580kB [ 1234.435051][T15152] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1234.505524][T15152] Node 1 Normal: 235*4kB (UME) 69*8kB (UME) 67*16kB (UME) 265*32kB (UME) 93*64kB (UME) 27*128kB (UME) 9*256kB (UM) 4*512kB (UME) 6*1024kB (UM) 4*2048kB (ME) 941*4096kB (M) = 3893476kB [ 1234.610646][T15152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1234.658624][T15152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1234.678705][T15152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1234.706328][T15152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1234.725462][T15152] 81717 total pagecache pages [ 1234.731434][T15084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.749669][T15084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.775879][T15152] 13 pages in swap cache [ 1234.781905][T15152] Free swap = 73136kB [ 1234.786025][T15152] Total swap = 124996kB [ 1234.790673][T15152] 2097051 pages RAM [ 1234.794650][T15152] 0 pages HighMem/MovableOnly [ 1234.799509][T15152] 416926 pages reserved [ 1234.807181][T15084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.818573][T15152] 0 pages cma reserved [ 1234.832132][T15084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.859618][T15084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.916568][T15084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.963959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.211338][T11078] Bluetooth: hci1: command tx timeout [ 1235.278664][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.855356][T15084] hsr_slave_0: entered promiscuous mode [ 1235.934083][T15084] hsr_slave_1: entered promiscuous mode [ 1235.963551][T15084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.987171][T15084] Cannot create hsr debugfs directory [ 1236.223888][T15178] overlayfs: workdir and upperdir must reside under the same mount [ 1237.714266][T15183] netlink: 'syz.4.2267': attribute type 4 has an invalid length. [ 1237.741099][T15183] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2267'. [ 1237.891005][ T6924] hsr_slave_0: left promiscuous mode [ 1237.914461][ T6924] hsr_slave_1: left promiscuous mode [ 1239.370742][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 1239.380329][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.386776][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.441662][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.483971][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.522028][ T6924] dummy0: left allmulticast mode [ 1240.527049][ T6924] dummy0: left promiscuous mode [ 1240.560246][ T6924] bridge0: port 3(dummy0) entered disabled state [ 1240.588458][ T6924] bridge_slave_1: left allmulticast mode [ 1240.718725][ T6924] bridge_slave_1: left promiscuous mode [ 1240.774456][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.892338][ T6924] bridge_slave_0: left allmulticast mode [ 1240.943164][ T6924] bridge_slave_0: left promiscuous mode [ 1240.997678][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.286689][ T6924] veth1_macvtap: left promiscuous mode [ 1241.319862][ T6924] veth0_macvtap: left promiscuous mode [ 1241.325737][ T6924] veth1_vlan: left promiscuous mode [ 1241.362259][ T6924] veth0_vlan: left promiscuous mode [ 1246.075372][ T6924] team0 (unregistering): Port device team_slave_1 removed [ 1246.212555][ T6924] team0 (unregistering): Port device team_slave_0 removed [ 1246.308160][ T6924] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.393507][ T6924] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.288856][ T6924] .` (unregistering): Released all slaves [ 1247.574541][T15224] netlink: 'syz.4.2277': attribute type 4 has an invalid length. [ 1247.593811][T15224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2277'. [ 1251.205673][T15084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1251.272935][T15084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1251.402266][T15084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1251.439190][T15084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1252.242774][ T6924] IPVS: stop unused estimator thread 0... [ 1252.438851][T15084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.140152][T15084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.181991][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.189526][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.254866][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.262124][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.549691][T11330] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1253.770865][T11330] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.801406][T11330] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1253.815249][T11330] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.825047][T11330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.833987][T11330] usb 7-1: Product: syz [ 1253.838285][T11330] usb 7-1: Manufacturer: syz [ 1253.843410][T11330] usb 7-1: SerialNumber: syz [ 1253.863514][T11330] cdc_mbim 7-1:1.0: skipping garbage [ 1253.985290][T15084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.100952][T15261] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1256.778401][T15261] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1256.801296][T11330] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 1256.835103][T11330] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1256.874067][T11330] wwan wwan0: port wwan0mbim0 attached [ 1256.926045][T11330] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 96:c0:a3:77:e6:9c [ 1257.203918][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.210956][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.217653][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.224369][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.230765][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.237532][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.244106][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.250930][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.259390][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.266143][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.279374][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.286312][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.299786][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.306556][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.314012][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.320774][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.327267][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.334074][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.340859][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 1257.347777][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 1257.354135][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1257.364432][ T9] usb 7-1: USB disconnect, device number 36 [ 1257.398824][ T9] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1257.592961][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1257.597261][T15084] veth0_vlan: entered promiscuous mode [ 1257.702204][T15084] veth1_vlan: entered promiscuous mode [ 1257.822881][T15084] veth0_macvtap: entered promiscuous mode [ 1257.834853][T15084] veth1_macvtap: entered promiscuous mode [ 1257.908421][T15084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.920981][T15084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.970471][T15084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.002854][T15084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.037127][T15084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.050172][T15084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.064596][T15084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.077413][T15084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.091129][T15084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.113300][T15084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.214655][T15084] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.237461][T15084] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.261888][T15084] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.285202][T15084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.860489][ T4960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1259.868338][ T4960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.988115][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.149107][T15326] comedi comedi0: Minor 3 could not be opened [ 1261.210439][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.184150][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1265.799503][ T5811] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1266.474384][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1266.488110][ T5811] usb 5-1: config 74 has an invalid interface number: 240 but max is 0 [ 1266.518081][ T5811] usb 5-1: config 74 has no interface number 0 [ 1266.548002][ T5811] usb 5-1: config 74 interface 240 has no altsetting 0 [ 1267.815920][ T5811] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1267.851415][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.919488][ T5811] usb 5-1: can't set config #74, error -71 [ 1267.951188][ T5811] usb 5-1: USB disconnect, device number 42 [ 1268.069401][T15376] comedi comedi0: Minor 3 could not be opened [ 1271.979426][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2304'. [ 1273.523556][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2305'. [ 1277.934380][ T5811] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 1278.234467][ T5811] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1278.290879][ T5811] usb 8-1: config 74 has an invalid interface number: 240 but max is 0 [ 1278.339579][ T5811] usb 8-1: config 74 has no interface number 0 [ 1278.357894][ T5811] usb 8-1: config 74 interface 240 has no altsetting 0 [ 1279.328711][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 1279.391933][ T5811] usb 8-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1279.489687][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.566167][ T5811] usb 8-1: can't set config #74, error -71 [ 1279.594224][ T5811] usb 8-1: USB disconnect, device number 2 [ 1283.789551][T11078] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1286.862329][T15500] autofs4:pid:15500:autofs_fill_super: called with bogus options [ 1288.879721][ T5811] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1290.010901][ T5811] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1292.471017][ T5811] usb 7-1: unable to read config index 0 descriptor/all [ 1292.521943][ T5811] usb 7-1: can't read configurations, error -71 [ 1293.919416][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2325'. [ 1300.549431][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 1300.662638][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.669183][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.319589][ T9] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1305.518215][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1305.552491][ T9] usb 7-1: config 74 has an invalid interface number: 240 but max is 0 [ 1305.569555][ T9] usb 7-1: config 74 has no interface number 0 [ 1305.575845][ T9] usb 7-1: config 74 interface 240 has no altsetting 0 [ 1309.304846][ T9] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1309.362329][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2346'. [ 1310.283772][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.319492][ T9] usb 7-1: can't set config #74, error -71 [ 1310.327317][ T9] usb 7-1: USB disconnect, device number 39 [ 1314.612539][T15683] IPv6: Can't replace route, no match found [ 1314.622101][T15683] IPv6: Can't replace route, no match found [ 1314.922593][T15689] Bluetooth: MGMT ver 1.22 [ 1315.969646][ T8] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 1317.039442][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2357'. [ 1317.394056][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1318.930209][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1318.938250][ T8] usb 1-1: can't read configurations, error -71 [ 1323.609420][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2368'. [ 1324.999501][T14984] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1325.356766][T14984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1325.372966][T14984] usb 5-1: config 74 has an invalid interface number: 240 but max is 0 [ 1325.399570][T14984] usb 5-1: config 74 has no interface number 0 [ 1326.431594][T14984] usb 5-1: config 74 interface 240 has no altsetting 0 [ 1327.287046][T14984] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1327.349445][T14984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.400363][T14984] usb 5-1: can't set config #74, error -71 [ 1327.440870][T14984] usb 5-1: USB disconnect, device number 43 [ 1328.813908][T15790] xt_hashlimit: size too large, truncated to 1048576 [ 1331.579388][ T5812] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1331.770263][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 1331.779518][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 1331.786322][ T5812] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 1331.804897][ T5812] usb 8-1: config 0 has no interface number 0 [ 1331.848689][ T5812] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1331.889957][ T5812] usb 8-1: config 0 interface 196 has no altsetting 0 [ 1331.942274][ T5812] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1331.966947][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.999356][ T5812] usb 8-1: Product: syz [ 1332.003587][ T5812] usb 8-1: Manufacturer: syz [ 1332.057829][ T5812] usb 8-1: SerialNumber: syz [ 1332.080417][ T5812] usb 8-1: config 0 descriptor?? [ 1332.093006][T15804] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1332.822543][ T5812] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1333.195132][ T5812] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached [ 1333.304758][T11078] Bluetooth: hci3: command 0x0406 tx timeout [ 1334.159397][T15836] overlayfs: missing 'lowerdir' [ 1334.194395][T15838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2382'. [ 1334.237128][ T23] usb 8-1: USB disconnect, device number 3 [ 1334.461405][ T23] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1334.946157][ T5812] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1335.172214][ T5812] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1335.189390][ T5812] usb 7-1: config 0 has no interface number 0 [ 1335.210093][ T5812] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1335.221954][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.251542][ T5812] usb 7-1: Product: syz [ 1335.255773][ T5812] usb 7-1: Manufacturer: syz [ 1335.281847][ T5812] usb 7-1: SerialNumber: syz [ 1335.317918][ T5812] usb 7-1: config 0 descriptor?? [ 1335.351632][ T5812] usb 7-1: selecting invalid altsetting 1 [ 1335.359392][ T23] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 1335.382226][ T5812] dvb_ttusb_budget: ttusb_init_controller: error [ 1335.409505][ T5812] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1335.781425][ T23] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1335.790654][ T23] usb 8-1: config 74 has an invalid interface number: 240 but max is 0 [ 1335.798917][ T23] usb 8-1: config 74 has no interface number 0 [ 1335.844316][ T23] usb 8-1: config 74 interface 240 has no altsetting 0 [ 1336.403761][ T5812] DVB: Unable to find symbol stv0299_attach() [ 1337.306492][ T5812] DVB: Unable to find symbol tda8083_attach() [ 1337.359330][ T5812] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1337.441349][ T23] usb 8-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1337.513052][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.576169][ T23] usb 8-1: can't set config #74, error -71 [ 1337.669427][ T23] usb 8-1: USB disconnect, device number 4 [ 1339.158263][T15875] ip6gre1: entered promiscuous mode [ 1339.328171][T15875] ip6gre1: entered allmulticast mode [ 1345.926474][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2396'. [ 1349.339429][ T5812] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1349.519347][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 1349.615484][ T5812] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1349.636854][ T5848] usb 7-1: USB disconnect, device number 40 [ 1349.662377][ T5812] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1349.749190][ T5812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1349.899996][ T5812] usb 1-1: config 1 has no interface number 0 [ 1349.935165][ T5812] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1349.947993][ T5812] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1350.081447][ T5812] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1350.099401][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.115641][ T5812] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1350.320829][ T5812] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1350.738514][T15983] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1351.372257][ T5812] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1351.406907][ T5812] usb 1-1: USB disconnect, device number 79 [ 1351.416813][ T5812] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1357.089489][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1357.100940][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1357.116636][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1357.165584][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1357.166363][ T3535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1357.196184][ T5812] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1357.239848][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1357.268188][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1357.286132][ T3535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.423606][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 1357.550542][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.773331][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.981016][T16025] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1357.990438][T16025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1358.000117][T16025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1358.094004][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1358.159585][ T5812] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1358.189616][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.230489][ T5812] usb 1-1: config 0 descriptor?? [ 1358.257121][ T3535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.297465][ T3535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.601991][ T3535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.636484][ T3535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.652661][ T5812] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 1358.698858][ T5812] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 1358.765797][ T5812] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/0:5) [ 1358.864014][ T5812] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 1358.910337][ T5812] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1358.945145][ T3535] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1358.974943][ T5812] microsoft 0003:045E:07DA.0003: no inputs found [ 1358.996757][ T3535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.028258][ T5812] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 1359.063761][ T3535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.096092][ T5812] usb 1-1: USB disconnect, device number 80 [ 1359.226299][T16043] fido_id[16043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1359.375510][T11078] Bluetooth: hci0: command tx timeout [ 1361.450522][T11078] Bluetooth: hci0: command tx timeout [ 1361.956325][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.049097][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.343606][T16027] chnl_net:caif_netlink_parms(): no params data found [ 1363.871678][T11078] Bluetooth: hci0: command tx timeout [ 1364.664251][T16027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.699675][T16027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.707010][T16027] bridge_slave_0: entered allmulticast mode [ 1364.791499][T16027] bridge_slave_0: entered promiscuous mode [ 1364.831455][T16027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.838787][T16027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.869567][T16027] bridge_slave_1: entered allmulticast mode [ 1364.901424][T16027] bridge_slave_1: entered promiscuous mode [ 1365.791906][T16027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.939841][ T5784] Bluetooth: hci0: command tx timeout [ 1366.012893][T16027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.348380][T16027] team0: Port device team_slave_0 added [ 1366.382695][T16027] team0: Port device team_slave_1 added [ 1366.740582][T16027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.759339][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.859280][T16027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.796449][T16027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.803886][T15338] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1367.828603][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.854687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.932334][T16027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.966389][T16116] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1367.975948][T16116] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1367.985840][T16116] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1368.089356][T15338] usb 1-1: Using ep0 maxpacket: 16 [ 1368.105140][T15338] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1368.136382][T15338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.179010][T15338] usb 1-1: Product: syz [ 1368.199322][T15338] usb 1-1: Manufacturer: syz [ 1368.224448][T15338] usb 1-1: SerialNumber: syz [ 1368.481714][T15338] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1368.506719][T16027] hsr_slave_0: entered promiscuous mode [ 1368.517162][T15338] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1368.549961][T16027] hsr_slave_1: entered promiscuous mode [ 1368.549998][T15338] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1368.589055][ T3535] hsr_slave_0: left promiscuous mode [ 1368.597766][T15338] usb 1-1: media controller created [ 1368.628579][ T3535] hsr_slave_1: left promiscuous mode [ 1368.635774][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.868092][ T5784] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1369.884292][T15338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1369.908615][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.950694][ T3535] dummy0: left allmulticast mode [ 1369.955709][ T3535] dummy0: left promiscuous mode [ 1369.989485][T15338] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1369.999734][ T3535] bridge0: port 3(dummy0) entered disabled state [ 1370.040276][ T3535] bridge_slave_1: left allmulticast mode [ 1370.049009][ T3535] bridge_slave_1: left promiscuous mode [ 1370.073712][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.095829][T15338] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 1370.104248][ T3535] bridge_slave_0: left allmulticast mode [ 1371.059615][ T3535] bridge_slave_0: left promiscuous mode [ 1371.060053][T15338] usb 1-1: USB disconnect, device number 81 [ 1371.065398][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.273023][ T3535] veth1_macvtap: left promiscuous mode [ 1371.278674][ T3535] veth0_macvtap: left promiscuous mode [ 1371.299483][ T3535] veth1_vlan: left promiscuous mode [ 1371.304994][ T3535] veth0_vlan: left promiscuous mode [ 1376.994722][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 1377.130101][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 1377.302611][ T3535] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.454557][ T3535] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.465895][ T3535] .` (unregistering): Released all slaves [ 1379.977046][T16162] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1379.988226][T16169] netlink: 'syz.6.2431': attribute type 15 has an invalid length. [ 1380.001043][T16162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1380.091087][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2431'. [ 1380.130534][T16162] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1382.150228][T16027] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1382.183101][T16027] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1382.246509][T16027] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1382.293084][T16027] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1382.637027][T16027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.675819][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 1382.711982][T16027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.804162][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.811421][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.875706][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.883084][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.503271][T16027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.407069][T16027] veth0_vlan: entered promiscuous mode [ 1388.423734][T16027] veth1_vlan: entered promiscuous mode [ 1389.675913][T16027] veth0_macvtap: entered promiscuous mode [ 1390.051235][T16027] veth1_macvtap: entered promiscuous mode [ 1390.138037][T16027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.186360][T16027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.238000][T16027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.258923][T16027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.344245][T16274] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1390.350899][T16027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.476267][T16027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.752215][T16027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.854877][T16027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.889375][T16027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.957653][T16027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.989774][T16027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.031171][T16027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.124818][T16027] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.154170][T16027] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.207600][T16027] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.471791][T16027] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.201454][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.259678][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.360250][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.391620][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.747780][T16305] autofs4:pid:16305:autofs_fill_super: called with bogus options [ 1392.955848][T16308] binder: 16301:16308 ioctl 4018620d 0 returned -22 [ 1393.170576][T16307] binder: 16301:16307 ioctl c0306201 0 returned -14 [ 1393.289339][T16307] binder: 16301:16307 ioctl c0306201 0 returned -14 [ 1401.353033][T16358] comedi comedi0: Minor 2 could not be opened [ 1408.065107][T14984] IPVS: starting estimator thread 0... [ 1408.182063][T16397] IPVS: using max 32 ests per chain, 76800 per kthread [ 1413.753765][T16448] syzkaller0: entered promiscuous mode [ 1413.779922][T16448] syzkaller0: entered allmulticast mode [ 1414.928580][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2478'. [ 1417.825785][T16474] netlink: 'syz.6.2481': attribute type 4 has an invalid length. [ 1417.834403][T16474] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2481'. [ 1423.361927][T16505] netlink: 'syz.6.2487': attribute type 15 has an invalid length. [ 1423.370592][T16505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2487'. [ 1423.381734][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.388091][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.258692][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2489'. [ 1425.666373][T15338] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1425.941320][T15338] usb 9-1: Using ep0 maxpacket: 32 [ 1425.970795][T15338] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1426.012974][T15338] usb 9-1: config 0 has no interface number 0 [ 1426.043464][T15338] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1426.085021][T15338] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1426.773103][T15338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.889528][T15338] usb 9-1: Product: syz [ 1426.893968][T15338] usb 9-1: Manufacturer: syz [ 1426.906114][T15338] usb 9-1: SerialNumber: syz [ 1426.941860][T15338] usb 9-1: config 0 descriptor?? [ 1427.261166][T16532] netlink: 'syz.6.2491': attribute type 4 has an invalid length. [ 1427.271507][T16532] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2491'. [ 1427.545963][T15338] usb 9-1: can't set config #0, error -71 [ 1427.561408][T15338] usb 9-1: USB disconnect, device number 2 [ 1432.125674][T16583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2499'. [ 1433.795262][T16592] netlink: 'syz.7.2501': attribute type 4 has an invalid length. [ 1433.803386][T16592] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1433.842719][T16592] .`: renamed from bond0 (while UP) [ 1435.439594][ T7035] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1435.661057][ T7035] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1435.670612][ T7035] usb 7-1: config 0 has no interface number 0 [ 1435.758177][ T7035] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1435.770471][ T7035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.778672][ T7035] usb 7-1: Product: syz [ 1435.793300][ T7035] usb 7-1: Manufacturer: syz [ 1435.851973][ T7035] usb 7-1: SerialNumber: syz [ 1435.888788][ T7035] usb 7-1: config 0 descriptor?? [ 1435.910547][ T7035] usb 7-1: selecting invalid altsetting 1 [ 1435.916592][ T7035] dvb_ttusb_budget: ttusb_init_controller: error [ 1435.950361][ T7035] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1436.244923][T15006] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1437.785792][ T7035] DVB: Unable to find symbol stv0299_attach() [ 1437.851523][T15006] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.862871][T15006] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1437.909386][T15006] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1437.959528][T15006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.501603][T15006] usb 8-1: config 0 descriptor?? [ 1438.574976][T15006] usb 8-1: can't set config #0, error -71 [ 1438.624493][T15006] usb 8-1: USB disconnect, device number 5 [ 1438.679404][ T7035] DVB: Unable to find symbol tda8083_attach() [ 1438.722128][ T7035] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1439.764482][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 1439.804995][ T7035] usb 7-1: USB disconnect, device number 41 [ 1440.944376][T16658] netlink: 'syz.7.2515': attribute type 5 has an invalid length. [ 1441.147986][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2516'. [ 1441.230491][T16667] binder: 16665:16667 ioctl c0306201 0 returned -14 [ 1441.469567][T15006] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1442.554205][T15006] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1442.562910][T15006] usb 7-1: config 0 has no interface number 0 [ 1442.605646][T15006] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1442.615056][T15006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.628848][T15006] usb 7-1: Product: syz [ 1442.954581][T15006] usb 7-1: Manufacturer: syz [ 1442.959536][T15006] usb 7-1: SerialNumber: syz [ 1442.967800][T15006] usb 7-1: config 0 descriptor?? [ 1442.983272][T15006] usb 7-1: selecting invalid altsetting 1 [ 1442.995476][T15006] dvb_ttusb_budget: ttusb_init_controller: error [ 1443.009333][T15006] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1445.406203][T15006] DVB: Unable to find symbol stv0299_attach() [ 1445.990495][T15006] DVB: Unable to find symbol tda8083_attach() [ 1445.997146][T15006] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1446.421975][T15006] usb 7-1: USB disconnect, device number 42 [ 1449.956284][T16736] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2531'. [ 1450.529431][T15006] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1450.869609][T15006] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1451.108054][T15006] usb 8-1: config 0 has no interface number 0 [ 1451.144300][T15006] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1451.163722][T15006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.200189][T15006] usb 8-1: Product: syz [ 1451.208261][T15006] usb 8-1: Manufacturer: syz [ 1451.229654][T15006] usb 8-1: SerialNumber: syz [ 1451.251003][T15006] usb 8-1: config 0 descriptor?? [ 1451.278932][T15006] usb 8-1: selecting invalid altsetting 1 [ 1451.329002][T15006] dvb_ttusb_budget: ttusb_init_controller: error [ 1451.356337][T15006] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1452.905332][T15006] DVB: Unable to find symbol stv0299_attach() [ 1453.004168][T15006] DVB: Unable to find symbol tda8083_attach() [ 1453.047551][T15006] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1453.089946][T15006] usb 8-1: USB disconnect, device number 6 [ 1460.781698][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2532'. [ 1460.791001][T16800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2540'. [ 1461.339447][ T5811] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1462.119880][ T5811] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1462.128094][ T5811] usb 7-1: config 0 has no interface number 0 [ 1462.590742][ T5811] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1462.600367][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.608531][ T5811] usb 7-1: Product: syz [ 1462.623907][ T5811] usb 7-1: Manufacturer: syz [ 1462.634028][ T5811] usb 7-1: SerialNumber: syz [ 1462.648309][ T5811] usb 7-1: config 0 descriptor?? [ 1462.668733][ T5811] usb 7-1: selecting invalid altsetting 1 [ 1462.687076][ T5811] dvb_ttusb_budget: ttusb_init_controller: error [ 1462.719384][ T5811] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1463.619996][ T5811] DVB: Unable to find symbol stv0299_attach() [ 1463.899443][ T5811] DVB: Unable to find symbol tda8083_attach() [ 1463.905574][ T5811] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1465.418104][T16836] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2545'. [ 1467.227182][T11078] Bluetooth: hci1: command 0x0406 tx timeout [ 1470.495976][T16849] syzkaller0: entered promiscuous mode [ 1470.533895][T16849] syzkaller0: entered allmulticast mode [ 1472.071314][T16866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.182537][T16866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.419558][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2556'. [ 1476.789720][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'. [ 1480.287093][T16931] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1481.124253][T16206] usb 7-1: USB disconnect, device number 43 [ 1482.686332][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 1483.004635][T16954] Non-string source [ 1484.394308][T16965] syzkaller0: entered promiscuous mode [ 1484.598909][T16965] syzkaller0: entered allmulticast mode [ 1484.619356][ T5848] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1484.824612][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.831018][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.920969][ T5848] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1485.095490][ T5848] usb 8-1: config 74 has an invalid interface number: 240 but max is 0 [ 1485.104003][ T5848] usb 8-1: config 74 has no interface number 0 [ 1485.113922][ T5848] usb 8-1: config 74 interface 240 has no altsetting 0 [ 1486.480151][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2570'. [ 1486.906119][ T5848] usb 8-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 1486.999275][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.039626][ T5848] usb 8-1: can't set config #74, error -71 [ 1487.092114][ T5848] usb 8-1: USB disconnect, device number 7 [ 1487.910306][T16995] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1492.080434][T17047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2578'. [ 1492.399376][ T5848] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1492.679563][ T5848] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1492.738485][ T5848] usb 7-1: config 0 has no interface number 0 [ 1492.832415][ T5848] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1492.905229][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.964937][ T5848] usb 7-1: Product: syz [ 1492.988811][ T5848] usb 7-1: Manufacturer: syz [ 1493.019240][ T5848] usb 7-1: SerialNumber: syz [ 1493.068445][ T5848] usb 7-1: config 0 descriptor?? [ 1493.149568][ T5848] usb 7-1: selecting invalid altsetting 1 [ 1493.176024][ T5848] dvb_ttusb_budget: ttusb_init_controller: error [ 1493.215413][ T5848] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1494.884850][T17067] syzkaller0: entered promiscuous mode [ 1494.941619][T17067] syzkaller0: entered allmulticast mode [ 1495.166026][ T5848] DVB: Unable to find symbol stv0299_attach() [ 1496.446852][ T5848] DVB: Unable to find symbol tda8083_attach() [ 1496.453549][ T5848] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1496.580700][ T5848] usb 7-1: USB disconnect, device number 44 [ 1497.109315][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2583'. [ 1499.276598][T17108] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2589'. [ 1499.619281][ T5848] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1499.881201][ T5848] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1499.913648][ T5848] usb 9-1: config 0 has no interface number 0 [ 1499.927143][ T5848] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1499.947641][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.986612][ T5848] usb 9-1: Product: syz [ 1499.999731][ T5848] usb 9-1: Manufacturer: syz [ 1500.013355][ T5848] usb 9-1: SerialNumber: syz [ 1500.055491][ T5848] usb 9-1: config 0 descriptor?? [ 1501.603079][T14450] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1501.644308][ T5848] usb 9-1: selecting invalid altsetting 1 [ 1501.661083][ T5848] dvb_ttusb_budget: ttusb_init_controller: error [ 1501.667594][ T5848] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1501.830493][ T5848] DVB: Unable to find symbol stv0299_attach() [ 1502.749312][ T5848] DVB: Unable to find symbol tda8083_attach() [ 1502.786104][ T5848] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1507.121734][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2594'. [ 1507.635189][T17172] syzkaller0: entered promiscuous mode [ 1507.660226][T17172] syzkaller0: entered allmulticast mode [ 1509.955555][T17193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2600'. [ 1510.289439][ T787] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1511.860251][ T787] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1511.879421][ T787] usb 7-1: config 0 has no interface number 0 [ 1511.898484][ T787] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1511.907962][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.976028][ T787] usb 7-1: Product: syz [ 1511.998950][ T787] usb 7-1: Manufacturer: syz [ 1512.033535][ T787] usb 7-1: SerialNumber: syz [ 1512.103829][ T787] usb 7-1: config 0 descriptor?? [ 1512.182005][ T787] usb 7-1: selecting invalid altsetting 1 [ 1512.254175][ T787] dvb_ttusb_budget: ttusb_init_controller: error [ 1512.314340][ T787] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1513.521853][ T787] DVB: Unable to find symbol stv0299_attach() [ 1514.901753][ T787] DVB: Unable to find symbol tda8083_attach() [ 1514.907943][ T787] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1515.370288][T17227] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1516.001270][ T787] usb 7-1: USB disconnect, device number 45 [ 1516.857507][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1516.887638][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1516.898236][T11078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1516.908381][T11078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1516.916617][T11078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1516.949547][T11078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1518.966710][ T787] usb 9-1: USB disconnect, device number 3 [ 1519.053040][T14450] Bluetooth: hci4: command tx timeout [ 1520.506515][T17234] chnl_net:caif_netlink_parms(): no params data found [ 1521.149366][T14450] Bluetooth: hci4: command tx timeout [ 1521.338675][ T3484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.585349][T17234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.593366][T17234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.600826][T17234] bridge_slave_0: entered allmulticast mode [ 1521.608537][T17234] bridge_slave_0: entered promiscuous mode [ 1521.828572][ T3484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.883719][T17269] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2614'. [ 1521.932472][T17234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.983102][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.001841][T17234] bridge_slave_1: entered allmulticast mode [ 1522.039695][T17234] bridge_slave_1: entered promiscuous mode [ 1522.322931][T15725] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1522.370264][ T3484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.522273][T15725] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1522.533819][T15725] usb 7-1: config 0 has no interface number 0 [ 1522.553834][T17234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.557944][T15725] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1522.605755][T15725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.725098][T15725] usb 7-1: Product: syz [ 1522.729686][T15725] usb 7-1: Manufacturer: syz [ 1522.734385][T15725] usb 7-1: SerialNumber: syz [ 1522.750245][T15725] usb 7-1: config 0 descriptor?? [ 1522.761262][T15725] usb 7-1: selecting invalid altsetting 1 [ 1522.767109][T15725] dvb_ttusb_budget: ttusb_init_controller: error [ 1522.792499][T15725] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1522.904542][ T3484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.279285][T14450] Bluetooth: hci4: command tx timeout [ 1524.372166][T15725] DVB: Unable to find symbol stv0299_attach() [ 1524.402777][T17234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.688643][T15725] DVB: Unable to find symbol tda8083_attach() [ 1524.701651][T17234] team0: Port device team_slave_0 added [ 1524.729367][T15725] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1524.746821][T17284] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2618'. [ 1524.798600][T15725] usb 7-1: USB disconnect, device number 46 [ 1524.806750][T17234] team0: Port device team_slave_1 added [ 1525.280561][T17234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.287669][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.379239][T17234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.809486][T17234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.816454][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.250002][T14450] Bluetooth: hci4: command tx timeout [ 1527.299744][T17234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.572883][T17234] hsr_slave_0: entered promiscuous mode [ 1527.688613][T17234] hsr_slave_1: entered promiscuous mode [ 1527.762058][T17234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1527.789487][T17234] Cannot create hsr debugfs directory [ 1531.747154][T17333] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2627'. [ 1532.073487][ T7035] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1533.557407][ T7035] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1534.559484][ T7035] usb 9-1: config 0 has no interface number 0 [ 1535.039299][ T7035] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1535.066743][ T7035] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.129325][ T7035] usb 9-1: config 0 descriptor?? [ 1535.156632][ T7035] usb 9-1: can't set config #0, error -71 [ 1535.214305][ T7035] usb 9-1: USB disconnect, device number 4 [ 1536.809998][T17234] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1536.988969][T17234] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1538.659372][T17234] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1538.991661][T17234] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1539.585394][ T3484] hsr_slave_0: left promiscuous mode [ 1539.591683][ T3484] hsr_slave_1: left promiscuous mode [ 1539.597611][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.608602][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.617488][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.632838][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.855153][ T3484] bridge_slave_1: left allmulticast mode [ 1539.862195][ T3484] bridge_slave_1: left promiscuous mode [ 1539.868152][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.931929][ T3484] bridge_slave_0: left allmulticast mode [ 1539.937673][ T3484] bridge_slave_0: left promiscuous mode [ 1539.947382][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.196379][ T3484] veth1_macvtap: left promiscuous mode [ 1540.204892][ T3484] veth0_macvtap: left promiscuous mode [ 1540.219431][ T3484] veth1_vlan: left promiscuous mode [ 1540.225936][ T3484] veth0_vlan: left promiscuous mode [ 1541.269480][ T7035] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1541.510028][ T7035] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1541.548796][ T7035] usb 8-1: config 0 has no interface number 0 [ 1541.582529][ T7035] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1541.592942][ T7035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.607355][ T7035] usb 8-1: Product: syz [ 1541.617503][ T7035] usb 8-1: Manufacturer: syz [ 1541.666534][ T7035] usb 8-1: SerialNumber: syz [ 1541.688591][ T7035] usb 8-1: config 0 descriptor?? [ 1541.702322][ T7035] usb 8-1: selecting invalid altsetting 1 [ 1541.755330][ T7035] dvb_ttusb_budget: ttusb_init_controller: error [ 1541.779320][ T7035] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1541.848894][ T7035] DVB: Unable to find symbol stv0299_attach() [ 1543.307002][ T7035] DVB: Unable to find symbol tda8083_attach() [ 1543.319605][ T7035] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1546.259629][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.266164][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.755157][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 1547.335094][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 1547.987941][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.151444][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.564117][ T3484] bond0 (unregistering): Released all slaves [ 1550.554801][T17395] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2637'. [ 1550.620620][ T8] usb 8-1: USB disconnect, device number 8 [ 1550.674566][T17234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.775868][T17234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.845506][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.852679][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.897992][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.905345][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.552543][T17437] syzkaller0: entered promiscuous mode [ 1551.579530][T17437] syzkaller0: entered allmulticast mode [ 1551.998027][T17234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.271362][T17234] veth0_vlan: entered promiscuous mode [ 1555.514044][T17234] veth1_vlan: entered promiscuous mode [ 1555.795317][T17234] veth0_macvtap: entered promiscuous mode [ 1555.975622][T17234] veth1_macvtap: entered promiscuous mode [ 1556.124008][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.183289][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.241554][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.272657][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.285114][T17234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.294819][T17486] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2651'. [ 1556.488918][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.567770][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.579779][ T5848] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1556.640514][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.722068][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.789642][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.804165][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.830090][ T5848] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1556.838229][ T5848] usb 9-1: config 0 has no interface number 0 [ 1556.859685][ T5848] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1556.868892][T17234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.869084][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.886184][ T5848] usb 9-1: Product: syz [ 1556.891592][ T5848] usb 9-1: Manufacturer: syz [ 1556.896591][ T5848] usb 9-1: SerialNumber: syz [ 1556.925986][ T5848] usb 9-1: config 0 descriptor?? [ 1556.983243][ T5848] usb 9-1: selecting invalid altsetting 1 [ 1556.992164][ T5848] dvb_ttusb_budget: ttusb_init_controller: error [ 1556.998843][ T5848] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1557.000256][T17234] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.040049][T17234] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.048827][T17234] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.109218][T17234] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.524883][ T5848] DVB: Unable to find symbol stv0299_attach() [ 1558.180223][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.188360][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.256697][ T5848] DVB: Unable to find symbol tda8083_attach() [ 1558.288204][ T5848] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1558.394774][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.534895][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2648'. [ 1558.581751][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.766961][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2605'. [ 1572.160091][T17593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2663'. [ 1573.843278][ T9] usb 9-1: USB disconnect, device number 5 [ 1574.259235][ T7035] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1575.889216][ T7035] usb 7-1: Using ep0 maxpacket: 8 [ 1575.934333][ T7035] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1575.949665][ T7035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.989217][ T7035] usb 7-1: Product: syz [ 1575.993621][ T7035] usb 7-1: Manufacturer: syz [ 1575.998237][ T7035] usb 7-1: SerialNumber: syz [ 1576.050444][ T7035] usb 7-1: config 0 descriptor?? [ 1576.077145][ T7035] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1576.115758][ T7035] pctv452e: pctv452e_power_ctrl: 1 [ 1576.115758][ T7035] [ 1576.150102][ T7035] usb 7-1: selecting invalid altsetting 3 [ 1576.155897][ T7035] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1576.155897][ T7035] [ 1576.209407][ T7035] dvb-usb: bulk message failed: -22 (5/0) [ 1576.268423][T17604] dvb-usb: bulk message failed: -22 (7/0) [ 1576.278560][ T7035] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1576.308359][T17604] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 1576.339883][ T7035] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1576.348320][ T7035] usb 7-1: media controller created [ 1576.390056][ T7035] dvb-usb: bulk message failed: -22 (8/0) [ 1576.396418][ T7035] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 1576.449438][ T7035] dvb-usb: MAC address reading failed. [ 1576.546180][ T7035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.029384][T15338] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1577.219289][T15338] usb 10-1: Using ep0 maxpacket: 32 [ 1577.243603][T15338] usb 10-1: config 0 has no interfaces? [ 1577.291907][T15338] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1577.305148][ T7035] DVB: Unable to find symbol stb0899_attach() [ 1577.311496][T15338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.320139][ T7035] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1577.328766][T15338] usb 10-1: Product: syz [ 1577.333451][T15338] usb 10-1: Manufacturer: syz [ 1577.338603][T15338] usb 10-1: SerialNumber: syz [ 1577.451471][T15338] usb 10-1: config 0 descriptor?? [ 1577.609597][ T7035] rc_core: IR keymap rc-tt-1500 not found [ 1577.617087][ T7035] Registered IR keymap rc-empty [ 1577.636332][ T7035] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1577.680376][ T7035] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input15 [ 1577.728843][T15338] usb 10-1: USB disconnect, device number 2 [ 1577.761167][ T7035] dvb-usb: schedule remote query interval to 100 msecs. [ 1577.796622][ T7035] pctv452e: pctv452e_power_ctrl: 0 [ 1577.796622][ T7035] [ 1577.853024][ T7035] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1577.901302][T16206] dvb-usb: bulk message failed: -22 (4/0) [ 1577.907613][T16206] dvb-usb: error -22 while querying for an remote control event. [ 1577.929742][ T7035] usb 7-1: USB disconnect, device number 47 [ 1578.853417][ T7035] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1581.660244][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2677'. [ 1586.749271][ T7035] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1586.969792][ T7035] usb 9-1: Using ep0 maxpacket: 32 [ 1587.014131][ T7035] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1587.026152][ T7035] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1587.040450][ T7035] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1587.140579][ T7035] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1587.152134][ T7035] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.166428][ T7035] usb 9-1: Product: syz [ 1587.173151][ T7035] usb 9-1: Manufacturer: syz [ 1587.189209][ T7035] usb 9-1: SerialNumber: syz [ 1587.389940][ T7035] usb 9-1: config 0 descriptor?? [ 1587.899332][ T7035] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1588.299274][ T7035] gs_usb 9-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1588.577285][ T7035] usb 9-1: USB disconnect, device number 6 [ 1597.158100][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2698'. [ 1597.846218][T17775] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1599.715076][T17790] netlink: 209828 bytes leftover after parsing attributes in process `syz.9.2704'. [ 1606.979646][ T23] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1607.169377][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1607.184443][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1607.195771][ T23] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1607.241497][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.354937][ T23] usb 7-1: config 0 descriptor?? [ 1607.597292][ T23] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1607.718211][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.724708][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.264410][ T23] usb 7-1: USB disconnect, device number 48 [ 1632.794042][T18051] binder: BINDER_SET_CONTEXT_MGR already set [ 1632.844062][T18051] binder: 18049:18051 ioctl 4018620d 200000004a80 returned -16 [ 1640.702028][T11078] Bluetooth: hci4: command 0x0406 tx timeout [ 1645.742015][T18166] binder: BINDER_SET_CONTEXT_MGR already set [ 1645.748101][T18166] binder: 18163:18166 ioctl 4018620d 200000004a80 returned -16 [ 1651.772497][T11078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1651.809457][T11078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1651.822787][T11078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1652.934258][T17236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1652.943815][T17236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1652.951436][T17236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1654.214385][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2770'. [ 1656.226975][T17236] Bluetooth: hci3: command tx timeout [ 1658.725420][T17236] Bluetooth: hci3: command tx timeout [ 1659.245658][T14450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1659.257631][T14450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1659.266295][T14450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1659.275217][T14450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1659.289556][T14450] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1659.327401][T14450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1660.587779][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2778'. [ 1660.636535][T17759] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.807227][T17759] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.818887][T17236] Bluetooth: hci3: command tx timeout [ 1660.944820][T17759] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.970100][T18202] chnl_net:caif_netlink_parms(): no params data found [ 1661.060929][T17759] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.101161][T18237] chnl_net:caif_netlink_parms(): no params data found [ 1661.306994][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.347633][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.358083][T18237] bridge_slave_0: entered allmulticast mode [ 1662.755345][T17236] Bluetooth: hci0: command tx timeout [ 1662.760698][T18237] bridge_slave_0: entered promiscuous mode [ 1662.778820][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.798364][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.821450][T18237] bridge_slave_1: entered allmulticast mode [ 1662.829036][T18237] bridge_slave_1: entered promiscuous mode [ 1662.853933][T18202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.861229][T18202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.869035][T18202] bridge_slave_0: entered allmulticast mode [ 1662.877109][T18202] bridge_slave_0: entered promiscuous mode [ 1662.891238][T17236] Bluetooth: hci3: command tx timeout [ 1662.916409][T18202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.926796][T18202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.969825][T18202] bridge_slave_1: entered allmulticast mode [ 1662.977572][T18202] bridge_slave_1: entered promiscuous mode [ 1663.183125][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.257785][T18202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.282997][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.384896][T18202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.509329][T16208] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1663.633694][T18202] team0: Port device team_slave_0 added [ 1663.647856][T18237] team0: Port device team_slave_0 added [ 1663.681970][T18237] team0: Port device team_slave_1 added [ 1663.692242][T18202] team0: Port device team_slave_1 added [ 1663.709792][T16208] usb 8-1: Using ep0 maxpacket: 16 [ 1663.728944][T18202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.736338][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.740513][T16208] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.771266][T18202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.784370][T16208] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.796972][T16208] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1663.806882][T16208] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1663.828881][T16208] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1663.905155][T16208] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1663.914879][T16208] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1663.926544][T16208] usb 8-1: Manufacturer: syz [ 1664.022770][T16208] usb 8-1: config 0 descriptor?? [ 1664.061419][T14984] IPVS: starting estimator thread 0... [ 1664.199739][T18277] IPVS: using max 18 ests per chain, 43200 per kthread [ 1664.417656][T18202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.456669][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.558304][T18202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.619816][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.626863][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.663641][T16208] rc_core: IR keymap rc-hauppauge not found [ 1664.663661][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.667142][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.698096][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.698769][T16208] Registered IR keymap rc-empty [ 1664.740120][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.756097][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1664.791584][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1664.819407][T17236] Bluetooth: hci0: command tx timeout [ 1664.826104][T16208] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1664.842057][T16208] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 1664.865951][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1664.910015][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1664.942103][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1664.957421][T18202] hsr_slave_0: entered promiscuous mode [ 1664.964630][T18202] hsr_slave_1: entered promiscuous mode [ 1664.976708][T18202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1664.989489][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.002701][T18202] Cannot create hsr debugfs directory [ 1665.027383][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.069489][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.113798][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.160073][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.168321][T18237] hsr_slave_0: entered promiscuous mode [ 1665.177378][T18237] hsr_slave_1: entered promiscuous mode [ 1665.183750][T18237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1665.191446][T18237] Cannot create hsr debugfs directory [ 1665.209257][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.229686][T16208] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1665.278321][T16208] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1665.291678][T16208] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1665.307101][T16208] usb 8-1: USB disconnect, device number 9 [ 1666.900978][T17236] Bluetooth: hci0: command tx timeout [ 1668.972582][T17236] Bluetooth: hci0: command tx timeout [ 1669.145915][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.152995][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.407148][T17759] hsr_slave_0: left promiscuous mode [ 1669.421977][T17759] hsr_slave_1: left promiscuous mode [ 1669.451794][T17759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.464400][T17759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.473207][T17759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.500381][T17759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.527268][T17759] bridge_slave_1: left allmulticast mode [ 1669.551115][T17759] bridge_slave_1: left promiscuous mode [ 1669.579621][T17759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.651554][T17759] bridge_slave_0: left allmulticast mode [ 1669.657304][T17759] bridge_slave_0: left promiscuous mode [ 1669.663196][T17759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.715439][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2785'. [ 1669.748944][T17759] veth1_macvtap: left promiscuous mode [ 1669.755225][T17759] veth0_macvtap: left promiscuous mode [ 1669.761131][T17759] veth1_vlan: left promiscuous mode [ 1669.766696][T17759] veth0_vlan: left promiscuous mode [ 1671.343234][T17759] team0 (unregistering): Port device team_slave_1 removed [ 1671.464307][T17759] team0 (unregistering): Port device team_slave_0 removed [ 1671.573430][T17759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1671.730750][T17759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.226464][T17759] bond0 (unregistering): Released all slaves [ 1675.352179][T18202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1675.386224][T18202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1677.968083][T18202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1678.480726][T18202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1679.317601][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2794'. [ 1682.390896][T18202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.642412][T18202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.700321][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.707497][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.967392][T17692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.974589][T17692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.425281][T18237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1683.539754][T18237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1683.563036][T18237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1683.626952][T18202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1683.719239][T18237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1684.348422][T18202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.473230][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.627206][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.673706][T12940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.681355][T12940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.716067][T18202] veth0_vlan: entered promiscuous mode [ 1684.738603][T17692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.745911][T17692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.774397][T18202] veth1_vlan: entered promiscuous mode [ 1686.497356][T18202] veth0_macvtap: entered promiscuous mode [ 1686.515514][T18202] veth1_macvtap: entered promiscuous mode [ 1686.745220][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.798813][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.835629][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.855041][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.867769][T18202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.289369][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.407388][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.489910][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.555138][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.565731][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.615321][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.668021][T18202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.694161][T18202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.717672][T18202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.731052][T18202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.779248][T18202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.953224][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.323585][T18237] veth0_vlan: entered promiscuous mode [ 1688.418150][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.452811][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.488410][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.508422][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.619753][T18237] veth1_vlan: entered promiscuous mode [ 1688.772447][T18237] veth0_macvtap: entered promiscuous mode [ 1688.929601][T18237] veth1_macvtap: entered promiscuous mode [ 1689.186648][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.309602][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.370198][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.431857][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.505561][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.609232][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.658387][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.931506][T18454] syzkaller0: entered promiscuous mode [ 1689.937140][T18454] syzkaller0: entered allmulticast mode [ 1690.095349][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.129380][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.149714][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.178189][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.209322][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.234631][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.258376][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.288613][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.312447][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.787390][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2805'. [ 1696.136949][T18237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.146659][T18237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.155939][T18237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.165228][T18237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.175667][T18479] netlink: 'syz.7.2806': attribute type 4 has an invalid length. [ 1696.185379][T18479] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2806'. [ 1698.604756][T12940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.773167][T12940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.381005][T17759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.406146][T17759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.763775][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2813'. [ 1702.851865][T18523] netlink: 'syz.2.2815': attribute type 4 has an invalid length. [ 1702.859836][T18523] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2815'. [ 1702.874339][T18523] .`: renamed from bond0 (while UP) [ 1711.472638][T18590] QAT: Stopping all acceleration devices. [ 1711.511418][T17236] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1711.761699][T18598] Bluetooth: MGMT ver 1.22 [ 1715.531974][T17236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1715.541059][T17236] Bluetooth: hci4: Injecting HCI hardware error event [ 1715.552536][T17236] Bluetooth: hci4: hardware error 0x00 [ 1718.375036][T17236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1730.580372][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.587259][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.335267][T18741] netlink: set zone limit has 8 unknown bytes [ 1733.858555][T18761] tipc: Started in network mode [ 1733.890270][T18761] tipc: Node identity 92955543a7d6, cluster identity 4711 [ 1733.944360][T18761] tipc: Enabled bearer , priority 0 [ 1733.991070][T18763] syzkaller0: MTU too low for tipc bearer [ 1734.010972][T18763] tipc: Disabling bearer [ 1738.089857][T16208] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1738.289245][T16208] usb 3-1: Using ep0 maxpacket: 16 [ 1738.578928][T16208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.591928][T16208] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1738.629235][T16208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.652547][T16208] usb 3-1: config 0 descriptor?? [ 1738.883230][T18785] fuse: root generation should be zero [ 1739.132419][T16208] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1741.915138][T15338] usb 3-1: USB disconnect, device number 6 [ 1747.073015][T18824] Bluetooth: MGMT ver 1.22 [ 1747.129962][T18824] Bluetooth: hci1: expected 4354 bytes, got 2 bytes [ 1747.791435][T16207] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1748.029543][T16207] usb 4-1: Using ep0 maxpacket: 16 [ 1748.781755][T16207] usb 4-1: unable to read config index 0 descriptor/all [ 1748.816227][T16207] usb 4-1: can't read configurations, error -71 [ 1752.792123][T18862] loop8: detected capacity change from 0 to 8 [ 1752.809779][T18862] Dev loop8: unable to read RDB block 8 [ 1752.815435][T18862] loop8: unable to read partition table [ 1752.850310][T18862] loop8: partition table beyond EOD, truncated [ 1752.873137][T18862] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1753.124360][T18868] comedi comedi0: Minor 2 could not be opened [ 1757.510355][T18901] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2876'. [ 1759.975193][T18929] comedi comedi0: Minor 2 could not be opened [ 1769.845173][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1770.171420][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.224146][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.302242][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1770.551090][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1770.561642][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.579972][ T9] usb 4-1: config 0 descriptor?? [ 1771.065781][T19009] comedi comedi0: Minor 2 could not be opened [ 1771.439993][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x1 [ 1771.447558][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4 [ 1771.506781][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1774.091388][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1774.189723][ T9] usb 4-1: USB disconnect, device number 9 [ 1774.393881][T19022] fido_id[19022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1776.349452][T19042] random: crng reseeded on system resumption [ 1780.977840][T11078] Bluetooth: hci3: command 0x0406 tx timeout [ 1781.131192][ T5848] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1781.369532][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 1781.388550][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.419494][ T5848] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1781.428718][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.442137][ T5848] usb 3-1: Product: syz [ 1781.446529][ T5848] usb 3-1: Manufacturer: syz [ 1781.458039][ T5848] usb 3-1: SerialNumber: syz [ 1781.467786][ T5848] usb 3-1: config 0 descriptor?? [ 1781.502386][ T5848] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1781.508670][ T5848] usb 3-1: selecting invalid altsetting 1 [ 1781.944447][ T5848] gspca_stk014: reg_r err -32 [ 1781.954794][ T5848] stk014: probe of 3-1:0.0 failed with error -32 [ 1782.828151][T19055] Bluetooth: MGMT ver 1.22 [ 1782.835114][T14984] usb 3-1: USB disconnect, device number 7 [ 1784.622046][T11078] Bluetooth: hci0: command 0x0406 tx timeout [ 1784.792241][T19086] comedi comedi0: Minor 2 could not be opened [ 1792.369857][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.377136][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.250177][T19150] comedi comedi0: Minor 2 could not be opened [ 1800.707433][T11078] Bluetooth: hci0: command 0x0406 tx timeout [ 1801.310969][T19205] 9pnet_fd: Insufficient options for proto=fd [ 1814.700220][T19283] comedi comedi0: Minor 2 could not be opened [ 1822.073413][T19324] qnx4: no qnx4 filesystem (no root dir). [ 1826.011836][T19358] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 1826.011836][T19358] program syz.2.2968 not setting count and/or reply_len properly [ 1826.820205][T19361] Mount JFS Failure: -22 [ 1826.825076][T19361] jfs_mount failed w/return code = -22 [ 1828.480604][T19387] CIFS mount error: No usable UNC path provided in device string! [ 1828.480604][T19387] [ 1828.491272][T19387] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1833.612172][T19437] CIFS mount error: No usable UNC path provided in device string! [ 1833.612172][T19437] [ 1833.623000][T19437] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1840.570117][T19486] CIFS mount error: No usable UNC path provided in device string! [ 1840.570117][T19486] [ 1840.580747][T19486] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1845.314909][T19520] overlayfs: failed to resolve './file0': -2 [ 1846.409360][T19530] CIFS mount error: No usable UNC path provided in device string! [ 1846.409360][T19530] [ 1846.420421][T19530] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1848.026653][T19539] binder: 19537:19539 ioctl 4018620d 0 returned -22 [ 1848.423076][T19539] dlm: no local IP address has been set [ 1848.430678][T19539] dlm: cannot start dlm midcomms -107 [ 1849.027888][T19558] binder: BC_ACQUIRE_RESULT not supported [ 1849.049395][T19558] binder: 19557:19558 ioctl c0306201 200000000480 returned -22 [ 1849.329928][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3016'. [ 1849.374755][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3016'. [ 1849.683810][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3016'. [ 1849.711835][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3016'. [ 1850.583641][T19584] CIFS mount error: No usable UNC path provided in device string! [ 1850.583641][T19584] [ 1850.594254][T19584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1852.671593][T19590] binder: 19589:19590 ioctl 4018620d 0 returned -22 [ 1853.531956][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.538886][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.171455][T19605] tipc: Started in network mode [ 1854.184589][T19605] tipc: Node identity 5e82762b42ed, cluster identity 4711 [ 1854.217429][T19605] tipc: Enabled bearer , priority 0 [ 1854.236397][T19610] syzkaller0: entered promiscuous mode [ 1854.262454][T19610] syzkaller0: entered allmulticast mode [ 1854.401036][T19605] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1856.410422][ T5848] tipc: Node number set to 477066795 [ 1856.859896][T19630] binder: 19628:19630 ioctl 4018620d 0 returned -22 [ 1857.006867][T19634] CIFS mount error: No usable UNC path provided in device string! [ 1857.006867][T19634] [ 1857.017531][T19634] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1857.887148][T19645] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1858.461763][T19603] [U] J"—E:ÀÆ" [ 1858.519773][T19603] tipc: Resetting bearer [ 1858.739889][T19603] tipc: Disabling bearer [ 1860.888246][T19683] binder: 19681:19683 ioctl 4018620d 0 returned -22 [ 1914.898638][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.905116][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.333835][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.340356][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.773735][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.780402][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.216774][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.223309][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.654536][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.661581][ T1282] ieee802154 phy1 wpan1: encryption failed: -22