last executing test programs: 47m11.785350642s ago: executing program 32 (id=3962): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 47m10.81897939s ago: executing program 33 (id=3963): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 47m10.725686037s ago: executing program 34 (id=3964): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x115c, &(0x7f0000000600)={0x0, 0xbaed, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 47m6.81306526s ago: executing program 35 (id=3985): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20021000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000001c0)={'hsr0\x00', @multicast}) 45m53.662250968s ago: executing program 36 (id=4217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0xffffff56, 0x8, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0xffffffffffffff5e, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x2, 0x5, 0x10004, 0x40}, 0x8, 0x5, [{0x100, 0xa, 0x3, 0x0, 0x1, 0x7}]}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x5, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x5, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x203, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x4, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0xefb, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0x3, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x9cfb4a6c37545ca4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4, 0x6, "aac98c99a4e917a1b34081f522cc4af380eec6868b64ec28168d07ef19a09e9279cda40bc26aa66f9afaf72c5542accbc252408e99372983f230b134e57b7a79115ea66d2c2e2146ca2d462c65409a46764e10e8b8a9aa23344faeb2d87b941814d3f9c270a104151aed71ed2b13d8f279f0716beaf3d02b557c2f2718465cb54729e3e2e041008deaf9652725b410e352fc1bab8770bbeaf7e3432e952f83b99a04dccdf02e00b9f092fa69bdc82dc9a4e8b16852475615715bbb418d9fbc0860754d544596d9899c63a93c710eb8e8f7839f7e5a811c39d19cd6a43bd6427f73a533f3e2de0d8a4585a3c0298d7bdf4b9c78e30aba9a3483ba8ecf834a5f83989c371b13c38067092b599597dc189a7b91d62032fe176b8e69462e740fc340248997b0247b1b3f56"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 45m52.659692926s ago: executing program 37 (id=4226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0xffff}, {}, {0x8, 0x11}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x2, 0x7f, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff3cd4b8bf", 0xfff2}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 45m50.934893027s ago: executing program 38 (id=4230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "86dd735ba29b7dcc46a18db6b47dff3a"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1d}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x200000a4) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) 43m53.954210852s ago: executing program 39 (id=4719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 43m50.993389748s ago: executing program 40 (id=4737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 41m59.182123695s ago: executing program 41 (id=5696): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sync_file_range(r0, 0x4, 0xfc5, 0x7) 41m51.58877157s ago: executing program 42 (id=5756): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 41m43.493046305s ago: executing program 43 (id=5794): r0 = socket(0x10, 0x803, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x40) 40m43.340321885s ago: executing program 44 (id=6011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x20000800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 37m40.078133557s ago: executing program 45 (id=6646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 33m47.198421883s ago: executing program 46 (id=7107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$MSG_INFO(0x0, 0xc, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 33m43.248878796s ago: executing program 47 (id=7117): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 31m42.653110596s ago: executing program 48 (id=7328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0xef}}, 0x30) syz_emit_ethernet(0x11c, &(0x7f0000000640)=ANY=[], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0) 31m40.153472333s ago: executing program 49 (id=7333): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0xc, 0x6, 0x1, 0x8}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r6, 0x8000017}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)="8f", 0x1}], 0x1}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 30m19.565107286s ago: executing program 50 (id=7556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd9c, &(0x7f0000001f40)=ANY=[], 0x0) 30m19.415249864s ago: executing program 51 (id=7555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000006c0)="dcc574969464ed1655f774cfc00468e1d538005e0ce1a64dda77", 0x1a}], 0x2) 30m19.007655337s ago: executing program 52 (id=7559): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 30m17.030277948s ago: executing program 53 (id=7563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 28m49.905114432s ago: executing program 54 (id=7883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x9, 0xfffffffc, 0x4, {0x1, 0x0, 0xff69, 0x1, 0x200, 0x6}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x8, 0x80, 0x6f8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff8e, 0x1fce000, 0x1ff, 0x81, 0xc0, 0xa, 0x3ff, 0x4, 0x6, 0x0, 0xd3d, 0x7, 0x2, 0x5, 0x4, 0x6, 0x8e01, 0x6, 0x7, 0x4, 0xea6, 0x31, 0x20000000, 0x8001, 0x1, 0x100, 0x6, 0x0, 0x3, 0x7, 0xb7, 0x7, 0x2, 0xc6e, 0x400000, 0xf79, 0xec9e, 0x5, 0x6, 0x6, 0x40, 0x401, 0xffffff54, 0x4, 0x3, 0x95, 0xf, 0x9, 0x4, 0xfffffffa, 0x0, 0x3, 0x3, 0x0, 0x100, 0x200, 0x8, 0x2, 0x5, 0x3, 0x4, 0xffffffa8, 0x0, 0x2, 0x48, 0x85ff, 0x4, 0x0, 0x964d, 0x5f, 0xfffffffd, 0x1, 0x8d5f, 0x4, 0x6, 0xffff, 0x2, 0x80000000, 0x384a, 0x8, 0x3, 0x5, 0x7f, 0x7d, 0xffffeb06, 0xf93, 0x9, 0xfffffcfc, 0x5, 0xfffffe00, 0xed, 0x401, 0x80000000, 0x80000001, 0x5a57ee2d, 0xfffffffd, 0x8, 0x6, 0x9, 0x5, 0x0, 0x1, 0xfffffffd, 0x4, 0x8, 0x6, 0x6, 0x2, 0x8, 0x4, 0x4b4, 0x2, 0xc6cd, 0xc4, 0x3, 0x7f, 0x4, 0x0, 0xfe, 0x8, 0x7, 0x6, 0x5, 0x5, 0xfffffffb, 0x7, 0x0, 0x6, 0x4, 0x3, 0x0, 0x6, 0x69a, 0xcb, 0x8, 0x7, 0x2, 0x2, 0x8, 0xa, 0x5, 0x6, 0x30, 0x6, 0x9, 0x85398d5, 0x0, 0xfffffe01, 0x3, 0x0, 0x9, 0x5, 0x7, 0xc, 0xe571, 0x0, 0xfffffff9, 0x2a, 0x0, 0xfffffff7, 0xa4, 0xfffffffe, 0x1000, 0x3d1e, 0x0, 0x0, 0x3, 0x5, 0xec2b, 0x2, 0x2, 0xfffffffb, 0x0, 0x6, 0x9, 0x4, 0x80000000, 0x6, 0x869, 0x1ff, 0x8, 0x8, 0x9, 0x175, 0x9, 0xffffffff, 0x2, 0x7ba, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x5, 0x7f, 0x0, 0x3, 0x5, 0x6, 0x0, 0x4cf, 0xa0000000, 0x8000, 0xc, 0x7, 0x8, 0x9, 0x401, 0x6, 0x9, 0xfffffffa, 0x4c, 0x9, 0x0, 0x8, 0x100, 0x9, 0x9, 0x8, 0x7, 0x7, 0x800, 0x3, 0xff, 0x4, 0x5, 0x0, 0x8, 0x200000ff, 0x1, 0xe, 0x9, 0x2, 0x62, 0x0, 0x1, 0xc, 0x5, 0x7, 0x6, 0x7, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x9, 0xffffffff, 0x0, 0x5ae, 0x3, 0x2, 0x0, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x9d7b, 0x2, 0xffffffff, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1ff, 0x2, 0xc516, 0x0, 0xfffff0b5, 0x3, 0x4, 0x3, 0x8, 0x3ff, 0x2, 0x2, 0x3, 0x401, 0x41c, 0x46, 0x3, 0x76, 0x800, 0x3, 0x133, 0x6, 0x8, 0x6, 0x3, 0x9eca, 0x4, 0x8, 0x101, 0xa, 0x8, 0x2, 0x7ff, 0xfffff800, 0x3, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0xfffffffb, 0x4, 0x82, 0x141, 0x1f8, 0x1000, 0x5, 0x0, 0x4, 0xd3, 0xfffffffc, 0x2, 0x5, 0xc8d, 0x9, 0x6, 0xc, 0x0, 0x6, 0xb, 0x7, 0x1, 0x1, 0x1, 0x2, 0x6, 0xf1, 0xa, 0xfffffff9, 0xff, 0x2, 0x1327d97c, 0xffff527b, 0x9, 0xffffffff, 0x5, 0x3, 0xa, 0x8001, 0xff, 0xffff, 0x8, 0x7, 0x9000000, 0x7, 0x12a, 0xc, 0x8, 0xfffffeff, 0x6, 0x8, 0x76d4, 0x1, 0x7, 0x0, 0xebe2, 0xbe5, 0x3, 0x7f, 0xf, 0x10, 0x2, 0xfffffff3, 0x6, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fff, 0x105, 0xe0d3, 0x3, 0x6, 0x5, 0x9, 0x4, 0x1000, 0x2, 0x5, 0x400, 0x8, 0x8, 0xff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1000, 0x80000000, 0xc, 0x3, 0x2fb, 0x5, 0x1, 0x9, 0x40, 0x1, 0xb1, 0xb, 0x4, 0x6, 0x4d444d0a, 0x100, 0xe5, 0x8, 0xfffffffe, 0x8, 0x100, 0x3, 0x4, 0x9, 0x0, 0x6, 0x0, 0xb, 0x8, 0xffff0001, 0x5, 0x1000, 0x8d5, 0x101, 0x9, 0x80000001, 0x5, 0x1, 0x8, 0x7, 0x0, 0x57, 0x8, 0x7, 0x3, 0xc, 0x2, 0x0, 0x7, 0x2, 0x2, 0x9, 0x80, 0x9, 0x7, 0x401, 0x0, 0xfae, 0xb6, 0x7, 0x1, 0x2, 0xba8b, 0xe3b426a, 0x1ff, 0x5, 0x6, 0x2, 0x5, 0x931e, 0x5, 0x2, 0x36bf9f05, 0xeb, 0x9, 0x9, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x8, 0x80, 0x200, 0x8, 0x0, 0x7, 0x100, 0x16, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x4d9, 0x7, 0x5c4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x400000, 0x0, 0x7, 0x9, 0xb20, 0x9, 0x6cb7db37, 0x4, 0x2, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8000002]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) 28m49.447425515s ago: executing program 55 (id=7889): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb", 0x93}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 28m47.871606089s ago: executing program 56 (id=7892): socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(0xffffffffffffffff) close(0xffffffffffffffff) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x63}}}}}}}, 0x46) 27m22.284162909s ago: executing program 57 (id=8328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000e455fbde6e129e41000000000000860090780000000000000000000000000000ee3f000000002b036f8c006ec9719d393910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 27m22.109285701s ago: executing program 58 (id=8327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff000000000000108a15df", 0xe}, {&(0x7f0000000500)="ce03be93f6b49fe72c169c8dd78f1000000038ef93c403155b", 0x19}], 0x3) 27m22.010076703s ago: executing program 59 (id=8329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 27m21.682656508s ago: executing program 60 (id=8331): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x43, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000088be00"}}}}}, 0x0) 27m19.753325331s ago: executing program 61 (id=8334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85", 0x69}], 0x1, &(0x7f0000000cc0)=[@txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x30}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23m47.410922251s ago: executing program 62 (id=8872): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x4, 0xb6) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 23m47.283317032s ago: executing program 63 (id=8868): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x23, 0xffffffff}]}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e30, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x64004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x890, 0x4c0, 0x590, 0x2b8, 0x4c0, 0x3a8, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x290, 0x2b8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x1001, 0xb10}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0xf76, 0xff, 0x20, 0x7, 0xb, 0xaeae, 0x7f, 0x6b1d1c17, 0x80, 0x78}, {0x8}}}]}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0xff, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffff8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8f0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002980), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x980}, 0x20000800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000440)={0x10, 0x26, 0x8, 0x70bd25, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000003e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x40}, 0x4000) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x6, 0x6, 0x0) 23m47.183503449s ago: executing program 64 (id=8867): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x30}], 0x1}, 0x894) 23m45.92722465s ago: executing program 65 (id=8880): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 23m45.422716103s ago: executing program 66 (id=8883): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) 22m35.184388503s ago: executing program 67 (id=8955): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x2c, 0x0, 0x24eea0e64cdea956, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6d, 0x65}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004060}, 0x4000000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 19m50.045039238s ago: executing program 6 (id=10179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 19m49.145102494s ago: executing program 6 (id=10181): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008004) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r0}, 0x14) 19m48.931269073s ago: executing program 7 (id=10183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0) 19m48.876617055s ago: executing program 6 (id=10184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x4}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x4}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 19m48.713895901s ago: executing program 7 (id=10186): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 19m48.516662378s ago: executing program 7 (id=10188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, r1, 0x2799f5eec7981083, 0x70bd28, 0x259fd3fc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x20000000) 19m48.473129365s ago: executing program 7 (id=10190): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)="4e358ed59ee7a636d3a35d9bb1a218701d8f6d70ee6d34b9565d847dddb24e725b783f9101eb20349037dec5e247e46ce598d7", 0x33}, {0x0}, {&(0x7f0000000040)="d9737c05b9c1cd0a18c4c77b1a2dfea46602f580445e6c1a916a4d93365ff2a96c6914f50fa5e7c9d53d54b7f381630cb4bb781235f0b7d8a99321d1cb58828bb4d47d1e4fae64dbf4120c7e0eef4197c524e44ad5f0bc80d1b9e657fbd885971caf5c0393", 0x65}, {&(0x7f0000000600)="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", 0x601}], 0x4}}], 0x1, 0x48010) 19m48.175670014s ago: executing program 6 (id=10195): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 19m20.007512539s ago: executing program 6 (id=10204): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x40) 19m20.00623453s ago: executing program 7 (id=10208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1], 0x34}}, 0x0) 19m20.006113986s ago: executing program 6 (id=10209): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 19m20.005800089s ago: executing program 7 (id=10211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x5, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfb4, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x141a, 0x0, 0x15f1}, {"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"}}}}, 0xfc2) 19m20.003738839s ago: executing program 68 (id=10205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff000000000000108a15df", 0xe}, {&(0x7f0000000500)="ce03be93f6b49fe72c169c8dd7", 0xd}], 0x3) 19m20.003544053s ago: executing program 69 (id=10206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x4}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x4}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) 19m20.003450777s ago: executing program 70 (id=10209): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 19m20.003370568s ago: executing program 71 (id=10211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x5, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfb4, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x141a, 0x0, 0x15f1}, {"b898f48a5203aec1c20360cd2ef7d58da55b659aa6992f305f3fb5d188f517abf96e559cce7d2282a54862bc80a51035e81c9f2d030a6cd6e7c83ed735fe91a467f79be2c7d85f7529eff6f03e92199b12eae0ad8d098f78165de6ccd711c6be47076c700a8a74e5b91a9355bb250b70cc5af2c4219f1cf2fa23910722a02956f3612fc9f024e77b9d745b22dacc05c41e125d6487e6ffd4ca8db7a1f2befb5708d551a43ad989dc418b24f8fefc9febd72b8504db532be5759ec8a0e4e48662c5f29dd566101c64946a9c9b8e12fd22f56093a80f345a106dc2b95ccb043f0131602e6ef13caddcc9fcfa2e40ab3b603ff5881f4fba3c8bbfffd05510a5952a6335b6e02fe85927bd050bfc265b2afd2735345a9380f5af87e6a3d2479fc06afc9252d7d28710570837daa46d2b942be5433f46ca6cc0efe65e5b874fede589d6026c20e28749a857eb0b9bd9157a247cde360572592da40909d903ef6c4c10cc06f59b45d0e0991bc820bfef700ca4e2b6aad5c32d2a8a807e9333e0eddec1c0ed393deb690e1b827db9f5da75dbc32874e5fcc5c76c05c0ec2fb1e8d5918cd09023865e9008cca311ed9672237bcf925fa09ae410683726998bf0ef51937e764e55a09e009429c8eeae288eda500541b7a33d29d492493084ba2c0a89dc61126d3fae08440bb57473adfdeadb98bdada889ebc36ae25649e5b7187e0d2dd011b39e037f3cad6e0e2161ab344173e125545945b1debe71f24213f581df639d486bf77ccc6da56997708b76eb6cbde470ad004fbfb84e8d1495a2d7bb544f282dad56316b50472015c74847e3209ef4a6edbff327ec99dd0288214d9329f433bc71698808201bf0a769d608fac5faf16c32a09c34750040d9d19aa8b4071c051338527952e5afcfd2e33a14d9f123c6dd5f1a3c47583ff6e3c154eff46c1942bbc357add5253d96f5b6dc6e440271a377b03db190ed081e2989dec4a839e1c2d7fecfaa2459f62151b9ef4716fbc15fd86812763fbaf38e4d5af6d0c8b830436770819361104f30bd8ba795f9104dfb7370d1c6940819d6432b159fbbe633a093ff4dc3c44c4623e16eddb6151ef904fc96b87957ab22230dd6c2458fbaa438d3c222c055ce4253db8fdda2077f0159fddc1306b0277d122c51cc577b2b6dee459f1bf28c6d94178a0fc3e382f6b58e1db6cda5eca7dc0720e61d59ec794a02295ccdeedc811457e30e8548a8be271c69f0cbfd08fdcfa281ec3b1ea7bb2ff784be0a732344cc0978b37507d448330149537f1de512d4952e2d6a8901be7bf9c8497ffdc3910096e2ef5c2d056f909621f1c8c90702c9469fcfb9ccda91123da96c4c8381718624e74948ce35b4ddc47982d392d84fe377a0e4edcf34f4bc814d12a5fee04ed6750b074fd046a47c59b84c6d465bce16101ced3d8f6b8a9d1d8b96f730569dd4bce831c188c236b5c600349932d42d846dbd6d5ecd07a89c6f535237567aebd4eb12bbfe5120e0c0e5f077005394e71772d796bbe82be4e014c63c8a1c4bbbddf186d94eb73313e91a97ce8ade5c6ec3defd412842f1afc7c642bbb94ce29a16ea298291519a5f5a6f5782a17fcd9af20699f70307270c5b6f88606c986aae6766130d63278b64a09fa4850ec92b72d2e19f1b8a305c237061af9f85ea6d2d33ea5c77754eaaa0b221e7883da6e95d6f031f033df057faa24c078a7ad1e922f371b076d7b492d5837f6f4a0980f882b160f581f2fdd551baf1fdccfb2677871eb55bdaf8c6c158bb9ae0684fec562045ba365ff7443c60e7381d0ffa426b98640bc6f95b8191dc2e14cec948871d5fbbfe46c6f669c1a4f98dc4cfdebe8bca4fd627acb475c9c80875d766c976116e7a2245088cc70a51242756710a6164e417d4fe7f2bb4f878df548598021f246492211d9c780a9d66b47c19e4924f2ba392a54ddbf73d61eab4c45dfa3510f705bd23c0ecc7210b3f982e328142f74e10edce9677990b862965594b9c671dc0e7c193b7df65de53f953e53ec0789a36c0895cf063ff0d2711b28e177d457192493454d07ad162c8f4a2db7db5761928fdb45311a44be6af7e170b3dd38783ceb9c5745deb957f6fc1cc073d7abe2cc5c58c29136b89c745085304457ce9e1394b1c4de3c664fa843c5183e45f65137e57b627a9938dfcb3cdf60829e5d8014534df04da80c53613a419d8811a4cc9f8a483a3488f942b1e9f69730f9861b70d6e42efbb147ce969854a56877c64a9c5e7e3852994d8d36b86aadc74c3b765307af433c23b0e963f95966beb7cc859bcf9217a52df243a41532cb4b0b316677db0104f12aca9fee6fd5908169451b0fcccf0cfdfbf3de802cc2488a532d5d7de6582c5645160c5ef673d2c95d5b8b2d99ed9486c069798f13c14eab4c99fd509fa9f879d18a5f0bdefd8f44ad0c9280ca9335ed661cb6cc22264f95e1f3443b41a044e4a15ab73f20bed9f6caa6bf231351fd882c11320e40f61718d4c43e99f98a72b459e9ce6eab66903a4ca67560e6c3579c558140e9a035d380b21064f70ed5ad62be784e4f75619fe92a4b6c22438a5907bb234570b962389228a9a454caa0579253a8d697dd890663f0bbed83e2c249dcab4db3d4124202abed769bbc90aa21ae521d9153352bec7eb6e0623fe9486bb2c1dbda0726daa64343304e6b878f768404848e5df3be0f1838f71a232cc8737fbc62172c7ee73306edf0b621e76ef35d76c86473926f47bfaaf943abcf63a81449006583ecfbbc3c498f5dd176bbff6e4e51134ffa5b92dcf4719cb789c9fec63955607da72b335ef7fe1c12dc9cdf44a9e83d7ab5a51977ba1168354a1e89bc5e420329c5864393bd3c72cd9f2c9d7b8e79f661a37f4a03105e77aaa28f4978f44abc4f89c458080e93cfaa043c105f396badc033d12dbed823a2e4d24406c7b77cd33630e6257d21a27857beaad037c1031a319d79e6103e1b7600ad9d418e5af02d372d0ddd5e328edf7245b7907632eae607992a8048a24721e8ce32a5be8adc4704c58de99613bf254d0448c452b7e81fdfd8b3c1b3ff8d573678448aef089e5477e1174bc424c77b08bf81144faadd289d04a02fc19cab03ff2cee402693fb215c4b4b12afcbc532646eed43aa6408df1b2d738e611d5082053882b5a69e0e6ae967c89ebb2980c933c04337acac94130de8e1e99acb3878685a4d0e3f7c95179f4e8d6674ced26a91099da84fa0ff485a0cab23b35de4f8091a22e22a969d1daf17549b092b0353468b3d0918f514a1248a3d4a19767bf037cff673771fa22c6ee4952728a8126eac03e50aece013d0c59bb9bc230c48f3115b37a482bae47ca56f8b10419f78195ec89dbd381a04a7ffb645ad53f60783d4997d7cab42591735ad56d565d33325715e2fc29ed8c64869485fd6e14136f4a5f66681668b519c749a790b6417a853ef04015aeeefc48bd85aa351186f728b5f1b0183c03d2168d52dbed1ce13aa3c673458dabeed746d513593b6c561a79f399b498396fd94473aa2acea127591eeeff8f691dddf95288e06203c1e779ba7f5b2b7764e8aad4a44e547d5470193acfbfac984bdda75d8b35eb2258abdcf47ee7df549d499204d19c0b89a91f1aef847f375b5cf1f0829d538d14361327073c0edb6605810f330c401270c8eb35eb97aed751feb21211a51a9031ed386fa1598618a38ae9a1c86ae64c84727b1864f64b4da71a7a3195c2757fed49945d63458d89cf5c536bdd441f3f265fc9d61a554087a9b2b83660c0c17e15d9d1d40065ba244453fb08b4ea027e3301ea254513633704ca1a496c7ad2227ca99cf07c58b1c11deb9216e940e2e1243d75b4a6882e84581cc727bcfea0d20d39cb545830a99da07659b347922df1f29ca7496e493826fac4b8f1d641fee7460e99fccd8672473e59a6c240d09a541e460e5f2945776c707212bb33a5ee5051961f21592d9ea3ae018b8fbc2140e6151f14ff033a6dbb1afbddd684b6a9d5f29b7f273b430dab91c53cd89e191adc78c7ce20bb4340425531cfc23f119a5eab1d7c73bc703b7fba48c8038c068df1f77eda5e18b2f2609d9d99de2768349987ba51cb98f698797051844c0c8637bf2f7ffac991ccf95e1b5eae9d7d25e7f3e0bdc788d99754a8be1baddafc4f0914f1a05bf8bec1a40bd2135539150da59d4163c67a575bc6dd7f2f786114c372842795601e8569e28c949e8bdc96e5a43cb6639dedf1ef1f054e0d42589a16d30e296b6dfdac6e13a6c68e03bd39dc172b6007b01793ceafa13c6379d2b820e98e9e87891e3bbdc688f62c56ef80c67ad066a53e36141af58fa9734429498580dc6d32d1c2e8cc722b4f9dd9d165d07b7b536c398df39dee06f48ad422492fe1777619f49e153ad276c86fbf8f607e7b1e9d6040889f166eb8a73ddba4668d6618b31c36b6427b1cd3cb97ef268ec1f1b049a35bceddff9147fde7309db0c474be42a6d54150172df4d5614106ea5f134cf543a70105a0a75f649d6de1a9bd3858bcccf3b220886ea6a7702dbe7f17e03a022a0ffc5145da4895bcb41da3fc5a2a10bc7b2a70a3a86ef8fa600d24894260cdbbf3c36313f3b1e9e8096921b625cb9c7f3ab8423277c9b80743a2185c95e9e7fb3f6d63669257fac197b7a73c5a4a2c4a2df52af705b46b56ade64c8a4265373a770676ec7fe3738843402f63a79f0ddb59e4bf439e4eac709a0127e9588e1538872af3916a12a1a850206392c16e17fab5a7d72bc3e9caad7bab64481728861016c124888210d06e31005ffbd39a65abbf69ce1683de2bb9f90e4955deb7afd23e90e3e11fcbd55627ab48cea806cf5da35e094bbaab42dbbdb454599a6659c2ce10845dc2beba123ae01f043c8c13c463634546e3fc913360adf2441ce3753840af235b0828ee6f74bac40d08d7b8dd8828af44a577e52e9adc86d895e1e561881320091c18bf7c466c945c4872dfc884858f5d710e0f9786878e09a906896308135097da35e465e140f22171878a42f3fe2f0872656b4ffbacc54dd99baef3c58450f1d585e3e3b8c1a9bf0f6afb9858fd6f58791382ff65d926d49f5e02abc84bd4df49ed5beec83517fbf782f983353398063831a1a4668afd7bbe2275c712497686ccff4c447f34cb4dd6b5af0f2e517fea11783d265db2c6dacb393fa3e2d484c3a62c516fe24294ca324bea8095265d560c6f68ae278c7bc34afb7309eb96fbf851af3616fd07e335d010804e60e44a57d38a2d79a19a5f9b22daec534d0379b3fe8a3a6cd8c63b585dcf00abef832b402fd3c0dd95037bb5be517b14ac6627408ba35f15cc4aa0fa96d888baa2d82b4efdf27a018330cca8a83eb587ca8a2536bdd5ab7d783044c76166d27c15299cbe3d82a612236157d25c73b19a3f454309500822206d9ea91f77ea58291d3527f85fcd7f44f1dd4bec1fdd26ee5bbc11620a62fc8c6887904b9f3bde3c640b7e4ba801f49f90e191ade5df7d39f0999a2b5e32f3385c0ec657c6ea6da3bc3d417b3b3856f92bcbbf0eb30ef02715a53dfece840180678d156e79d8149987a1172212529cec710a2bed59478371ab88b8c769ae17b8cf8b1f3d"}}}}, 0xfc2) 12m29.639497665s ago: executing program 1 (id=11071): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 12m29.446710258s ago: executing program 1 (id=11073): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 12m29.019948264s ago: executing program 1 (id=11076): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 12m28.6677895s ago: executing program 1 (id=11082): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 12m28.466567724s ago: executing program 1 (id=11085): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) memfd_secret(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24040084) 12m28.359201879s ago: executing program 5 (id=11087): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 12m28.222509455s ago: executing program 5 (id=11090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r1, 0x60b, 0x10000000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x2c}}, 0x0) 12m28.007418375s ago: executing program 5 (id=11094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m27.685804075s ago: executing program 5 (id=11098): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m27.299143652s ago: executing program 1 (id=11101): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r2, 0x4b4a, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) 12m27.297558137s ago: executing program 5 (id=11102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010836f597e30a9348a40c00000011000300", @ANYRES32=r3, @ANYBLOB="0c009900200000003e0000002c005080080007000200000004000600"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 12m26.927506981s ago: executing program 72 (id=11101): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r2, 0x4b4a, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) 12m26.124397077s ago: executing program 5 (id=11111): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) memfd_secret(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 12m25.804350153s ago: executing program 73 (id=11111): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) memfd_secret(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 10m31.24425158s ago: executing program 4 (id=11397): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 10m29.994799044s ago: executing program 4 (id=11404): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB=',g', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685"]) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) 10m12.89628128s ago: executing program 4 (id=11417): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) memfd_secret(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 10m12.890998971s ago: executing program 4 (id=11422): openat$vsock(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) accept4$inet6(r3, 0x0, 0x0, 0x0) 9m43.456685116s ago: executing program 74 (id=11428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) accept4$inet6(r3, 0x0, 0x0, 0x0) 2m12.504070373s ago: executing program 0 (id=12211): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) close(0x3) tee(r2, 0xffffffffffffffff, 0x22b2, 0xa) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2m12.213713257s ago: executing program 0 (id=12215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000047c0)={0x2020}, 0x2020) 2m10.897891097s ago: executing program 0 (id=12217): socket$rds(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m56.2129727s ago: executing program 9 (id=12220): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB=',g', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685"]) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) 1m56.20981209s ago: executing program 2 (id=12226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 1m56.036377295s ago: executing program 2 (id=12229): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080001400000000208001c4000009738080002"], 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 1m56.032082082s ago: executing program 9 (id=12230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m56.031651744s ago: executing program 0 (id=12231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1m54.729698971s ago: executing program 0 (id=12234): socket$rds(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r3 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fchdir(0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000000)={0x1c, &(0x7f00000000c0)=[{0xd, '\x00', @data=0xe, 0x6}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdir(0x0, 0x0) open(0x0, 0x80242, 0x1df2a23c5997fa5f) 1m54.618277865s ago: executing program 9 (id=12236): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="70000010ffffff02000000ffffffffff08004500002c000000"], 0x3e) 1m51.727915371s ago: executing program 8 (id=12238): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB=',g', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685"]) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) 1m50.334274441s ago: executing program 2 (id=12240): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote, @private0, @mcast2, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x1c) 1m34.455244727s ago: executing program 9 (id=12241): socket$rds(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m34.454699506s ago: executing program 3 (id=12242): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x400, 0x0, &(0x7f0000000540)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfa1d}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m34.453366498s ago: executing program 3 (id=12243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0xffff7ffc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000280)={0x3, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) r4 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x25, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4, 0x300}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 1m34.452769678s ago: executing program 8 (id=12244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1m34.452178405s ago: executing program 2 (id=12245): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x8, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000001}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m34.450403346s ago: executing program 3 (id=12246): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) tee(r2, 0xffffffffffffffff, 0x22b2, 0xa) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m34.448841167s ago: executing program 2 (id=12247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0xffff7ffc) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000280)={0x3, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) r4 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x25, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4, 0x300}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 1m34.448054311s ago: executing program 8 (id=12248): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001200010adc7fffff000000000a"], 0x20}}, 0x0) 1m34.44691148s ago: executing program 3 (id=12249): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2d}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m34.445361696s ago: executing program 8 (id=12250): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) msgsnd(0x0, &(0x7f00000000c0)={0x2}, 0x8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f01c80f205066b98200004066b80000000066ba000000000f3067660f5e00baf80c66b8e4844e8866efbafc0e66ed660f090f01d764660fdceff30f0966f3aa", 0x40}], 0x1, 0x72, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x14b042, 0x0) splice(r1, 0x0, r2, 0x0, 0xa, 0x1) 2.108026442s ago: executing program 8 (id=12251): mlock2(&(0x7f0000ad8000/0x2000)=nil, 0x2000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141442, 0x98) rename(0x0, &(0x7f00000002c0)='./file1\x00') 2.104387063s ago: executing program 2 (id=12252): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080001400000000208001c4000009738080002"], 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 2.100425926s ago: executing program 9 (id=12253): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x2}}, {{0x4}, {0x2, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000004c0)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0}}], 0x1, 0x8806) close(0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000080)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.084754464s ago: executing program 0 (id=12254): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080001400000000208001c4000009738080002"], 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 2.079139884s ago: executing program 3 (id=12255): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x358, 0x1b0, 0xffffffff, 0x358, 0x0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0xb8, 0xf0, 0x48, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast2, [0xff, 0xff, 0xff], 0x4e20, 0x5c, 0x8, 0x4e21, 0x8, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@loopback, @loopback, 0xff, 0xff, 'gretap0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x32, 0x2, 0x56}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x84, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10}, 0x0) 231.206666ms ago: executing program 8 (id=12256): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x2}}, {{0x4}, {0x2, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000004c0)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) 9.932442ms ago: executing program 9 (id=12257): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB=',g', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685"]) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) 0s ago: executing program 3 (id=12258): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote, @private0, @mcast2, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x1c) kernel console output (not intermixed with test programs): ¤»“Ÿpx^¼èo [ 2811.310369][T14535] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU‰AK!aQ`ßË;Fð•I+ÖÐVU HåðÂmÑ j³´Æ·ÙÛZÄcøãz‹¼Â)_矡 ô‘¡&ÿö¡ÿáaÇxtoÈÝê_½ ú¼¦:¨â×%à²Pò×ÈCö²‚yö+_þü›ýû}Uïm˜ƒÆ«CÅ!KJò7Ðßg¯Ë=bè [ 2811.317459][T14535] [U] Ù½¥Fœ%ŽXAÙÂlŸ2r*gŒòVW¬Ñ$ƒüj ãA˜›F¶ß·+ø¾9Í„ViºÖ—¼kÙ¾Å1}_©âá¥%Ãr6„•( ]“¦/Ÿ¶øÅ™YܺÇÞh㤾üÑr gªÄrn/Ü«Î#!êdÙûÚ«%ÞÛËDªï-{ð$þvU‘ýT²¼ª$:mtrÔEŽC1V‰D~îÈ];[˜ËÚÐ÷sq¾¯œù(ìëe,X¦8â"ÙæðG¥dŸúµ2@T8ž¾´òƒàðÿàt8.R c+Ä@Ëꦇp‡uáp”‰¼¶C±‡Ë'å„yLÓ-Ss1E?Å7ÓO‡§ì^]¦†Âóc”â½H]§Jkr]Rkq܆øÝ£þ´OTcôÆx¶¨¾4™NË ³Ï&á­ðÚ‹ŠÓ@¶:m7ß~+”W*ÛÁ–xMüó>>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 2811.317508][T14535] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 2811.317560][T14535] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 2811.317578][T14535] [U] 22½“Æ©Ðû©x?0;3u± [ 2811.317656][T14535] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 2811.317694][T14535] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 2811.317719][T14535] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 2811.317736][T14535] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 2811.317768][T14535] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 2811.317803][T14535] [U] ¹ ec [ 2811.317815][T14535] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 2811.324091][T29032] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2811.416408][T14534] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 2811.516471][T29032] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2811.516498][T29032] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2811.518161][T29032] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2811.518187][T29032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2811.518206][T29032] usb 5-1: SerialNumber: syz [ 2811.762819][T29032] usb 5-1: 0:2 : does not exist [ 2811.836659][T14543] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11392'. [ 2812.369626][T29032] usb 5-1: USB disconnect, device number 74 [ 2812.894994][T14424] udevd[14424]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2814.716232][T29032] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2814.838303][T14589] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11406'. [ 2814.864170][T29032] usb 5-1: Using ep0 maxpacket: 16 [ 2814.866978][T29032] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 2814.867046][T29032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2814.867076][T29032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2814.867099][T29032] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2814.867125][T29032] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2814.868816][T29032] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2814.868843][T29032] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2814.868864][T29032] usb 5-1: Manufacturer: syz [ 2814.886311][T29032] usb 5-1: config 0 descriptor?? [ 2815.324076][T29032] rc_core: IR keymap rc-hauppauge not found [ 2815.324101][T29032] Registered IR keymap rc-empty [ 2815.324278][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2815.344049][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2815.557217][T29032] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2815.560706][T29032] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input75 [ 2815.916926][T14605] 9p: Bad value for 'rfdno' [ 2816.125367][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.289584][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.304157][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.334929][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.354071][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.384189][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.414246][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.444169][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.464136][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.484167][T29032] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2816.575975][T29032] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2816.576006][T29032] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2816.621175][T29032] usb 5-1: USB disconnect, device number 75 [ 2817.808316][T29032] kernel read not supported for file /video37 (pid: 29032 comm: kworker/1:4) [ 2817.852363][T14633] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11417'. [ 2823.150530][T14673] Bluetooth: hci2: command 0x0406 tx timeout [ 2823.150580][T14673] Bluetooth: hci1: command 0x0406 tx timeout [ 2831.714099][T30277] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2832.814214][T30277] usb 9-1: Using ep0 maxpacket: 32 [ 2832.816843][T30277] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 2832.816873][T30277] usb 9-1: config 0 has no interface number 0 [ 2832.816923][T30277] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2832.826223][T30277] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2832.826256][T30277] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2832.826277][T30277] usb 9-1: Product: syz [ 2832.826294][T30277] usb 9-1: Manufacturer: syz [ 2832.826309][T30277] usb 9-1: SerialNumber: syz [ 2832.934140][T30277] usb 9-1: config 0 descriptor?? [ 2832.961371][T30277] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 2832.961473][T30277] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 2833.615821][T30277] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 2833.617630][T30277] usbhid 9-1:0.35: couldn't find an input interrupt endpoint [ 2834.096183][ T5809] usb 9-1: USB disconnect, device number 17 [ 2834.769904][T14790] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11432'. [ 2834.924425][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2835.336261][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 2835.338702][ T31] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 2835.338762][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2835.338792][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2835.338815][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2835.338838][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2835.341240][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2835.341269][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2835.341291][ T31] usb 4-1: Manufacturer: syz [ 2835.347702][ T31] usb 4-1: config 0 descriptor?? [ 2835.724085][ T31] rc_core: IR keymap rc-hauppauge not found [ 2835.724111][ T31] Registered IR keymap rc-empty [ 2835.724368][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2835.744096][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2835.769825][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2835.795357][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input76 [ 2835.994549][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.017369][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.034248][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.065983][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.084432][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.114245][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.144238][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.164090][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.184219][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.204512][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2836.276265][ T31] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2836.276297][ T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2836.364090][ T31] usb 4-1: USB disconnect, device number 29 [ 2837.560111][T14831] 9pnet_virtio: no channels available for device syz [ 2841.548308][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.551970][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 2844.854016][ T5809] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2845.078180][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 2845.090951][ T5809] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 2845.090985][ T5809] usb 4-1: config 0 has no interface number 0 [ 2845.091036][ T5809] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2845.093605][ T5809] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2845.093634][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.093655][ T5809] usb 4-1: Product: syz [ 2845.093670][ T5809] usb 4-1: Manufacturer: syz [ 2845.093685][ T5809] usb 4-1: SerialNumber: syz [ 2845.177202][ T5809] usb 4-1: config 0 descriptor?? [ 2845.227553][ T5809] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 2845.227609][ T5809] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 2845.764242][ T5809] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 2845.764618][ T5809] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 2846.294057][ T5863] usb 4-1: USB disconnect, device number 30 [ 2847.133993][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 2847.134042][ C0] lec:lec_tx_timeout: lec0 [ 2847.475147][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2847.492019][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2847.503794][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2847.588448][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2847.589524][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2850.504949][ T5800] Bluetooth: hci4: command tx timeout [ 2850.580612][T14943] chnl_net:caif_netlink_parms(): no params data found [ 2852.531837][T14943] bridge0: port 1(bridge_slave_0) entered blocking state [ 2852.531982][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 2852.532330][T14943] bridge_slave_0: entered allmulticast mode [ 2852.566091][T14943] bridge_slave_0: entered promiscuous mode [ 2852.574314][ T5800] Bluetooth: hci4: command tx timeout [ 2852.754560][T14943] bridge0: port 2(bridge_slave_1) entered blocking state [ 2852.759578][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 2852.759943][T14943] bridge_slave_1: entered allmulticast mode [ 2852.789780][T14943] bridge_slave_1: entered promiscuous mode [ 2852.878692][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2852.883791][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2852.961780][T14943] team0: Port device team_slave_0 added [ 2852.975167][T14943] team0: Port device team_slave_1 added [ 2853.493430][T14943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2853.493450][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2853.493480][T14943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2853.543468][T14943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2853.543488][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2853.543519][T14943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2853.633207][T14943] hsr_slave_0: entered promiscuous mode [ 2853.640300][T14943] hsr_slave_1: entered promiscuous mode [ 2853.640981][T14943] debugfs: 'hsr0' already exists in 'hsr' [ 2853.641000][T14943] Cannot create hsr debugfs directory [ 2853.962669][T14943] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.102443][T14943] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.211293][T14943] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.329638][T14943] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.649468][T14943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2854.654465][ T5800] Bluetooth: hci4: command tx timeout [ 2854.671734][T14943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2854.707826][T14943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2854.748036][T14943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2854.869377][T14943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2854.917124][T14943] 8021q: adding VLAN 0 to HW filter on device team0 [ 2854.932254][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 2854.932390][T10932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2854.950913][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2854.951053][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2855.190673][T14943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2855.246829][T14943] veth0_vlan: entered promiscuous mode [ 2855.261376][T14943] veth1_vlan: entered promiscuous mode [ 2855.292828][T14943] veth0_macvtap: entered promiscuous mode [ 2855.308062][T14943] veth1_macvtap: entered promiscuous mode [ 2855.329861][T14943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2855.342410][T14943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2855.360262][T10932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2855.360488][T10932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2855.360546][T10932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2855.360583][T10932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2855.687139][T10034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2855.687163][T10034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2855.754575][T12134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2855.754598][T12134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2856.736735][ T5800] Bluetooth: hci4: command tx timeout [ 2861.655772][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 2865.472007][T15061] 9p: Bad value for 'rfdno' [ 2867.136094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 2867.136133][ C0] lec:lec_tx_timeout: lec0 [ 2867.496487][T15102] 9p: Bad value for 'rfdno' [ 2869.776966][T15153] netlink: 'syz.8.11519': attribute type 12 has an invalid length. [ 2869.776993][T15153] netlink: 'syz.8.11519': attribute type 29 has an invalid length. [ 2869.777008][T15153] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11519'. [ 2869.777037][T15153] netlink: 59 bytes leftover after parsing attributes in process `syz.8.11519'. [ 2870.543988][ T5178] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2870.693942][ T5178] usb 4-1: Using ep0 maxpacket: 16 [ 2870.696780][ T5178] usb 4-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 2870.696840][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2870.696870][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2870.696893][ T5178] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2870.696917][ T5178] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2870.698991][ T5178] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2870.699019][ T5178] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2870.699041][ T5178] usb 4-1: Manufacturer: syz [ 2870.809760][ T5178] usb 4-1: config 0 descriptor?? [ 2871.314026][ T5178] rc_core: IR keymap rc-hauppauge not found [ 2871.314052][ T5178] Registered IR keymap rc-empty [ 2871.314231][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.334124][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.363186][ T5178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2871.392791][ T5178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input77 [ 2871.413666][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.439219][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.454839][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.493473][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.515001][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.535951][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.554878][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.574124][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.596253][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.614383][ T5178] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2871.652956][ T5178] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2871.652987][ T5178] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2871.706486][ T5178] usb 4-1: USB disconnect, device number 31 [ 2878.319790][T15198] Cannot find set identified by id 0 to match [ 2880.270063][T30277] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2881.804021][T30277] usb 10-1: device not accepting address 16, error -71 [ 2882.293934][T29032] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2882.450826][T29032] usb 4-1: Using ep0 maxpacket: 16 [ 2882.464012][T29032] usb 4-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 2882.464080][T29032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2882.464112][T29032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2882.464136][T29032] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2882.464161][T29032] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2882.472143][T29032] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2882.472263][T29032] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2882.472286][T29032] usb 4-1: Manufacturer: syz [ 2882.567669][T29032] usb 4-1: config 0 descriptor?? [ 2882.691930][T15226] netlink: 'syz.0.11534': attribute type 12 has an invalid length. [ 2882.691961][T15226] netlink: 'syz.0.11534': attribute type 29 has an invalid length. [ 2882.691977][T15226] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11534'. [ 2882.692005][T15226] netlink: 59 bytes leftover after parsing attributes in process `syz.0.11534'. [ 2882.863930][T29032] rc_core: IR keymap rc-hauppauge not found [ 2882.863957][T29032] Registered IR keymap rc-empty [ 2882.864136][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2882.886829][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2882.911098][T29032] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2882.932037][T29032] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 2882.972304][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2882.984953][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.016392][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.044446][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.064557][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.089497][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.104010][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.138304][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.154901][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.174564][T29032] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2883.201658][T29032] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2883.201676][T29032] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2883.239760][T29032] usb 4-1: USB disconnect, device number 32 [ 2883.301664][T15242] netlink: 'syz.2.11541': attribute type 1 has an invalid length. [ 2883.301700][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11541'. [ 2883.338079][T15242] Cannot find set identified by id 0 to match [ 2883.354096][T30277] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2883.375518][T15242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11541'. [ 2883.526019][T30277] usb 10-1: Using ep0 maxpacket: 32 [ 2883.527962][T30277] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2883.527997][T30277] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2883.528013][T30277] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2883.528029][T30277] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2883.529960][T30277] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2883.529978][T30277] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.529990][T30277] usb 10-1: Product: syz [ 2883.529999][T30277] usb 10-1: Manufacturer: syz [ 2883.530007][T30277] usb 10-1: SerialNumber: syz [ 2883.621921][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2883.702167][T30277] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input79 [ 2883.843207][T30277] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2883.843223][T30277] (id 0x00) [ 2884.044024][T30277] rc_core: IR keymap rc-imon-pad not found [ 2884.044050][T30277] Registered IR keymap rc-empty [ 2884.044141][T30277] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2884.044162][T30277] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2884.069678][T30277] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 2884.104142][T30277] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input80 [ 2884.124784][T30277] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:18> initialized [ 2884.266109][T15239] Bluetooth: MGMT ver 1.23 [ 2884.677523][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2884.678841][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2884.722954][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2884.723666][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2884.743593][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2884.744526][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2884.924080][T15258] imon:send_packet: task interrupted [ 2884.924100][T15258] imon:send_packet: packet tx failed (-512) [ 2884.929969][T15258] imon:vfd_write: send packet #1 failed [ 2884.930391][T15260] imon:display_open: display port is already open [ 2884.947890][T15258] imon:send_packet: packet tx failed (-32) [ 2884.949482][T15258] imon:vfd_write: send packet #0 failed [ 2884.992833][T14288] usb 10-1: USB disconnect, device number 18 [ 2886.205755][ T31] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2886.376176][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 2886.377763][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2886.377798][ T31] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2886.377812][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2886.419362][ T31] usb 3-1: config 0 descriptor?? [ 2886.439511][ T31] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 2889.591831][T29032] usb 3-1: USB disconnect, device number 63 [ 2889.847404][T15328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11564'. [ 2901.764030][T18426] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2903.506166][T18426] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2903.506199][T18426] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2903.507777][T18426] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2903.507805][T18426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2903.507828][T18426] usb 9-1: SerialNumber: syz [ 2903.511695][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2903.515807][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 2904.211372][T18426] usb 9-1: 0:2 : does not exist [ 2904.211428][T18426] usb 9-1: unit 255 not found! [ 2904.564795][T18426] usb 9-1: USB disconnect, device number 18 [ 2906.999205][T15365] udevd[15365]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2907.028863][T15387] [U]  [ 2907.028878][T15387] [U] K{‘ [ 2907.028894][T15387] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 2907.028940][T15387] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 2907.028976][T15387] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 2907.029041][T15387] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 2907.029157][T15387] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 2907.029202][T15387] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 2907.029223][T15387] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 2907.029284][T15387] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 2907.029538][T15387] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 2907.029590][T15387] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 2907.029609][T15387] [U] 22½“Æ©Ðû©x?0;3u± [ 2907.029686][T15387] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 2907.029724][T15387] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 2907.029752][T15387] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 2907.029768][T15387] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 2907.029801][T15387] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 2907.029841][T15387] [U] ¹ ec [ 2907.029854][T15387] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 2907.801489][T15386] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 2907.893679][T15457] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2907.965251][T15399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11579'. [ 2908.149488][T15457] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2908.149512][T15457] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2908.149524][T15457] usb 9-1: Product: syz [ 2908.149533][T15457] usb 9-1: Manufacturer: syz [ 2908.149541][T15457] usb 9-1: SerialNumber: syz [ 2909.487659][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms [ 2909.487701][ C0] lec:lec_tx_timeout: lec0 [ 2909.708062][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2909.708166][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2911.130779][T15389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2911.131429][T15389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2911.152810][T15389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2911.153593][T15389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2911.174921][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2911.175486][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2911.175990][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2911.176048][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2911.177082][T15457] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2911.246622][T15457] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 2911.262064][T15457] usb 9-1: USB disconnect, device number 19 [ 2920.084852][T15460] netlink: 'syz.8.11585': attribute type 1 has an invalid length. [ 2920.084881][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11585'. [ 2920.092166][T15460] Cannot find set identified by id 0 to match [ 2920.234018][T15457] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2920.446515][T15457] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2920.446548][T15457] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2920.448275][T15457] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2920.448305][T15457] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2920.448326][T15457] usb 10-1: SerialNumber: syz [ 2920.637175][T15466] 9pnet_virtio: no channels available for device syz [ 2924.091999][T15457] usb 10-1: 0:2 : does not exist [ 2924.541287][T15457] usb 10-1: USB disconnect, device number 19 [ 2924.687106][T15461] udevd[15461]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2924.771370][T15472] [U]  [ 2924.771388][T15472] [U] K{‘ [ 2924.771406][T15472] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 2924.771451][T15472] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 2924.771490][T15472] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 2924.771564][T15472] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 2924.771679][T15472] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 2924.771722][T15472] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 2924.771746][T15472] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 2924.771796][T15472] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 2924.772070][T15472] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 2924.772125][T15472] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 2924.772145][T15472] [U] 22½“Æ©Ðû©x?0;3u± [ 2924.772226][T15472] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 2924.772264][T15472] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 2924.772291][T15472] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 2924.772309][T15472] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 2924.772342][T15472] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 2924.772379][T15472] [U] ¹ ec [ 2924.772391][T15472] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 2926.235163][T15471] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 2928.681978][T15492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11596'. [ 2930.046899][ T5809] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2930.294551][ T5809] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2930.294586][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.294608][ T5809] usb 3-1: Product: syz [ 2930.294624][ T5809] usb 3-1: Manufacturer: syz [ 2930.294639][ T5809] usb 3-1: SerialNumber: syz [ 2930.823634][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2930.823707][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2935.109881][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2935.110401][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2935.111001][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2935.111057][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2935.168400][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2935.206125][ T5809] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2935.232697][ T5809] usb 3-1: USB disconnect, device number 64 [ 2935.344724][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 2941.133919][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 2941.133956][ C0] lec:lec_tx_timeout: lec0 [ 2945.834370][T15587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11613'. [ 2946.613945][T14288] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2946.792201][T14288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2946.792233][T14288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2946.794471][T14288] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2946.794502][T14288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2946.794523][T14288] usb 3-1: SerialNumber: syz [ 2946.863990][ T31] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2947.021567][ T31] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2947.021591][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2947.021603][ T31] usb 10-1: Product: syz [ 2947.021612][ T31] usb 10-1: Manufacturer: syz [ 2947.021620][ T31] usb 10-1: SerialNumber: syz [ 2947.092019][T14288] usb 3-1: 0:2 : does not exist [ 2947.482246][T14288] usb 3-1: USB disconnect, device number 65 [ 2948.555743][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2948.555826][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2949.049072][T15575] udevd[15575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2949.969907][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11626'. [ 2949.998844][T15598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2949.999506][T15598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.033629][T15598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.055461][T15598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.094185][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2950.096170][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2950.097805][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2950.097849][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2950.098929][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2950.176946][ T31] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2950.230736][ T31] usb 10-1: USB disconnect, device number 20 [ 2951.685693][T15642] overlayfs: failed to resolve './file2': -2 [ 2952.588282][ T5809] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2952.773909][ T5809] usb 10-1: Using ep0 maxpacket: 32 [ 2952.776728][ T5809] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 2952.776759][ T5809] usb 10-1: config 0 has no interface number 0 [ 2952.776809][ T5809] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2952.780060][ T5809] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2952.780091][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.780113][ T5809] usb 10-1: Product: syz [ 2952.780128][ T5809] usb 10-1: Manufacturer: syz [ 2952.780142][ T5809] usb 10-1: SerialNumber: syz [ 2952.797132][ T5809] usb 10-1: config 0 descriptor?? [ 2952.803145][ T5809] radio-si470x 10-1:0.35: could not find interrupt in endpoint [ 2952.803232][ T5809] radio-si470x 10-1:0.35: probe with driver radio-si470x failed with error -5 [ 2953.344360][ T5809] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 2953.345059][ T5809] usbhid 10-1:0.35: couldn't find an input interrupt endpoint [ 2953.667542][ T31] usb 10-1: USB disconnect, device number 21 [ 2955.384915][T30277] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2955.586239][T30277] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2955.586277][T30277] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.586299][T30277] usb 10-1: Product: syz [ 2955.586315][T30277] usb 10-1: Manufacturer: syz [ 2955.586330][T30277] usb 10-1: SerialNumber: syz [ 2957.500785][T30277] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2957.500852][T30277] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2957.500873][T30277] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2957.547692][T30277] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2957.584693][T30277] usb 10-1: USB disconnect, device number 22 [ 2962.430035][T15732] overlayfs: failed to resolve './file2': -2 [ 2964.440583][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.444362][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 2964.614646][T30277] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2966.713995][T14288] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2967.042505][T14288] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2967.042538][T14288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2967.042559][T14288] usb 10-1: Product: syz [ 2967.042573][T14288] usb 10-1: Manufacturer: syz [ 2967.042589][T14288] usb 10-1: SerialNumber: syz [ 2968.966759][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2968.966830][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2970.449328][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6000 ms [ 2970.449362][ C0] lec:lec_tx_timeout: lec0 [ 2970.459623][T30277] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2970.626167][T30277] usb 1-1: Using ep0 maxpacket: 32 [ 2970.629250][T30277] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2970.629280][T30277] usb 1-1: config 0 has no interface number 0 [ 2970.629335][T30277] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2970.632460][T30277] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2970.632491][T30277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.632513][T30277] usb 1-1: Product: syz [ 2970.632529][T30277] usb 1-1: Manufacturer: syz [ 2970.632545][T30277] usb 1-1: SerialNumber: syz [ 2970.713486][T30277] usb 1-1: config 0 descriptor?? [ 2970.735009][T30277] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 2970.735112][T30277] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 2970.879921][T15785] netlink: 'syz.3.11671': attribute type 12 has an invalid length. [ 2970.880324][T15785] netlink: 'syz.3.11671': attribute type 29 has an invalid length. [ 2970.880341][T15785] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11671'. [ 2970.880369][T15785] netlink: 23 bytes leftover after parsing attributes in process `syz.3.11671'. [ 2971.497490][T30277] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 2971.498228][T30277] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 2971.502476][T15771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2971.503311][T15771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2972.369792][T15801] overlayfs: overlapping lowerdir path [ 2975.985769][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 2976.025165][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2976.035629][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2976.036489][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2976.036548][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2976.038632][T14288] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2976.214175][T14288] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2976.348912][T14288] usb 10-1: USB disconnect, device number 23 [ 2976.431298][T30277] usb 1-1: USB disconnect, device number 52 [ 2987.467764][T15881] overlayfs: overlapping lowerdir path [ 2988.557382][ T5809] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2988.710715][ T5809] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2988.710752][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.710775][ T5809] usb 3-1: Product: syz [ 2988.710790][ T5809] usb 3-1: Manufacturer: syz [ 2988.710807][ T5809] usb 3-1: SerialNumber: syz [ 2989.200503][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2989.200577][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2990.130083][T15891] netlink: 'syz.0.11688': attribute type 12 has an invalid length. [ 2990.130505][T15891] netlink: 'syz.0.11688': attribute type 29 has an invalid length. [ 2990.130523][T15891] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11688'. [ 2990.130551][T15891] netlink: 23 bytes leftover after parsing attributes in process `syz.0.11688'. [ 2990.676409][T15868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2990.677065][T15868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.794172][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2990.799690][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.846688][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2990.847242][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2990.847784][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2990.847843][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2990.848782][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2990.883951][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2990.936337][ T5809] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2990.966981][ T5809] usb 3-1: USB disconnect, device number 66 [ 2991.094042][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 2991.098996][ T31] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2991.099027][ T31] usb 1-1: config 0 has no interface number 0 [ 2991.099078][ T31] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2991.105656][ T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2991.371660][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.371732][ T31] usb 1-1: Product: syz [ 2991.371747][ T31] usb 1-1: Manufacturer: syz [ 2991.371763][ T31] usb 1-1: SerialNumber: syz [ 2991.965291][ T31] usb 1-1: config 0 descriptor?? [ 2992.632296][ T31] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 2992.632397][ T31] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 2997.803647][ T31] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 2997.804427][ T31] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 2997.846588][ T31] usb 1-1: USB disconnect, device number 53 [ 2999.159906][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3004.163924][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 3004.163963][ C0] lec:lec_tx_timeout: lec0 [ 3008.016215][T15952] random: crng reseeded on system resumption [ 3008.125519][T15959] netlink: 'syz.0.11701': attribute type 12 has an invalid length. [ 3008.125551][T15959] netlink: 'syz.0.11701': attribute type 29 has an invalid length. [ 3008.125571][T15959] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11701'. [ 3008.125597][T15959] netlink: 23 bytes leftover after parsing attributes in process `syz.0.11701'. [ 3008.131184][T15956] overlayfs: overlapping lowerdir path [ 3008.375091][T15970] comedi comedi0: Minor 3 could not be opened [ 3008.589256][T15975] input: syz0 as /devices/virtual/input/input81 [ 3008.803912][T29031] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3008.974169][T29031] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3008.974204][T29031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3008.974226][T29031] usb 1-1: Product: syz [ 3008.974241][T29031] usb 1-1: Manufacturer: syz [ 3008.974257][T29031] usb 1-1: SerialNumber: syz [ 3009.643908][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3009.643951][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3010.144074][T14288] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3010.293987][T14288] usb 3-1: Using ep0 maxpacket: 32 [ 3010.303434][T14288] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 3010.303456][T14288] usb 3-1: config 0 has no interface number 0 [ 3010.303486][T14288] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3010.351691][T14288] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 3010.351804][T14288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3010.351828][T14288] usb 3-1: Product: syz [ 3010.351843][T14288] usb 3-1: Manufacturer: syz [ 3010.351858][T14288] usb 3-1: SerialNumber: syz [ 3010.416822][T14288] usb 3-1: config 0 descriptor?? [ 3010.450082][T14288] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 3010.450581][T14288] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 3011.014205][T14288] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 3011.015685][T14288] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 3011.088694][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3011.090389][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.150237][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3011.164063][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.167737][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 3011.168260][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 3011.168787][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 3011.168846][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3011.169559][T29031] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3011.232437][T29031] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 3011.274352][T29031] usb 1-1: USB disconnect, device number 54 [ 3011.394070][T30277] usb 3-1: USB disconnect, device number 68 [ 3012.413842][T29031] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 3012.566815][T29031] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3012.566848][T29031] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3012.568150][T29031] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3012.568169][T29031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3012.568181][T29031] usb 10-1: SerialNumber: syz [ 3013.312626][T29031] usb 10-1: 0:2 : does not exist [ 3013.316963][T16009] netlink: 'syz.8.11716': attribute type 12 has an invalid length. [ 3013.316978][T16009] netlink: 'syz.8.11716': attribute type 29 has an invalid length. [ 3013.316986][T16009] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11716'. [ 3013.317003][T16009] netlink: 39 bytes leftover after parsing attributes in process `syz.8.11716'. [ 3013.536292][T29031] usb 10-1: USB disconnect, device number 24 [ 3013.704024][T14997] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3013.864014][T14997] usb 3-1: Using ep0 maxpacket: 16 [ 3013.867412][T14997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3013.867473][T14997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3013.867503][T14997] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 3013.867527][T14997] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3013.869695][T16013] udevd[16013]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3013.870269][T14997] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3013.870298][T14997] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3013.870319][T14997] usb 3-1: Manufacturer: syz [ 3013.996157][T14997] usb 3-1: config 0 descriptor?? [ 3014.854038][T14997] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 3015.013919][T14997] usb 9-1: Using ep0 maxpacket: 32 [ 3015.118135][T14997] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3015.118198][T14997] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3015.118229][T14997] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3015.118258][T14997] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3015.123273][T14997] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3015.123314][T14997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3015.123337][T14997] usb 9-1: Product: syz [ 3015.123352][T14997] usb 9-1: Manufacturer: syz [ 3015.123367][T14997] usb 9-1: SerialNumber: syz [ 3016.503530][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3016.508194][T14997] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input82 [ 3017.560393][T29031] usb 3-1: USB disconnect, device number 69 [ 3017.623898][T14997] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3017.623922][T14997] (id 0x00) [ 3017.733953][T14997] rc_core: IR keymap rc-imon-pad not found [ 3017.733975][T14997] Registered IR keymap rc-empty [ 3017.734034][T14997] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3017.734046][T14997] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3017.775129][T14997] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 3017.778114][T14997] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input83 [ 3017.822307][T14997] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:20> initialized [ 3018.169290][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.169690][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.205463][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.206158][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.225637][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.226210][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.272448][T14997] usb 9-1: USB disconnect, device number 20 [ 3025.861209][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.870167][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3027.692641][T16067] netlink: 'syz.3.11729': attribute type 12 has an invalid length. [ 3027.692664][T16067] netlink: 'syz.3.11729': attribute type 29 has an invalid length. [ 3027.692680][T16067] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11729'. [ 3027.692707][T16067] netlink: 39 bytes leftover after parsing attributes in process `syz.3.11729'. [ 3031.491066][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 3031.491104][ C0] lec:lec_tx_timeout: lec0 [ 3032.063987][ T5809] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3032.216948][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 3032.219601][ T5809] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3032.219660][ T5809] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3032.219689][ T5809] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3032.219719][ T5809] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3032.222840][ T5809] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3032.222870][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3032.222892][ T5809] usb 3-1: Product: syz [ 3032.222907][ T5809] usb 3-1: Manufacturer: syz [ 3032.222922][ T5809] usb 3-1: SerialNumber: syz [ 3032.465790][ T31] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3033.447034][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3033.447066][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3033.450727][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3033.450756][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3033.450777][ T31] usb 1-1: SerialNumber: syz [ 3036.639275][ T5809] usb 3-1: can't set config #155, error -71 [ 3036.695825][ T5809] usb 3-1: USB disconnect, device number 70 [ 3037.829897][T16137] netlink: 'syz.0.11741': attribute type 12 has an invalid length. [ 3037.829922][T16137] netlink: 'syz.0.11741': attribute type 29 has an invalid length. [ 3037.829939][T16137] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11741'. [ 3037.829965][T16137] netlink: 39 bytes leftover after parsing attributes in process `syz.0.11741'. [ 3038.054607][T16141] input: syz0 as /devices/virtual/input/input84 [ 3038.260214][ T31] usb 1-1: 0:2 : does not exist [ 3038.447555][ T31] usb 1-1: USB disconnect, device number 55 [ 3038.493315][T16122] udevd[16122]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3048.376259][T16180] comedi comedi0: Minor 3 could not be opened [ 3051.564198][T14997] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3051.658478][ T5863] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 3052.673974][ T5863] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.674007][ T5863] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3054.397038][T14997] usb 4-1: Using ep0 maxpacket: 32 [ 3054.756045][ T5863] usb 10-1: string descriptor 0 read error: -71 [ 3054.756115][ T5863] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3054.756141][ T5863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3054.764487][T14997] usb 4-1: device descriptor read/all, error -71 [ 3054.817928][ T5863] usb 10-1: can't set config #1, error -71 [ 3054.821324][ T5863] usb 10-1: USB disconnect, device number 25 [ 3064.029390][T16267] comedi comedi0: Minor 3 could not be opened [ 3064.524696][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3069.963941][T14997] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3069.982182][T30277] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 3071.145304][T30277] usb 9-1: Using ep0 maxpacket: 32 [ 3071.490139][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6960 ms [ 3071.490179][ C0] lec:lec_tx_timeout: lec0 [ 3071.525149][T30277] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3071.525289][T30277] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3071.525320][T30277] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3071.525348][T30277] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3071.530696][T30277] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3071.530789][T30277] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.530810][T30277] usb 9-1: Product: syz [ 3071.530826][T30277] usb 9-1: Manufacturer: syz [ 3071.530841][T30277] usb 9-1: SerialNumber: syz [ 3071.619116][T14997] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3071.619147][T14997] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3071.645688][T14997] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3071.645722][T14997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3071.645743][T14997] usb 4-1: SerialNumber: syz [ 3072.543002][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3072.608678][T30277] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input85 [ 3072.714116][T30277] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3072.714139][T30277] (id 0x00) [ 3072.757898][T14997] usb 4-1: 0:2 : does not exist [ 3072.887303][T14997] usb 4-1: USB disconnect, device number 36 [ 3072.907699][T30277] rc_core: IR keymap rc-imon-pad not found [ 3072.907723][T30277] Registered IR keymap rc-empty [ 3072.907817][T30277] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3072.907837][T30277] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3072.935780][T30277] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 3072.993013][T30277] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input86 [ 3073.044509][T30277] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:21> initialized [ 3073.165984][T16293] udevd[16293]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3073.511071][T16304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3073.511736][T16304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.570332][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3073.592952][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.639037][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3073.653192][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.699148][T16315] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.11775'. [ 3073.902444][T14997] usb 9-1: USB disconnect, device number 21 [ 3087.314894][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3087.318570][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3087.690280][T14997] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 3087.910625][T14997] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3087.910658][T14997] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3087.938981][T14997] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3087.939003][T14997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3087.939015][T14997] usb 9-1: SerialNumber: syz [ 3088.210535][T14997] usb 9-1: 0:2 : does not exist [ 3088.368743][T16387] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.11788'. [ 3088.494062][T14997] usb 9-1: USB disconnect, device number 22 [ 3088.653429][T16377] udevd[16377]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3089.090754][ T5863] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3091.170048][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 3092.023591][ T5863] usb 3-1: unable to read config index 0 descriptor/all [ 3092.023632][ T5863] usb 3-1: can't read configurations, error -71 [ 3093.491701][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6170 ms [ 3093.491742][ C0] lec:lec_tx_timeout: lec0 [ 3096.343924][T14997] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3096.746036][T14997] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3096.746057][T14997] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3096.755911][T14997] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3096.755944][T14997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3096.755966][T14997] usb 1-1: SerialNumber: syz [ 3096.992807][T14997] usb 1-1: 0:2 : does not exist [ 3097.300385][T14997] usb 1-1: USB disconnect, device number 56 [ 3097.358462][T16408] udevd[16408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3099.294902][ T5863] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 3099.437583][T16490] input: syz0 as /devices/virtual/input/input87 [ 3099.474130][ T5863] usb 10-1: Using ep0 maxpacket: 32 [ 3099.476747][ T5863] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3099.476807][ T5863] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3099.476835][ T5863] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3099.476864][ T5863] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3099.480532][ T5863] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3099.480565][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3099.480586][ T5863] usb 10-1: Product: syz [ 3099.480600][ T5863] usb 10-1: Manufacturer: syz [ 3099.480614][ T5863] usb 10-1: SerialNumber: syz [ 3099.610845][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3099.646566][ T5863] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input88 [ 3099.794011][ T5863] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3099.794035][ T5863] (id 0x00) [ 3099.935636][ T5863] rc_core: IR keymap rc-imon-pad not found [ 3099.935664][ T5863] Registered IR keymap rc-empty [ 3099.935757][ T5863] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3099.935778][ T5863] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3099.996282][ T5863] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 3099.998435][ T5863] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input89 [ 3100.003539][ T5863] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:26> initialized [ 3100.597920][T16495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3100.598570][T16495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3100.621616][T16495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3100.622796][T16495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3100.626289][T16495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3100.626877][T16495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3100.636012][T16494] imon:send_packet: task interrupted [ 3100.636029][T16494] imon:send_packet: packet tx failed (-512) [ 3100.636076][T16494] imon:vfd_write: send packet #1 failed [ 3100.683202][T16494] imon:send_packet: packet tx failed (-32) [ 3100.683259][T16494] imon:vfd_write: send packet #0 failed [ 3100.714280][ T5863] usb 10-1: USB disconnect, device number 26 [ 3113.402520][T14997] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 3113.560787][T14997] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3113.560818][T14997] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3113.562746][T14997] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3113.562779][T14997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3113.562817][T14997] usb 10-1: SerialNumber: syz [ 3114.215230][T14997] usb 10-1: 0:2 : does not exist [ 3114.797864][T14997] usb 10-1: USB disconnect, device number 27 [ 3115.045824][T16534] udevd[16534]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3115.892914][T16574] nbd9: detected capacity change from 0 to 63 [ 3115.893829][ T31] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3115.944291][T16578] block nbd9: NBD_DISCONNECT [ 3115.944403][T16578] block nbd9: Disconnected due to user request. [ 3115.944421][T16578] block nbd9: shutting down sockets [ 3116.000038][ C1] blk_print_req_error: 138 callbacks suppressed [ 3116.000066][ C1] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.000100][ C1] buffer_io_error: 138 callbacks suppressed [ 3116.000113][ C1] Buffer I/O error on dev nbd9, logical block 0, async page read [ 3116.023272][ C1] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.023312][ C1] Buffer I/O error on dev nbd9, logical block 1, async page read [ 3116.029349][ C1] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.029394][ C1] Buffer I/O error on dev nbd9, logical block 2, async page read [ 3116.029470][ C1] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.029493][ C1] Buffer I/O error on dev nbd9, logical block 3, async page read [ 3116.061289][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 3116.062049][T16534] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.062568][T16534] Buffer I/O error on dev nbd9, logical block 0, async page read [ 3116.062641][T16534] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.062997][T16534] Buffer I/O error on dev nbd9, logical block 1, async page read [ 3116.063660][T16534] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.063956][ T31] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3116.064137][ T31] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3116.064164][ T31] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3116.064189][ T31] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3116.067796][T16534] Buffer I/O error on dev nbd9, logical block 2, async page read [ 3116.067880][T16534] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.067971][T16534] Buffer I/O error on dev nbd9, logical block 3, async page read [ 3116.068040][T16534] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.068062][T16534] Buffer I/O error on dev nbd9, logical block 0, async page read [ 3116.068168][T16534] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3116.068191][T16534] Buffer I/O error on dev nbd9, logical block 1, async page read [ 3116.071495][ T31] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3116.071521][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3116.071540][ T31] usb 3-1: Product: syz [ 3116.071554][ T31] usb 3-1: Manufacturer: syz [ 3116.071568][ T31] usb 3-1: SerialNumber: syz [ 3116.075912][T16534] ldm_validate_partition_table(): Disk read failed. [ 3116.076711][T16534] Dev nbd9: unable to read RDB block 0 [ 3116.077520][T16534] nbd9: unable to read partition table [ 3116.159347][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3116.202290][T16534] ldm_validate_partition_table(): Disk read failed. [ 3116.202932][T16534] Dev nbd9: unable to read RDB block 0 [ 3116.207086][T16534] nbd9: unable to read partition table [ 3116.253292][ T31] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input90 [ 3116.447969][ T31] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3116.447994][ T31] (id 0x00) [ 3116.594415][ T31] rc_core: IR keymap rc-imon-pad not found [ 3116.594443][ T31] Registered IR keymap rc-empty [ 3116.594547][ T31] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3116.594567][ T31] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3116.655594][ T31] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 3116.658053][ T31] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input91 [ 3116.680153][ T31] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:73> initialized [ 3117.253955][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3117.255253][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3117.263168][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3117.270638][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3117.284239][T16591] imon:send_packet: task interrupted [ 3117.284259][T16591] imon:send_packet: packet tx failed (-512) [ 3117.284481][T16591] imon:vfd_write: send packet #1 failed [ 3117.317539][T16591] imon:send_packet: task interrupted [ 3117.317562][T16591] imon:send_packet: packet tx failed (-512) [ 3117.317610][T16591] imon:vfd_write: send packet #0 failed [ 3117.317974][T16591] imon:send_packet: packet tx failed (-32) [ 3117.318015][T16591] imon:vfd_write: send packet #0 failed [ 3117.358216][ T5863] usb 3-1: USB disconnect, device number 73 [ 3125.045592][T15457] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 3125.193925][T15457] usb 9-1: Using ep0 maxpacket: 32 [ 3125.199397][T15457] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.199461][T15457] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3125.199491][T15457] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3125.199520][T15457] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3125.315321][T15457] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3125.315358][T15457] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.315380][T15457] usb 9-1: Product: syz [ 3125.315395][T15457] usb 9-1: Manufacturer: syz [ 3125.315411][T15457] usb 9-1: SerialNumber: syz [ 3127.953168][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3127.979931][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3128.042618][T15457] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input92 [ 3128.187278][T15457] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3128.187303][T15457] (id 0x00) [ 3129.356726][T16643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3129.377339][T16643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3130.378751][T15457] rc_core: IR keymap rc-imon-pad not found [ 3130.378778][T15457] Registered IR keymap rc-empty [ 3130.378871][T15457] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3130.378893][T15457] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3130.379265][T15457] imon:send_packet: packet tx failed (-71) [ 3130.394092][T15457] imon 9-1:155.0: remote input dev register failed [ 3130.394296][T15457] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 3132.226187][T16694] netlink: 52 bytes leftover after parsing attributes in process `syz.9.11861'. [ 3132.513907][ T5809] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3132.670773][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3132.670812][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3132.670837][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3132.670884][ T5809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3132.670910][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.745716][ T5809] usb 3-1: config 0 descriptor?? [ 3133.134150][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 3133.134191][ C0] lec:lec_tx_timeout: lec0 [ 3133.174854][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 3133.175011][ T5809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3133.233921][ T5809] usb 3-1: USB disconnect, device number 74 [ 3133.678454][T15457] imon 9-1:155.0: unable to initialize intf0, err 0 [ 3133.678481][T15457] imon:imon_probe: failed to initialize context! [ 3133.678496][T15457] imon 9-1:155.0: unable to register, err -19 [ 3133.745164][T15457] usb 9-1: USB disconnect, device number 23 [ 3139.943985][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3140.998398][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3140.998437][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3140.998461][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3140.998508][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3140.998533][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3141.862705][ T31] usb 4-1: config 0 descriptor?? [ 3142.283475][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 3142.283618][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3142.448059][ T31] usb 4-1: USB disconnect, device number 37 [ 3142.633963][ T5863] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 3142.794117][ T5863] usb 9-1: Using ep0 maxpacket: 32 [ 3142.799488][ T5863] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3142.799526][ T5863] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3142.799543][ T5863] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3142.799559][ T5863] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3142.801644][ T5863] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3142.801663][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3142.801675][ T5863] usb 9-1: Product: syz [ 3142.801684][ T5863] usb 9-1: Manufacturer: syz [ 3142.801693][ T5863] usb 9-1: SerialNumber: syz [ 3142.929975][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3142.953531][ T5863] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input95 [ 3143.144299][ T5863] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3143.144322][ T5863] (id 0x00) [ 3143.293924][ T5863] rc_core: IR keymap rc-imon-pad not found [ 3143.293957][ T5863] Registered IR keymap rc-empty [ 3143.295413][ T5863] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3143.295437][ T5863] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3143.356297][ T5863] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 3143.358570][ T5863] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input96 [ 3143.394517][ T5863] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:24> initialized [ 3144.003245][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3144.021222][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3144.027281][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3144.032977][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3144.117458][T16773] imon:send_packet: task interrupted [ 3144.117480][T16773] imon:send_packet: packet tx failed (-512) [ 3144.118083][T16773] imon:vfd_write: send packet #1 failed [ 3144.118141][T16774] imon:display_open: display port is already open [ 3144.122707][T16773] imon:send_packet: task interrupted [ 3144.122725][T16773] imon:send_packet: packet tx failed (-512) [ 3144.122770][T16773] imon:vfd_write: send packet #0 failed [ 3144.123417][T16773] imon:send_packet: packet tx failed (-32) [ 3144.154230][T16773] imon:vfd_write: send packet #0 failed [ 3144.217827][ T5863] usb 9-1: USB disconnect, device number 24 [ 3148.738532][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3148.742285][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3154.093888][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 3154.093926][ C0] lec:lec_tx_timeout: lec0 [ 3157.533934][ T5863] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3157.663953][ T5863] usb 1-1: device descriptor read/64, error -71 [ 3158.113937][ T5863] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3158.243951][ T5863] usb 1-1: device descriptor read/64, error -71 [ 3158.314022][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11906'. [ 3158.356969][ T5863] usb usb1-port1: attempt power cycle [ 3160.290455][ T5863] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3161.555769][ T5863] usb 1-1: device descriptor read/8, error -71 [ 3174.051522][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11919'. [ 3174.251315][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11921'. [ 3174.438029][T29031] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3174.603954][T29031] usb 4-1: device descriptor read/64, error -71 [ 3174.863918][T29031] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3175.003961][T29031] usb 4-1: device descriptor read/64, error -71 [ 3175.125486][T29031] usb usb4-port1: attempt power cycle [ 3175.393974][T15457] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 3175.546710][T15457] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3175.546742][T15457] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3175.548285][T15457] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3175.548312][T15457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3175.548335][T15457] usb 9-1: SerialNumber: syz [ 3175.573893][T29031] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3175.594560][T29031] usb 4-1: device descriptor read/8, error -71 [ 3175.844078][T29031] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3175.864937][T29031] usb 4-1: device descriptor read/8, error -71 [ 3175.867955][T15457] usb 9-1: 0:2 : does not exist [ 3175.964368][T15457] usb 9-1: USB disconnect, device number 25 [ 3175.988084][T29031] usb usb4-port1: unable to enumerate USB device [ 3176.210272][T16941] udevd[16941]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3183.743912][T15457] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3185.488396][T15457] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3185.488427][T15457] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3185.514955][T15457] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3185.514990][T15457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3185.515011][T15457] usb 4-1: SerialNumber: syz [ 3185.733886][T29031] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3185.810191][T15457] usb 4-1: 0:2 : does not exist [ 3185.863900][T29031] usb 3-1: device descriptor read/64, error -71 [ 3185.914016][T15457] usb 4-1: USB disconnect, device number 42 [ 3186.037402][T17028] udevd[17028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3186.252676][T29031] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3186.545391][T29031] usb 3-1: device descriptor read/64, error -71 [ 3186.674324][T29031] usb usb3-port1: attempt power cycle [ 3187.033923][T29031] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3187.063633][T29031] usb 3-1: device descriptor read/8, error -71 [ 3188.249822][T29031] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3189.105919][T29031] usb 3-1: device descriptor read/8, error -71 [ 3189.224452][T29031] usb usb3-port1: unable to enumerate USB device [ 3191.032580][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3196.093805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 3196.093844][ C0] lec:lec_tx_timeout: lec0 [ 3198.230076][T17125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3203.852213][T15457] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 3204.028950][T15457] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3204.028985][T15457] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3204.029032][T15457] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3204.029057][T15457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3204.082730][T15457] usb 9-1: config 0 descriptor?? [ 3204.096409][T15457] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 3204.463833][T17211] program syz.3.11991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3207.122950][T17203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3207.192274][T15457] usb 9-1: USB disconnect, device number 26 [ 3207.990485][T17240] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.12002'. [ 3208.027843][T17244] netlink: 27 bytes leftover after parsing attributes in process `syz.8.12003'. [ 3208.934985][T17255] nbd0: detected capacity change from 0 to 63 [ 3208.942020][T17259] block nbd0: NBD_DISCONNECT [ 3208.942162][T17259] block nbd0: Disconnected due to user request. [ 3208.942180][T17259] block nbd0: shutting down sockets [ 3208.983992][ T58] blk_print_req_error: 138 callbacks suppressed [ 3208.984016][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 3208.984047][ T58] buffer_io_error: 138 callbacks suppressed [ 3208.984059][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3208.984084][ T58] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3208.984103][ T58] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3208.984121][ T58] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3208.984259][T17225] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984298][T17225] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3208.984361][T17225] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984387][T17225] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3208.984443][T17225] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984469][T17225] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3208.984524][T17225] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984548][T17225] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3208.984613][T17225] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984638][T17225] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3208.984693][T17225] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984719][T17225] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3208.984774][T17225] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984841][T17225] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.984915][T17225] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3208.985867][T17225] ldm_validate_partition_table(): Disk read failed. [ 3208.986599][T17225] Dev nbd0: unable to read RDB block 0 [ 3208.987510][T17225] nbd0: unable to read partition table [ 3208.996599][T14997] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3209.011076][T17225] ldm_validate_partition_table(): Disk read failed. [ 3209.011707][T17225] Dev nbd0: unable to read RDB block 0 [ 3209.012478][T17225] nbd0: unable to read partition table [ 3209.044965][T17261] tipc: Started in network mode [ 3209.044997][T17261] tipc: Node identity d6a9a9894e13, cluster identity 4711 [ 3209.045191][T17261] tipc: Enabled bearer , priority 0 [ 3209.056615][T17261] syzkaller0: entered promiscuous mode [ 3209.056642][T17261] syzkaller0: entered allmulticast mode [ 3209.154270][T14997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3209.154302][T14997] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3209.154344][T14997] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3209.154366][T14997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.171242][T14997] usb 4-1: config 0 descriptor?? [ 3209.202653][T14997] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3209.780824][T17263] tipc: Resetting bearer [ 3209.790095][T17270] nbd8: detected capacity change from 0 to 63 [ 3209.792740][T17274] block nbd8: NBD_DISCONNECT [ 3209.823923][T17274] block nbd8: Disconnected due to user request. [ 3209.824792][T17274] block nbd8: shutting down sockets [ 3209.845766][T17260] tipc: Resetting bearer [ 3209.878328][T17225] ldm_validate_partition_table(): Disk read failed. [ 3209.878912][T17225] Dev nbd8: unable to read RDB block 0 [ 3209.879464][T17225] nbd8: unable to read partition table [ 3209.889867][T17225] ldm_validate_partition_table(): Disk read failed. [ 3209.904732][T17225] Dev nbd8: unable to read RDB block 0 [ 3209.905574][T17225] nbd8: unable to read partition table [ 3210.184969][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3210.204252][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3210.364665][T17260] tipc: Disabling bearer [ 3210.594941][T14997] tipc: Node number set to 2562369929 [ 3211.045204][T17298] block nbd2: NBD_DISCONNECT [ 3211.089813][ T5809] IPVS: starting estimator thread 0... [ 3211.204309][T17304] IPVS: using max 7 ests per chain, 16800 per kthread [ 3211.629370][T17318] netlink: 76 bytes leftover after parsing attributes in process `syz.9.12021'. [ 3212.089189][T30202] usb 4-1: USB disconnect, device number 43 [ 3212.563090][T17330] program syz.3.12025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3215.214173][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 3215.214216][ C0] lec:lec_tx_timeout: lec0 [ 3217.967682][T17362] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3217.973198][T17358] netlink: 7 bytes leftover after parsing attributes in process `syz.9.12030'. [ 3218.199823][T16117] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 3218.390372][T16117] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3218.390407][T16117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3218.390439][T16117] usb 9-1: Product: syz [ 3218.390455][T16117] usb 9-1: Manufacturer: syz [ 3218.390470][T16117] usb 9-1: SerialNumber: syz [ 3219.603866][T16117] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3219.603937][T16117] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3221.214004][T16117] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 3221.214033][T16117] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3221.214958][T16117] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3221.472632][T16117] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -110 [ 3222.079880][ T5809] usb 9-1: USB disconnect, device number 27 [ 3222.740352][ T5809] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3222.771018][T17414] program syz.8.12042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3222.947898][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3222.947920][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3222.947949][ T5809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3222.947963][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3222.952430][ T5809] usb 3-1: config 0 descriptor?? [ 3222.962807][ T5809] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3223.116442][T17418] overlayfs: missing 'lowerdir' [ 3223.794255][T14997] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 3223.971024][T14997] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3223.971058][T14997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3223.971079][T14997] usb 10-1: Product: syz [ 3223.971094][T14997] usb 10-1: Manufacturer: syz [ 3223.971108][T14997] usb 10-1: SerialNumber: syz [ 3224.270647][T17455] overlayfs: missing 'lowerdir' [ 3224.292233][T17456] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3224.486706][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3224.486778][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3224.628961][T17463] program syz.3.12059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3226.480944][T16117] usb 3-1: USB disconnect, device number 79 [ 3227.127975][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3227.128642][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.196081][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3227.246655][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.273879][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 3227.274284][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 3227.275205][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 3227.275239][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3227.275742][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3227.376066][T14997] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 3227.415966][T14997] usb 10-1: USB disconnect, device number 28 [ 3229.743155][T17515] program syz.0.12070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3231.943865][T30202] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 3232.103468][T30202] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3232.103491][T30202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.103504][T30202] usb 9-1: Product: syz [ 3232.103512][T30202] usb 9-1: Manufacturer: syz [ 3232.103521][T30202] usb 9-1: SerialNumber: syz [ 3232.553367][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3232.553410][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3234.018829][T17556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.019486][T17556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.023580][T17556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.054010][T17556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.071688][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 3234.072498][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 3234.073814][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 3234.073872][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3234.080933][T30202] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3234.146168][T30202] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 3234.156409][T30202] usb 9-1: USB disconnect, device number 28 [ 3238.317826][T17596] program syz.0.12084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3238.406152][T17586] tipc: Enabled bearer , priority 0 [ 3239.433199][T17586] tipc: Disabling bearer [ 3242.543839][T14997] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 3242.787515][T14997] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3242.787549][T14997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.787569][T14997] usb 10-1: Product: syz [ 3242.787584][T14997] usb 10-1: Manufacturer: syz [ 3242.787599][T14997] usb 10-1: SerialNumber: syz [ 3242.968062][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 3242.968127][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 3242.968149][T14997] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3243.213535][T14997] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 3243.261998][T14997] usb 10-1: USB disconnect, device number 29 [ 3243.324159][ T5809] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3243.473900][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 3243.525978][ T5809] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3243.526040][ T5809] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3243.526068][ T5809] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3243.526094][ T5809] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3243.530667][ T5809] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3243.530699][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3243.530721][ T5809] usb 4-1: Product: syz [ 3243.530736][ T5809] usb 4-1: Manufacturer: syz [ 3243.530751][ T5809] usb 4-1: SerialNumber: syz [ 3243.656980][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3243.675770][ T5809] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input97 [ 3243.893786][ T5809] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3243.893810][ T5809] (id 0x00) [ 3243.975979][ T5809] rc_core: IR keymap rc-imon-pad not found [ 3243.976005][ T5809] Registered IR keymap rc-empty [ 3243.976134][ T5809] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3243.976161][ T5809] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3244.100857][ T5809] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 3244.119659][ T5809] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input98 [ 3244.137384][ T5809] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:44> initialized [ 3244.779241][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3244.779876][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3244.782978][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3244.783530][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3246.062159][T17655] imon:send_packet: task interrupted [ 3246.062182][T17655] imon:send_packet: packet tx failed (-512) [ 3246.062212][T17655] imon:vfd_write: send packet #1 failed [ 3246.083016][T17656] imon:display_open: display port is already open [ 3246.203398][T29031] usb 4-1: USB disconnect, device number 44 [ 3247.563966][T29031] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3247.724224][T29031] usb 3-1: Using ep0 maxpacket: 32 [ 3247.730321][T29031] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3247.730381][T29031] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3247.730397][T29031] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3247.730413][T29031] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3247.732993][T29031] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3247.733025][T29031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.733047][T29031] usb 3-1: Product: syz [ 3247.733062][T29031] usb 3-1: Manufacturer: syz [ 3247.733077][T29031] usb 3-1: SerialNumber: syz [ 3247.761841][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3247.769078][T29031] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input99 [ 3247.993917][T29031] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3247.993940][T29031] (id 0x00) [ 3248.073962][T29031] rc_core: IR keymap rc-imon-pad not found [ 3248.073988][T29031] Registered IR keymap rc-empty [ 3248.074083][T29031] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3248.074103][T29031] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3248.195154][T29031] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 3248.197448][T29031] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input100 [ 3248.201511][T29031] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:80> initialized [ 3248.785818][T17720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3248.786577][T17720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3248.789502][T17720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3248.790136][T17720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3248.852321][T17719] imon:send_packet: task interrupted [ 3248.852343][T17719] imon:send_packet: packet tx failed (-512) [ 3248.852399][T17719] imon:vfd_write: send packet #1 failed [ 3248.852472][T17720] imon:display_open: display port is already open [ 3248.852932][T17719] imon:send_packet: task interrupted [ 3248.852945][T17719] imon:send_packet: packet tx failed (-512) [ 3248.852988][T17719] imon:vfd_write: send packet #0 failed [ 3248.853571][T17719] imon:send_packet: packet tx failed (-32) [ 3248.853599][T17719] imon:vfd_write: send packet #0 failed [ 3248.912447][T14997] usb 3-1: USB disconnect, device number 80 [ 3255.813887][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3256.673418][T17772] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12130'. [ 3256.714456][T17770] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3261.136946][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 3261.137026][ C0] lec:lec_tx_timeout: lec0 [ 3261.364490][T14997] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 3261.543966][T14997] usb 10-1: device descriptor read/64, error -71 [ 3261.794127][T14997] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 3261.923848][T14997] usb 10-1: device descriptor read/64, error -71 [ 3261.952732][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12144'. [ 3262.037472][T14997] usb usb10-port1: attempt power cycle [ 3262.163947][ T5809] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3262.254789][T17829] netlink: 76 bytes leftover after parsing attributes in process `syz.8.12145'. [ 3262.322068][ T5809] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3262.322104][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.322126][ T5809] usb 3-1: Product: syz [ 3262.322142][ T5809] usb 3-1: Manufacturer: syz [ 3262.322157][ T5809] usb 3-1: SerialNumber: syz [ 3262.374110][T14997] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 3262.395104][T14997] usb 10-1: device descriptor read/8, error -71 [ 3262.634107][T14997] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 3262.657053][T14997] usb 10-1: device descriptor read/8, error -71 [ 3262.764895][T14997] usb usb10-port1: unable to enumerate USB device [ 3262.824914][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3262.824986][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3264.266418][T17817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3264.270992][T17817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3264.330543][T17817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3264.345697][T17817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3264.373284][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 3264.374199][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 3264.374746][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 3264.374806][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3264.375759][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3264.436440][ T5809] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 3264.474079][ T5809] usb 3-1: USB disconnect, device number 81 [ 3271.619732][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.622990][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3277.133735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 3277.133777][ C0] lec:lec_tx_timeout: lec0 [ 3291.204722][T17949] syzkaller0: entered promiscuous mode [ 3291.204752][T17949] syzkaller0: entered allmulticast mode [ 3291.440246][T17966] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12167'. [ 3291.444250][T30202] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 3291.610058][T30202] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3291.610078][T30202] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3291.611536][T30202] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3291.611554][T30202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3291.611567][T30202] usb 9-1: SerialNumber: syz [ 3291.896053][T30202] usb 9-1: cannot find UAC_HEADER [ 3292.329369][T17978] program syz.2.12174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3292.932796][T30202] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3292.967081][T30202] usb 9-1: USB disconnect, device number 29 [ 3294.170796][T17956] udevd[17956]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3294.323505][T17999] netlink: 32 bytes leftover after parsing attributes in process `syz.9.12180'. [ 3294.346447][T17996] nbd: must specify at least one socket [ 3295.333910][T15457] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 3295.487620][T15457] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3295.487658][T15457] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3295.487685][T15457] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3295.487699][T15457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3295.510108][T15457] usb 9-1: config 0 descriptor?? [ 3296.280756][T15457] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 3297.972387][ T5863] usb 9-1: USB disconnect, device number 30 [ 3308.620617][T18082] nbd: must specify at least one socket [ 3308.773857][T30202] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 3309.151337][T30202] usb 9-1: Using ep0 maxpacket: 16 [ 3309.170006][T30202] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3309.170210][T30202] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3309.170243][T30202] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3309.170464][T30202] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3309.170525][T30202] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3309.231671][T30202] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3309.231716][T30202] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3309.231789][T30202] usb 9-1: Manufacturer: syz [ 3309.585389][T30202] usb 9-1: config 0 descriptor?? [ 3311.973771][T30202] rc_core: IR keymap rc-hauppauge not found [ 3311.973797][T30202] Registered IR keymap rc-empty [ 3311.973967][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3311.993899][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.020461][T30202] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 3312.044673][T30202] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input101 [ 3312.058245][T18125] block nbd9: NBD_DISCONNECT [ 3312.065822][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.094048][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.113843][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.133847][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.184484][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.203828][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.223923][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.244021][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.263861][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.283848][T30202] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3312.317903][T30202] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 3312.317933][T30202] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3312.357348][T30202] usb 9-1: USB disconnect, device number 31 [ 3314.165517][ T31] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 3314.258331][T30202] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 3314.418564][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 3314.474464][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3314.474503][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3314.474520][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3314.474533][ T31] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3314.474554][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3314.475988][ T31] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3314.476007][ T31] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3314.476019][ T31] usb 10-1: Manufacturer: syz [ 3314.479761][ T31] usb 10-1: config 0 descriptor?? [ 3314.508068][T30202] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3314.508098][T30202] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3314.523888][T30202] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3314.523922][T30202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3314.523943][T30202] usb 9-1: SerialNumber: syz [ 3314.971124][T30202] usb 9-1: 0:2 : does not exist [ 3315.207500][T18162] program syz.2.12224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3315.371256][T30202] usb 9-1: USB disconnect, device number 32 [ 3315.727212][T18166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12226'. [ 3315.751520][T18119] udevd[18119]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3317.540365][ T31] rc_core: IR keymap rc-hauppauge not found [ 3317.540389][ T31] Registered IR keymap rc-empty [ 3317.541649][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.572040][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.587213][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 3317.589211][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input102 [ 3317.654323][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.673887][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.705681][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.723839][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.745400][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.774444][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.793804][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.814634][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.835704][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.854039][ T31] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3317.878568][ T31] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 3317.878584][ T31] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3317.908411][ T31] usb 10-1: USB disconnect, device number 34 [ 3318.999854][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3324.094079][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 3324.094119][ C0] lec:lec_tx_timeout: lec0 [ 3328.445009][T18213] block nbd0: NBD_DISCONNECT [ 3329.429151][T18219] vlan2: entered promiscuous mode [ 3329.429176][T18219] macvlan1: entered promiscuous mode [ 3333.067795][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3333.071439][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3333.721773][ T8218] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 3333.900219][T30202] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3333.975552][ T8218] usb 9-1: Using ep0 maxpacket: 16 [ 3334.013197][ T8218] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3334.013263][ T8218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3334.013293][ T8218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3334.013316][ T8218] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3334.013340][ T8218] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3334.077435][T30202] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3334.077466][T30202] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3334.078948][T30202] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3334.078975][T30202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3334.078995][T30202] usb 4-1: SerialNumber: syz [ 3334.092333][ T8218] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3334.092364][ T8218] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3334.092382][ T8218] usb 9-1: Manufacturer: syz [ 3334.107516][ T8218] usb 9-1: config 0 descriptor?? [ 3334.388741][T30202] usb 4-1: 0:2 : does not exist [ 3335.836485][T30202] usb 4-1: USB disconnect, device number 45 [ 3336.127513][T18265] program syz.3.12242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3336.217094][T18249] udevd[18249]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3339.394018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms [ 3339.394044][ C0] lec:lec_tx_timeout: lec0 [ 3339.494578][T18273] block nbd8: NBD_DISCONNECT [ 3339.534069][ T8218] rc_core: IR keymap rc-hauppauge not found [ 3339.534093][ T8218] Registered IR keymap rc-empty [ 3339.534260][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.568004][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.589196][ T8218] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 3339.591439][ T8218] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input103 [ 3339.644558][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.671716][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.684022][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.703958][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.727131][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.744309][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.764060][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.784331][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.803846][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.826402][ T8218] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 3339.846505][ T8218] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 3339.846532][ T8218] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3339.988955][ T8218] usb 9-1: USB disconnect, device number 33 [ 3340.045110][T18288] syzkaller0: entered promiscuous mode [ 3340.045140][T18288] syzkaller0: entered allmulticast mode [ 3340.110704][T18288] tipc: Started in network mode [ 3340.110753][T18288] tipc: Node identity 5a37750864fe, cluster identity 4711 [ 3340.110958][T18288] tipc: Enabled bearer , priority 0 [ 3341.353950][T18287] tipc: Resetting bearer [ 3343.195108][T18287] tipc: Disabling bearer [ 3343.355267][T14997] tipc: Node number set to 1053390088 [ 3382.367884][T24455] lec:lec_start_xmit: lec0:No lecd attached [ 3388.094196][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 3388.094236][ C0] lec:lec_tx_timeout: lec0 [ 3394.501703][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3394.503825][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 3400.093844][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 3400.093882][ C0] lec:lec_tx_timeout: lec0 [ 3444.623842][T16117] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 3444.803728][T16117] usb 10-1: Using ep0 maxpacket: 16 [ 3444.806606][T16117] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3444.806667][T16117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3444.806697][T16117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3444.806720][T16117] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3444.806745][T16117] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3444.808545][T16117] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3444.808576][T16117] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3444.808598][T16117] usb 10-1: Manufacturer: syz [ 3444.913901][T16117] usb 10-1: config 0 descriptor?? [ 3445.368722][T18544] ------------[ cut here ]------------ [ 3445.368740][T18544] ODEBUG: init active (active state 0) object: ffff8880589c10f8 object type: timer_list hint: lec_arp_check_expire+0x0/0xc80 [ 3445.368935][T18544] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2d3/0x470, CPU#0: syz.2.12252/18544 [ 3445.369036][T18544] Modules linked in: [ 3445.369061][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.2.12252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 3445.369103][T18544] Tainted: [L]=SOFTLOCKUP [ 3445.369112][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3445.369124][T18544] RIP: 0010:__debug_object_init+0x32f/0x470 [ 3445.369155][T18544] Code: 3c 28 00 74 08 4c 89 ef e8 4e 00 82 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 82 a6 8b 4c 89 fa 8b 4c 24 08 4c 8b 44 24 10 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 99 e6 c1 0a 41 83 [ 3445.369175][T18544] RSP: 0018:ffffc9000f06f8f8 EFLAGS: 00010246 [ 3445.369196][T18544] RAX: 1ffffffff169eb24 RBX: ffff8880589c10f8 RCX: 0000000000000000 [ 3445.369212][T18544] RDX: ffffffff8ba68640 RSI: ffffffff8ba68240 RDI: ffffffff8f74b1d0 [ 3445.369228][T18544] RBP: dffffc0000000000 R08: ffff8880589c10f8 R09: ffffffff8b4f6c60 [ 3445.369245][T18544] R10: dffffc0000000000 R11: ffffffff81b0b720 R12: 0000000000000003 [ 3445.369260][T18544] R13: ffffffff8b4f5920 R14: ffffffff8f74b1d0 R15: ffffffff8ba68640 [ 3445.369277][T18544] FS: 00007fef6984e6c0(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 3445.369295][T18544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3445.369311][T18544] CR2: 00007f891e453e9c CR3: 00000000637f0000 CR4: 00000000003526f0 [ 3445.369332][T18544] Call Trace: [ 3445.369342][T18544] [ 3445.369350][T18544] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 3445.369383][T18544] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 3445.369418][T18544] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 3445.369528][T18544] timer_init_key+0x41/0x2f0 [ 3445.369596][T18544] lane_ioctl+0x135b/0x1fc0 [ 3445.369635][T18544] ? __pfx_clip_ioctl+0x10/0x10 [ 3445.369662][T18544] ? br2684_ioctl+0x110/0x6b0 [ 3445.369697][T18544] ? __pfx_lane_ioctl+0x10/0x10 [ 3445.369726][T18544] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3445.369821][T18544] ? lockdep_hardirqs_on+0x7a/0x110 [ 3445.369884][T18544] ? atmtcp_ioctl+0x1ce/0xdf0 [ 3445.369957][T18544] ? do_vcc_ioctl+0x2fa/0x9d0 [ 3445.370004][T18544] do_vcc_ioctl+0x36d/0x9d0 [ 3445.370032][T18544] svc_ioctl+0x1f6/0x7d0 [ 3445.370066][T18544] ? kasan_quarantine_put+0xbb/0x1f0 [ 3445.370157][T18544] ? __pfx_svc_ioctl+0x10/0x10 [ 3445.370199][T18544] ? tomoyo_path_number_perm+0x219/0x630 [ 3445.370269][T18544] ? tomoyo_path_number_perm+0x219/0x630 [ 3445.370305][T18544] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3445.370371][T18544] sock_do_ioctl+0x101/0x320 [ 3445.370483][T18544] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3445.370511][T18544] ? do_futex+0x333/0x420 [ 3445.370539][T18544] ? __asan_memset+0x22/0x50 [ 3445.370568][T18544] ? smack_file_ioctl+0x263/0x360 [ 3445.370776][T18544] sock_ioctl+0x5c9/0x7f0 [ 3445.370811][T18544] ? __pfx_sock_ioctl+0x10/0x10 [ 3445.370841][T18544] ? __fget_files+0x2a/0x420 [ 3445.370904][T18544] ? __fget_files+0x3a6/0x420 [ 3445.370932][T18544] ? __fget_files+0x2a/0x420 [ 3445.370967][T18544] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3445.371023][T18544] ? __pfx_sock_ioctl+0x10/0x10 [ 3445.371054][T18544] __se_sys_ioctl+0xff/0x170 [ 3445.371089][T18544] do_syscall_64+0x14d/0xf80 [ 3445.371138][T18544] ? trace_irq_disable+0x3b/0x150 [ 3445.371172][T18544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.371221][T18544] ? clear_bhb_loop+0x40/0x90 [ 3445.371250][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.371272][T18544] RIP: 0033:0x7fef6b5fc819 [ 3445.371296][T18544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3445.371316][T18544] RSP: 002b:00007fef6984e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3445.371340][T18544] RAX: ffffffffffffffda RBX: 00007fef6b875fa0 RCX: 00007fef6b5fc819 [ 3445.371356][T18544] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000009 [ 3445.371370][T18544] RBP: 00007fef6b692c91 R08: 0000000000000000 R09: 0000000000000000 [ 3445.371384][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3445.371397][T18544] R13: 00007fef6b876038 R14: 00007fef6b875fa0 R15: 00007ffe7b95f998 [ 3445.371434][T18544] [ 3445.371447][T18544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3445.371468][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.2.12252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 3445.371499][T18544] Tainted: [L]=SOFTLOCKUP [ 3445.371507][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3445.371521][T18544] Call Trace: [ 3445.371530][T18544] [ 3445.371539][T18544] vpanic+0x56c/0xa60 [ 3445.371596][T18544] ? __pfx__printk+0x10/0x10 [ 3445.371621][T18544] ? __pfx_vpanic+0x10/0x10 [ 3445.371652][T18544] ? is_bpf_text_address+0x292/0x2b0 [ 3445.371711][T18544] ? is_bpf_text_address+0x26/0x2b0 [ 3445.371753][T18544] panic+0xc5/0xd0 [ 3445.371785][T18544] ? __pfx_panic+0x10/0x10 [ 3445.371838][T18544] __warn+0x315/0x4f0 [ 3445.371867][T18544] ? __debug_object_init+0x2d3/0x470 [ 3445.371894][T18544] ? __debug_object_init+0x2d3/0x470 [ 3445.371922][T18544] __report_bug+0x29a/0x540 [ 3445.371986][T18544] ? __debug_object_init+0x2d3/0x470 [ 3445.372013][T18544] ? __pfx___report_bug+0x10/0x10 [ 3445.372047][T18544] ? __lock_acquire+0x6b5/0x2cf0 [ 3445.372102][T18544] report_bug_entry+0x19a/0x290 [ 3445.372129][T18544] ? __debug_object_init+0x32f/0x470 [ 3445.372155][T18544] ? __debug_object_init+0x334/0x470 [ 3445.372181][T18544] handle_bug+0xce/0x200 [ 3445.372211][T18544] exc_invalid_op+0x1a/0x50 [ 3445.372240][T18544] asm_exc_invalid_op+0x1a/0x20 [ 3445.372262][T18544] RIP: 0010:__debug_object_init+0x32f/0x470 [ 3445.372291][T18544] Code: 3c 28 00 74 08 4c 89 ef e8 4e 00 82 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 82 a6 8b 4c 89 fa 8b 4c 24 08 4c 8b 44 24 10 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 99 e6 c1 0a 41 83 [ 3445.372310][T18544] RSP: 0018:ffffc9000f06f8f8 EFLAGS: 00010246 [ 3445.372329][T18544] RAX: 1ffffffff169eb24 RBX: ffff8880589c10f8 RCX: 0000000000000000 [ 3445.372344][T18544] RDX: ffffffff8ba68640 RSI: ffffffff8ba68240 RDI: ffffffff8f74b1d0 [ 3445.372361][T18544] RBP: dffffc0000000000 R08: ffff8880589c10f8 R09: ffffffff8b4f6c60 [ 3445.372376][T18544] R10: dffffc0000000000 R11: ffffffff81b0b720 R12: 0000000000000003 [ 3445.372392][T18544] R13: ffffffff8b4f5920 R14: ffffffff8f74b1d0 R15: ffffffff8ba68640 [ 3445.372414][T18544] ? __pfx_timer_debug_hint+0x10/0x10 [ 3445.372450][T18544] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 3445.372483][T18544] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 3445.372518][T18544] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 3445.372550][T18544] timer_init_key+0x41/0x2f0 [ 3445.372585][T18544] lane_ioctl+0x135b/0x1fc0 [ 3445.372625][T18544] ? __pfx_clip_ioctl+0x10/0x10 [ 3445.372651][T18544] ? br2684_ioctl+0x110/0x6b0 [ 3445.372683][T18544] ? __pfx_lane_ioctl+0x10/0x10 [ 3445.372710][T18544] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3445.372737][T18544] ? lockdep_hardirqs_on+0x7a/0x110 [ 3445.372766][T18544] ? atmtcp_ioctl+0x1ce/0xdf0 [ 3445.372786][T18544] ? do_vcc_ioctl+0x2fa/0x9d0 [ 3445.372811][T18544] do_vcc_ioctl+0x36d/0x9d0 [ 3445.372836][T18544] svc_ioctl+0x1f6/0x7d0 [ 3445.372868][T18544] ? kasan_quarantine_put+0xbb/0x1f0 [ 3445.372899][T18544] ? __pfx_svc_ioctl+0x10/0x10 [ 3445.372939][T18544] ? tomoyo_path_number_perm+0x219/0x630 [ 3445.372963][T18544] ? tomoyo_path_number_perm+0x219/0x630 [ 3445.372998][T18544] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3445.373029][T18544] sock_do_ioctl+0x101/0x320 [ 3445.373064][T18544] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3445.373101][T18544] ? do_futex+0x333/0x420 [ 3445.373128][T18544] ? __asan_memset+0x22/0x50 [ 3445.373158][T18544] ? smack_file_ioctl+0x263/0x360 [ 3445.373199][T18544] sock_ioctl+0x5c9/0x7f0 [ 3445.373233][T18544] ? __pfx_sock_ioctl+0x10/0x10 [ 3445.373264][T18544] ? __fget_files+0x2a/0x420 [ 3445.373293][T18544] ? __fget_files+0x3a6/0x420 [ 3445.373319][T18544] ? __fget_files+0x2a/0x420 [ 3445.373349][T18544] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3445.373372][T18544] ? __pfx_sock_ioctl+0x10/0x10 [ 3445.373402][T18544] __se_sys_ioctl+0xff/0x170 [ 3445.373428][T18544] do_syscall_64+0x14d/0xf80 [ 3445.373452][T18544] ? trace_irq_disable+0x3b/0x150 [ 3445.373477][T18544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.373500][T18544] ? clear_bhb_loop+0x40/0x90 [ 3445.373525][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.373554][T18544] RIP: 0033:0x7fef6b5fc819 [ 3445.373573][T18544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3445.373591][T18544] RSP: 002b:00007fef6984e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3445.373614][T18544] RAX: ffffffffffffffda RBX: 00007fef6b875fa0 RCX: 00007fef6b5fc819 [ 3445.373630][T18544] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000009 [ 3445.373643][T18544] RBP: 00007fef6b692c91 R08: 0000000000000000 R09: 0000000000000000 [ 3445.373658][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3445.373673][T18544] R13: 00007fef6b876038 R14: 00007fef6b875fa0 R15: 00007ffe7b95f998 [ 3445.373708][T18544] [ 3445.373879][T18544] Kernel Offset: disabled