last executing test programs: 14m31.019175952s ago: executing program 3 (id=1220): sched_setattr(0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)='a', 0x1, 0x9003) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x401eb94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000002000000"], 0x50) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 14m29.243486968s ago: executing program 3 (id=1223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m24.8879447s ago: executing program 3 (id=1234): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x243, 0x0) fallocate(r9, 0x0, 0x1000000, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m22.42940114s ago: executing program 3 (id=1239): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000580)="54b83ae3ba", 0x5}]) 14m20.99562434s ago: executing program 3 (id=1242): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000190001002fbd7000f9dbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x6, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaa03aaaabb86dd6001044800143a00200100000000000000000000000000013bd0c3e90000002000000000000000aa87009078ff0100000000008100ffff0000000001"], 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e080000007f08000000000000a7c7ffeb30ff21a3026bec9d5335cd92fc5d"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) ioperm(0x6, 0x1, 0x6) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 14m18.911418831s ago: executing program 3 (id=1245): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x90000915, 0x200000000005) 14m18.283414331s ago: executing program 32 (id=1245): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x90000915, 0x200000000005) 13m55.587284346s ago: executing program 0 (id=1290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 13m54.407419514s ago: executing program 0 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x48000) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x5, 0x391f, 0x7}}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 13m54.021969022s ago: executing program 0 (id=1292): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) 13m53.735384446s ago: executing program 0 (id=1293): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@lazytime}, {@i_version}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) 13m51.889636737s ago: executing program 0 (id=1296): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 13m46.431231502s ago: executing program 0 (id=1312): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x611}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x5, 0x99, 0x0, 0x2, 0x10001}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x40}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"90ca76f6825be5e24e48393f"}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @addr={0x8, 0x3}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0x8, 0x53, 0x7, 0x65, @time={0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, @raw8={"424a46f27d2a45434e135bda"}}, {0x7, 0x2, 0x64, 0x8, @tick=0x5, {0xc5, 0xf9}, {0x9, 0x16}, @addr={0x7, 0x40}}, {0x88, 0xfd, 0x7a, 0xd, @tick=0x1158, {0x9, 0x6}, {0x4, 0x4}, @connect={{}, {0xf, 0x6}}}], 0x54) 13m44.918916205s ago: executing program 33 (id=1312): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x611}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x5, 0x99, 0x0, 0x2, 0x10001}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x40}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"90ca76f6825be5e24e48393f"}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @addr={0x8, 0x3}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0x8, 0x53, 0x7, 0x65, @time={0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, @raw8={"424a46f27d2a45434e135bda"}}, {0x7, 0x2, 0x64, 0x8, @tick=0x5, {0xc5, 0xf9}, {0x9, 0x16}, @addr={0x7, 0x40}}, {0x88, 0xfd, 0x7a, 0xd, @tick=0x1158, {0x9, 0x6}, {0x4, 0x4}, @connect={{}, {0xf, 0x6}}}], 0x54) 13m7.092786426s ago: executing program 6 (id=1314): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000580)="54b83ae3ba", 0x5}]) 13m4.271696474s ago: executing program 6 (id=1400): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000004}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 13m3.826768766s ago: executing program 6 (id=1404): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x40000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) write$ppp(r6, &(0x7f00000000c0)="9d776ed17a30b746dd208dae32ee1fc0f6d5a9c6549ae0abb50d82634bf04af37676d7c928f614aa5c575d1b51e8a1ee1c72b0659c0ec0b8bb97b29e8cbd0a998100b487aef7dc3af0a93e5d98d4011d26a5f5dbcbaec2733936595a90d7ca2963eb822d154add307a1cebb34654e46ef3fc0eba32bfd1d7f889d1751ea2c77c1ed30c8ad80533d112be1aaf5ef33e815682b981ca991f3b181bb6b81f0f964167098a23d2730094d4952aa6bcffd8cd713d0b8f6312e946", 0xb8) close(0x4) 12m48.056357594s ago: executing program 34 (id=1404): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x40000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) write$ppp(r6, &(0x7f00000000c0)="9d776ed17a30b746dd208dae32ee1fc0f6d5a9c6549ae0abb50d82634bf04af37676d7c928f614aa5c575d1b51e8a1ee1c72b0659c0ec0b8bb97b29e8cbd0a998100b487aef7dc3af0a93e5d98d4011d26a5f5dbcbaec2733936595a90d7ca2963eb822d154add307a1cebb34654e46ef3fc0eba32bfd1d7f889d1751ea2c77c1ed30c8ad80533d112be1aaf5ef33e815682b981ca991f3b181bb6b81f0f964167098a23d2730094d4952aa6bcffd8cd713d0b8f6312e946", 0xb8) close(0x4) 7m36.867623481s ago: executing program 2 (id=1980): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x48000) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 7m26.190430661s ago: executing program 2 (id=1997): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000f8dbdf2500000000", @ANYRES32=r5, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 7m22.051514782s ago: executing program 2 (id=2001): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 7m15.5306279s ago: executing program 1 (id=2012): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7m15.143003059s ago: executing program 1 (id=2015): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7m13.154725326s ago: executing program 1 (id=2016): getrandom(0x0, 0x0, 0xd86b31f1268e345c) r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setrlimit(0x8, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064d2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e20000000000000009dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="0a9fc3a1b4a4949efa7546be0345504d75353e63a03be3c82d6224523dbf7fe4c723ee7139354e365f5911bb8daa11bdf5bbb3a1fb23240f922d054bd8d57ae6729801823d01029b83f070e431c91515376904fadc1f6022bc8a2e730dc9b53fc5480ba73c89c05f3466d6ee021bb1a94da91c1deab6e9ad0d34193a56c16521", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r4, r4, 0x2f, 0x1c, 0x4, @void, @value=r3}, 0x20) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x3, 0x0, 0x0, @fd}, @typed={0xb, 0xf, 0x0, 0x0, @str='zonefs\x00'}]}]}, 0x30}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000440)={r6, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, 0x0) 7m12.86522146s ago: executing program 2 (id=2018): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)={0x38, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x20048814) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 7m11.724818715s ago: executing program 1 (id=2019): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7m11.519621315s ago: executing program 2 (id=2022): ioperm(0x1, 0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) bind$alg(0xffffffffffffffff, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_emit_vhci(0x0, 0x22) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7m7.712378271s ago: executing program 1 (id=2025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x3, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc, 0x1, 0xf}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, '\v'}]}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 7m6.569267846s ago: executing program 1 (id=2028): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x402441, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) fanotify_mark(r2, 0x40, 0x40000000, r3, &(0x7f00000000c0)='./file0\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r5, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 7m6.560268027s ago: executing program 2 (id=2029): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 6m51.465447292s ago: executing program 35 (id=2028): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x402441, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) fanotify_mark(r2, 0x40, 0x40000000, r3, &(0x7f00000000c0)='./file0\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r5, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 6m50.650096931s ago: executing program 36 (id=2029): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 12.74617769s ago: executing program 7 (id=2929): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x4bb, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 11.73755106s ago: executing program 7 (id=2932): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32], 0x2c}}, 0x4000000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = io_uring_setup(0x364b, &(0x7f00000002c0)={0x0, 0xfb6b, 0x800, 0x0, 0x20000004}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x203, 0x807c2, 0x32314d59, 0x32315659, 0xffffffff, 0x10004, 0xa, 0x807, 0xfeedcafe, 0x3, 0x2, 0x3}}) accept$inet6(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0) 10.484582972s ago: executing program 7 (id=2938): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = userfaultfd(0x801) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video(0x0, 0xa7, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x5, 0x7f}, 'port1\x00', 0x80, 0x14, 0x7ff, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d, 0x9}) ioctl$TCXONC(r1, 0x540a, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 8.271722171s ago: executing program 8 (id=2947): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001200)="1c0000001e005f0214ffffffff070000000000001d000000000000", 0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x20, 0x0) 7.017314513s ago: executing program 8 (id=2950): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x243, 0x0) fallocate(r10, 0x0, 0x1000000, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.016680373s ago: executing program 9 (id=2951): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xa8) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) 5.892434099s ago: executing program 8 (id=2953): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x101e40, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 5.891947919s ago: executing program 9 (id=2954): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 5.773393025s ago: executing program 7 (id=2955): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) unlink(&(0x7f0000000180)='./file1\x00') 5.766534715s ago: executing program 4 (id=2956): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 5.163519974s ago: executing program 5 (id=2957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 4.980230884s ago: executing program 4 (id=2958): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.780782853s ago: executing program 9 (id=2959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 4.196399602s ago: executing program 9 (id=2960): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001200)="1c0000001e005f0214ffffffff070000000000001d000000000000", 0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x20, 0x0) 3.876481418s ago: executing program 4 (id=2961): sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40008c4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{}, {0x0, "ad44abb9fe57a899"}}}}, 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 3.798321842s ago: executing program 5 (id=2962): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 3.618519961s ago: executing program 4 (id=2963): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x7, 0x20, 0xffffffff, 0x0]}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 3.536258595s ago: executing program 5 (id=2964): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x243, 0x0) fallocate(r10, 0x0, 0x1000000, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.42822194s ago: executing program 4 (id=2965): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = userfaultfd(0x801) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video(0x0, 0xa7, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x5, 0x7f}, 'port1\x00', 0x80, 0x14, 0x7ff, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d, 0x9}) ioctl$TCXONC(r1, 0x540a, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 3.357580594s ago: executing program 7 (id=2966): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x611}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x5, 0x99, 0x0, 0x2, 0x10001}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x40}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"90ca76f6825be5e24e48393f"}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @addr={0x8, 0x3}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0x8, 0x53, 0x7, 0x65, @time={0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, @raw8={"424a46f27d2a45434e135bda"}}, {0x7, 0x2, 0x64, 0x8, @tick=0x5, {0xc5, 0xf9}, {0x9, 0x16}, @addr={0x7, 0x40}}, {0x88, 0xfd, 0x7a, 0xd, @tick=0x1158, {0x9, 0x6}, {0x4, 0x4}, @connect={{}, {0xf, 0x6}}}], 0x54) write$sndseq(r1, &(0x7f0000000e00)=[{0x6, 0xcb, 0xa9, 0x5, @time={0x3, 0x3}, {0xbf, 0x9}, {0x4}, @addr={0x23, 0x8e}}, {0x5, 0x4, 0x2, 0x6, @time={0xc}, {0x1, 0x7}, {0x4, 0x2}, @ext={0x0, 0x0}}, {0x4, 0xfa, 0x9, 0xb, @tick=0x5, {0xa, 0x1b}, {0x9, 0x8}, @result={0xffffff04, 0x228}}, {0x6, 0x58, 0x7f, 0x7, @time={0x72, 0x6}, {0x5}, {0x7}, @control={0x4, 0x9, 0x1}}, {0x6, 0xd6, 0x7f, 0x10, @tick=0x77447e3f, {0x1, 0x81}, {0xe8, 0x5}, @time=@tick=0x94}, {0x5, 0x6, 0x0, 0x7, @time={0xe, 0x2}, {0x14, 0x5}, {0x0, 0x2}, @control={0x0, 0x6, 0x5}}, {0x10, 0x8, 0x0, 0x9, @tick=0x6, {0x2, 0x7}, {0x5, 0xfa}, @addr={0x7, 0x6}}], 0xc4) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) 2.175393562s ago: executing program 5 (id=2967): syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x10) 1.663569947s ago: executing program 9 (id=2968): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.546467443s ago: executing program 5 (id=2969): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.535126284s ago: executing program 8 (id=2970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 1.462502918s ago: executing program 4 (id=2971): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.076180677s ago: executing program 8 (id=2972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 999.65305ms ago: executing program 9 (id=2973): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1}}], 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 888.888246ms ago: executing program 7 (id=2974): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4be, &(0x7f0000000880)="$eJzs20tslNUbx/HfM+/MMB36/1suFjAEmmhiBYFesEBqYrjYaMJFC9VIvKTSKVZ6IZ2ilICwVHcuWLp068KVcWtIXBoXBmNYmCAbN7MSd5jzznuboZepbWda5vshcN7L8w7nnGfeOedM3hEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCOvXq0q9saXQsAAFBPp88OdvUy/gMA0FTOsf4HAABoJiZPv8u071LJTvn7ZbmTY5NXrg6dGJj7shaTKSXPj3d/c909vQdf6jt0OCwXvn6l7dCZs+eOdhyfmrg8XSgWCyMdQ5NjF6ZGCjW/wnKvr7bH74COiUtXRkZHix09+3srTl9te7BhY3tbf997x7Nh7NCJgYGziZh05j//74+Zb4aflacXZPr4+2/ttKSUlt8Xi7x3VluL34g9fiOGTgz4DRkfG56ccSctFUSlKvskG/ZRHXKxLCnJ1cuyK7Nmy8jTDzIdO1CyM5K8sB/2+l8M11SfRki7paukTq2DnK1hG+TpA5nuHGjTG0G/+vnPStcbXTmsunRw/09Zyd70Pw/c/eQ+Nk++1fH65OhUItZSwR213seHelrjn005eTrj3/ElG9TuRlcHddYiTxMyZb/6xJ9XyJ+XPtV/aNfuI8kZxrZFXsfF7g9urlrG5EwwdbCU+7Py7UJtcubpT5ke/pbz9zvDMUC69WihC/+oS/Ww2szTuEz/3CiZVa1LvcT6PrLex/7VrX9L7vjU5dnpsYsfzcx5Pp87+mFxZnr4wtyny2tXL3lksXVstdTSlmR5K6/4Pv+0FF0XrAH+V96La/PN9fi90FlVhpLvn1q2a17FLmEe5epk5um+TKPvby+PM8ovuW+agcv/gEzF0s8WZjrIf7q8l8j/y3H/5ayyjPi5/X/5e61wLrHj/Nb5jq9G/l2dXP7fkenY39uD7zTK+feqYl1cu0zv3t4ZxKWyLi4dNqf8iqNj44UuF/tIps0/hbHyY/NB7JY4ttvFFmX64k5l7MYgdmsc2+Ni78p079e5Y5+OY3td7KzL172OMDbvYncFse1x7P4LU+Mji3Wry3+PTG/ffM3CNs+b/8T9f6uqjDyW84W3Vyr/bYljt4K8ng/yn14k/1/KNPvXzrDdft+Hb6tN/r9x/t1c+bvblbHhgnJzHNtda7MazeV/k0wPXrkbtTloW7AbZchL5v+ZdGUZ9WuD8r8pcawtqFd2qZ3RhIqz1y4Nj48Xptlovo3M2qgGG2txo9GfTKgHN/4PulG9z7NwHhOM/63lvXjG9PCzePzvryojDRr/NyeO9Qezlkxays1MXM5sk3LF2Wv7xiaGLxYuFiZ7D/Z19Rw52NV7OJMNJ3fxVs199yRw+d8r040ff4nWMZXzv7nn//mqMtKg/G9JtqliXlNzVzQll/9Wmfru343Wm/PM//38h+v/zmcry+j+a1D+tyaOtQX1al1iXwAAAAAAAAAAAAAAAADAepI3T8/JdHXwRQt/Q1TL838jVWWk6jkvW/7zX+UfJi/y/Fd74tjIyv+uweY6taSOBgAAAAAAAAAAqJOUPH0t0/Mq2U13oFU6lSzxRPs3AAD//6qLRy4=") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 75.640846ms ago: executing program 8 (id=2975): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 5 (id=2976): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x611}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x5, 0x99, 0x0, 0x2, 0x10001}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x40}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"90ca76f6825be5e24e48393f"}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @addr={0x8, 0x3}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0x8, 0x53, 0x7, 0x65, @time={0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, @raw8={"424a46f27d2a45434e135bda"}}, {0x7, 0x2, 0x64, 0x8, @tick=0x5, {0xc5, 0xf9}, {0x9, 0x16}, @addr={0x7, 0x40}}, {0x88, 0xfd, 0x7a, 0xd, @tick=0x1158, {0x9, 0x6}, {0x4, 0x4}, @connect={{}, {0xf, 0x6}}}], 0x54) write$sndseq(r1, &(0x7f0000000e00)=[{0x6, 0xcb, 0xa9, 0x5, @time={0x3, 0x3}, {0xbf, 0x9}, {0x4}, @addr={0x23, 0x8e}}, {0x5, 0x4, 0x2, 0x6, @time={0xc}, {0x1, 0x7}, {0x4, 0x2}, @ext={0x0, 0x0}}, {0x4, 0xfa, 0x9, 0xb, @tick=0x5, {0xa, 0x1b}, {0x9, 0x8}, @result={0xffffff04, 0x228}}, {0x6, 0x58, 0x7f, 0x7, @time={0x72, 0x6}, {0x5}, {0x7}, @control={0x4, 0x9, 0x1}}, {0x6, 0xd6, 0x7f, 0x10, @tick=0x77447e3f, {0x1, 0x81}, {0xe8, 0x5}, @time=@tick=0x94}, {0x5, 0x6, 0x0, 0x7, @time={0xe, 0x2}, {0x14, 0x5}, {0x0, 0x2}, @control={0x0, 0x6, 0x5}}, {0x10, 0x8, 0x0, 0x9, @tick=0x6, {0x2, 0x7}, {0x5, 0xfa}, @addr={0x7, 0x6}}], 0xc4) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) kernel console output (not intermixed with test programs): MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.612153][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.638515][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.672473][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.687269][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.713256][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.751099][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.950913][ T9634] usb 5-1: USB disconnect, device number 10 [ 809.098245][ T9894] device hsr_slave_0 entered promiscuous mode [ 809.127776][ T9894] device hsr_slave_1 entered promiscuous mode [ 809.156058][ T9894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.247884][ T9894] Cannot create hsr debugfs directory [ 813.100184][ T9992] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1446'. [ 814.687192][T10008] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 815.422539][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.427942][ T9894] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 815.429456][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.591768][ T4467] device hsr_slave_0 left promiscuous mode [ 815.663167][ T4467] device hsr_slave_1 left promiscuous mode [ 815.693448][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.725124][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.878613][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.905679][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.748743][ T5027] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 816.805984][ T4467] device bridge_slave_1 left promiscuous mode [ 816.825490][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.986514][ T4467] device bridge_slave_0 left promiscuous mode [ 817.001118][ T5027] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 817.658947][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.678911][ T5027] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 817.690078][ T5027] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 817.699321][ T5027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.719067][T10013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 817.727068][T10013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 819.909867][ T4349] usb 3-1: USB disconnect, device number 12 [ 820.092480][ T4467] device veth1_macvtap left promiscuous mode [ 820.589181][ T4467] device veth0_macvtap left promiscuous mode [ 820.615906][ T4467] device veth1_vlan left promiscuous mode [ 820.634184][ T4467] device veth0_vlan left promiscuous mode [ 821.054890][T10041] hfs: can't find a HFS filesystem on dev nullb0 [ 824.307087][ T26] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 824.496751][ T26] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 824.505502][ T26] usb 2-1: config 0 has no interface number 0 [ 824.512362][ T26] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 824.524741][ T26] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.535371][ T26] usb 2-1: config 0 interface 184 has no altsetting 0 [ 824.545034][ T26] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 824.554465][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.562894][ T26] usb 2-1: Product: syz [ 824.568322][ T26] usb 2-1: Manufacturer: syz [ 824.573106][ T26] usb 2-1: SerialNumber: syz [ 824.598305][ T26] usb 2-1: config 0 descriptor?? [ 824.604143][T10052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 824.626074][ T26] smsc75xx v1.0.0 [ 824.629851][ T26] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 824.640569][ T26] smsc75xx: probe of 2-1:0.184 failed with error -22 [ 824.866827][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 824.979347][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 825.087305][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.153976][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.107744][ T4467] bond0 (unregistering): Released all slaves [ 826.224078][ T9894] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 826.235876][ T9894] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 826.246327][ T9894] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 826.260572][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1454'. [ 827.532184][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.638833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.650020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.663254][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.746296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.752953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.763099][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.763240][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.765637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.779040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.780867][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.780943][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.784955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 828.075552][ T5436] usb 2-1: USB disconnect, device number 11 [ 828.082765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 828.164821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 828.225199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 828.315368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 828.535230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 828.729652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 828.955538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 829.424624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 829.457996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 829.544607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 829.565502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 829.765330][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 829.787043][ T4258] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 830.903452][ T4258] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 830.915023][ T4258] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 830.926452][ T4258] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 830.936588][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.965095][T10080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 830.974036][T10080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.704204][ T4349] usb 2-1: USB disconnect, device number 12 [ 832.112069][T10122] mkiss: ax0: crc mode is auto. [ 833.160073][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 833.313307][T10121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1472'. [ 833.346781][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1474'. [ 833.381182][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 833.516274][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 833.575483][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.699584][T10136] hfs: can't find a HFS filesystem on dev nullb0 [ 834.937790][T10153] fuse: Unknown parameter '0x0000000000000003' [ 835.369245][ T26] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 835.505218][T10164] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 836.315967][ T26] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 836.335891][ T26] usb 3-1: config 0 has no interface number 0 [ 836.367057][ T26] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 836.399316][ T26] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.419943][ T26] usb 3-1: config 0 interface 184 has no altsetting 0 [ 836.727481][ T26] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 836.736730][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.747064][ T26] usb 3-1: Product: syz [ 836.751384][ T26] usb 3-1: Manufacturer: syz [ 836.756369][ T26] usb 3-1: SerialNumber: syz [ 836.771163][ T26] usb 3-1: config 0 descriptor?? [ 836.777116][T10155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 836.786195][ T26] smsc75xx v1.0.0 [ 836.807065][ T26] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 836.845357][ T26] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 838.044445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 838.061093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 838.227710][ T4330] usb 3-1: USB disconnect, device number 13 [ 838.251049][ T9894] device veth0_vlan entered promiscuous mode [ 838.282100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 838.296766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.342123][ T9894] device veth1_vlan entered promiscuous mode [ 838.408324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.436864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.536482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.697530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 839.443635][ T9894] device veth0_macvtap entered promiscuous mode [ 839.502472][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 839.524161][ T9894] device veth1_macvtap entered promiscuous mode [ 839.954423][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.967379][T10195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1487'. [ 840.798392][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.855450][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.886761][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.929815][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.958259][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.997792][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.191377][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.254192][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.079261][T10220] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 842.553963][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 842.582600][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 842.769402][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.879870][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.922388][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.960511][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.006493][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.068402][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.102019][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.131217][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.821794][ T14] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 843.981763][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.058776][ T9894] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.067897][ T9894] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.076650][ T9894] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.086167][ T9894] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.328203][ T14] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 844.371545][ T14] usb 3-1: config 0 has no interface number 0 [ 844.423861][T10226] mkiss: ax0: crc mode is auto. [ 844.512176][ T14] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 844.517313][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.525989][ T14] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.543480][ T14] usb 3-1: config 0 interface 184 has no altsetting 0 [ 844.553653][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 844.574966][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.593679][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.624291][ T14] usb 3-1: Product: syz [ 844.650131][ T14] usb 3-1: Manufacturer: syz [ 844.663607][ T14] usb 3-1: SerialNumber: syz [ 844.689267][ T14] usb 3-1: config 0 descriptor?? [ 844.698476][T10225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.777664][ T14] smsc75xx v1.0.0 [ 844.818496][ T14] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 845.879913][ T14] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 846.854715][ T26] usb 3-1: USB disconnect, device number 14 [ 846.966364][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.031894][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.060012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 847.137353][ T9594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.174823][ T9594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.379387][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 847.502193][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1497'. [ 849.614425][T10284] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 852.227041][ T4330] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 852.685410][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1506'. [ 852.868883][ T4330] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 852.887009][ T4330] usb 5-1: config 0 has no interface number 0 [ 852.893379][ T4330] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 852.915037][ T4330] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 852.946835][ T4330] usb 5-1: config 0 interface 184 has no altsetting 0 [ 852.956516][ T4330] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 853.089990][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.822028][ T4330] usb 5-1: Product: syz [ 853.826286][ T4330] usb 5-1: Manufacturer: syz [ 853.832073][ T4330] usb 5-1: SerialNumber: syz [ 853.842677][ T4330] usb 5-1: config 0 descriptor?? [ 853.849752][T10303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 853.857720][T10303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 853.866886][ T4330] smsc75xx v1.0.0 [ 854.177781][T10303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 854.214205][T10303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 854.417893][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1512'. [ 854.521349][T10324] device bond0 entered promiscuous mode [ 854.527166][T10324] device bond_slave_0 entered promiscuous mode [ 854.534230][T10324] device bond_slave_1 entered promiscuous mode [ 855.047622][T10328] hfs: can't find a HFS filesystem on dev nullb0 [ 855.065365][T10324] device gretap0 entered promiscuous mode [ 855.081891][T10324] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 855.089908][T10324] Cannot create hsr debugfs directory [ 855.095514][T10324] device hsr1 entered promiscuous mode [ 856.020789][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 856.135022][T10338] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 856.743714][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 856.754205][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 856.764846][ T4330] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 856.775767][ T4330] usb 5-1: USB disconnect, device number 11 [ 859.000108][T10356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1521'. [ 861.971940][T10386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1526'. [ 862.904712][ T8487] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 862.933231][T10391] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 863.125722][ T8487] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 863.338904][ T8487] usb 2-1: config 0 has no interface number 0 [ 863.392771][ T8487] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 863.838120][ T8487] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 863.850298][ T8487] usb 2-1: config 0 interface 184 has no altsetting 0 [ 863.861132][ T8487] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 863.871246][ T8487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.879609][ T8487] usb 2-1: Product: syz [ 863.883831][ T8487] usb 2-1: Manufacturer: syz [ 864.017242][ T8487] usb 2-1: SerialNumber: syz [ 864.166115][ T8487] usb 2-1: config 0 descriptor?? [ 864.175211][T10383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 864.185876][T10383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 864.202935][ T8487] smsc75xx v1.0.0 [ 864.735929][T10383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 864.777842][T10383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 865.061263][ T8487] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 865.086398][ T8487] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 866.064802][ T8487] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 866.123360][ T8487] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 866.186559][ T8487] usb 2-1: USB disconnect, device number 13 [ 867.557556][T10412] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1536'. [ 869.198524][T10442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 870.425962][T10450] hfs: can't find a HFS filesystem on dev nullb0 [ 871.567191][ T4258] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 872.329402][ T4258] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 872.382146][ T4258] usb 2-1: config 0 has no interface number 0 [ 872.567155][ T4258] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 872.609220][ T4258] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 872.651451][ T4258] usb 2-1: config 0 interface 184 has no altsetting 0 [ 872.678100][ T4258] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 872.707008][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.729247][ T4258] usb 2-1: Product: syz [ 872.733495][ T4258] usb 2-1: Manufacturer: syz [ 872.747008][ T4258] usb 2-1: SerialNumber: syz [ 872.867983][ T4258] usb 2-1: config 0 descriptor?? [ 872.873465][T10444] mkiss: ax0: crc mode is auto. [ 872.874349][T10455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.667418][T10455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.707095][ T4258] smsc75xx v1.0.0 [ 873.900516][T10463] qnx4: no qnx4 filesystem (no root dir). [ 873.913383][T10455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.956021][T10455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 874.201328][ T4258] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 874.253881][ T4258] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 874.293844][ T4258] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 874.324916][ T4258] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 874.631741][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1550'. [ 875.281095][ T14] usb 2-1: USB disconnect, device number 14 [ 875.820181][T10502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 877.608926][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.615576][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.355355][T10520] hfs: can't find a HFS filesystem on dev nullb0 [ 881.646877][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1567'. [ 882.100916][T10555] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 883.481871][ T952] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 883.889153][ T952] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 884.096598][ T952] usb 3-1: config 0 has no interface number 0 [ 884.117972][ T952] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 886.193210][ T952] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 886.316224][T10566] loop4: detected capacity change from 0 to 2048 [ 886.355188][ T952] usb 3-1: config 0 interface 184 has no altsetting 0 [ 886.390396][T10566] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 886.409953][T10566] UDF-fs: Scanning with blocksize 512 failed [ 886.918648][ T952] usb 3-1: string descriptor 0 read error: -71 [ 886.928228][T10566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.336284][ T952] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 887.345849][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.370760][ T952] usb 3-1: config 0 descriptor?? [ 887.377244][ T952] usb 3-1: can't set config #0, error -71 [ 887.398147][ T952] usb 3-1: USB disconnect, device number 15 [ 888.535146][T10586] hfs: can't find a HFS filesystem on dev nullb0 [ 892.905887][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1582'. [ 892.938689][T10613] fuse: Unknown parameter 'fd0x0000000000000003' [ 893.239877][ T4313] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 894.238857][ T4313] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 894.269490][ T4313] usb 3-1: config 0 has no interface number 0 [ 894.275680][ T4313] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 895.149500][ T4313] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 895.161090][ T4313] usb 3-1: config 0 interface 184 has no altsetting 0 [ 895.179193][ T4313] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 895.188784][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.197391][ T4313] usb 3-1: Product: syz [ 895.201626][ T4313] usb 3-1: Manufacturer: syz [ 895.206268][ T4313] usb 3-1: SerialNumber: syz [ 895.213620][ T4313] usb 3-1: config 0 descriptor?? [ 895.221614][T10615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 895.235024][T10615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 895.244165][ T4313] smsc75xx v1.0.0 [ 895.503098][T10615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 895.511769][T10615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 896.308196][ T4313] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 896.359735][ T4313] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 896.382589][ T4313] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 896.403483][ T4313] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 896.895946][T10641] hfs: can't find a HFS filesystem on dev nullb0 [ 897.605846][ T22] usb 3-1: USB disconnect, device number 16 [ 899.268190][T10664] Falling back ldisc for ttyS3. [ 900.653603][T10646] qnx4: no qnx4 filesystem (no root dir). [ 900.747952][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'. [ 900.993064][T10672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1596'. [ 904.116448][T10701] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 905.492163][T10720] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 906.825561][T10727] hfs: can't find a HFS filesystem on dev nullb0 [ 907.745710][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 907.755246][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 907.762857][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 907.773305][ T4282] Workqueue: hci3 hci_rx_work [ 907.778024][ T4282] Call Trace: [ 907.781452][ T4282] [ 907.784397][ T4282] dump_stack_lvl+0x188/0x24e [ 907.789115][ T4282] ? show_regs_print_info+0x12/0x12 [ 907.794357][ T4282] ? load_image+0x400/0x400 [ 907.798925][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 907.804080][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 907.808796][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 907.814073][ T4282] kobject_add_internal+0x61c/0xcc0 [ 907.819329][ T4282] kobject_add+0x160/0x230 [ 907.823763][ T4282] ? kobject_init+0x1d0/0x1d0 [ 907.828463][ T4282] ? klist_children_get+0x50/0x50 [ 907.833529][ T4282] ? get_device_parent+0x121/0x3f0 [ 907.838662][ T4282] device_add+0x483/0xfb0 [ 907.843011][ T4282] ? kmem_cache_free+0xf7/0x290 [ 907.847955][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 907.852927][ T4282] le_conn_complete_evt+0x105f/0x1670 [ 907.858374][ T4282] ? le_conn_complete_evt+0xe6/0x1670 [ 907.863767][ T4282] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 907.870025][ T4282] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 907.875683][ T4282] ? skb_pull_data+0xf7/0x200 [ 907.880390][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 907.885980][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 907.892072][ T4282] hci_event_packet+0x7b6/0x1280 [ 907.897056][ T4282] ? bis_list+0x280/0x280 [ 907.901412][ T4282] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 907.907347][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 907.912601][ T4282] ? spurious_interrupt+0x80/0xd0 [ 907.917667][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 907.922889][ T4282] hci_rx_work+0x3eb/0xd40 [ 907.927413][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 907.932303][ T4282] ? process_one_work+0x7b0/0x1160 [ 907.937454][ T4282] process_one_work+0x8a2/0x1160 [ 907.942431][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 907.948133][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 907.953202][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 907.958777][ T4282] ? kthread_data+0x4b/0xc0 [ 907.963365][ T4282] worker_thread+0xaa2/0x1270 [ 907.968103][ T4282] kthread+0x29d/0x330 [ 907.972197][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 907.977251][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 907.981858][ T4282] ret_from_fork+0x1f/0x30 [ 907.986323][ T4282] [ 907.989409][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.013762][ T4282] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 908.027119][ T4282] Bluetooth: hci3: failed to register connection device [ 908.837617][T10737] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1611'. [ 910.057003][ T4282] Bluetooth: hci3: command 0x2016 tx timeout [ 910.572585][T10758] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 911.808916][T10741] qnx4: no qnx4 filesystem (no root dir). [ 912.199217][T10772] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 913.257170][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 913.328361][T10781] loop5: detected capacity change from 0 to 512 [ 913.933234][T10783] loop1: detected capacity change from 0 to 4096 [ 914.032070][T10792] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1623'. [ 914.042335][T10781] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1620: inode has both inline data and extents flags [ 914.077362][T10783] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 914.108276][T10792] netlink: zone id is out of range [ 914.349428][T10792] netlink: del zone limit has 4 unknown bytes [ 914.395846][T10781] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1620: couldn't read orphan inode 15 (err -117) [ 914.603341][T10781] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 915.007377][T10814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1626'. [ 915.726151][ T27] audit: type=1804 audit(1774349962.633:5): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1620" name="/newroot/72/bus/bus" dev="loop5" ino=19 res=1 errno=0 [ 916.329734][T10830] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 917.022182][T10831] mkiss: ax0: crc mode is auto. [ 917.542790][T10836] hfs: can't find a HFS filesystem on dev nullb0 [ 917.836439][ T9099] EXT4-fs (loop5): unmounting filesystem. [ 919.404437][T10860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 919.412499][T10860] IPv6: NLM_F_CREATE should be set when creating new route [ 919.521946][T10864] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1638'. [ 919.638377][T10864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 919.897219][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 920.046523][T10873] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 921.296677][T10885] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 924.176230][T10911] netlink: 'syz.7.1650': attribute type 11 has an invalid length. [ 926.071149][T10927] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 926.651778][T10933] fuse: Bad value for 'fd' [ 926.871344][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 927.870688][T10945] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 931.962251][T10985] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 934.674223][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 936.823615][T11012] loop7: detected capacity change from 0 to 2048 [ 937.565261][T11019] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 938.300351][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.306841][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.734726][T11041] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 941.557049][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1683'. [ 942.596028][T11073] loop4: detected capacity change from 0 to 2048 [ 944.918813][T11087] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.244951][T11096] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 945.301530][ T27] audit: type=1800 audit(1774349992.213:6): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1686" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 946.177012][ T22] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 947.100101][ T22] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 947.155263][ T22] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 947.263186][ T22] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 947.286974][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.581740][ T22] usb 8-1: can't set config #27, error -71 [ 948.604257][ T22] usb 8-1: USB disconnect, device number 2 [ 949.713298][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1700'. [ 952.507210][ T22] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 952.707567][ T22] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 952.737781][ T22] usb 6-1: config 0 has no interface number 0 [ 952.756101][ T22] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 952.779060][ T22] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 952.791063][ T22] usb 6-1: config 0 interface 184 has no altsetting 0 [ 952.829732][ T22] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 952.868051][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.896810][ T22] usb 6-1: Product: syz [ 952.908284][ T22] usb 6-1: Manufacturer: syz [ 952.913058][ T22] usb 6-1: SerialNumber: syz [ 952.947704][ T22] usb 6-1: config 0 descriptor?? [ 952.954357][T11140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.067293][T11140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.097666][ T22] smsc75xx v1.0.0 [ 953.436426][T11140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 954.375791][T11140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 954.438992][ T22] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 954.466777][ T22] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 954.493377][ T22] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 954.788138][ T22] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 955.041808][T11142] loop1: detected capacity change from 0 to 32768 [ 955.154316][T11142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1706 (11142) [ 955.274376][T11142] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 955.310246][T11142] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 955.347098][T11142] BTRFS info (device loop1): metadata ratio 2 [ 955.381066][T11142] BTRFS info (device loop1): allowing degraded mounts [ 955.412738][T11142] BTRFS info (device loop1): force zlib compression, level 3 [ 955.445762][T11142] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 955.527096][T11142] BTRFS info (device loop1): use zstd compression, level 3 [ 955.534474][T11142] BTRFS info (device loop1): allowing degraded mounts [ 955.593572][T11142] BTRFS info (device loop1): max_inline at 0 [ 955.622249][T11142] BTRFS info (device loop1): using free space tree [ 955.923436][T11138] usb 6-1: USB disconnect, device number 4 [ 957.100975][T11142] BTRFS error (device loop1): open_ctree failed: -12 [ 957.169489][T11207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.301336][ T27] audit: type=1326 audit(1774350004.213:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.2.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f441af9c799 code=0x0 [ 958.297622][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.417603][ T6392] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 959.648862][ T6392] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 959.708761][ T6392] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 959.794488][ T6392] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 959.859085][ T6392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.891351][T11226] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 959.914151][T11226] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 960.825897][T11138] usb 8-1: USB disconnect, device number 3 [ 961.034484][T11256] hfs: can't find a HFS filesystem on dev nullb0 [ 964.627494][T11138] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 964.837524][T11138] usb 5-1: Using ep0 maxpacket: 8 [ 964.852158][T11138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.019231][T11138] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 965.163406][T11138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.306677][T11138] usb 5-1: config 0 descriptor?? [ 965.603613][T11138] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 965.618462][T11275] loop7: detected capacity change from 0 to 32768 [ 965.665694][T11275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1729 (11275) [ 965.837403][T11275] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 965.921454][T11275] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 966.107404][T11275] BTRFS info (device loop7): force clearing of disk cache [ 966.145331][T11299] mkiss: ax0: crc mode is auto. [ 966.179182][T11275] BTRFS info (device loop7): enabling auto defrag [ 966.225306][T11295] loop5: detected capacity change from 0 to 2048 [ 966.232255][T11275] BTRFS info (device loop7): max_inline at 0 [ 966.264035][T11275] BTRFS info (device loop7): enabling disk space caching [ 966.328461][T11138] usb 5-1: USB disconnect, device number 12 [ 966.385743][T11275] BTRFS info (device loop7): disk space caching is enabled [ 966.415198][T11295] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 966.478989][T11295] UDF-fs: Scanning with blocksize 512 failed [ 966.495446][T11295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 966.877685][T11275] BTRFS info (device loop7): enabling ssd optimizations [ 966.938920][T11275] BTRFS info (device loop7): rebuilding free space tree [ 967.266846][T11275] BTRFS info (device loop7): disabling free space tree [ 967.287195][T11275] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 967.355691][T11333] netlink: 'syz.2.1741': attribute type 10 has an invalid length. [ 967.366533][T11275] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 967.537917][T11333] device wlan1 entered promiscuous mode [ 967.546710][T11333] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 967.743578][ T9894] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.985179][T11339] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 968.028757][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.045550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 968.136453][T11348] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 968.477623][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 973.516646][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 974.332912][T11394] mkiss: ax0: crc mode is auto. [ 975.498972][ T26] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 975.798157][T11420] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 976.452548][T11422] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 976.775887][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 976.836988][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 976.899521][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.942629][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.030296][T11408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 977.047273][T11408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 977.928604][T11284] usb 3-1: USB disconnect, device number 17 [ 978.232617][T11447] loop5: detected capacity change from 0 to 128 [ 978.366275][T11447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 978.381588][T11447] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 978.749200][T11457] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 979.219419][ T9099] EXT4-fs (loop5): unmounting filesystem. [ 979.547641][T11138] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 979.866278][T11138] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 979.900196][T11138] usb 2-1: config 0 has no interface number 0 [ 979.945032][T11441] loop7: detected capacity change from 0 to 32768 [ 979.951836][T11138] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 979.997980][T11138] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 980.018477][T11441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1763 (11441) [ 980.035050][T11138] usb 2-1: config 0 interface 184 has no altsetting 0 [ 980.066506][T11138] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 980.089088][T11138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.132133][T11138] usb 2-1: Product: syz [ 980.177033][T11138] usb 2-1: Manufacturer: syz [ 980.198930][T11138] usb 2-1: SerialNumber: syz [ 980.212103][T11138] usb 2-1: config 0 descriptor?? [ 980.246517][T11463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 980.260549][T11441] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 980.276668][T11463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 980.330236][T11441] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 980.334102][T11138] smsc75xx v1.0.0 [ 980.419727][T11441] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 980.553022][T11441] BTRFS info (device loop7): trying to use backup root at mount time [ 980.674157][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1772'. [ 981.256658][T11441] BTRFS info (device loop7): setting nodatasum [ 981.339182][T11463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 981.346563][T11463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 981.367811][T11441] BTRFS info (device loop7): enabling ssd optimizations [ 981.402789][T11441] BTRFS info (device loop7): using spread ssd allocation scheme [ 981.571122][T11441] BTRFS info (device loop7): turning on flush-on-commit [ 981.637009][T11441] BTRFS info (device loop7): force zlib compression, level 3 [ 981.644762][T11441] BTRFS info (device loop7): using free space tree [ 981.691485][T11138] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 981.901992][T11138] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 981.982495][T11478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1773'. [ 982.998486][T11138] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 983.025932][T11138] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 983.244406][T11362] usb 2-1: USB disconnect, device number 15 [ 983.258040][T11441] BTRFS error (device loop7): open_ctree failed: -12 [ 983.286527][ T7707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (7707) [ 986.913506][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 988.108966][T11557] mkiss: ax0: crc mode is auto. [ 988.305858][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1785'. [ 990.727325][T11138] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 990.998252][T11138] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 991.240251][T11138] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 991.582151][T11138] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 991.669628][T11138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.897125][T11138] usb 3-1: can't set config #27, error -71 [ 991.939616][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 991.976470][T11138] usb 3-1: USB disconnect, device number 18 [ 993.234650][T11201] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 993.437241][T11201] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 993.460734][T11201] usb 3-1: config 0 has no interface number 0 [ 993.492817][T11201] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 993.638193][T11201] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 993.764861][T11201] usb 3-1: config 0 interface 184 has no altsetting 0 [ 993.798408][T11201] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 993.842460][T11201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.880238][T11201] usb 3-1: Product: syz [ 993.985818][T11201] usb 3-1: Manufacturer: syz [ 994.006108][T11201] usb 3-1: SerialNumber: syz [ 994.028167][T11201] usb 3-1: config 0 descriptor?? [ 994.050758][T11607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 994.072588][T11607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 994.093903][T11201] smsc75xx v1.0.0 [ 994.183674][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1799'. [ 994.951734][T11607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 994.985606][T11607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 995.288583][T11201] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 995.359970][T11201] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 995.377036][T11201] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 995.445090][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1800'. [ 995.464810][T11201] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 996.255650][T11633] mkiss: ax0: crc mode is auto. [ 997.608338][T11362] usb 3-1: USB disconnect, device number 19 [ 998.990249][T11655] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 999.749206][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.749289][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.197590][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'. [ 1002.657671][T11284] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1003.055275][T11284] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1003.069725][T11284] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1003.085181][T11284] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1003.096012][T11284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.244358][T11666] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1003.298691][T11666] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1004.740072][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1814'. [ 1005.087747][T11201] usb 3-1: USB disconnect, device number 20 [ 1005.963313][T11711] mkiss: ax0: crc mode is auto. [ 1006.067109][ T5027] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1006.269324][ T5027] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1006.357046][ T5027] usb 2-1: config 0 has no interface number 0 [ 1006.489452][ T5027] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1006.615813][ T5027] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1006.642945][ T5027] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1006.680345][ T5027] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1006.822879][ T5027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.916751][ T5027] usb 2-1: Product: syz [ 1006.942826][ T5027] usb 2-1: Manufacturer: syz [ 1006.982591][ T5027] usb 2-1: SerialNumber: syz [ 1007.275533][ T5027] usb 2-1: config 0 descriptor?? [ 1007.307844][T11707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1007.315429][T11707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1007.358848][ T5027] smsc75xx v1.0.0 [ 1007.571618][T11707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1008.258766][T11707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1008.439233][ T5027] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1008.562445][ T5027] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1008.672547][ T5027] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1008.998963][ T5027] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 1009.056316][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1011.361507][ T5027] usb 2-1: USB disconnect, device number 16 [ 1011.969526][T11747] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1015.245036][T11771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1826'. [ 1016.167470][ T26] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1016.540127][ T26] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1016.579296][ T26] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1016.644536][ T26] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1016.689250][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.893415][T11766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1016.901788][T11766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1016.948721][T11786] mkiss: ax0: crc mode is auto. [ 1018.290197][ T127] usb 8-1: USB disconnect, device number 4 [ 1020.263597][ T8945] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1020.324489][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1840'. [ 1020.495497][T11819] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1021.135312][ T8945] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1021.160569][ T8945] usb 5-1: config 0 has no interface number 0 [ 1021.174172][ T8945] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1021.193914][ T8945] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1021.206353][ T8945] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1023.560785][ T8945] usb 5-1: string descriptor 0 read error: -71 [ 1023.577716][ T8945] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1023.593129][ T8945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.667957][ T8945] usb 5-1: config 0 descriptor?? [ 1023.694398][ T8945] usb 5-1: can't set config #0, error -71 [ 1023.751714][ T8945] usb 5-1: USB disconnect, device number 13 [ 1028.047572][T11870] mkiss: ax0: crc mode is auto. [ 1029.699619][T11284] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1029.944003][T11284] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1029.975858][T11284] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1030.531064][T11284] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.597163][T11284] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.758968][T11284] usb 8-1: can't set config #27, error -71 [ 1031.768721][T11894] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1031.787431][T11284] usb 8-1: USB disconnect, device number 5 [ 1032.148127][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1855'. [ 1037.807048][T11284] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1038.441741][T11284] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1038.459673][T11284] usb 3-1: config 0 has no interface number 0 [ 1038.481833][T11284] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1038.589694][T11284] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1038.677549][T11284] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1038.857957][T11284] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1038.868014][T11284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.876085][T11284] usb 3-1: Product: syz [ 1038.886469][T11284] usb 3-1: Manufacturer: syz [ 1039.623989][T11284] usb 3-1: SerialNumber: syz [ 1039.648910][T11284] usb 3-1: config 0 descriptor?? [ 1039.657741][T11946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1039.665102][T11946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1039.708092][T11284] smsc75xx v1.0.0 [ 1039.941757][T11946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1039.961551][T11946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1041.107602][T11284] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1041.139017][T11284] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1041.197161][T11284] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1041.221311][ T6437] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1041.227345][T11284] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1041.306975][T11284] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1041.429072][ T6437] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1041.493036][T11284] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1041.503536][T11284] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1041.514171][T11284] usb 3-1: USB disconnect, device number 21 [ 1041.563819][ T6437] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1041.633616][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1870'. [ 1042.168086][ T6437] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1042.179453][ T6437] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.200775][T11991] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1042.229751][T11965] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1042.277764][T11965] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1043.210917][ T4349] usb 8-1: USB disconnect, device number 6 [ 1051.394852][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1051.744092][T12053] Falling back ldisc for ttyS3. [ 1052.387099][ T22] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1053.499401][ T22] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1053.553759][ T22] usb 8-1: config 0 has no interface number 0 [ 1053.593045][ T22] usb 8-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1053.657612][ T22] usb 8-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1053.704085][ T22] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1053.753721][ T22] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1053.785595][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.826175][ T22] usb 8-1: Product: syz [ 1053.856959][ T22] usb 8-1: Manufacturer: syz [ 1053.872046][ T22] usb 8-1: SerialNumber: syz [ 1053.915226][ T22] usb 8-1: config 0 descriptor?? [ 1053.934801][T12059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1053.954561][T12059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1054.007695][ T22] smsc75xx v1.0.0 [ 1054.067165][ T4312] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1054.212366][T12059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1054.243178][T12059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1054.280051][ T4312] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1054.312959][ T4312] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1054.344534][ T4312] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1054.374827][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.417947][T12065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1054.436633][T12065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1054.681217][ T22] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1054.764307][ T22] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1054.809798][ T22] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1054.826952][ T22] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1054.837305][ T22] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1054.848010][ T22] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1054.860309][ T22] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 1055.014138][ T22] usb 8-1: USB disconnect, device number 7 [ 1055.645888][T11138] usb 5-1: USB disconnect, device number 14 [ 1058.712201][T12106] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1061.044392][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1899'. [ 1061.181351][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.194029][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.357384][T12128] fuse: Bad value for 'fd' [ 1064.013032][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1901'. [ 1064.283473][T12148] loop1: detected capacity change from 0 to 1024 [ 1064.526448][T12148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1064.713108][T12159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1065.107634][T12148] IPv6: addrconf: prefix option has invalid lifetime [ 1065.138826][T12161] IPv6: addrconf: prefix option has invalid lifetime [ 1065.227615][ T6437] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1065.381396][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1065.441626][ T6437] usb 8-1: config 4 has an invalid interface number: 88 but max is 0 [ 1065.452121][ T6437] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.477386][ T6437] usb 8-1: config 4 has no interface number 0 [ 1065.502204][ T6437] usb 8-1: config 4 interface 88 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.552222][ T6437] usb 8-1: config 4 interface 88 has no altsetting 0 [ 1065.647094][ T6437] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1065.700204][ T6437] usb 8-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1065.830283][ T6437] usb 8-1: Manufacturer: syz [ 1065.844212][ T6437] usb 8-1: SerialNumber: syz [ 1067.682809][ T952] usb 8-1: USB disconnect, device number 8 [ 1068.695212][T12204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1913'. [ 1074.354925][T12242] random: crng reseeded on system resumption [ 1076.290769][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1924'. [ 1080.017095][ T5436] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1080.206955][ T5436] usb 8-1: Using ep0 maxpacket: 16 [ 1080.234406][ T5436] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1080.311123][ T5436] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1080.352675][ T5436] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.436430][ T5436] usb 8-1: Product: syz [ 1080.465570][ T5436] usb 8-1: Manufacturer: syz [ 1080.520533][ T5436] usb 8-1: SerialNumber: syz [ 1080.577741][ T5436] usb 8-1: config 0 descriptor?? [ 1080.659959][ T5436] hub 8-1:0.0: bad descriptor, ignoring hub [ 1080.688967][ T5436] hub: probe of 8-1:0.0 failed with error -5 [ 1080.770588][ T5436] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input8 [ 1081.460424][T12333] fuse: Unknown parameter 'grou00000000000000000000' [ 1085.275775][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1946'. [ 1085.348896][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1945'. [ 1085.983420][T12365] random: crng reseeded on system resumption [ 1086.299349][ T5436] usb 8-1: USB disconnect, device number 9 [ 1092.629106][T12417] fuse: Unknown parameter 'group_i00000000000000000000' [ 1093.985629][T12435] random: crng reseeded on system resumption [ 1094.429082][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1959'. [ 1095.376172][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 1102.113468][T12505] random: crng reseeded on system resumption [ 1102.833128][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1975'. [ 1105.308025][T12541] fuse: Unknown parameter 'group_i00000000000000000000' [ 1110.213991][T12581] random: crng reseeded on system resumption [ 1111.445754][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1988'. [ 1112.900155][T12603] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1990'. [ 1114.620836][T12626] fuse: Unknown parameter 'group_i00000000000000000000' [ 1120.993146][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2003'. [ 1122.452038][T12675] random: crng reseeded on system resumption [ 1122.631428][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.644607][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.580108][T12690] fuse: Unknown parameter 'group_id00000000000000000000' [ 1129.204989][T12735] random: crng reseeded on system resumption [ 1129.657137][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2017'. [ 1137.692539][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 1138.256048][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2031'. [ 1139.103123][T12802] random: crng reseeded on system resumption [ 1144.469768][T12834] hfs: can't find a HFS filesystem on dev nullb0 [ 1147.938203][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2043'. [ 1148.749426][T12859] random: crng reseeded on system resumption [ 1150.201936][T12864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2046'. [ 1151.315738][T11284] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1152.178869][T11284] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1152.218786][T11284] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1152.259480][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 1152.284516][T11284] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1152.318393][T11284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.385059][T12873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1152.397185][T12873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1152.671688][T11284] usb 6-1: USB disconnect, device number 5 [ 1153.113779][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2055'. [ 1154.198866][T12906] random: crng reseeded on system resumption [ 1154.781626][ T9102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1154.792224][ T9102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1154.801602][ T9102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1154.809920][ T9102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1154.818752][ T9102] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1154.826171][ T9102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1156.031819][T12921] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2059'. [ 1156.355624][ T9102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1156.367316][ T9102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1156.378108][ T9102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1156.386019][ T9102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1156.398880][ T9102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1156.410801][ T9102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1156.867279][T12914] Bluetooth: hci5: command 0x0409 tx timeout [ 1157.953208][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 1158.628208][T12914] Bluetooth: hci0: command 0x0409 tx timeout [ 1158.741218][ T4405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.029111][ T9102] Bluetooth: hci5: command 0x041b tx timeout [ 1159.922635][T12959] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1160.235369][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1160.576816][ T4405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.697134][ T9102] Bluetooth: hci0: command 0x041b tx timeout [ 1160.984255][ T4405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.097238][T12914] Bluetooth: hci5: command 0x040f tx timeout [ 1161.150664][ T4405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.192663][T12912] chnl_net:caif_netlink_parms(): no params data found [ 1161.274438][T12926] chnl_net:caif_netlink_parms(): no params data found [ 1162.670706][T12999] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1162.783959][T12914] Bluetooth: hci0: command 0x040f tx timeout [ 1162.847619][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.855036][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.872357][T12912] device bridge_slave_0 entered promiscuous mode [ 1162.884915][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.910481][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.975342][T12912] device bridge_slave_1 entered promiscuous mode [ 1163.177055][T12914] Bluetooth: hci5: command 0x0419 tx timeout [ 1163.661759][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2077'. [ 1163.814790][T12912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.979937][T12912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.070797][T12926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.085501][T12926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.112490][T12926] device bridge_slave_0 entered promiscuous mode [ 1164.857233][ T9102] Bluetooth: hci0: command 0x0419 tx timeout [ 1164.945044][T13023] Falling back ldisc for ttyS3. [ 1165.118811][T12926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.126174][T12926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.318622][T12926] device bridge_slave_1 entered promiscuous mode [ 1165.401295][T12912] team0: Port device team_slave_0 added [ 1165.457438][T12926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.511846][T12926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.544728][T12912] team0: Port device team_slave_1 added [ 1165.941450][T12926] team0: Port device team_slave_0 added [ 1166.048972][T12926] team0: Port device team_slave_1 added [ 1166.055383][T12912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.066821][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.163457][T12912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.321039][T12912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.347222][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.475188][T12912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.678787][T12926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.688824][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.723801][T12926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.835704][T12926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.863441][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.933128][T12926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.900095][T12912] device hsr_slave_0 entered promiscuous mode [ 1167.947441][T12912] device hsr_slave_1 entered promiscuous mode [ 1167.964000][T12912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1167.984150][T12912] Cannot create hsr debugfs directory [ 1169.900313][ T4405] device gretap0 left promiscuous mode [ 1169.938668][T12926] device hsr_slave_0 entered promiscuous mode [ 1169.969123][T12926] device hsr_slave_1 entered promiscuous mode [ 1169.978795][T12926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.986592][T12926] Cannot create hsr debugfs directory [ 1171.618945][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2092'. [ 1172.307072][ T4405] device bond0 left promiscuous mode [ 1172.312728][ T4405] device bond_slave_0 left promiscuous mode [ 1172.373553][ T4405] device bond_slave_1 left promiscuous mode [ 1172.416084][ T4405] device hsr_slave_0 left promiscuous mode [ 1172.456493][ T4405] device hsr_slave_1 left promiscuous mode [ 1172.484115][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.516896][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.532405][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.548628][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.563018][ T4405] device bridge_slave_1 left promiscuous mode [ 1172.575815][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.154542][T13104] Falling back ldisc for ttyS3. [ 1173.248950][ T4405] device bridge_slave_0 left promiscuous mode [ 1173.287419][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.446649][ T4405] device veth1_macvtap left promiscuous mode [ 1173.474832][ T4405] device veth0_macvtap left promiscuous mode [ 1173.500086][ T4405] device veth1_vlan left promiscuous mode [ 1173.524151][ T4405] device veth0_vlan left promiscuous mode [ 1176.565440][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 1176.658914][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 1176.909106][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.477566][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.406069][T13147] Falling back ldisc for ttyS3. [ 1178.582134][T13153] loop4: detected capacity change from 0 to 2048 [ 1178.597709][T13153] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1178.606288][T13153] UDF-fs: Scanning with blocksize 512 failed [ 1178.618924][T13153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1178.757612][ T4405] bond0 (unregistering): Released all slaves [ 1179.753093][T13161] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1179.903903][T12912] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1179.962551][T12912] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1180.287624][T12912] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1180.352543][T12912] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1180.519065][T12926] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1180.572690][T12926] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1180.673269][T12926] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1180.754593][T12926] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1181.154606][T12912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.271547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1181.289358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1181.321844][T13185] hfs: can't find a HFS filesystem on dev nullb0 [ 1181.348256][T12912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.452725][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1181.482870][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1181.517647][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.524875][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.584310][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.617934][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.627507][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.634717][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.642930][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.669902][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.719926][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.775375][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.789098][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.829271][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.854066][T12912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1181.866984][T12912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.910898][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.935797][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.971579][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.993979][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1182.028275][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1182.048256][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1182.069262][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1182.144048][T12926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.182180][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1182.200399][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1182.234754][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1182.258092][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1182.298233][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1182.327183][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.334411][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.373300][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1182.547518][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1182.568441][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1182.623404][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.630666][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.691826][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1182.753162][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1182.896128][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1182.941492][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1183.255375][T13194] Falling back ldisc for ttyS3. [ 1183.314832][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1183.338442][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1183.389683][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1183.556374][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1183.609309][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1183.658499][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1183.687427][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1183.803635][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1184.065759][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.072349][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.302951][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1184.367304][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1184.383101][T12912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.786402][T13240] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1186.299065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1186.307309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1186.608246][T12926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.657687][T13271] mkiss: ax0: crc mode is auto. [ 1188.626419][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1188.662518][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1189.274501][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1189.294212][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1189.349071][T12912] device veth0_vlan entered promiscuous mode [ 1189.374229][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1189.418037][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1189.443286][T12912] device veth1_vlan entered promiscuous mode [ 1189.618769][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1189.773000][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1189.807858][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1189.925126][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1189.955118][T12912] device veth0_macvtap entered promiscuous mode [ 1189.988898][T12912] device veth1_macvtap entered promiscuous mode [ 1190.979463][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1191.157562][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.187002][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.226860][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.416643][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.445784][T13302] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1191.466614][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.479957][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.490377][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.501664][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.514162][T12912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.525060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1191.536091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1191.699008][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.755418][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.772445][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.806912][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.846914][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.864236][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.886952][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.912120][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.931073][T12912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.330425][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1192.589505][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1192.903908][T13318] Falling back ldisc for ttyS3. [ 1192.990005][T12912] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.055816][T12912] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.086924][T12912] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.096397][T12912] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.150085][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1193.167916][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1193.252128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1193.292858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1193.426382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1193.453811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1193.469261][T12926] device veth0_vlan entered promiscuous mode [ 1193.891046][T12926] device veth1_vlan entered promiscuous mode [ 1193.970779][ T7768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.990558][ T7768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.000725][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1194.018079][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1194.038021][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1194.069517][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1194.085909][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1194.098882][T12926] device veth0_macvtap entered promiscuous mode [ 1194.158936][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1194.196500][T12926] device veth1_macvtap entered promiscuous mode [ 1194.227264][ T127] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1194.236606][ T9603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.253466][ T9603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.268646][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1194.313854][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.335734][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.358202][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.377455][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.395890][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.416392][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.436941][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.441818][ T127] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1194.459882][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.515069][ T127] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1194.517983][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.547109][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.556980][ T127] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1194.557014][ T127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.592931][T12926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.601492][T13321] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1194.619213][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1194.627337][T13321] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1194.643391][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1194.955526][ T127] usb 8-1: USB disconnect, device number 10 [ 1194.986706][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.999259][ T7683] udevd[7683]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1195.015752][ T7707] udevd[7707]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 1195.274502][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.301125][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.362443][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.386169][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.397611][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.418167][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.459635][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.481293][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.505842][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.530740][T12926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.595394][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1195.644494][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1195.707560][T12926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.716434][T12926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.800328][T12926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.824014][T12926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.169726][T13361] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1197.455698][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.542550][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.595622][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1197.768305][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.828790][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.886191][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1198.033715][T13377] mkiss: ax0: crc mode is auto. [ 1199.664410][T13366] loop7: detected capacity change from 0 to 32768 [ 1202.949667][T13422] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1203.367048][T11284] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1203.568812][T11284] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1203.613247][T11284] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1203.739856][T13433] mkiss: ax0: crc mode is auto. [ 1204.378250][T11284] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.439079][T11284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.457634][T13414] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1204.474202][T13414] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1204.582873][T13436] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2159'. [ 1204.656354][T13436] netlink: zone id is out of range [ 1204.677919][T13436] netlink: del zone limit has 4 unknown bytes [ 1204.717697][T11284] usb 9-1: USB disconnect, device number 2 [ 1207.443696][T13465] hfs: can't find a HFS filesystem on dev nullb0 [ 1210.199205][T13473] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1212.892196][T13501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1214.264016][T13522] hfs: can't find a HFS filesystem on dev nullb0 [ 1216.164678][T13537] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1218.971273][T13558] mkiss: ax0: crc mode is auto. [ 1220.729362][T13580] loop9: detected capacity change from 0 to 16 [ 1220.774880][T13580] erofs: (device loop9): mounted with root inode @ nid 36. [ 1220.931601][T12914] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -42 in[46, 4050] out[9000] [ 1221.012690][T13580] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -42 in[46, 4050] out[9000] [ 1221.026091][ T27] audit: type=1800 audit(1774350267.943:8): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2194" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 1222.896973][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2196'. [ 1224.216730][T13618] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2208'. [ 1224.270650][T13618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1224.278054][T13618] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.372570][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2206'. [ 1224.957758][T13624] device bond0 entered promiscuous mode [ 1224.963354][T13624] device bond_slave_0 entered promiscuous mode [ 1224.969775][T13624] device bond_slave_1 entered promiscuous mode [ 1224.980829][T13624] device gretap0 entered promiscuous mode [ 1224.987904][T13624] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1224.995550][T13624] Cannot create hsr debugfs directory [ 1225.001086][T13624] device hsr1 entered promiscuous mode [ 1225.918462][T13631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.932494][T13631] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1225.962168][ T9153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1227.204167][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 1229.554180][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2220'. [ 1231.023785][T13674] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1231.089905][T13678] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1231.752179][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2221'. [ 1231.885728][T13687] mkiss: ax0: crc mode is auto. [ 1232.561783][T13684] loop8: detected capacity change from 0 to 2048 [ 1232.665624][T13684] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1232.736867][T13684] UDF-fs: Scanning with blocksize 512 failed [ 1232.897804][T13684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1233.672944][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2227'. [ 1235.370920][T13723] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1236.930292][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2234'. [ 1237.907032][T13735] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2236'. [ 1239.134429][T13757] fuse: Bad value for 'rootmode' [ 1240.686724][T13762] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1242.464627][T13766] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1242.879623][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2248'. [ 1245.010727][T13803] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2253'. [ 1245.309299][T13820] mkiss: ax0: crc mode is auto. [ 1245.506573][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.517338][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.630157][T13827] fuse: Unknown parameter 'use00000000000000000000' [ 1247.693723][T13831] random: crng reseeded on system resumption [ 1249.711431][T13861] hfs: can't find a HFS filesystem on dev nullb0 [ 1250.595173][T13856] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1251.713015][T13879] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2266'. [ 1253.145530][T13894] fuse: Unknown parameter 'use00000000000000000000' [ 1254.311141][T13906] mkiss: ax0: crc mode is auto. [ 1254.671221][T13905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1257.280591][T13923] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2281'. [ 1259.186013][T13940] fuse: Unknown parameter 'use00000000000000000000' [ 1260.871315][T13952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.605701][T13960] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1261.896942][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.693337][T13980] hfs: can't find a HFS filesystem on dev nullb0 [ 1265.242977][T13974] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2296'. [ 1265.406407][T13989] fuse: Unknown parameter 'user_i00000000000000000000' [ 1265.468932][T13988] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1267.508921][T14020] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1270.473478][T14050] mkiss: ax0: crc mode is auto. [ 1270.931852][T14054] hfs: can't find a HFS filesystem on dev nullb0 [ 1271.892246][T14059] mkiss: ax0: crc mode is auto. [ 1272.601890][T14058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2313'. [ 1272.809165][T14065] fuse: Unknown parameter 'user_i00000000000000000000' [ 1274.415517][T14079] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1276.504342][T12914] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1278.100603][T14108] hfs: can't find a HFS filesystem on dev nullb0 [ 1278.386927][T12914] Bluetooth: hci5: command 0x0406 tx timeout [ 1279.296614][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2329'. [ 1280.101364][T14130] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1281.372734][T14142] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1282.564363][T14164] mkiss: ax0: crc mode is auto. [ 1282.887311][T14162] hfs: can't find a HFS filesystem on dev nullb0 [ 1283.417508][ T9102] Bluetooth: hci0: command 0x0406 tx timeout [ 1284.729935][T14183] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2347'. [ 1285.898907][T14198] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1286.294879][T14207] hfs: can't find a HFS filesystem on dev nullb0 [ 1287.254574][T14217] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1289.533514][T14252] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1292.348914][T14284] netlink: 55 bytes leftover after parsing attributes in process `syz.9.2378'. [ 1292.449218][T14284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1292.456548][T14284] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.533765][T14298] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1296.389008][T14325] fuse: Bad value for 'group_id' [ 1296.403297][T14326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2392'. [ 1296.416645][T14331] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1296.709179][T14335] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2394'. [ 1296.741066][T14335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1296.748383][T14335] IPv6: NLM_F_CREATE should be set when creating new route [ 1299.829342][T14373] mkiss: ax0: crc mode is auto. [ 1300.930417][T14386] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2405'. [ 1301.326568][T14397] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2408'. [ 1301.375436][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2409'. [ 1302.144919][T14397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.497969][T14420] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2415'. [ 1304.622083][T14420] netlink: zone id is out of range [ 1304.689649][T14420] netlink: del zone limit has 4 unknown bytes [ 1305.050393][T14431] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1305.280730][T14433] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2419'. [ 1306.404064][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'. [ 1306.942689][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.958127][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.317040][T14486] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2431'. [ 1313.281086][T14518] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1313.847429][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2440'. [ 1315.029443][T14539] fuse: Unknown parameter '0x0000000000000005' [ 1315.932745][T14545] mkiss: ax0: crc mode is auto. [ 1316.439230][T14552] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1317.860461][T14563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.319135][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2453'. [ 1319.954419][T14600] fuse: Unknown parameter '0x0000000000000005' [ 1321.266260][T14610] mkiss: ax0: crc mode is auto. [ 1325.245323][T14653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2463'. [ 1326.422328][T14663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2466'. [ 1328.493826][T14678] fuse: Unknown parameter '0x0000000000000005' [ 1329.679361][T14685] mkiss: ax0: crc mode is auto. [ 1330.043029][T14690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1331.256910][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1331.918270][T14710] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1333.597927][T14740] hfs: can't find a HFS filesystem on dev nullb0 [ 1334.818857][T14755] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1335.388053][T14759] mkiss: ax0: crc mode is auto. [ 1337.881967][T14769] mkiss: ax0: crc mode is auto. [ 1339.877883][T14799] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.346558][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2492'. [ 1345.462096][T14861] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1350.664792][T14895] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2510'. [ 1352.097820][T14922] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1353.314017][T14932] mkiss: ax0: crc mode is auto. [ 1354.019986][T14934] fuse: Unknown parameter 'grou00000000000000000000' [ 1358.898408][T14972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1360.056867][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1361.997469][T15003] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1362.010346][T15002] fuse: Unknown parameter 'grou00000000000000000000' [ 1362.388965][T15011] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2534'. [ 1366.486951][T15037] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1368.379797][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.386495][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.551824][T15053] fuse: Unknown parameter 'group_i00000000000000000000' [ 1369.932638][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2547'. [ 1372.221900][T15076] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1373.094896][T15069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1374.296886][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.327300][T15097] fuse: Unknown parameter 'group_i00000000000000000000' [ 1378.731639][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1379.270397][T15121] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1379.525289][T15128] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2562'. [ 1379.560597][T15128] netlink: zone id is out of range [ 1379.586123][T15128] netlink: del zone limit has 4 unknown bytes [ 1379.814151][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2563'. [ 1379.844612][T15135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1379.858951][T15137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1379.875303][T15135] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1379.911366][T15135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1381.499754][T15152] mkiss: ax0: crc mode is auto. [ 1382.051398][T15161] mkiss: ax0: crc mode is auto. [ 1384.052610][T15172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1384.066405][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2576'. [ 1387.272813][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2589'. [ 1387.985131][T15227] loop4: detected capacity change from 0 to 2048 [ 1388.220432][T15230] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1388.241551][T15231] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1389.686994][ T8667] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1389.954335][ T8667] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1390.016517][ T8667] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1390.101505][ T8667] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1390.176771][ T8667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.227174][T15250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1390.234517][T15250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1390.302455][T15257] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1390.503849][ T8667] usb 5-1: USB disconnect, device number 15 [ 1392.530887][T15278] mkiss: ax0: crc mode is auto. [ 1393.681618][T15287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1396.003850][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2606'. [ 1396.385954][T15333] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1401.533120][T15370] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1402.385212][T15377] fuse: Unknown parameter 'group_i00000000000000000000' [ 1402.921092][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2619'. [ 1409.048834][T15417] mkiss: ax0: crc mode is auto. [ 1411.873835][T15450] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2632'. [ 1411.903435][T15450] device bond0 entered promiscuous mode [ 1411.909168][T15450] device bond_slave_0 entered promiscuous mode [ 1411.916142][T15450] device bond_slave_1 entered promiscuous mode [ 1411.933945][T15450] device gretap0 entered promiscuous mode [ 1411.948729][T15450] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1411.956471][T15450] Cannot create hsr debugfs directory [ 1411.962530][T15450] device hsr1 entered promiscuous mode [ 1411.996831][T11362] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1412.252947][T11362] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1412.313617][T11362] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1412.615974][T11362] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1412.678403][T11362] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.833082][T11362] usb 8-1: can't set config #27, error -71 [ 1412.864317][T11362] usb 8-1: USB disconnect, device number 11 [ 1414.842919][T15474] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1418.035802][T15492] mkiss: ax0: crc mode is auto. [ 1419.067422][T15503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1419.350091][T15509] mkiss: ax0: crc mode is auto. [ 1420.136877][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.715833][T15512] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1420.797718][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2647'. [ 1421.776777][ T8667] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1422.606435][ T8667] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1422.661767][ T8667] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1423.093994][ T8667] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1424.856927][ T8667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.086998][ T8667] usb 5-1: can't set config #27, error -71 [ 1425.115938][ T8667] usb 5-1: USB disconnect, device number 16 [ 1427.232522][T15559] mkiss: ax0: crc mode is auto. [ 1427.822195][T15570] mkiss: ax0: crc mode is auto. [ 1429.161229][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2660'. [ 1429.913907][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.920384][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.396846][ T4312] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1435.679101][ T4312] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1435.704161][ T4312] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1435.765535][ T4312] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1435.816085][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.882154][T15606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1435.900226][T15606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1436.131289][ T4312] usb 5-1: USB disconnect, device number 17 [ 1436.789026][T15632] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1437.566410][T15642] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2673'. [ 1438.713472][T15649] mkiss: ax0: crc mode is auto. [ 1445.067026][ T5027] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1445.285868][ T5027] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1445.336945][ T5027] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1445.377327][ T5027] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1445.444469][ T5027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.539166][T15676] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1445.567147][T15676] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1445.618723][T15701] mkiss: ax0: crc mode is auto. [ 1446.443130][T15690] hfs: can't find a HFS filesystem on dev nullb0 [ 1446.659914][ T5027] usb 9-1: USB disconnect, device number 3 [ 1448.205174][T15727] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1448.334180][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2685'. [ 1449.156708][T15729] mkiss: ax0: crc mode is auto. [ 1455.006875][ T4311] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1455.412032][ T4311] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1455.427185][ T4311] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1455.439141][ T4311] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1455.448830][ T4311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.477227][T15768] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1455.488073][T15768] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1455.777462][ T4316] usb 6-1: USB disconnect, device number 6 [ 1456.738655][T15781] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2704'. [ 1459.494717][T15829] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1459.910490][T15831] mkiss: ax0: crc mode is auto. [ 1461.240116][T15813] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1462.148923][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2715'. [ 1462.242103][T15845] mkiss: ax0: crc mode is auto. [ 1466.241277][T15879] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1466.383447][T15881] fuse: Bad value for 'user_id' [ 1466.430754][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2727'. [ 1467.991298][T15899] mkiss: ax0: crc mode is auto. [ 1468.108936][T15905] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1471.909732][T15931] fuse: Bad value for 'user_id' [ 1475.058598][T15959] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2747'. [ 1476.162477][T15969] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1477.238875][T15983] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1477.898875][T15985] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1478.517620][T15987] fuse: Bad value for 'user_id' [ 1481.170128][T16008] mkiss: ax0: crc mode is auto. [ 1482.025575][T16011] hfs: can't find a HFS filesystem on dev nullb0 [ 1484.741289][T16030] fuse: Bad value for 'fd' [ 1485.037114][T16035] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1485.816793][ T5027] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1486.869016][ T5027] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1486.895968][ T5027] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1486.918810][ T5027] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1487.107733][ T5027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.153988][ T5027] usb 6-1: can't set config #27, error -71 [ 1487.170426][ T5027] usb 6-1: USB disconnect, device number 7 [ 1487.232965][T16050] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2772'. [ 1489.012635][T16068] mkiss: ax0: crc mode is auto. [ 1491.349441][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.362494][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.961096][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2785'. [ 1495.884084][T16116] mkiss: ax0: crc mode is auto. [ 1497.423965][T16123] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2792'. [ 1499.033841][T16144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.631578][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.731070][T16152] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1502.239303][T16161] mkiss: ax0: crc mode is auto. [ 1505.018302][T16183] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1507.011891][T16190] mkiss: ax0: crc mode is auto. [ 1507.571984][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2810'. [ 1510.773936][T16219] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1511.253960][T16227] hfs: can't find a HFS filesystem on dev nullb0 [ 1512.500752][T16236] mkiss: ax0: crc mode is auto. [ 1514.207722][T16246] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1517.108829][T16265] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1518.072472][T16277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2835'. [ 1518.564557][T16282] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2838'. [ 1519.312853][T16289] fuse: Invalid rootmode [ 1519.752925][T16296] mkiss: ax0: crc mode is auto. [ 1521.979882][T16316] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1522.842930][T16338] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2851'. [ 1524.633788][T16354] mkiss: ax0: crc mode is auto. [ 1528.532118][T16370] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1528.825449][T16379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1528.876491][ T27] audit: type=1326 audit(1774350575.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.7.2863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23e39c799 code=0x0 [ 1529.122202][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1531.281267][T16398] loop7: detected capacity change from 0 to 2048 [ 1531.481583][T16406] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1532.384245][T16423] mkiss: ax0: crc mode is auto. [ 1533.657824][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2878'. [ 1535.203388][T16439] mkiss: ax0: crc mode is auto. [ 1536.456808][T16438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.546538][T16456] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1537.853761][T16463] mkiss: ax0: crc mode is auto. [ 1538.659000][T16461] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1539.017048][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2891'. [ 1539.432936][T16478] mkiss: ax0: crc mode is auto. [ 1542.267891][T16493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1542.737739][T16503] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1543.613388][T16505] loop7: detected capacity change from 0 to 32768 [ 1543.694838][T16519] mkiss: ax0: crc mode is auto. [ 1545.043771][T16505] JBD2: Ignoring recovery information on journal [ 1545.538332][T16505] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1545.816921][ T27] audit: type=1800 audit(1774350592.733:10): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2904" name="file1" dev="loop7" ino=17059 res=0 errno=0 [ 1546.128260][ T9894] ocfs2: Unmounting device (7,7) on (node local) [ 1546.435933][T16537] hfs: can't find a HFS filesystem on dev nullb0 [ 1546.915594][T16545] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1547.153729][T16528] loop5: detected capacity change from 0 to 32768 [ 1547.185723][T16534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1547.322166][ T27] audit: type=1800 audit(1774350594.233:11): pid=16528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2912" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1548.163057][T16562] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2920'. [ 1549.944874][T16561] loop4: detected capacity change from 0 to 32768 [ 1550.147990][T16561] tipc: Started in network mode [ 1550.153122][T16561] tipc: Node identity , cluster identity 4711 [ 1550.186859][T16561] tipc: Failed to obtain node identity [ 1550.192436][T16561] tipc: Enabling of bearer rejected, failed to enable media [ 1550.247500][ T27] audit: type=1800 audit(1774350597.163:12): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2922" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1550.584736][T16590] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1550.611244][T16589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.578635][T16603] mkiss: ax0: crc mode is auto. [ 1552.701170][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.707999][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.804790][T16617] binder: 16616:16617 ioctl c0306201 200000000080 returned -14 [ 1553.646530][T16632] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1553.731180][T16615] loop5: detected capacity change from 0 to 32768 [ 1553.765788][T16615] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1553.788727][T16615] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1553.799601][T16615] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1553.812040][T16615] BTRFS info (device loop5): trying to use backup root at mount time [ 1553.822453][T16615] BTRFS info (device loop5): setting nodatasum [ 1553.831082][T16615] BTRFS info (device loop5): enabling ssd optimizations [ 1553.839810][T16615] BTRFS info (device loop5): using spread ssd allocation scheme [ 1553.848333][T16615] BTRFS info (device loop5): turning on flush-on-commit [ 1553.856076][T16615] BTRFS info (device loop5): force zlib compression, level 3 [ 1553.865454][T16615] BTRFS info (device loop5): using free space tree [ 1554.210573][ T27] audit: type=1800 audit(1774350601.123:13): pid=16615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2941" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1554.866164][ T27] audit: type=1800 audit(1774350601.773:14): pid=16659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2941" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 1555.398311][T16667] mkiss: ax0: crc mode is auto. [ 1556.797140][ T952] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1556.996805][ T952] usb 9-1: Using ep0 maxpacket: 16 [ 1557.005526][ T952] usb 9-1: config 0 has no interfaces? [ 1557.012685][ T9099] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1557.025356][ T952] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1557.064757][ T952] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.092166][ T952] usb 9-1: config 0 descriptor?? [ 1557.337099][T16673] random: crng reseeded on system resumption [ 1557.488660][T12914] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 1557.488753][T12914] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 1557.496527][T12914] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 1557.503781][T12914] Bluetooth: hci0: Unknown advertising packet type: 0x37 [ 1557.510994][T12914] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1557.633308][T16691] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1558.032381][T16701] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1558.068325][T16677] loop7: detected capacity change from 0 to 32768 [ 1558.229223][ T27] audit: type=1800 audit(1774350605.143:15): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2955" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 1558.242923][T16705] Bluetooth: MGMT ver 1.22 [ 1558.897774][T16716] mkiss: ax0: crc mode is auto. [ 1559.675016][ T7707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (7707) [ 1560.429491][ T8945] usb 9-1: USB disconnect, device number 4 [ 1560.810148][T16730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1561.158507][T16735] loop7: detected capacity change from 0 to 128 [ 1561.187433][T16735] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1561.207125][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2973'. [ 1561.388561][T16739] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1561.980340][T16735] loop7: detected capacity change from 128 to 64 [ 1562.012392][T16743] ------------[ cut here ]------------ [ 1562.018783][T16743] WARNING: CPU: 1 PID: 16743 at fs/udf/inode.c:1932 __udf_add_aext+0x51a/0x6c0 [ 1562.028358][T16743] Modules linked in: [ 1562.032343][T16743] CPU: 1 PID: 16743 Comm: syz.7.2974 Not tainted syzkaller #0 [ 1562.039916][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1562.050060][T16743] RIP: 0010:__udf_add_aext+0x51a/0x6c0 [ 1562.055585][T16743] Code: 08 4c 89 f7 e8 17 2c ea fe 49 8b 3e 4c 89 e6 e8 4c b4 07 ff 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 40 99 fe <0f> 0b e9 1b fc ff ff e8 ea 40 99 fe 0f 0b e9 6f fd ff ff e8 de 40 [ 1562.075387][T16743] RSP: 0018:ffffc9000d4c72a0 EFLAGS: 00010283 [ 1562.081636][T16743] RAX: ffffffff82e931ba RBX: dffffc0000000000 RCX: 0000000000080000 [ 1562.089712][T16743] RDX: ffffc9000f07b000 RSI: 00000000000053f7 RDI: 00000000000053f8 [ 1562.097793][T16743] RBP: 1ffff92001a98ed5 R08: ffff888027003b80 R09: 0000000000000002 [ 1562.105830][T16743] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 1562.113911][T16743] R13: 0000000000000001 R14: ffffc9000d4c76a0 R15: ffffc9000d4c76a8 [ 1562.121990][T16743] FS: 00007fa23f18f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1562.131067][T16743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1562.137755][T16743] CR2: 00007effc2f4b000 CR3: 000000006316f000 CR4: 00000000003506e0 [ 1562.145789][T16743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1562.153856][T16743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1562.161936][T16743] Call Trace: [ 1562.165283][T16743] [ 1562.168320][T16743] udf_do_extend_file+0x6fb/0x10b0 [ 1562.173523][T16743] ? udf_write_failed+0x1b0/0x1b0 [ 1562.178680][T16743] udf_get_block+0xeda/0x4130 [ 1562.183445][T16743] ? lockdep_init_map_type+0x98/0x8d0 [ 1562.188976][T16743] ? udf_bread+0x4d0/0x4d0 [ 1562.193498][T16743] ? create_page_buffers+0x1d4/0x4a0 [ 1562.199010][T16743] ? __lock_acquire+0x7d10/0x7d10 [ 1562.204164][T16743] ? attach_page_private+0x110/0x300 [ 1562.209577][T16743] ? do_raw_spin_unlock+0x11d/0x230 [ 1562.214837][T16743] ? create_page_buffers+0x24f/0x4a0 [ 1562.220343][T16743] __block_write_begin_int+0x55d/0x1a80 [ 1562.226003][T16743] ? udf_bread+0x4d0/0x4d0 [ 1562.228015][T12914] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1562.230534][T16743] ? page_zero_new_buffers+0x650/0x650 [ 1562.239535][T12914] Bluetooth: hci3: Injecting HCI hardware error event [ 1562.244731][T16743] ? udf_bread+0x4d0/0x4d0 [ 1562.256049][T16743] block_write_begin+0x96/0x1e0 [ 1562.261044][T16743] udf_write_begin+0x31/0x70 [ 1562.264860][T12914] Bluetooth: hci3: hardware error 0x00 [ 1562.265677][T16743] generic_perform_write+0x2fa/0x5c0 [ 1562.277593][T16743] ? generic_file_direct_write+0x330/0x330 [ 1562.283491][T16743] ? __file_remove_privs+0x5f0/0x5f0 [ 1562.288923][T16743] ? rwsem_write_trylock+0x135/0x1c0 [ 1562.294283][T16743] ? clear_nonspinnable+0x60/0x60 [ 1562.299419][T16743] __generic_file_write_iter+0x148/0x2a0 [ 1562.305139][T16743] udf_file_write_iter+0x289/0x620 [ 1562.310458][T16743] do_iter_write+0x642/0xb10 [ 1562.315220][T16743] ? vfs_iter_write+0xa0/0xa0 [ 1562.320004][T16743] ? rcu_read_lock_any_held+0xb0/0x130 [ 1562.325636][T16743] do_pwritev+0x23d/0x3a0 [ 1562.330100][T16743] ? do_preadv+0x390/0x390 [ 1562.334592][T16743] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1562.340698][T16743] ? lock_chain_count+0x20/0x20 [ 1562.345620][T16743] ? lockdep_hardirqs_on+0x94/0x140 [ 1562.350984][T16743] ? __x64_sys_pwritev2+0xba/0x100 [ 1562.356224][T16743] do_syscall_64+0x4c/0xa0 [ 1562.360771][T16743] ? clear_bhb_loop+0x60/0xb0 [ 1562.365546][T16743] ? clear_bhb_loop+0x60/0xb0 [ 1562.370383][T16743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1562.376346][T16743] RIP: 0033:0x7fa23e39c799 [ 1562.380936][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.400736][T16743] RSP: 002b:00007fa23f18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1562.409266][T16743] RAX: ffffffffffffffda RBX: 00007fa23e616090 RCX: 00007fa23e39c799 [ 1562.417363][T16743] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1562.425398][T16743] RBP: 00007fa23e432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1562.433468][T16743] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 1562.441534][T16743] R13: 00007fa23e616128 R14: 00007fa23e616090 R15: 00007ffde59a7188 [ 1562.449622][T16743] [ 1562.452688][T16743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1562.460011][T16743] CPU: 1 PID: 16743 Comm: syz.7.2974 Not tainted syzkaller #0 [ 1562.467517][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1562.477649][T16743] Call Trace: [ 1562.480980][T16743] [ 1562.483952][T16743] dump_stack_lvl+0x188/0x24e [ 1562.488697][T16743] ? memcpy+0x3c/0x60 [ 1562.492815][T16743] ? show_regs_print_info+0x12/0x12 [ 1562.498063][T16743] ? load_image+0x400/0x400 [ 1562.502650][T16743] panic+0x2e5/0x730 [ 1562.506606][T16743] ? bpf_jit_dump+0xd0/0xd0 [ 1562.511171][T16743] __warn+0x2f8/0x4f0 [ 1562.515215][T16743] ? __udf_add_aext+0x51a/0x6c0 [ 1562.520202][T16743] ? __udf_add_aext+0x51a/0x6c0 [ 1562.525109][T16743] report_bug+0x2ba/0x4f0 [ 1562.529685][T16743] ? __udf_add_aext+0x51a/0x6c0 [ 1562.534588][T16743] handle_bug+0x3a/0x70 [ 1562.538800][T16743] exc_invalid_op+0x16/0x40 [ 1562.543369][T16743] asm_exc_invalid_op+0x16/0x20 [ 1562.548276][T16743] RIP: 0010:__udf_add_aext+0x51a/0x6c0 [ 1562.553784][T16743] Code: 08 4c 89 f7 e8 17 2c ea fe 49 8b 3e 4c 89 e6 e8 4c b4 07 ff 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 40 99 fe <0f> 0b e9 1b fc ff ff e8 ea 40 99 fe 0f 0b e9 6f fd ff ff e8 de 40 [ 1562.573444][T16743] RSP: 0018:ffffc9000d4c72a0 EFLAGS: 00010283 [ 1562.579587][T16743] RAX: ffffffff82e931ba RBX: dffffc0000000000 RCX: 0000000000080000 [ 1562.587615][T16743] RDX: ffffc9000f07b000 RSI: 00000000000053f7 RDI: 00000000000053f8 [ 1562.595821][T16743] RBP: 1ffff92001a98ed5 R08: ffff888027003b80 R09: 0000000000000002 [ 1562.603861][T16743] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 1562.611923][T16743] R13: 0000000000000001 R14: ffffc9000d4c76a0 R15: ffffc9000d4c76a8 [ 1562.620152][T16743] ? __udf_add_aext+0x51a/0x6c0 [ 1562.625076][T16743] udf_do_extend_file+0x6fb/0x10b0 [ 1562.630272][T16743] ? udf_write_failed+0x1b0/0x1b0 [ 1562.635416][T16743] udf_get_block+0xeda/0x4130 [ 1562.640188][T16743] ? lockdep_init_map_type+0x98/0x8d0 [ 1562.645617][T16743] ? udf_bread+0x4d0/0x4d0 [ 1562.650111][T16743] ? create_page_buffers+0x1d4/0x4a0 [ 1562.655547][T16743] ? __lock_acquire+0x7d10/0x7d10 [ 1562.660681][T16743] ? attach_page_private+0x110/0x300 [ 1562.666085][T16743] ? do_raw_spin_unlock+0x11d/0x230 [ 1562.671353][T16743] ? create_page_buffers+0x24f/0x4a0 [ 1562.676724][T16743] __block_write_begin_int+0x55d/0x1a80 [ 1562.682353][T16743] ? udf_bread+0x4d0/0x4d0 [ 1562.686812][T16743] ? page_zero_new_buffers+0x650/0x650 [ 1562.692333][T16743] ? udf_bread+0x4d0/0x4d0 [ 1562.696788][T16743] block_write_begin+0x96/0x1e0 [ 1562.701701][T16743] udf_write_begin+0x31/0x70 [ 1562.706336][T16743] generic_perform_write+0x2fa/0x5c0 [ 1562.711695][T16743] ? generic_file_direct_write+0x330/0x330 [ 1562.717555][T16743] ? __file_remove_privs+0x5f0/0x5f0 [ 1562.722901][T16743] ? rwsem_write_trylock+0x135/0x1c0 [ 1562.728238][T16743] ? clear_nonspinnable+0x60/0x60 [ 1562.733346][T16743] __generic_file_write_iter+0x148/0x2a0 [ 1562.739060][T16743] udf_file_write_iter+0x289/0x620 [ 1562.744254][T16743] do_iter_write+0x642/0xb10 [ 1562.748921][T16743] ? vfs_iter_write+0xa0/0xa0 [ 1562.753658][T16743] ? rcu_read_lock_any_held+0xb0/0x130 [ 1562.759189][T16743] do_pwritev+0x23d/0x3a0 [ 1562.763568][T16743] ? do_preadv+0x390/0x390 [ 1562.768050][T16743] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1562.774127][T16743] ? lock_chain_count+0x20/0x20 [ 1562.779037][T16743] ? lockdep_hardirqs_on+0x94/0x140 [ 1562.784281][T16743] ? __x64_sys_pwritev2+0xba/0x100 [ 1562.789462][T16743] do_syscall_64+0x4c/0xa0 [ 1562.793933][T16743] ? clear_bhb_loop+0x60/0xb0 [ 1562.798660][T16743] ? clear_bhb_loop+0x60/0xb0 [ 1562.803391][T16743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1562.809354][T16743] RIP: 0033:0x7fa23e39c799 [ 1562.813921][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.833579][T16743] RSP: 002b:00007fa23f18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1562.842060][T16743] RAX: ffffffffffffffda RBX: 00007fa23e616090 RCX: 00007fa23e39c799 [ 1562.850091][T16743] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1562.858112][T16743] RBP: 00007fa23e432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1562.866134][T16743] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 1562.874157][T16743] R13: 00007fa23e616128 R14: 00007fa23e616090 R15: 00007ffde59a7188 [ 1562.882228][T16743] [ 1562.886036][T16743] Kernel Offset: disabled [ 1562.890476][T16743] Rebooting in 86400 seconds..