last executing test programs: 16m0.505078003s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "caaffc62ed4546068b84"}}, 0x0, 0x0, 0x0}, 0x0) 15m54.016037154s ago: executing program 4 (id=22): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r5, 0x1, 0x70bd2d, 0x25dfdc01, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ddb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x445}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0xfea7) 15m52.204743776s ago: executing program 4 (id=28): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0xf7) fanotify_init(0x200, 0x2) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd7f4f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000005780)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="040004000000000010000100000000002000050000000000"], 0x5c, 0x3) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000140), 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x5, 0x3, {}, {}, 0x1, 0x3}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 15m49.955825062s ago: executing program 4 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15m49.71782132s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0xc, 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000ac0)='./file0\x00'}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0xffffffff, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25170000000c009900ffffffff0d000000"], 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2c048004}, 0x890) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 15m32.514149735s ago: executing program 32 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0xc, 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000ac0)='./file0\x00'}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0xffffffff, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25170000000c009900ffffffff0d000000"], 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2c048004}, 0x890) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c8708786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb83928d7b568daf133e50b003ff76433c9a0e6e687f97aecbc861c60c4296d49de4ff22a4d0eb8d04ad206c73cee7b43725690a9a45a7f7a79962edbd97c86d77b09bfe6ecedecda2be0cea971ff7beeae8cbb016a54d948310e36e03601708bab36e355b4731dccddb0058ca3bf7a9acbb9ab12353c69d5895c19616069c0e5524de75c8a682f0b772277977593cb12216adf4ff05654866decaf03d068e90cb7bc4285e978afa4cd7cc2bdfc1b0e359edc86696149193b2779014cd2ddc2dd971b0104ecc2b7f097fd36c1ffd10665cf34be94457354087be788daf6d0f9543d32ab5eef13c97ba7b967fa66cc1a48e743521d4c717625", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 8m14.642308278s ago: executing program 0 (id=945): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)=@vmx={0x108, 0x0, 0x2080, {0x7000, 0x100000, {}, 0x1, 0x14e}, {"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", "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"}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m13.597397914s ago: executing program 0 (id=947): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) fanotify_init(0x1, 0x400) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x60000}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051f9cfa00"}}) bind$llc(0xffffffffffffffff, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x0, 0xffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f000001aa40)=""/102392, 0x18ff8) 8m9.918111339s ago: executing program 0 (id=953): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x4000054) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0xa3fb, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x68d, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x1, 0x8029, 0x80, 0x7, 0x1a449, 0x9, 0x40800003, 0x8b, 0xcaa9, 0x0, 0x20001e58, 0x4bd, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 8m2.727532404s ago: executing program 0 (id=965): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r4 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r3}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 7m59.649236178s ago: executing program 0 (id=969): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) 7m57.154102253s ago: executing program 0 (id=971): socket(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200"/54], 0x0, 0x4e}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002c80)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x4, 0x1, 0x40001bb, 0x0, r4}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0xe07f, 0x10, 0x0, 0x1048, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000240)) 7m40.439188282s ago: executing program 33 (id=971): socket(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200"/54], 0x0, 0x4e}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002c80)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x4, 0x1, 0x40001bb, 0x0, r4}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0xe07f, 0x10, 0x0, 0x1048, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000240)) 3m59.027716491s ago: executing program 5 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) kcmp(r1, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 3m58.076102833s ago: executing program 5 (id=1328): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ptrace(0x4208, r0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 3m56.951896991s ago: executing program 5 (id=1330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x9080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000008000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3m52.847949601s ago: executing program 5 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000008000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03006037698c00fbffffffdd", 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3m48.142284411s ago: executing program 5 (id=1342): syz_io_uring_setup(0xed0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40854) writev(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 3m46.923732892s ago: executing program 5 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x9080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000008000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3m30.82403389s ago: executing program 34 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x9080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000008000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1m1.309050605s ago: executing program 7 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 1m0.780567293s ago: executing program 7 (id=1600): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = fanotify_init(0x2, 0x1) fanotify_mark(r3, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x3}, 0x8) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x401, 0x12, r6, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf3bc02d4ce92c460}, 0xc0d0) socket$nl_netfilter(0x10, 0x3, 0xc) 48.603844577s ago: executing program 7 (id=1619): socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1}, 0x9}], 0x1, 0xcb, 0x0) 44.681712731s ago: executing program 7 (id=1627): r0 = socket(0x11, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000}}, {{0xa, 0x4e24, 0x0, @private2}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 41.321096576s ago: executing program 7 (id=1630): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) syz_io_uring_setup(0xed0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40854) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 38.961950586s ago: executing program 7 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000008000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03006037698c00fbffffffdd", 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 23.997058244s ago: executing program 2 (id=1657): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r3 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r2}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 23.172742363s ago: executing program 35 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000008000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03006037698c00fbffffffdd", 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 18.607715448s ago: executing program 2 (id=1664): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001780)}}, {{&(0x7f0000000500)=@ll={0x11, 0x16, r0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="ea19a6cd956cec436c74787246d13ca11081dbabebcb76c1d2e8b7d0c8c1aabdd95fc51096c8d57e818ce768ccceed4d115abed88468be323c820ade265a87419a77736785f202fe11a5dd77773ba9a4c83087f956929503b1e1ff5b37da9fe53fb758af2d89f01e0df78efd88cf4a01c0b8766c480a0394b6c8fc9fc12099c5bb81de2cb7a9f7cda5c9b265453e575767fb58b840bfe5d709889eea7579a18472fdd1630e7fbbe9d68f75a7a51eb7e00854a1f71f", 0xb5}, {&(0x7f0000000580)="b309d3ef91dd92a3b7e1c73ff0a368ae33c77fd11e3c04fdf36d2f9461a7ee76290ce0f6449e8a16fb86ee80c6ae62ec109763ae520d", 0x36}, {&(0x7f0000000740)="efded85c2c542acacf9d79eea389735832330080b0afe68599b4b850531e65e89deb1e", 0x23}], 0x3}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000900)="a590902a494aeaa8345cc36e3baafae8603b7dca66a102375bff06a96fefcb42def096636b07c90f4fcc1e603e4344945d65949f8060d29943d637225ae1487d0e50cd650ef42c634bf4c96a466cd6a0bbaad461e8da5295d6e67b041e597a6204a4ea5d177c0895cbc60f2c6edbe0cf5ce787ba93d8d070f7a7d51cf0b81f6c48aecbc944db5a735cff3816ec24f77a43b59b905350d778ecbf80411ee62619f8dfc9559f98ab1459ab9c9d4d66c660959e0ea4ceb914", 0xb7}, {&(0x7f0000001200)="e03edf555ccc657c1f51f2e2d556c56634e24d753289e65d5c7fbaaf2a49182660fdc72e77d70ab6e91175c5ad36269eeea9cd41439c1c5c9c2b067776", 0x3d}, {&(0x7f00000009c0)="ec542e6e546621be55daa06ed7f545e327ecd8c48d3f7b8ae050bff8c90a3cb00173b653bc4096d3851480366de66f4b99be156191f797f123a3f23be8a22e76a5bd01e1cc80b1d2c45b133bc3eecc580700004210c7136885", 0x59}, {&(0x7f0000001000)="18a8583924039aadf86313c609284663d89bbf4926f433da348624e066f55a2241069c638f862039561bc732a9a380a05c6a8ab5adb65188f24882cb13f9dd604ef15ea43abc5ccdfc9bfe6b966c343da49e10cebdd875ae8793f2398278658eacbed7b13eaa2fe77a74ee08c4986f8683af3caacbe3b6c0a5a10f1fed7418a7d4af3f5bd43d33ea14afed50e430cd8dcf38a33f2a10456eaaa71a611a4f87dff266de2087d21e996573b7cbe11072a797dda6a4", 0xb4}], 0x4}}], 0x3, 0x200000c0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {0x0}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19b", 0x59}], 0x5}}], 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440), 0x7953bb0c2b576ac9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x26000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x6, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x5800, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.513785303s ago: executing program 2 (id=1669): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 15.406847266s ago: executing program 1 (id=1670): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) 14.359778862s ago: executing program 1 (id=1672): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$cgroup_procs(r1, &(0x7f0000002600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) pread64(r7, &(0x7f0000000300)=""/4092, 0xffc, 0x7) syz_open_dev$video4linux(0x0, 0xa370, 0x184d00) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x2e, 0x2013}, 0x20) syz_usb_connect$cdc_ecm(0x5, 0x64, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x29, 0x28, 0x8, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x100}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xc9, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x11}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x4, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x6, 0x3}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x7, 0x6, 0x0, 0x40, 0xa}, 0x6c, &(0x7f00000000c0)={0x5, 0xf, 0x6c, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x1, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "20b7a6edb51d2bec9feaa262916dcf5e"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x9, 0xf00f, 0xff, [0xff00, 0xffff11, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "af57d9f364c71c108815370e91b509a0"}, @ssp_cap={0x10, 0x10, 0xa, 0x68, 0x1, 0x200, 0xf00, 0x7f, [0xffc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xbb, 0x10, 0x2, 0xfc00, 0x1}]}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x80a}}, {0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "077195ff00a37695bbeee77237d384278a4a8e4debaaa5d4205750c82d142d12c02ca9d9f5860fc6c4547fc017679354560b07492e112d8a70c868df72a6f4524030c2e5e967934c3a8688aac65e4342f42448a1b5923a85de62fa9cffae610a5c953d87e5b1c70fc0"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0x77, &(0x7f0000000280)=@string={0x77, 0x3, "01a942c50c9597d5f42b6707307f5614e1fc10102b09084b620a2b58c4fa9c97ff1c2ef653eccbd5f7e42852ab02aac4290a8ed9dc9ae8174aa78c7100f69e42e0fdd4b0825c2313b126363acb1028282cedc60f62e3eb0a0615214bd9a761688bb91e4cb9e8224dd2c2e2d2b05762463235882bdf"}}, {0x100, &(0x7f0000000300)=@string={0x100, 0x3, "c0de67a4d2adb6e115b73d9b46d5714542fdde56c6b3e354227ee6b3ac3946f6213de2aa891df12827c9d169139c7b8361b115ef71bdc935f17ceae6d511c513a514dd6ecc22fdd15cc907c848e4e1eb8f7f9c0819fae990813223871cea0f9cf8131f0c92eef20298d4be4f3d21389f30742a59d55ef211afaf72d1497d40b467762e71622f32476b2f8f33f129b1ef42ecc2df6d9d2d1ed52f65f637f96762fac6df3034d2713a59429b5d212ed49170b6e192233914fef91a81a8f817f9486baa4082e1699b28178879b473e213931792a7cc34c790265d102b576094494ac09eacdc73fd82dfb125266ba1013fd0c8c66f38a2f70458687525ad4de9"}}, {0x74, &(0x7f0000000480)=@string={0x74, 0x3, "bfe9174fd27450683a0677fa9b054374ad2ea6f202bf9020e63d811b3a675b4e28cbf9d9bd6aba8574cf0c74de009b00d14587d414f17c4cfa85fbf3f2a6abd270d61b16d23a44017ed18534822fa249931485c0e5c48201c71e8508ae773348634d8e2d516e0165c5b9e0b00c100084b50b"}}, {0x43, &(0x7f0000000500)=@string={0x43, 0x3, "c2a5c174f4bdc6babeb9a6c00997e5d006c39976926ec628a3d74b57b6420e30840ff40991444499f7c9299caf5ba946f8ced5a99f5bb53bf6a1161e39048694c8"}}, {0x34, &(0x7f0000000400)=@string={0x34, 0x3, "d365db2a33d8cc4e84d87c7c44f7c65a53c8407e09c71b6338d8a86938f1d4a7343e5957443671d3ec6aa5c22d54c0b152f0"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x843}}]}) 12.438834027s ago: executing program 3 (id=1673): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r3 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r2}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12.292728482s ago: executing program 2 (id=1675): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0xf7) fanotify_init(0x200, 0x2) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd7f4f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000005780)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="02", @ANYBLOB="0400040000000000100001000000000020000500000000"], 0x5c, 0x3) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000140), 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x5, 0x3, {}, {}, 0x1, 0x3}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 11.985497913s ago: executing program 6 (id=1676): socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1}, 0x9}], 0x1, 0xcb, 0x0) 10.512878573s ago: executing program 2 (id=1677): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc", 0x22) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ptrace(0x4208, r0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 7.979821329s ago: executing program 2 (id=1678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000240), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.922171331s ago: executing program 6 (id=1679): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001780)}}, {{&(0x7f0000000500)=@ll={0x11, 0x16, r0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="ea19a6cd956cec436c74787246d13ca11081dbabebcb76c1d2e8b7d0c8c1aabdd95fc51096c8d57e818ce768ccceed4d115abed88468be323c820ade265a87419a77736785f202fe11a5dd77773ba9a4c83087f956929503b1e1ff5b37da9fe53fb758af2d89f01e0df78efd88cf4a01c0b8766c480a0394b6c8fc9fc12099c5bb81de2cb7a9f7cda5c9b265453e575767fb58b840bfe5d709889eea7579a18472fdd1630e7fbbe9d68f75a7a51eb7e00854a1f71f", 0xb5}, {&(0x7f0000000580)="b309d3ef91dd92a3b7e1c73ff0a368ae33c77fd11e3c04fdf36d2f9461a7ee76290ce0f6449e8a16fb86ee80c6ae62ec109763ae520d", 0x36}, {&(0x7f0000000740)="efded85c2c542acacf9d79eea389735832330080b0afe68599b4b850531e65e89deb1e", 0x23}], 0x3}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000900)="a590902a494aeaa8345cc36e3baafae8603b7dca66a102375bff06a96fefcb42def096636b07c90f4fcc1e603e4344945d65949f8060d29943d637225ae1487d0e50cd650ef42c634bf4c96a466cd6a0bbaad461e8da5295d6e67b041e597a6204a4ea5d177c0895cbc60f2c6edbe0cf5ce787ba93d8d070f7a7d51cf0b81f6c48aecbc944db5a735cff3816ec24f77a43b59b905350d778ecbf80411ee62619f8dfc9559f98ab1459ab9c9d4d66c660959e0ea4ceb914", 0xb7}, {&(0x7f0000001200)="e03edf555ccc657c1f51f2e2d556c56634e24d753289e65d5c7fbaaf2a49182660fdc72e77d70ab6e91175c5ad36269eeea9cd41439c1c5c9c2b067776", 0x3d}, {&(0x7f00000009c0)="ec542e6e546621be55daa06ed7f545e327ecd8c48d3f7b8ae050bff8c90a3cb00173b653bc4096d3851480366de66f4b99be156191f797f123a3f23be8a22e76a5bd01e1cc80b1d2c45b133bc3eecc580700004210c7136885", 0x59}, {&(0x7f0000001000)="18a8583924039aadf86313c609284663d89bbf4926f433da348624e066f55a2241069c638f862039561bc732a9a380a05c6a8ab5adb65188f24882cb13f9dd604ef15ea43abc5ccdfc9bfe6b966c343da49e10cebdd875ae8793f2398278658eacbed7b13eaa2fe77a74ee08c4986f8683af3caacbe3b6c0a5a10f1fed7418a7d4af3f5bd43d33ea14afed50e430cd8dcf38a33f2a10456eaaa71a611a4f87dff266de2087d21e996573b7cbe11072a797dda6a4", 0xb4}], 0x4}}], 0x3, 0x200000c0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {0x0}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19b", 0x59}], 0x5}}], 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440), 0x7953bb0c2b576ac9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x26000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x6, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x5800, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.818660704s ago: executing program 3 (id=1680): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r8, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x2, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 6.277972377s ago: executing program 6 (id=1684): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@null) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x4) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bind$rose(r0, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) 5.525828902s ago: executing program 6 (id=1685): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4f", 0x45}], 0x1}], 0x1, 0x40800) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.833044219s ago: executing program 6 (id=1686): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x169780, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102380, 0x18fec}], 0x1, 0x0, 0x4) syz_fuse_handle_req(r1, 0x0, 0x16, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000004ca80)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, 0x0, 0x844) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) poll(0x0, 0x46, 0x3) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x300) 3.722681673s ago: executing program 1 (id=1687): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc", 0x22) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ptrace(0x4208, r0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 2.675017668s ago: executing program 3 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x208, 0x2c41) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r8, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x2, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 2.551875673s ago: executing program 1 (id=1689): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r4 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r3}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 464.675884ms ago: executing program 3 (id=1690): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, 0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 418.339675ms ago: executing program 6 (id=1691): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b 1 [ 600.611329][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.621543][ T8295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.642967][ T8295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.650682][ T8295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 600.659365][ T8295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.721475][ T8284] device gre0 entered promiscuous mode [ 601.457932][ T8299] input: syz1 as /devices/virtual/input/input10 [ 601.610581][ T7029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.669636][ T7029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.872895][ T7029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.971024][ T7029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.251449][ T7029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.307810][ T7029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.553034][ T7029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.586897][ T7029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.681894][ T8295] Bluetooth: hci3: command 0x0409 tx timeout [ 604.549907][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 604.761886][ T8295] Bluetooth: hci3: command 0x041b tx timeout [ 605.279661][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.311904][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.320514][ T8294] device bridge_slave_0 entered promiscuous mode [ 605.441878][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.479710][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.550269][ T8294] device bridge_slave_1 entered promiscuous mode [ 606.435752][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.492782][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.726278][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 606.841798][ T8295] Bluetooth: hci3: command 0x040f tx timeout [ 607.096159][ T8294] team0: Port device team_slave_0 added [ 607.126628][ T8294] team0: Port device team_slave_1 added [ 607.280006][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.318871][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.414606][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.731104][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.793782][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.927509][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.031853][ T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 608.253789][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.274824][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.313960][ T22] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 608.342519][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.397201][ T8294] device hsr_slave_0 entered promiscuous mode [ 608.409287][ T22] usb 6-1: config 0 descriptor?? [ 608.433660][ T8294] device hsr_slave_1 entered promiscuous mode [ 608.452023][ T8294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.480284][ T8294] Cannot create hsr debugfs directory [ 608.586061][ T7029] device hsr_slave_0 left promiscuous mode [ 608.613224][ T7029] device hsr_slave_1 left promiscuous mode [ 608.672873][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.731243][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.796635][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.819257][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.837116][ T22] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 608.864050][ T7029] device bridge_slave_1 left promiscuous mode [ 608.884063][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.891677][ T22] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 608.921866][ T8295] Bluetooth: hci3: command 0x0419 tx timeout [ 608.932573][ T22] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 608.942967][ T22] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 608.955512][ T22] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 608.963557][ T7029] device bridge_slave_0 left promiscuous mode [ 609.010177][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.041512][ T22] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 609.118528][ T22] usb 6-1: USB disconnect, device number 5 [ 609.236579][ T7029] device veth1_macvtap left promiscuous mode [ 609.277451][ T7029] device veth0_macvtap left promiscuous mode [ 609.343999][ T7029] device veth1_vlan left promiscuous mode [ 609.372038][ T7029] device veth0_vlan left promiscuous mode [ 609.777284][ T8370] fido_id[8370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 610.220720][ T7029] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 610.280360][ T7029] device wireguard1 left promiscuous mode [ 612.393837][ T7029] bond2 (unregistering): Released all slaves [ 612.439047][ T7029] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 612.449917][ T7029] device wireguard0 left promiscuous mode [ 612.729906][ T7029] bond1 (unregistering): Released all slaves [ 613.486246][ T7029] team0 (unregistering): Port device team_slave_1 removed [ 613.553703][ T7029] team0 (unregistering): Port device team_slave_0 removed [ 613.607863][ T7029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.664257][ T7029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.404198][ T7029] bond0 (unregistering): Released all slaves [ 614.585173][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 616.197467][ T8294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 616.319726][ T8294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 616.381004][ T8294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 616.425069][ T8294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.802788][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.063475][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.090839][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.174260][ T8294] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.277088][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.315856][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.410948][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.418134][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.573306][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.711888][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.766077][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.817764][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.825071][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.000529][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.125309][ T8455] netlink: 'syz.5.1035': attribute type 1 has an invalid length. [ 619.416189][ T8455] device bond4 entered promiscuous mode [ 619.429348][ T8455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.452457][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 619.760684][ T8459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.798842][ T8459] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 619.942380][ T8459] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 621.489267][ T8459] bond4: (slave wireguard2): making interface the new active one [ 621.513324][ T8459] device wireguard2 entered promiscuous mode [ 621.649342][ T8459] bond4: (slave wireguard2): Enslaving as an active interface with an up link [ 621.661331][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 621.678104][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 621.730060][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 621.768564][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 621.795107][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 621.842085][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 621.909104][ T8294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 621.981833][ T8294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.133612][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.162875][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.173554][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.212325][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.233323][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.282278][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.329289][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.337831][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.367710][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.472313][ T8500] tmpfs: Unknown parameter 'quota' [ 624.112945][ T8509] loop1: detected capacity change from 0 to 2048 [ 624.633520][ T8514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 625.622617][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.701925][ T8509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.969962][ T8500] ISOFS: Unable to identify CD-ROM format. [ 628.311863][ T4323] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 628.453470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 628.501853][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 628.509172][ T4323] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 628.511042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 628.535061][ T4323] usb 4-1: config 2 has no interface number 0 [ 628.549913][ T4323] usb 4-1: config 2 interface 31 has no altsetting 0 [ 628.567830][ T4323] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 628.591513][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.609932][ T4323] usb 4-1: Product: syz [ 628.627976][ T4323] usb 4-1: Manufacturer: syz [ 628.639286][ T4323] usb 4-1: SerialNumber: syz [ 628.662286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 628.679116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 628.699511][ T8294] device veth0_vlan entered promiscuous mode [ 628.706920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 628.716278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 628.735346][ T8294] device veth1_vlan entered promiscuous mode [ 628.795206][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 628.863692][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 628.902186][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 628.911650][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 628.930273][ T8294] device veth0_macvtap entered promiscuous mode [ 628.991569][ T8294] device veth1_macvtap entered promiscuous mode [ 630.112678][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.121593][ T4323] ch9200: probe of 4-1:2.31 failed with error -22 [ 630.156785][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.179986][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.197605][ T4323] usb 4-1: USB disconnect, device number 12 [ 630.236480][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.323482][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.358967][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.383359][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.406338][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.438838][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.462479][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.484761][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.509082][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.528639][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.581234][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.633937][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.658588][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.862507][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.922041][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.950694][ T26] audit: type=1326 audit(1774694714.272:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.3.1051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaa559c799 code=0x0 [ 631.040988][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.057368][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.068352][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.098574][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.126678][ T8294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.191281][ T8294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.781817][ T8566] delete_channel: no stack [ 632.108868][ T8294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.182330][ T8294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.114915][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 634.422482][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 634.827808][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.893944][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.960402][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.090987][ T7029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.126554][ T7029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.218860][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.821828][ T4328] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 638.890791][ T8606] loop3: detected capacity change from 0 to 2048 [ 638.923673][ T8606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.199819][ T4328] usb 7-1: Using ep0 maxpacket: 32 [ 639.207744][ T4328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.035077][ T4328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.161842][ T4328] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 640.171668][ T4328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.213448][ T4328] usb 7-1: config 0 descriptor?? [ 640.266252][ T4328] hub 7-1:0.0: USB hub found [ 641.276619][ T4328] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 641.835824][ T8620] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 644.155996][ T4328] usbhid 7-1:0.0: can't add hid device: -71 [ 644.188568][ T4328] usbhid: probe of 7-1:0.0 failed with error -71 [ 645.052691][ T4328] usb 7-1: USB disconnect, device number 2 [ 646.651484][ T8647] loop1: detected capacity change from 0 to 2048 [ 646.724623][ T8647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.937570][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1070'. [ 656.606800][ T8722] loop2: detected capacity change from 0 to 2048 [ 657.342309][ T8722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 667.601822][ T126] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 668.122091][ T4354] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 668.132070][ T126] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.176977][ T126] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.713400][ T126] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.745682][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.821902][ T4354] usb 2-1: Using ep0 maxpacket: 8 [ 669.829077][ T4354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.853560][ T8797] program syz.5.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 669.904243][ T4354] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 669.932872][ T126] usb 7-1: can't set config #16, error -71 [ 669.940396][ T126] usb 7-1: USB disconnect, device number 3 [ 670.025058][ T4354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.084499][ T4354] usb 2-1: Product: syz [ 670.088747][ T4354] usb 2-1: Manufacturer: syz [ 670.150928][ T4354] usb 2-1: SerialNumber: syz [ 671.293431][ T4354] usb 2-1: config 0 descriptor?? [ 671.870620][ T4354] usb 2-1: can't set config #0, error -71 [ 671.962354][ T4354] usb 2-1: USB disconnect, device number 17 [ 672.143866][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 674.049642][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 680.571886][ T4319] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 681.271921][ T4319] usb 6-1: Using ep0 maxpacket: 8 [ 681.282970][ T4319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.362154][ T4319] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 681.371290][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.433383][ T4319] usb 6-1: Product: syz [ 681.451789][ T4319] usb 6-1: Manufacturer: syz [ 681.456562][ T4319] usb 6-1: SerialNumber: syz [ 681.502378][ T4319] usb 6-1: config 0 descriptor?? [ 681.539587][ T4319] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 681.571873][ T4319] usb 6-1: selecting invalid altsetting 1 [ 681.855953][ T4319] gspca_stk014: init reg: 0x00 [ 681.861132][ T4319] stk014: probe of 6-1:0.0 failed with error -5 [ 682.520436][ T4354] usb 6-1: USB disconnect, device number 6 [ 684.830627][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 686.710574][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.877210][ T8930] tmpfs: Bad value for 'mpol' [ 691.715424][ T8930] device xfrm0 entered promiscuous mode [ 692.695853][ T8936] loop8: detected capacity change from 0 to 1 [ 692.813970][ T8936] Dev loop8: unable to read RDB block 1 [ 692.891604][ T8936] loop8: unable to read partition table [ 692.961548][ T8936] loop8: partition table beyond EOD, truncated [ 693.285938][ T8936] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 694.067154][ T8957] (syz.5.1132,8957,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 694.076064][ T8957] (syz.5.1132,8957,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 694.898767][ T8935] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1126'. [ 695.891092][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1126'. [ 695.911807][ T8935] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1126'. [ 702.852257][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 705.155714][ T9031] loop1: detected capacity change from 0 to 2048 [ 705.257417][ T9031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.601872][ T4492] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 707.812211][ T4492] usb 3-1: Using ep0 maxpacket: 8 [ 707.868794][ T4492] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.117491][ T4492] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 708.225225][ T4492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.433827][ T4492] usb 3-1: Product: syz [ 708.462743][ T4492] usb 3-1: Manufacturer: syz [ 708.497928][ T4492] usb 3-1: SerialNumber: syz [ 708.593578][ T4492] usb 3-1: config 0 descriptor?? [ 708.643992][ T4492] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 708.678112][ T4492] usb 3-1: selecting invalid altsetting 1 [ 708.816071][ T4492] gspca_stk014: init reg: 0x00 [ 708.820971][ T4492] stk014: probe of 3-1:0.0 failed with error -5 [ 709.836591][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1162'. [ 709.979262][ T9072] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.989125][ T9072] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.998543][ T9072] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.007366][ T9072] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.066319][ T4328] usb 3-1: USB disconnect, device number 11 [ 712.629910][ T9099] loop5: detected capacity change from 0 to 2048 [ 712.741434][ T9099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.239923][ T4328] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 719.962006][ T4328] usb 2-1: Using ep0 maxpacket: 8 [ 719.968912][ T4328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.071645][ T4328] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 720.101633][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.136002][ T4328] usb 2-1: Product: syz [ 720.155567][ T4328] usb 2-1: Manufacturer: syz [ 720.171755][ T4328] usb 2-1: SerialNumber: syz [ 720.187169][ T4328] usb 2-1: config 0 descriptor?? [ 720.209147][ T4328] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 720.231121][ T4328] usb 2-1: selecting invalid altsetting 1 [ 720.408794][ T4328] gspca_stk014: init reg: 0x00 [ 720.414165][ T4328] stk014: probe of 2-1:0.0 failed with error -5 [ 721.206887][ T22] usb 2-1: USB disconnect, device number 18 [ 721.774527][ T9188] loop6: detected capacity change from 0 to 2048 [ 721.907602][ T9188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.391895][ T4322] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 723.981983][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 724.211863][ T4322] usb 7-1: Using ep0 maxpacket: 8 [ 724.237241][ T4322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.296162][ T4322] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 724.677316][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.806176][ T4322] usb 7-1: Product: syz [ 724.897021][ T4322] usb 7-1: Manufacturer: syz [ 724.964611][ T4322] usb 7-1: SerialNumber: syz [ 725.011371][ T4322] usb 7-1: config 0 descriptor?? [ 725.069623][ T4322] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 725.098045][ T4322] usb 7-1: selecting invalid altsetting 1 [ 725.260427][ T4322] gspca_stk014: init reg: 0x00 [ 725.265483][ T4322] stk014: probe of 7-1:0.0 failed with error -5 [ 727.751475][ T4328] usb 7-1: USB disconnect, device number 4 [ 731.451821][ T4322] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 731.734869][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 731.747398][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.807423][ T4322] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 731.833948][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.875064][ T4322] usb 4-1: Product: syz [ 731.881810][ T4322] usb 4-1: Manufacturer: syz [ 731.886653][ T4322] usb 4-1: SerialNumber: syz [ 731.901768][ T4322] usb 4-1: config 0 descriptor?? [ 731.921799][ T4322] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 731.928350][ T4322] usb 4-1: selecting invalid altsetting 1 [ 732.452328][ T4322] gspca_stk014: reg_r err -110 [ 732.488903][ T4322] stk014: probe of 4-1:0.0 failed with error -110 [ 736.625377][ T4328] usb 4-1: USB disconnect, device number 13 [ 736.951761][ T8932] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 737.141835][ T8932] usb 3-1: Using ep0 maxpacket: 8 [ 737.149557][ T8932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.720277][ T8932] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 738.281898][ T8932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.309781][ T8932] usb 3-1: Product: syz [ 738.314504][ T8932] usb 3-1: Manufacturer: syz [ 738.331758][ T8932] usb 3-1: SerialNumber: syz [ 738.345651][ T8932] usb 3-1: config 0 descriptor?? [ 738.598742][ T8932] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 739.018880][ T9302] (syz.5.1207,9302,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 739.027742][ T9302] (syz.5.1207,9302,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 739.089485][ T8932] usb 3-1: selecting invalid altsetting 1 [ 739.127607][ T8932] gspca_stk014: init reg: 0x00 [ 739.141889][ T8932] stk014: probe of 3-1:0.0 failed with error -5 [ 739.711801][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.739998][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.208093][ T4328] usb 3-1: USB disconnect, device number 12 [ 742.717350][ T9332] (syz.2.1213,9332,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 742.726243][ T9332] (syz.2.1213,9332,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 745.051894][ T9348] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 746.606054][ T9365] (syz.6.1219,9365,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 746.614834][ T9365] (syz.6.1219,9365,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 747.406819][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.570566][ T9367] binder: 9366:9367 ioctl 4018620d 0 returned -22 [ 747.854157][ T9371] binder: 9366:9371 ioctl c0306201 2000000004c0 returned -14 [ 750.841773][ T4319] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 751.041896][ T4319] usb 7-1: Using ep0 maxpacket: 8 [ 751.057695][ T4319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.121359][ T4319] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 751.211892][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.220297][ T4319] usb 7-1: Product: syz [ 751.374824][ T4319] usb 7-1: Manufacturer: syz [ 751.379909][ T4319] usb 7-1: SerialNumber: syz [ 751.387135][ T4319] usb 7-1: config 0 descriptor?? [ 751.404034][ T4319] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 751.410218][ T4319] usb 7-1: selecting invalid altsetting 1 [ 751.512041][ T9400] (syz.1.1225,9400,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 751.520962][ T9400] (syz.1.1225,9400,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 752.121582][ T4319] gspca_stk014: init reg: 0x00 [ 752.126601][ T4319] stk014: probe of 7-1:0.0 failed with error -5 [ 752.687229][ T9403] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 753.502204][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.514797][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.066129][ T4492] usb 7-1: USB disconnect, device number 5 [ 756.554637][ T4492] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 756.628982][ T9429] binder: 9428:9429 ioctl 4018620d 0 returned -22 [ 756.741889][ T4492] usb 3-1: Using ep0 maxpacket: 8 [ 756.843016][ T4492] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.850284][ T9430] binder: 9428:9430 ioctl c0306201 2000000004c0 returned -14 [ 756.881144][ T4492] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 756.895119][ T4492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.903570][ T4492] usb 3-1: Product: syz [ 756.908030][ T4492] usb 3-1: Manufacturer: syz [ 756.912943][ T4492] usb 3-1: SerialNumber: syz [ 756.933479][ T4492] usb 3-1: config 0 descriptor?? [ 756.950916][ T4492] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 756.957245][ T4492] usb 3-1: selecting invalid altsetting 1 [ 757.348484][ T4492] gspca_stk014: init reg: 0x00 [ 757.354149][ T4492] stk014: probe of 3-1:0.0 failed with error -5 [ 757.573611][ T4492] usb 3-1: USB disconnect, device number 13 [ 760.110897][ T9448] (syz.6.1237,9448,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 760.119845][ T9448] (syz.6.1237,9448,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 762.424560][ T9471] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 762.972138][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 765.863185][ T9491] binder: 9490:9491 ioctl 4018620d 0 returned -22 [ 765.961324][ T9493] binder: 9490:9493 ioctl c0306201 2000000004c0 returned -14 [ 769.104440][ T9510] (syz.2.1251,9510,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 769.113499][ T9510] (syz.2.1251,9510,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 769.998119][ T9525] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 779.778056][ T9573] (syz.1.1265,9573,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 779.786856][ T9573] (syz.1.1265,9573,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 780.028362][ T9581] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 780.416230][ T9585] binder: BINDER_SET_CONTEXT_MGR already set [ 780.422792][ T9585] binder: 9583:9585 ioctl 4018620d 200000004a80 returned -16 [ 782.978451][ T9596] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 783.452017][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 786.301885][ T9628] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 788.025576][ T9634] binder: BINDER_SET_CONTEXT_MGR already set [ 788.031964][ T9634] binder: 9631:9634 ioctl 4018620d 200000004a80 returned -16 [ 788.844691][ T9642] (syz.3.1281,9642,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 788.853678][ T9642] (syz.3.1281,9642,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 789.808446][ T9646] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 790.232383][ T9651] (syz.2.1284,9651,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 790.232489][ T9651] (syz.2.1284,9651,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 793.309009][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1285'. [ 795.504648][ T9680] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 799.046056][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 799.053297][ T9694] binder: 9691:9694 ioctl 4018620d 200000004a80 returned -16 [ 802.715856][ T9717] (syz.3.1300,9717,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 802.724847][ T9717] (syz.3.1300,9717,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 805.054958][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 808.266742][ T9742] (syz.5.1296,9742,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 808.275623][ T9742] (syz.5.1296,9742,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 808.349324][ T9743] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 808.917235][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.114104][ T9745] binder: 9744:9745 ioctl c0306201 0 returned -14 [ 809.255930][ T9749] binder: 9744:9749 ioctl c0306201 2000000004c0 returned -14 [ 812.516944][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 814.765503][ T9779] (syz.5.1313,9779,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 814.774456][ T9779] (syz.5.1313,9779,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 817.693643][ T9797] (syz.3.1318,9797,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 817.702469][ T9797] (syz.3.1318,9797,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 819.823257][ T9808] binder: 9807:9808 ioctl c0306201 0 returned -14 [ 819.859425][ T9809] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 819.935310][ T9810] binder: 9807:9810 ioctl c0306201 2000000004c0 returned -14 [ 820.571080][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1324'. [ 821.760688][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 823.020265][ T9832] (syz.6.1329,9832,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 823.029460][ T9832] (syz.6.1329,9832,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 824.165457][ T9843] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 824.457131][ T9845] (syz.6.1332,9845,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 824.466216][ T9845] (syz.6.1332,9845,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 828.011134][ T9861] binder: 9860:9861 ioctl c0306201 0 returned -14 [ 828.360468][ T9870] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 829.612169][ T9861] binder: 9860:9861 ioctl c0306201 2000000004c0 returned -14 [ 831.550216][ T9876] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1339'. [ 832.666200][ T4323] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 832.872542][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 832.879596][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.133226][ T4323] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 833.159531][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.374353][ T9894] (syz.6.1344,9894,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 833.383419][ T9894] (syz.6.1344,9894,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 833.829347][ T4323] usb 4-1: Product: syz [ 833.834834][ T4323] usb 4-1: Manufacturer: syz [ 833.839499][ T4323] usb 4-1: SerialNumber: syz [ 833.892770][ T4323] usb 4-1: config 0 descriptor?? [ 833.943941][ T4323] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 833.950152][ T4323] usb 4-1: selecting invalid altsetting 1 [ 834.115622][ T4323] gspca_stk014: init reg: 0x00 [ 834.120709][ T4323] stk014: probe of 4-1:0.0 failed with error -5 [ 835.077231][ T7] usb 4-1: USB disconnect, device number 14 [ 836.596829][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 839.760689][ T9930] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 840.235158][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 841.321831][ T9946] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 842.110388][ T9951] (syz.2.1357,9951,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 842.119190][ T9951] (syz.2.1357,9951,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 847.452540][ T9976] (syz.2.1362,9976,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 847.461364][ T9976] (syz.2.1362,9976,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 848.811056][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 848.960370][ T9981] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 849.705191][ T9981] device bond1 entered promiscuous mode [ 849.711470][ T9981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.161207][ T9985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.181483][ T9985] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 850.195179][ T9985] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 850.260278][ T9985] bond1: (slave wireguard0): making interface the new active one [ 850.268581][ T9985] device wireguard0 entered promiscuous mode [ 850.312784][ T9985] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 850.325213][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 850.641120][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1368'. [ 850.836840][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 850.880742][ T4609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.937777][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 850.946467][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.954406][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.962222][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 850.969562][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.016235][ T4609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.120301][T10006] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 851.944392][ T4609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.986215][ T4609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.313085][T10017] (syz.1.1370,10017,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 852.322824][T10017] (syz.1.1370,10017,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 853.490051][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 853.894958][ T4609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.917734][ T4609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.204486][ T4609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.641837][ T4609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.700701][T10003] chnl_net:caif_netlink_parms(): no params data found [ 855.599799][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 856.372178][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.386356][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.424469][T10003] device bridge_slave_0 entered promiscuous mode [ 856.476066][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 856.558674][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.634009][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.268096][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 858.323075][T10003] device bridge_slave_1 entered promiscuous mode [ 858.460769][T10003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.644700][T10003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.766134][T10003] team0: Port device team_slave_0 added [ 858.789874][T10003] team0: Port device team_slave_1 added [ 859.141001][T10062] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 859.197534][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'. [ 859.629273][T10003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.643669][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.674672][T10003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.201305][T10003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.210514][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.282261][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 860.361793][T10003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.499606][T10071] loop6: detected capacity change from 0 to 7 [ 861.602251][T10071] Dev loop6: unable to read RDB block 7 [ 861.610432][T10071] loop6: unable to read partition table [ 861.701987][T10080] (syz.2.1383,10080,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 861.710982][T10080] (syz.2.1383,10080,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 862.388100][T10071] loop6: partition table beyond EOD, truncated [ 862.481529][T10071] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 862.620958][T10003] device hsr_slave_0 entered promiscuous mode [ 862.674108][T10003] device hsr_slave_1 entered promiscuous mode [ 862.682123][T10003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.700027][T10003] Cannot create hsr debugfs directory [ 864.050822][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 864.101724][ T4323] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 864.304176][ T4323] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.321835][ T4323] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.370290][ T4323] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 864.409100][ T4323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.662659][ T4323] usb 7-1: usb_control_msg returned -32 [ 864.668461][ T4323] usbtmc 7-1:16.0: can't read capabilities [ 866.071885][ T4323] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 866.135440][T10003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 866.187434][T10003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 866.232593][T10003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 866.263428][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 866.273473][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.326835][T10003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 866.334023][ T4323] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 866.381921][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.418861][ T4323] usb 3-1: Product: syz [ 866.436973][ T4323] usb 3-1: Manufacturer: syz [ 866.459235][ T4323] usb 3-1: SerialNumber: syz [ 866.504691][ T4323] usb 3-1: config 0 descriptor?? [ 866.555309][ T4323] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 866.596446][ T4323] usb 3-1: selecting invalid altsetting 1 [ 866.737384][ T4323] gspca_stk014: init reg: 0x00 [ 866.743056][ T4323] stk014: probe of 3-1:0.0 failed with error -5 [ 866.942574][ T4323] usb 7-1: USB disconnect, device number 6 [ 867.713927][T10003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.130726][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 868.174805][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 870.287917][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.806928][T10003] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.053637][ T4609] device hsr_slave_0 left promiscuous mode [ 871.074361][ T4609] device hsr_slave_1 left promiscuous mode [ 871.240746][T10152] (syz.6.1394,10152,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 871.249716][T10152] (syz.6.1394,10152,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 871.872389][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.902589][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.925135][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.942625][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.978005][ T4609] device bridge_slave_1 left promiscuous mode [ 872.116019][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.163182][ T4609] device bridge_slave_0 left promiscuous mode [ 872.194762][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.115416][ T4609] device veth1_macvtap left promiscuous mode [ 873.125548][ T4609] device veth0_macvtap left promiscuous mode [ 873.160842][T10168] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 873.190163][ T4609] device veth1_vlan left promiscuous mode [ 873.224289][ T4609] device veth0_vlan left promiscuous mode [ 874.374799][ T4609] bond4 (unregistering): (slave wireguard2): Releasing backup interface [ 874.400100][ T4609] device wireguard2 left promiscuous mode [ 874.802241][ T4609] bond4 (unregistering): Released all slaves [ 874.853790][ T4609] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 874.871784][ T4609] device wireguard1 left promiscuous mode [ 875.147690][ T4609] bond3 (unregistering): Released all slaves [ 875.182219][ T4609] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 875.190669][ T4609] device wireguard0 left promiscuous mode [ 875.377146][ T4609] bond2 (unregistering): Released all slaves [ 875.510881][ T4609] bond1 (unregistering): Released all slaves [ 876.029565][ T4609] team0 (unregistering): Port device team_slave_1 removed [ 876.078663][ T4609] team0 (unregistering): Port device team_slave_0 removed [ 876.134474][ T4609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.185455][ T4609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.540557][ T4609] bond0 (unregistering): Released all slaves [ 876.663832][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 876.673027][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 876.685064][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.692370][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.708936][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 876.853222][ T4328] usb 3-1: USB disconnect, device number 14 [ 876.893983][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 876.922929][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 877.022511][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.029722][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.077332][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 877.113453][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 877.151294][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 877.187322][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 877.245359][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 877.264053][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 877.414770][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 877.451480][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 877.490692][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 877.505836][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 877.515988][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 877.542090][T10003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 878.696684][ T4328] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 879.632256][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.639831][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 879.685694][T10003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.034348][T10224] loop1: detected capacity change from 0 to 2048 [ 880.089762][ T4328] usb 3-1: device descriptor read/all, error -71 [ 880.110221][T10224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 881.604937][T10237] (syz.2.1407,10237,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 881.613982][T10237] (syz.2.1407,10237,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 882.491869][ T4319] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 882.682303][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 882.692256][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.758690][ T4319] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 882.813720][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.859059][ T4319] usb 3-1: Product: syz [ 882.869866][ T4319] usb 3-1: Manufacturer: syz [ 882.889504][ T4319] usb 3-1: SerialNumber: syz [ 882.930217][ T4319] usb 3-1: config 0 descriptor?? [ 882.976623][ T4319] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 883.051937][ T4319] usb 3-1: selecting invalid altsetting 1 [ 883.170114][ T4319] gspca_stk014: init reg: 0x00 [ 883.175222][ T4319] stk014: probe of 3-1:0.0 failed with error -5 [ 883.365352][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 883.412627][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 883.566292][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 883.597688][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 883.677812][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 883.710608][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 883.761237][T10003] device veth0_vlan entered promiscuous mode [ 883.823387][T10003] device veth1_vlan entered promiscuous mode [ 883.961815][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 883.986040][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 884.045631][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 884.097854][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 884.169577][T10003] device veth0_macvtap entered promiscuous mode [ 884.210456][T10003] device veth1_macvtap entered promiscuous mode [ 884.332833][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.389328][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.452585][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.514481][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.579959][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.643844][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.683957][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.724771][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.793561][T10003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.829108][T10260] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1410'. [ 884.851975][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 884.868492][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 884.923843][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 884.973311][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 885.039157][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.094763][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.126262][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.156597][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.288583][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.326835][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.362058][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.392199][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.431257][T10003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.471866][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 885.505702][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 885.548614][T10270] netlink: 'syz.6.1412': attribute type 1 has an invalid length. [ 889.127836][T10270] device bond1 entered promiscuous mode [ 889.145804][T10270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.353396][T10003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.375677][T10003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.421722][T10003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.430712][T10003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.719998][ T4328] usb 3-1: USB disconnect, device number 17 [ 893.319149][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.328312][T10303] overlayfs: missing 'lowerdir' [ 893.442967][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.682163][T10309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.692102][ T4328] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 894.287150][T10309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.299734][T10309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.496185][T10318] (syz.2.1418,10318,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 894.505086][T10318] (syz.2.1418,10318,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 895.018705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 898.574598][ T4319] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 898.582732][ T8932] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 898.711029][T10361] (syz.3.1429,10361,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 898.720034][T10361] (syz.3.1429,10361,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 899.653669][ T4319] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.904354][ T8932] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 900.259598][ T4319] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.273459][ T8932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.321718][ T4319] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 900.331981][ T8932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.377041][ T4319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.386489][ T8932] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 901.031103][ T8932] usb 7-1: string descriptor 0 read error: -71 [ 901.048800][ T4319] usb 8-1: can't set config #16, error -71 [ 901.071954][ T4319] usb 8-1: USB disconnect, device number 2 [ 901.091700][ T8932] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 901.100914][ T8932] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 901.872872][ T8932] usb 7-1: config 0 descriptor?? [ 901.916103][ T8932] usb 7-1: can't set config #0, error -71 [ 901.952829][ T8932] usb 7-1: USB disconnect, device number 7 [ 902.446400][T10386] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 903.382761][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1440'. [ 905.178592][T10386] device bond2 entered promiscuous mode [ 905.664314][T10386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.111878][ T4319] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 907.323561][ T4319] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.508899][ T4319] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.359351][ T4319] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.411693][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.695148][ T4319] usb 3-1: usb_control_msg returned -32 [ 908.705282][ T4319] usbtmc 3-1:16.0: can't read capabilities [ 909.297807][ T4319] usb 3-1: USB disconnect, device number 19 [ 911.760268][T10475] binder: 10472:10475 ioctl c0306201 2000000004c0 returned -14 [ 912.645277][T10478] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 918.179138][T10532] binder: 10529:10532 ioctl c0306201 2000000004c0 returned -14 [ 918.837048][T10535] netlink: 'syz.7.1468': attribute type 1 has an invalid length. [ 918.997267][T10535] device bond1 entered promiscuous mode [ 919.034080][T10535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.361812][ T4322] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 919.553922][ T4322] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 919.588603][ T4322] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.640739][ T4322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 919.707253][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.971868][ T4322] usb 4-1: usb_control_msg returned -32 [ 919.982457][ T4322] usbtmc 4-1:16.0: can't read capabilities [ 920.056812][ T4322] usb 4-1: USB disconnect, device number 15 [ 925.233526][T10583] binder: 10581:10583 ioctl c0306201 2000000004c0 returned -14 [ 926.203717][ T8932] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 926.391798][ T8932] usb 7-1: Using ep0 maxpacket: 8 [ 926.398595][ T8932] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.441787][ T8932] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 926.472957][ T8932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.508115][ T8932] usb 7-1: Product: syz [ 927.961687][ T8932] usb 7-1: Manufacturer: syz [ 927.966353][ T8932] usb 7-1: SerialNumber: syz [ 927.984084][ T8932] usb 7-1: config 0 descriptor?? [ 928.160885][ T8932] usb 7-1: can't set config #0, error -71 [ 928.173967][ T8932] usb 7-1: USB disconnect, device number 8 [ 928.606071][T10611] binder: 10610:10611 ioctl c0306201 2000000004c0 returned -14 [ 931.724622][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.661722][ T22] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 937.851851][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 937.859598][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.011357][ T22] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 938.077337][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.110837][T10674] binder: BINDER_SET_CONTEXT_MGR already set [ 938.122209][ T22] usb 7-1: Product: syz [ 938.141717][ T22] usb 7-1: Manufacturer: syz [ 938.146481][ T22] usb 7-1: SerialNumber: syz [ 938.151342][T10674] binder: 10671:10674 ioctl 4018620d 200000004a80 returned -16 [ 938.194811][T10679] binder: 10671:10679 ioctl c0306201 2000000004c0 returned -14 [ 938.300702][ T22] usb 7-1: config 0 descriptor?? [ 938.344849][ T22] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 938.425747][ T22] usb 7-1: selecting invalid altsetting 1 [ 938.712466][ T22] gspca_stk014: init reg: 0x00 [ 938.740771][ T22] stk014: probe of 7-1:0.0 failed with error -5 [ 939.776850][T10195] usb 7-1: USB disconnect, device number 9 [ 943.084696][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1507'. [ 943.231849][T10190] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 943.453644][T10190] usb 4-1: Using ep0 maxpacket: 8 [ 943.522206][T10190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.685369][T10190] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 943.761967][T10190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.770175][T10190] usb 4-1: Product: syz [ 943.807639][T10190] usb 4-1: Manufacturer: syz [ 944.083996][T10190] usb 4-1: SerialNumber: syz [ 944.111415][T10190] usb 4-1: config 0 descriptor?? [ 944.164595][T10190] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 944.170908][T10190] usb 4-1: selecting invalid altsetting 1 [ 944.363176][T10190] gspca_stk014: init reg: 0x00 [ 944.368192][T10190] stk014: probe of 4-1:0.0 failed with error -5 [ 944.382849][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1508'. [ 944.394928][T10718] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.403815][T10718] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.412667][T10718] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.421519][T10718] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.588082][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.596897][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.611444][ T4319] usb 4-1: USB disconnect, device number 16 [ 949.943821][T10756] netlink: 'syz.7.1515': attribute type 1 has an invalid length. [ 951.183302][T10756] device bond2 entered promiscuous mode [ 951.643977][T10756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 952.721679][ T4319] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 953.671722][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 953.682587][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.765555][ T4319] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 953.776775][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 953.826683][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.857027][ T4319] usb 4-1: Product: syz [ 953.876722][ T4319] usb 4-1: Manufacturer: syz [ 953.891732][ T4319] usb 4-1: SerialNumber: syz [ 953.978671][ T4319] usb 4-1: config 0 descriptor?? [ 954.102751][ T4319] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 954.118109][ T4319] usb 4-1: selecting invalid altsetting 1 [ 954.870116][ T4319] gspca_stk014: reg_r err -110 [ 954.875054][ T4319] stk014: probe of 4-1:0.0 failed with error -110 [ 956.539425][ T4319] usb 4-1: USB disconnect, device number 17 [ 957.331754][T10815] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 957.760921][T10818] (syz.7.1526,10818,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 957.769913][T10818] (syz.7.1526,10818,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 961.184709][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 962.182109][ T8932] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 962.851753][ T8932] usb 8-1: Using ep0 maxpacket: 8 [ 962.858786][ T8932] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.923000][ T8932] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 962.967294][ T8932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.131637][ T8932] usb 8-1: Product: syz [ 963.135874][ T8932] usb 8-1: Manufacturer: syz [ 963.210325][ T8932] usb 8-1: SerialNumber: syz [ 964.402590][ T8932] usb 8-1: config 0 descriptor?? [ 964.525000][ T8932] usb 8-1: can't set config #0, error -71 [ 964.559766][ T8932] usb 8-1: USB disconnect, device number 3 [ 966.962234][T10917] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 969.895023][T10938] binder: 10937:10938 ioctl c0306201 2000000004c0 returned -14 [ 972.589456][T10953] (syz.6.1550,10953,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 972.598625][T10953] (syz.6.1550,10953,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 975.505196][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 975.824964][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1558'. [ 975.834206][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1558'. [ 977.312930][T11001] binder: 11000:11001 ioctl c0306201 2000000004c0 returned -14 [ 977.959401][T11009] loop3: detected capacity change from 0 to 2048 [ 978.044225][T11009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.062062][ T8932] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 983.301782][ T8932] usb 3-1: Using ep0 maxpacket: 8 [ 983.310980][ T8932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.400633][ T8932] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 983.467941][ T8932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.521420][ T8932] usb 3-1: Product: syz [ 983.555806][ T8932] usb 3-1: Manufacturer: syz [ 983.594675][ T8932] usb 3-1: SerialNumber: syz [ 983.645779][ T8932] usb 3-1: config 0 descriptor?? [ 983.689078][ T8932] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 983.718146][ T8932] usb 3-1: selecting invalid altsetting 1 [ 983.877443][ T8932] gspca_stk014: init reg: 0x00 [ 983.882949][ T8932] stk014: probe of 3-1:0.0 failed with error -5 [ 984.084635][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.093397][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.108893][ T8932] usb 3-1: USB disconnect, device number 20 [ 984.366367][T11066] binder: 11065:11066 ioctl c0306201 2000000004c0 returned -14 [ 993.218887][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.301907][T10195] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 993.501724][T10195] usb 7-1: Using ep0 maxpacket: 8 [ 993.515917][T10195] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.769632][T10195] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 993.867430][T10195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.107665][T10195] usb 7-1: Product: syz [ 994.113293][T10195] usb 7-1: Manufacturer: syz [ 994.118019][T10195] usb 7-1: SerialNumber: syz [ 994.232153][T10195] usb 7-1: config 0 descriptor?? [ 994.240568][T10195] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 994.247624][T10195] usb 7-1: selecting invalid altsetting 1 [ 994.493434][T10195] gspca_stk014: init reg: 0x00 [ 994.498501][T10195] stk014: probe of 7-1:0.0 failed with error -5 [ 994.757635][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.766377][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.852399][ T7] usb 7-1: USB disconnect, device number 10 [ 996.937733][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1588'. [ 996.946848][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1588'. [ 999.730618][T11220] (syz.1.1601,11220,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 999.739546][T11220] (syz.1.1601,11220,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1004.611776][ T4328] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1005.317160][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 1005.326571][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1608'. [ 1005.338597][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 1006.087196][ T4328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.172763][ T4328] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1006.227369][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.282890][ T4328] usb 3-1: Product: syz [ 1006.287589][ T4328] usb 3-1: Manufacturer: syz [ 1006.354705][ T4328] usb 3-1: SerialNumber: syz [ 1006.390815][ T4328] usb 3-1: config 0 descriptor?? [ 1006.428301][ T4328] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1006.472294][ T4328] usb 3-1: selecting invalid altsetting 1 [ 1006.623779][ T4328] gspca_stk014: init reg: 0x00 [ 1006.628737][ T4328] stk014: probe of 3-1:0.0 failed with error -5 [ 1006.751768][ T4319] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1006.948227][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 1007.648397][ T4319] usb 4-1: no configurations [ 1007.653647][ T4319] usb 4-1: can't read configurations, error -22 [ 1007.677894][ T8932] usb 3-1: USB disconnect, device number 21 [ 1008.531886][ T4319] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1008.721695][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 1008.733126][ T4319] usb 4-1: no configurations [ 1008.748062][ T4319] usb 4-1: can't read configurations, error -22 [ 1008.765981][ T4319] usb usb4-port1: attempt power cycle [ 1009.349846][ T4319] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1009.423988][T11288] (syz.6.1615,11288,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1009.432993][T11288] (syz.6.1615,11288,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1010.152032][ T4319] usb 4-1: device descriptor read/8, error -71 [ 1014.095703][T11313] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1018.221742][ T4319] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1018.790872][T11341] (syz.6.1629,11341,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1018.799804][T11341] (syz.6.1629,11341,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1018.997383][ T4492] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1020.341736][ T4492] usb 2-1: Using ep0 maxpacket: 8 [ 1020.395099][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1020.404396][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1020.586913][ T4492] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.697547][ T4492] usb 2-1: config 0 has no interfaces? [ 1020.746741][ T4492] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1020.802649][ T4492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.810863][ T4492] usb 2-1: Product: syz [ 1020.856626][ T4492] usb 2-1: Manufacturer: syz [ 1020.861429][ T4492] usb 2-1: SerialNumber: syz [ 1020.907932][ T4492] usb 2-1: config 0 descriptor?? [ 1022.398402][ T4319] usb 2-1: USB disconnect, device number 19 [ 1022.675600][T11374] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1024.947513][ T4319] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1025.145037][ T4319] usb 7-1: Using ep0 maxpacket: 8 [ 1025.166052][ T4319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.414064][ T4319] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1025.466684][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.606202][ T4319] usb 7-1: Product: syz [ 1025.656880][ T4319] usb 7-1: Manufacturer: syz [ 1025.722116][ T4319] usb 7-1: SerialNumber: syz [ 1025.838359][ T4319] usb 7-1: config 0 descriptor?? [ 1026.066056][ T4319] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1026.173567][ T4319] usb 7-1: selecting invalid altsetting 1 [ 1026.257374][ T4319] gspca_stk014: init reg: 0x00 [ 1026.316503][ T4319] stk014: probe of 7-1:0.0 failed with error -5 [ 1028.010284][ T7] usb 7-1: USB disconnect, device number 12 [ 1029.535183][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 1029.544385][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1645'. [ 1031.691910][ T4492] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1031.891777][ T4492] usb 4-1: Using ep0 maxpacket: 8 [ 1031.903248][ T4492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.932810][ T4492] usb 4-1: config 0 has no interfaces? [ 1031.944687][ T4492] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1031.983768][ T4492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.011608][ T4492] usb 4-1: Product: syz [ 1032.016096][ T4492] usb 4-1: Manufacturer: syz [ 1032.020820][ T4492] usb 4-1: SerialNumber: syz [ 1032.066169][ T4492] usb 4-1: config 0 descriptor?? [ 1032.482935][T11452] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1035.531272][ T4319] usb 4-1: USB disconnect, device number 22 [ 1036.152655][T11477] (syz.3.1656,11477,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1036.161481][T11477] (syz.3.1656,11477,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1037.716782][ T7] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1037.911659][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1037.923131][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.064013][ T7] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1038.110463][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.171755][ T7] usb 3-1: Product: syz [ 1038.177039][ T7] usb 3-1: Manufacturer: syz [ 1038.198739][ T7] usb 3-1: SerialNumber: syz [ 1038.632446][ T7] usb 3-1: config 0 descriptor?? [ 1038.997071][ T7] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1039.011712][ T7] usb 3-1: selecting invalid altsetting 1 [ 1039.163661][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1039.173684][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1039.182408][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1039.191469][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1039.200138][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1039.282155][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1039.531806][ T7] gspca_stk014: reg_r err -110 [ 1040.310583][ T7] stk014: probe of 3-1:0.0 failed with error -110 [ 1041.042485][ T4492] usb 3-1: USB disconnect, device number 22 [ 1041.345380][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 1041.471513][T11515] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1043.222535][ T4465] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.235398][ T4465] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.402168][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 1044.159563][ T4465] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.231059][ T4465] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.568614][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 1047.155979][ T4465] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.185419][ T4465] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.241227][T11498] chnl_net:caif_netlink_parms(): no params data found [ 1047.436651][ T4465] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.451704][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1047.462369][ T4465] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.653209][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 1047.661980][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1047.683138][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.730439][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.750695][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.772718][ T7] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1047.799187][T11498] device bridge_slave_0 entered promiscuous mode [ 1047.809709][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.835977][T11565] (syz.2.1675,11565,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1047.844975][T11565] (syz.2.1675,11565,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1047.968656][ T7] usb 2-1: Product: syz [ 1048.086436][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.121210][ T7] usb 2-1: Manufacturer: syz [ 1048.154438][ T7] usb 2-1: SerialNumber: syz [ 1048.160694][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.248418][ T7] usb 2-1: config 0 descriptor?? [ 1048.296570][T11498] device bridge_slave_1 entered promiscuous mode [ 1048.701807][T10190] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1048.758731][ T7] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1048.877611][ T7] usb 2-1: selecting invalid altsetting 1 [ 1048.891793][T10190] usb 4-1: Using ep0 maxpacket: 8 [ 1048.908540][T10190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.943015][T10190] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1048.952527][T10190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.961456][T10190] usb 4-1: Product: syz [ 1048.978866][ T7] gspca_stk014: init reg: 0x00 [ 1048.986684][T10190] usb 4-1: Manufacturer: syz [ 1048.991443][T10190] usb 4-1: SerialNumber: syz [ 1049.081492][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.168932][T10190] usb 4-1: config 0 descriptor?? [ 1049.188495][T10190] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1049.195122][T10190] usb 4-1: selecting invalid altsetting 1 [ 1049.456661][T10190] gspca_stk014: init reg: 0x00 [ 1049.464290][T10190] stk014: probe of 4-1:0.0 failed with error -5 [ 1049.521073][ T7] stk014: probe of 2-1:0.0 failed with error -5 [ 1049.552174][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.802606][T11498] team0: Port device team_slave_0 added [ 1049.854265][T11498] team0: Port device team_slave_1 added [ 1051.811397][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.821287][ T4492] usb 4-1: USB disconnect, device number 23 [ 1051.821510][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.889282][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.231766][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.238779][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.269219][ T4323] usb 2-1: USB disconnect, device number 20 [ 1052.955162][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.056102][T11498] device hsr_slave_0 entered promiscuous mode [ 1053.107401][T11498] device hsr_slave_1 entered promiscuous mode [ 1053.351794][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.377655][T11498] Cannot create hsr debugfs directory [ 1054.605449][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.521899][T11498] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1056.549374][T11498] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1056.577004][T11498] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1056.601043][T11498] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1057.421718][T11570] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1058.112147][T11570] usb 2-1: Using ep0 maxpacket: 8 [ 1059.116273][T11570] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.315252][T11570] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1059.363842][T11570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.391746][T11570] usb 2-1: Product: syz [ 1059.401947][T11570] usb 2-1: Manufacturer: syz [ 1059.411861][T11570] usb 2-1: SerialNumber: syz [ 1059.437566][T11570] usb 2-1: config 0 descriptor?? [ 1059.573843][T11570] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1059.621677][T11570] usb 2-1: selecting invalid altsetting 1 [ 1059.721595][ C0] ------------[ cut here ]------------ [ 1059.727661][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1059.739112][ C0] WARNING: CPU: 0 PID: 15 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 1059.749127][ C0] Modules linked in: [ 1059.753116][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 1059.760457][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.770617][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1059.777139][ C0] Code: ef e8 88 b6 bd fd 4c 8b 45 00 48 c7 c7 80 16 df 8a 48 c7 c6 40 13 df 8a 48 c7 c2 e0 17 df 8a 8b 0c 24 4d 89 e9 e8 e4 1b 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 65 4a 0a [ 1059.796969][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 1059.803114][ C0] RAX: 3d617806926a0f00 RBX: ffffffff96e67b90 RCX: ffff88813fee3b80 [ 1059.811131][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1059.819183][ C0] RBP: ffffffff8a8dedc0 R08: ffffc90000147527 R09: 1ffff92000028ea4 [ 1059.827328][ C0] R10: dffffc0000000000 R11: fffff52000028ea5 R12: ffff888056917200 [ 1059.835371][ C0] R13: ffffffff892b51e0 R14: ffff888056917000 R15: ffff888056917090 [ 1059.843505][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1059.852525][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.859155][ C0] CR2: 00007fbaa57e7158 CR3: 0000000060340000 CR4: 00000000003506f0 [ 1059.867213][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1059.875267][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1059.883313][ C0] Call Trace: [ 1059.886648][ C0] [ 1059.889626][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1059.895170][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 1059.900337][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1059.905280][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 1059.910271][ C0] call_timer_fn+0x1ac/0x670 [ 1059.915028][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1059.920103][ C0] ? call_timer_fn+0xcf/0x670 [ 1059.924859][ C0] ? __run_timers+0x800/0x800 [ 1059.929607][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1059.934967][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.940234][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1059.945340][ C0] __run_timers+0x53e/0x800 [ 1059.949907][ C0] ? detach_timer+0x350/0x350 [ 1059.954668][ C0] ? lock_chain_count+0x20/0x20 [ 1059.959653][ C0] run_timer_softirq+0x63/0xf0 [ 1059.964490][ C0] handle_softirqs+0x2a1/0x930 [ 1059.969362][ C0] ? run_ksoftirqd+0xa4/0x100 [ 1059.974128][ C0] ? do_softirq+0x210/0x210 [ 1059.978682][ C0] run_ksoftirqd+0xa4/0x100 [ 1059.983261][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1059.988518][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1059.994045][ C0] ? takeover_tasklets+0x770/0x770 [ 1059.999221][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1060.004505][ C0] smpboot_thread_fn+0x64a/0xa40 [ 1060.009584][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 1060.014795][ C0] kthread+0x29d/0x330 [ 1060.018906][ C0] ? cpu_report_death+0x240/0x240 [ 1060.024018][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1060.028651][ C0] ret_from_fork+0x1f/0x30 [ 1060.033164][ C0] [ 1060.036229][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1060.043547][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 1060.050865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.060949][ C0] Call Trace: [ 1060.064264][ C0] [ 1060.067224][ C0] dump_stack_lvl+0x188/0x24e [ 1060.071978][ C0] ? memcpy+0x3c/0x60 [ 1060.076001][ C0] ? show_regs_print_info+0x12/0x12 [ 1060.081248][ C0] ? load_image+0x400/0x400 [ 1060.085815][ C0] panic+0x2e5/0x730 [ 1060.089749][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1060.094380][ C0] ? ret_from_fork+0x1f/0x30 [ 1060.099025][ C0] __warn+0x2f8/0x4f0 [ 1060.103062][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1060.108825][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1060.114607][ C0] report_bug+0x2ba/0x4f0 [ 1060.119228][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1060.124998][ C0] handle_bug+0x3a/0x70 [ 1060.129200][ C0] exc_invalid_op+0x16/0x40 [ 1060.133748][ C0] asm_exc_invalid_op+0x16/0x20 [ 1060.138698][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1060.145078][ C0] Code: ef e8 88 b6 bd fd 4c 8b 45 00 48 c7 c7 80 16 df 8a 48 c7 c6 40 13 df 8a 48 c7 c2 e0 17 df 8a 8b 0c 24 4d 89 e9 e8 e4 1b 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 65 4a 0a [ 1060.164717][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 1060.170831][ C0] RAX: 3d617806926a0f00 RBX: ffffffff96e67b90 RCX: ffff88813fee3b80 [ 1060.178838][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1060.186843][ C0] RBP: ffffffff8a8dedc0 R08: ffffc90000147527 R09: 1ffff92000028ea4 [ 1060.194852][ C0] R10: dffffc0000000000 R11: fffff52000028ea5 R12: ffff888056917200 [ 1060.202859][ C0] R13: ffffffff892b51e0 R14: ffff888056917000 R15: ffff888056917090 [ 1060.210870][ C0] ? rose_transmit_link+0x730/0x730 [ 1060.216175][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1060.221597][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 1060.226750][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1060.231672][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 1060.236662][ C0] call_timer_fn+0x1ac/0x670 [ 1060.241322][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1060.246384][ C0] ? call_timer_fn+0xcf/0x670 [ 1060.251097][ C0] ? __run_timers+0x800/0x800 [ 1060.255839][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1060.261076][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.266312][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1060.271382][ C0] __run_timers+0x53e/0x800 [ 1060.275941][ C0] ? detach_timer+0x350/0x350 [ 1060.280665][ C0] ? lock_chain_count+0x20/0x20 [ 1060.285581][ C0] run_timer_softirq+0x63/0xf0 [ 1060.290384][ C0] handle_softirqs+0x2a1/0x930 [ 1060.295376][ C0] ? run_ksoftirqd+0xa4/0x100 [ 1060.300098][ C0] ? do_softirq+0x210/0x210 [ 1060.304652][ C0] run_ksoftirqd+0xa4/0x100 [ 1060.309193][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1060.314430][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1060.319856][ C0] ? takeover_tasklets+0x770/0x770 [ 1060.325028][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1060.330275][ C0] smpboot_thread_fn+0x64a/0xa40 [ 1060.335269][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 1060.340354][ C0] kthread+0x29d/0x330 [ 1060.344500][ C0] ? cpu_report_death+0x240/0x240 [ 1060.349575][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1060.354210][ C0] ret_from_fork+0x1f/0x30 [ 1060.358709][ C0] [ 1060.362348][ C0] Kernel Offset: disabled [ 1060.366766][ C0] Rebooting in 86400 seconds..