last executing test programs: 40m7.548588497s ago: executing program 0 (id=1): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x4000040}}], 0x2, 0x0) gettid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) 39m51.218738118s ago: executing program 32 (id=1): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x4000040}}], 0x2, 0x0) gettid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) 38m30.752627796s ago: executing program 1 (id=159): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}], 0x3, 0xf000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 38m29.700914936s ago: executing program 1 (id=160): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) splice(r0, &(0x7f0000000400)=0x7, r0, &(0x7f0000000480)=0x86, 0x2, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f0000000280)) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0/file0/file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0x8000000000000000, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0xd5b, 0xf65]}) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 38m28.303738235s ago: executing program 1 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x65) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) 38m26.256104636s ago: executing program 1 (id=166): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 38m25.199191974s ago: executing program 1 (id=168): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x100000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010) 38m20.389677045s ago: executing program 1 (id=174): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 38m4.822436222s ago: executing program 33 (id=174): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 29m44.188489751s ago: executing program 2 (id=1055): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x102, 0xa, 0x0, 0x80, 0x2e}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) 29m33.173802921s ago: executing program 2 (id=1080): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x20000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x34, 0x63, 0x0, 0x0, 0x66, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa0006000000fe00", 0xfffffffe}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x13) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 29m32.018801053s ago: executing program 2 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690003050003a1cf3d000000000000000000000008000100020004"], 0x20}}, 0x0) 29m29.973541679s ago: executing program 2 (id=1092): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001100)={0x1, @sdr={0x50323234, 0x1000}}) 29m28.691586999s ago: executing program 2 (id=1097): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffb, 0x2) 29m25.40216043s ago: executing program 2 (id=1101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x340, 0x4) socket$kcm(0x29, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x2, 0x8, 0x3, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 29m8.949126712s ago: executing program 34 (id=1101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x340, 0x4) socket$kcm(0x29, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x2, 0x8, 0x3, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 20m37.332554746s ago: executing program 3 (id=2250): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3f", 0x5) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x40040) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 20m35.173061221s ago: executing program 3 (id=2255): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x6}, 0x8) fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) 20m32.253190705s ago: executing program 3 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = getpgrp(0xffffffffffffffff) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xffffffffffffff07, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xee32d754af7cb032}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 20m26.939079058s ago: executing program 3 (id=2275): openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc000894}, 0x24008800) 20m20.221252425s ago: executing program 3 (id=2288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="f9", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x52}, 0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0xc}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) keyctl$set_timeout(0xf, 0x0, 0x7ffe) preadv(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x40000004, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) 20m19.012784219s ago: executing program 3 (id=2291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000fec000/0x4000)=nil, 0x600c) shmdt(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, 0x0, r8, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0xe6, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x3ff, 0x2, 0x4, 0x100000, 0x8, {0x77359400}, {0x5, 0xc, 0x9, 0x10, 0x3, 0x7, "ae99fbb1"}, 0xfffffffc, 0x3, {&(0x7f0000000180)=[{0x3, 0x81, {0x1}, 0x9}, {0x8, 0x9, {}, 0xd}]}, 0x10001}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 20m3.893136488s ago: executing program 35 (id=2291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000fec000/0x4000)=nil, 0x600c) shmdt(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, 0x0, r8, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0xe6, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x3ff, 0x2, 0x4, 0x100000, 0x8, {0x77359400}, {0x5, 0xc, 0x9, 0x10, 0x3, 0x7, "ae99fbb1"}, 0xfffffffc, 0x3, {&(0x7f0000000180)=[{0x3, 0x81, {0x1}, 0x9}, {0x8, 0x9, {}, 0xd}]}, 0x10001}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 19m28.290897481s ago: executing program 4 (id=2404): r0 = socket(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r1}, 0x18) unshare(0x22020600) getcwd(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) sched_getattr(r5, &(0x7f0000000280)={0x38}, 0x38, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0xfffffffd, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x9, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x6a, 0x6, 0xb, 0x8, 0x400005, 0x5, 0x4, 0x10000, 0xfffffff8]}) 19m26.039550503s ago: executing program 4 (id=2408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000040)) 19m24.408237261s ago: executing program 4 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010100000000000000000500000a5c000000060a0904000000000000000002000000300004802c0001800900010068617368000000001c000280080002400000000f080007400000000108000440ffff00000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) 19m21.123073915s ago: executing program 4 (id=2414): bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r3, 0x541b, 0x0) 19m19.687782462s ago: executing program 4 (id=2416): r0 = socket(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r1}, 0x18) unshare(0x22020600) getcwd(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) sched_getattr(r5, &(0x7f0000000280)={0x38}, 0x38, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0xfffffffd, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x9, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x6a, 0x6, 0xb, 0x8, 0x400005, 0x5, 0x4, 0x10000, 0xfffffff8]}) 19m17.46798016s ago: executing program 4 (id=2419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = getpgrp(0xffffffffffffffff) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xffffffffffffff07, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xee32d754af7cb032}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 19m2.139750323s ago: executing program 36 (id=2419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = getpgrp(0xffffffffffffffff) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xffffffffffffff07, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xee32d754af7cb032}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1m17.283723067s ago: executing program 5 (id=7468): madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) r4 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r4, 0xcc8c8000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) 1m16.95970107s ago: executing program 5 (id=7470): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r2, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1m12.094291388s ago: executing program 5 (id=7482): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0xffffffffffffffaf, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000020000000000000000000000000000000200000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000000000000100000000000700000000000000b59cf201d017a097a56e887aed51590ca9581e4e06d6e6c2aa46cecab682e74b444c857d25795d5c4b01e32c12ca7ab9cfa7c8e1cf3178c8a023"]}, @name="04a057a5ee59c3b6b699d209aa58428576dec05f4bf9d7094323f75dd08dfadf67846aed94dffd4b9f3ecc44a09e6ff69a95f58750cca84b02138b65fec1585ccee9da3e394e2ce3b9a65e04bcf8b595a72b036e443f8034690778fac7555b6dc6dc49917cca26e3a73cc7ebfaab90541102c8edcf4f9ef0a3eba798ac4f4274dc5ca39b857687b46d6cb2584dfb402107cb31f43b98cfdd955e55086a1478e5e5ae28fb33ea24fa801e3d191738cc60b38a38841b1580094d9fa2e4dd3807377cac3c6f1aebc56a8210025ce289b1d49e4ef9fa325afaa2e721f06371b1407e6569e2f3fcca4ae9fbff44c104666a852c840626c806fed0e4bef6343aa7e5fbeafef9382bdbfa5e1dce6681ddeb76be20b0d9670c16c3e3e3e91de385bc10050c69b342513d5c45ff6fbde353f54de435231345fbcbb4240e0d19cf72e903a701b8869ac7466a37ec1ada4d9da7210e2f899bf574b7cf8d275e426ead110848c6f581f551543e4be39cdd360af133fe57d729f40ee59dbb770a22f9ee3511e97ad79ae06c627ab1510f86ae6af870b9714af9a426cdf34ba96eab73c07c4fa5c38459647741e460f7fec071da177d958105db0ee6abdd8826fd1e4ab62666eff2d1227ee406fc29557759368fb267c15b30e8734284fdf0abb33f163a20553a2d5ce5476653b495e470c0d7785712769f2a32b48a8e1a3c7cc50be6074dd5ba0e53475f4026edb46dd7c0c64cdb3f8a697379e68984e8a3b63b1c6c57c3ad2005ee7a90e9f461082f6867435de3195c06f096c50cccf62cedc7518c14cbbdee0707e1c63d4f7e9c9e9c7b663a0a01597686e59fa246b51d72e4ac639a8d9f25ae862f894e376d8626fa68ecc7ef967f278754ccee285e816edafaaec304d19b83c2c4bed30b303cf9434ec3985d2bab7e6f5eebad15ad7cc5dc748470c3553fa24b8933f352b1adf20873676c7612f7d0c6f29ea3f7754e676ff988c735854471cb9757d90c8f84c5eee819f5477a78f1bbbef2cd83f69f14fd0f0685d226441efecc6eeac9396a5c5e0b8c117a425c065e5120df353049f439792becf13cf825c826659fae889a5abade221fd4ae894546d76375c02f3b540fbb9dff5312bb37a6e293d14fef6ab4b998fff508984c6ffee8adeae496492920cbd8f49e617fc5e9e3939057b5f22c318955f37f50ea720d2eaacc3c1f625b95d0b50d1f05ec5870bf117b9da4d2ebd866894e104cbfd587ed3ba0121b517044deeda9d7f4a2e8dac9a60a4b6e5df12cbe4da310e806bf9608bf8a882f3e4a1213c1ad9b052c6304092631184d9997a029112b91d184c93e40fdeac2e0d90b3477207974bfd8ec51bc43f2e14358ea45a6037afb34dd1b9bbfa53c76c7068fe7e7d64e0631f5508c9b2b54483547ae9bab7afef68b978f18a3f23cdd15e2d908d1cb09611f05e060c2c862c4962747b4ab53436986befe00d70c117c37af977904954985c3a05a67c4bc6971ea84b3ae454b5067156eeb201a2518cf409a1df3cfd2204b43c5a854454f009e797bbaeaf84430071401a9f79e6e21aa9431b8371891a3c93a5f3eba6d6fd0baf08d3a1b5b1d914caa6f5fd157499563415b0e0845bd4dfc3151ad5017d730021a4bb9d7873bd1c233fb927ea0d67201775b2542b9d31961fef00ea05c450f0824cedac5794dcbaef57bb349a4ac6de635bf7e4304c49fcbb77f0af8c88f35584906d373203e100ff3e660401eaa6c5063b133e4f369084b96b79fdf5993b06db3c14adeab80347ab2af65af77484101c5fb23231f1c3d53362ee2194b9644ed8a07eb4c703d411b58f0ccd3fe65c0d713fd97413c7288c9adf8899557b019a001fc9e8092f9ddc4feb55b1959923f5f10fe81c3b4cb1e76ab346cb78f04ef52399df8287fe14d62a74923f975258531e76db53316e4356c0039c9cf5c3d1daa44efeb9759376551527fa5151ee22ffff6459cf6b95b71a308e2154265289984cdf514a6083bc6e548a04f96fe02bbc74b446b85b07cd93341f8e57612302e27f4a38dae98ac52694c71fd3d4b28822f6b8063ab7b876dd19b4eeb735a204a12b92198e4cd53d5eb8a8c07f83468a250a9b94bb161c91605b2dcc029e628f6daae54def2329779f152564da79fe31be0abfed35d9f591c3aa615b46fd5a9608e9b5c9b4d354aae0fd8ff6c2317365924c7963b626de9b200f445428816f1470330fd423d44b66ebca6c993493b9427e0a791e48657e1000eb94f41f744aedb75a7bf992d3db2c1a90e3b4c10aacbe2043513a5caf488436c6888aae5c1d7ea1b582f226087594ebb2bfe39a0db6dba545adc68f02ca2bd29f1ade66ad287541984a9f3e24209c28612f40330677ef8d91feae8e478288609aaf1f595e5fea03542062f64c9e083ee34ebf083e433dac259acdaa63f3b758cc88a2c6bac1be273bca59cbfc80cd41840fa1f42bcf0848b6dc729dea21a4f073d38dd1fd0656bbd9b6390d2ed328c4900455a6100592a6d36d39697c54bf878e160f7a9edaeeb40ae86c44dab6b0811b55a5f591b438f964e1aa09f12d416658fe2f835b34c8fa22b9a0a5ca17df9a5e7548660338241aab563e236a74d02047346a8ecdcec01daa1f26f90068c5bb2be1efeb93f85b0a070cbe2b94a7b06f7d7f15497a7eeb96c0c2060160735a49c5d345ba84b81aefd19f0705ed30f23fcb3b4949151f50ebc51f85dfaea0966bcde4dc640fd12e76418056ca7ad60806eba7fac923457d03176171368c5c58b2e53cdea6abb6a2f87a2f83a4548ff4d8427fdba4cc001dd1fb1454334dda58dc80b6ea04a4edb1bd8b8599c561a39b0dcfb553c856b55755280826e321a68ff98a88ccfdb228b2cb70107e8414ec665ce42e5bc6c912e811e11c4822f4418b444e9df9e42d270de56c1113140d4193ca35fa0cdba7a655549b7e7fe6df2e8c0a1f297db2d9e559d395b764c6b25b782ac82a87d6d89295df0fe935515cd203e545bc1ee47d0f8ccadd9754f0fe922c602c8738dd462a0144bfd0c181704f88adef744146bcd001380034783cdffba3698e19fbd72999385defb5c2eb51541ccc9c547fdcf2578d5b54d367eb5dbea17200b1f440beed8878e24b233aa5a6f0a8ea9078f565d165c05451ce107f10832f3b7fdb3ac41a58688b7c559c19f97bb7882619e96ba7b5637fc193570d79bce7e75f2d972d2a2f59f82ab3bde5fdcc0c2d1fe85a403632e943c6966e65aa072a9899d21b5dac2c06fbd316bb222d2b49ab93269a0a06cf1dacbec6ac16abaa47dce164a4a5eb5e39afc5dd0f94ca8327c9d7fe389abfef1c210e1c5a18842effddad0b7ab920912399cec493a9eb20182f2dc097ec6b39794c4952b1b60c5991fb5526bdbf6bb397b339ec2fb7bf1347c5c28cca917f13762669dab2bec1a5e1ac1f079c7b85ca33e1b0da3254af9601dec67fff1f5db3d3a42de92d60217463f106e33dabc275377a7bdc68541369dd53f09d884919f78f75a066c7d266067e27ffe9e364516836826a532e93d95a5902812a5fe2df0a39f7927242cd1c2936f2c17f2ef8bc837a73059141f793e57accb3c32d684b9070ea5ef53e93ee04a7b417d90bafcd495a5ab50d12cace6cfc5777408dc20094a6367f776b4b26f56dc98737f29a27d8ca31f0e204867f782b0ec6f6099267a8d9bf498b3eb33fd852dd2da054fdf205071457e13df0987db9889a9abd937bfc01440852e970104804368ae499bac47d2a85946c46f33150a82fe53943d4bd412fa8d64de9715b795941d2ae2470f6c3bee49650b9e13acbb51b19d1d171d5596ffb56879c9dccca5e2c56ad4891a52cb3cce97f35ff6406ca101feb504d389d42cedf7cdb0a808386649cddd3a24a5ea7603721e7076b13f5e26946a6c37589686b0aa7232a3732d862fe6843f91b2cf9ffba8dd396e9d8c58b62ae61868617e85deaf0ef00a915e63cc0f4721ae0c482bc0d899ae59486ef482d1d3eed158dadbc18d57c235dfda86c32a204a82a6920128c0b9164b6de7d93d370a3aa4f8b588bd557ef8e43576f8a2c5e1323b1c191047307713c7f4c0562c587f09b20eb48ddaab656e807b316435ab5e859bf82e7d45ac37506ab69f3976d14fe9079e229d94c4082f2ad893d998499df3f32f6f0f585e5e2b3f4734321300b38d45002f4bcf0e0693e103a995216848b0212f8f32ebfea2177bdd4f97becee89b3cb2e790d2f9b35424906021f36cd9acbf0c0407cbb0f348a2dc84958e1577f42c5c075113af9e0b8ad4cb014ea05b22c9db97b29353cfbd2b03901aee2ed7791acfed117d8d7edf51b4dc9cc7ea05a33fbbd92542a4345027a8679e6da594d8c02704a2322c55bf0ec02aedf32108180555c00180f4769558da6f029969294e3a25460b294ced8ad8dfdc14f030279502dca0e5e2d174f8363ce14235d59b66ec432abfff9b1ab5f3126f02d3bc137bdd48b360ddacd812545041a8d93e887e8fe65b9675bc61e9bfc09237acf5fbf167934141acb50d6f27ad887f48f9e2c46d80cb63a70b499228c574070d184f93ae957274cae3ee101bbc9b333fcc418070e143cfb71a96a31cfb21b846086995e20f5a40d69669e6692f125f7488aa2581d207916ca94708003770a1bf715c8660674a50b61f4eb2b746257c9e6cb878785fda4c1a0d1dac8ad1e55684c2b8f1cce60cbba971ed7520bd56de9a7deed82c14e8c61d1055dc59600eb06b4ae0b97dab9d0715519dcb714e1e51815d8e40719cdb70abf3261a0885619fe81da8bb0009c541b406865b276438933fd7488ff781617e94f1c27f8a959fad527cf74a73356feb98984973fe6107f2d3a7abe4d3b82375ed356f0df22ed604d3f9880a2521e884562ed2ac57a79ad06eb62fa0ea1c1bfe972aadf1a49da62b442a2c1ee0879113941e1e1186e91ba1608c2102a162234d2030516f8b4c21d1df9e52dd789f5f887cef6a0059bb34978995f2713304acef04dfc693bffc08aba8127b9d55f0e15fefcad5874f356a84a273ffa2878fb31a5fbcb330b561dc47e5e71dd9a80792c64bbc249889d969a4256d5df4a4b376deb55cc5110580de4a4a7429aee4301cb3761058f7b9def59dc6e23f0c1585fcb1b7b35c28a03c4f6df1dd80571b084e6fc47ab0521e99a04fcdbf97c38aee1b42cf32e6d7100401ff7d447a884ad0a7a323c941e927f2330c53e655b87177d8a217ee585833294ffa13dbc0b03a94b9a36a64cac7e862316f6efc47c2306b2d12d144b9aa8b33bc8a00954c327c8b02fed00b23e42e86e0db01e09018620a4690aeaed41223f5ebef5e7308ff4a55c301faf843a5bfcdf5fa0f671de1c3d435d544ddd92ac0ecf3e18d85875a05744658a5114fed41487b50a58bd6e91e2054896a385cfe4cc43d779df206ad38fa047efd4eccceec51951b1427678ebaebd74ae0e1604194ab91afad8f024004fef34d741e432e4118df53d3f59aaa80ebc2885dbe19592e2a80b50e2369a0745fd6b2d00665146ec6b9eddaa956f9b7f555687ce1263b2304ef251285b163a996a9c4b4bca8069567e29b7c6c1ca69d3296c4b478a69b4a36a39e57339fd3640f7fedf4b5b9c9a6527ad158a11c314d15056497917ed34d4901198d16b748ccf5ade11857a0e00fc3c7fb61492443b3dd0a97ef928bae79ce343258f92a034ed1f5de29f7"}) 1m10.228818083s ago: executing program 5 (id=7483): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x2ca998c3}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/11, 0xb}], 0x1}, 0x2}], 0x2, 0x40000021, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20010000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xe4, 0x7, 0x1, 0x0, "a0a17d9f57db74c7e9220888da512b5499ba93ec441141fd098d4f77bf0a881c572472a74189614630bdafa1bc0ff3af12de7b27beaea117930d9529f7aca6f1343ce65e8d127f0cf236125d8e419cec883b83b17043a0f05c2e531b062c878c48be38bda952e833938a81fc6fac16412d8ee7dc08e11da1bcb840224bf00d884f4852c51d081c79c6fcc3fde2fdd25e4ab8553efeec7109dbf8d5e5e3605c3aa74b7c14f17acf96df7a1c4b45388a4fcc761b7699486029dc7a8c646e6653c0bd63690b4aa1e2fe1ffcab25c2f3b52def9eeec8c9e46622e1db55e67c89d7f5"}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x260}}, 0x0) 1m8.671747348s ago: executing program 5 (id=7487): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, 0x0, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 1m8.385955906s ago: executing program 5 (id=7489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x1, 0x9, 0x3, &(0x7f0000000780)=[{}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x238, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20c, 0x2, [@TCA_U32_SEL={0x1f4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x2, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x401, 0xffffffff, 0x6, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0xfffffffe, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x7, 0x6, 0x5, 0x8001}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0x6, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}]}}]}, 0x238}}, 0x40040c5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4606, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 53.271250439s ago: executing program 37 (id=7489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x1, 0x9, 0x3, &(0x7f0000000780)=[{}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x238, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20c, 0x2, [@TCA_U32_SEL={0x1f4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x2, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x401, 0xffffffff, 0x6, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0xfffffffe, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x7, 0x6, 0x5, 0x8001}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0x6, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}]}}]}, 0x238}}, 0x40040c5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4606, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 15.529230596s ago: executing program 6 (id=7587): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044874}, 0x20004000) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58) 14.405308532s ago: executing program 7 (id=7590): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 14.346424023s ago: executing program 6 (id=7591): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x1000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x281}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) io_uring_enter(r0, 0x1f85, 0xa9ab, 0x4d, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f1"], 0x0) 14.277200238s ago: executing program 8 (id=7592): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffffff, 0x0, 0x210001, 0xe) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="59cf00000000040000000800000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 12.024361519s ago: executing program 8 (id=7595): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f1, 0x0, 0x1}]}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffffff}]}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000100)) 10.470389062s ago: executing program 8 (id=7597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000400000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r3, r3, 0x0, 0x40008) fchdir(0xffffffffffffffff) 10.375897618s ago: executing program 6 (id=7598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 10.151721469s ago: executing program 7 (id=7599): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="e8c5d4"], 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="4002000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="010001000400000000000000000000000000200037050000000000002b000000f90000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b080000000000000002000000000000000200000000d505391f6a33ba51014b0e1d240000000700000000000000590000000000000004000000ff0000000600000000000000000000000000000807000000000000000500000000000000ffffffffffffffff080000000000000008000000080000", @ANYRES32=r8, @ANYBLOB="ffffffff01000000000000000400000000000000e2000000000000000600000014"], 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r10, r10, r10) getresgid(&(0x7f00000013c0)=0x0, &(0x7f0000001400), &(0x7f0000001440)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001580)=0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x2000, &(0x7f0000001700)={&(0x7f0000000300)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x9, 0xffffffff8c008000, 0xaac, 0x0, 0x4, 0x7, 0x0, 0x0, 0x2, 0x91}}, &(0x7f0000000280)={0x18, 0x0, 0xffff, {0x8}}, &(0x7f0000000380)={0x18, 0x0, 0x50c4df00, {0x55}}, &(0x7f0000000480)={0x18, 0x0, 0x6, {0x7fff}}, &(0x7f00000004c0)={0x18, 0x0, 0x5, {0x2}}, &(0x7f0000000500)={0x28, 0x0, 0xfff, {{0x6, 0x9, 0x70981eaa7c8827aa}}}, &(0x7f0000000540)={0x60, 0x0, 0x40000, {{0xfffffffffffffff9, 0x9, 0x6, 0x81, 0x4, 0x9a, 0x7, 0x5}}}, &(0x7f0000000640)={0x18, 0x0, 0x5, {0x9}}, &(0x7f0000000680)={0x11, 0xfffffffffffffff5, 0x7ff, {'\x00'}}, &(0x7f00000006c0)={0x20, 0x0, 0x5}, &(0x7f00000007c0)={0x78, 0x0, 0x7, {0xfffffffffffffffd, 0x7, 0x0, {0x3, 0x81, 0x9, 0x800, 0x5, 0x8001, 0x9, 0xb48, 0x4, 0xdd93e840aa765a93, 0x7, 0x0, 0x0, 0x1, 0x3}}}, &(0x7f0000000a00)={0x90, 0x0, 0x81, {0x0, 0x3, 0x101, 0x8, 0x9, 0x800, {0x6, 0x1, 0x8, 0x8000, 0x8, 0x4521, 0x5, 0x10001, 0x7, 0x4000, 0xffffffff, 0x0, 0x0, 0x80000001, 0x1000}}}, &(0x7f0000000840)=ANY=[@ANYBLOB="50000000000000000000000000000000000000000000000007000000000000000400000002000000be2d5d40000000000000000000000000060000000000bdc57515000003000000060000002a8823000000000085f650fddd3acf13aa1245d47e2ed4ba8e07c8bfa68d13b9ce7d68340a79dbce285b7f5210aa107a4b2ba89d36bb447d8e064e7813bcd3320311f4a15306db78938fc08cef00c69d32280485b12861a13cf0b41b9c74a4365f577ed50ec1985b0ff887985c975b090e4a67c1834a5bd20e7cc5367e8ae3a42e2e863b38f4f161eb3f98f083"], &(0x7f0000001080)={0x330, 0x0, 0x7, [{{0x3, 0x2, 0x5, 0x6, 0x5f800000, 0x0, {0x6dc, 0x1, 0x1, 0x2, 0xa5, 0x1000, 0x9, 0x5, 0xa6, 0xc000, 0xffffffff, 0x0, 0x0, 0x15fb2d42}}, {0x0, 0x7, 0xd, 0x453, 'sched_switch\x00'}}, {{0x5, 0x0, 0x9, 0x0, 0x2, 0x6, {0x3, 0x9, 0x7a23240a, 0x1, 0x3, 0x4, 0xfffffffd, 0xe, 0x8, 0xa000, 0x4, r12, 0x0, 0x970, 0x3}}, {0x5, 0x5, 0x0, 0x3}}, {{0x5, 0x3, 0x6, 0xcba5a6b, 0x97, 0x71, {0x6, 0x2, 0x4, 0xd4, 0x1, 0xffffffff, 0xc0, 0x3, 0x9, 0x1000, 0xfff, 0xee00, 0x0, 0xfffffff7, 0x9b}}, {0x0, 0xfffffffffffffffa, 0xd, 0xf38, 'sched_switch\x00'}}, {{0x4, 0x2, 0x8, 0x3, 0xfffffffd, 0x4, {0x5, 0x7, 0x1ff, 0x8, 0xffffffff, 0x8, 0x9, 0xfffffffb, 0x5, 0xb000, 0x2}}, {0x2, 0x7, 0x1, 0x5, '\\'}}, {{0x0, 0x0, 0x100000001, 0x3400, 0x9, 0x8000, {0x5, 0x3, 0x1ffe000000, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0xb7, 0x200, 0xc000, 0xfffffeff, 0x0, r9, 0x200, 0xa}}, {0x2, 0x0, 0x0, 0x3}}]}, &(0x7f0000001480)={0xa0, 0x0, 0x689, {{0x3, 0x0, 0x7, 0x3, 0x2, 0x4, {0x1, 0x6, 0x5, 0x6, 0x9, 0x0, 0x469, 0x23b3d31f, 0x200, 0x4000, 0x2, r10, r11, 0xfffffff8, 0x7}}, {0x0, 0x8}}}, &(0x7f0000001540)={0x20, 0xffffffffffffffda, 0xd6, {0x8, 0x4, 0x1, 0x200}}, &(0x7f00000015c0)={0x130, 0x0, 0x0, {0x0, 0xb, 0x0, '\x00', {0x8, 0x1, 0x3, 0x0, r12, 0x0, 0x1000, '\x00', 0x4, 0x0, 0x3ff, 0xffffffffffffffff, {0x6, 0x84}, {0x1, 0x2}, {0x0, 0x6}, {0x8}, 0x48, 0x7fff, 0x0, 0xaba7}}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000062e1ba10b9100080fac00102030109021200010000c8587e00"], 0x0) 7.548199141s ago: executing program 9 (id=7602): mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) unshare(0x20400) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2c0000002c0b0000000000009da04f27e67eaa494856d8e361aa50bb6323", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048800) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 6.528945035s ago: executing program 9 (id=7603): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000d80)=""/185, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000640)=""/68, 0x35}, {&(0x7f00000004c0)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0xffffffffffffffa1}}], 0x400000000000222, 0x0, 0x0) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xfffffffc}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r5, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x154) 5.926464239s ago: executing program 7 (id=7604): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffffff, 0x0, 0x210001, 0xe) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="59cf00000000040000000800000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 5.781149458s ago: executing program 6 (id=7605): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0xffffffffffffffaf, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000020000000000000000000000000000000200000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000000000000100000000000700000000000000b59cf201d017a097a56e887aed51590ca9581e4e06d6e6c2aa46cecab682e74b444c857d25795d5c4b01e32c12ca7ab9cfa7c8e1cf3178c8a023"]}, @name="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"}) 4.991807548s ago: executing program 9 (id=7606): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f1, 0x0, 0x1}]}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffffff}]}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000100)) 3.93084502s ago: executing program 6 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="980300", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 3.756052062s ago: executing program 6 (id=7608): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.639199872s ago: executing program 7 (id=7609): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000d80)=""/185, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000640)=""/68, 0x35}, {&(0x7f00000004c0)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0xffffffffffffffa1}}], 0x400000000000222, 0x0, 0x0) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) write$6lowpan_control(r3, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r3}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xfffffffc}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r4, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) 3.448484689s ago: executing program 7 (id=7610): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044874}, 0x20004000) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58) 3.318212519s ago: executing program 9 (id=7611): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000d80)=""/185, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000640)=""/68, 0x35}, {&(0x7f00000004c0)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0xffffffffffffffa1}}], 0x400000000000222, 0x0, 0x0) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r4, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r4}, &(0x7f0000000340), 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xfffffffc}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 2.614210862s ago: executing program 8 (id=7612): mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) unshare(0x20400) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2c0000002c0b0000000000009da04f27e67eaa494856d8e361aa50bb6323", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048800) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 1.938418509s ago: executing program 9 (id=7613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) socket(0x10, 0x2, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000008500000000000000d43c870501120400", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000d4951b98f774364d9fce46fae13bf1c1144b2ae07f5ff54400de8a8d1b6c7a9ae9771e313d29402e164ccbebac69f98460365f5bead0f50ff20b7c7705d3cb85b2a44695cf0af0e21af6c57973a4e345b7e4ac745f3f0193c90ad94b3cae1edbee72d78f889949456c20c7beeff6dbd461448fa4b74a7bfbe6bec6cff7ce233b4cd80129576b38b84ef2b9d7e0401d97fae856a8ca5035fd432affa3e3d3f84c6953f92f7654018e13a20b54b3c5077cc5b161cbef625ea7eb77d307dbeeca3206d3f3", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0200000004000000030000000900"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r5 = fsmount(r2, 0x0, 0x88) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)="e96b6211448182f32aebe5e1a8cd91b3621a5c3eea88ce037f94230e879a7fa88085a25fa45dd9bb66d677e8f205b0ef9ef58453853d6fc1b5cffe929439157b2c16bbeb5c6bd049c625abd077608f22c6f4a6f428fa7771ea877bb3f07152cb74d382fbcf6293a09538c4a27ca90bba22c1d41cf0f728e8b015dd777b5856c54d73d4c2347519", 0x87, 0x1}) write$cgroup_int(r6, &(0x7f0000000000)=0x5, 0x12) 1.936243187s ago: executing program 7 (id=7614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.072854699s ago: executing program 8 (id=7615): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000d80)=""/185, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000640)=""/68, 0x35}, {&(0x7f00000004c0)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0xffffffffffffffa1}}], 0x400000000000222, 0x0, 0x0) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xfffffffc}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r5, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x154) 23.752864ms ago: executing program 9 (id=7616): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000d80)=""/185, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000640)=""/68, 0x35}, {&(0x7f00000004c0)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0xffffffffffffffa1}}], 0x400000000000222, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xfffffffc}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r4, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) 0s ago: executing program 8 (id=7617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="980300", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) kernel console output (not intermixed with test programs): change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2228.821504][T17526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.821528][T17526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.196019][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.196043][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2231.076663][T28707] input: syz0 as /devices/virtual/input/input121 [ 2231.238011][ T6019] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2231.387358][ T6019] usb 6-1: Using ep0 maxpacket: 16 [ 2231.389282][ T6019] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.389323][ T6019] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2231.389347][ T6019] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2231.389360][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.460508][ T6019] usb 6-1: config 0 descriptor?? [ 2231.479965][ T6019] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2232.001054][T26425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2232.035724][T26425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2232.080998][T26425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2232.094938][T26425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2232.104159][T26425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2233.947837][ T5812] usb 6-1: USB disconnect, device number 9 [ 2234.050755][T28745] netlink: 344 bytes leftover after parsing attributes in process `syz.6.6530'. [ 2234.170001][T28717] chnl_net:caif_netlink_parms(): no params data found [ 2234.197346][T26425] Bluetooth: hci5: command tx timeout [ 2234.222731][T23192] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 2234.403064][T23192] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2234.403170][T23192] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.403192][T23192] usb 8-1: Product: syz [ 2234.403207][T23192] usb 8-1: Manufacturer: syz [ 2234.403223][T23192] usb 8-1: SerialNumber: syz [ 2234.445208][ T6019] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 2234.663852][ T6019] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 2234.663905][ T6019] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.663917][ T6019] usb 6-1: config 0 has no interface number 0 [ 2234.663938][ T6019] usb 6-1: config 0 interface 205 has no altsetting 0 [ 2234.674141][T28739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.674542][T28739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2234.681875][T26425] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 2234.681956][T26425] Bluetooth: hci1: adv larger than maximum supported [ 2234.681973][T26425] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2234.760943][ T6019] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 2234.760962][ T6019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.760973][ T6019] usb 6-1: Product: syz [ 2234.760982][ T6019] usb 6-1: Manufacturer: syz [ 2234.760990][ T6019] usb 6-1: SerialNumber: syz [ 2234.765621][ T6019] usb 6-1: config 0 descriptor?? [ 2234.835573][ T6019] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 2234.835635][ T6019] dvb-usb: bulk message failed: -22 (3/0) [ 2234.904223][ T6019] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2234.935723][ T6019] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 2234.935789][ T6019] usb 6-1: media controller created [ 2234.991089][ T6019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2235.040897][T23192] rtl8150 8-1:1.0: couldn't reset the device [ 2235.041272][T23192] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 2235.104251][T23192] usb 8-1: USB disconnect, device number 110 [ 2235.118936][ T6019] dvb-usb: bulk message failed: -22 (6/0) [ 2235.119061][ T6019] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 2235.276964][ T6019] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input122 [ 2235.440480][ T6019] dvb-usb: schedule remote query interval to 150 msecs. [ 2235.440716][ T6019] dvb-usb: bulk message failed: -22 (3/0) [ 2235.457605][ T6019] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 2235.602371][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2235.603644][T23192] dvb-usb: error while querying for an remote control event. [ 2236.023517][T28717] bridge0: port 1(bridge_slave_0) entered blocking state [ 2236.023651][T28717] bridge0: port 1(bridge_slave_0) entered disabled state [ 2236.023861][T28717] bridge_slave_0: entered allmulticast mode [ 2236.070821][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2236.070857][T23192] dvb-usb: error while querying for an remote control event. [ 2236.073344][T28717] bridge_slave_0: entered promiscuous mode [ 2236.116328][T28717] bridge0: port 2(bridge_slave_1) entered blocking state [ 2236.116453][T28717] bridge0: port 2(bridge_slave_1) entered disabled state [ 2236.116630][T28717] bridge_slave_1: entered allmulticast mode [ 2236.231050][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2236.231084][ T6019] dvb-usb: error while querying for an remote control event. [ 2236.234118][T28717] bridge_slave_1: entered promiscuous mode [ 2236.277756][T26425] Bluetooth: hci5: command tx timeout [ 2236.387509][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2236.387544][T23192] dvb-usb: error while querying for an remote control event. [ 2236.547758][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2236.547792][T23192] dvb-usb: error while querying for an remote control event. [ 2236.707480][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2236.707514][T23192] dvb-usb: error while querying for an remote control event. [ 2237.474976][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2237.475009][T23192] dvb-usb: error while querying for an remote control event. [ 2237.544391][T28777] netlink: 344 bytes leftover after parsing attributes in process `syz.6.6540'. [ 2237.627706][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2237.627738][ T6019] dvb-usb: error while querying for an remote control event. [ 2237.787739][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2237.787770][ T6019] dvb-usb: error while querying for an remote control event. [ 2237.890672][T28784] syz_tun: entered allmulticast mode [ 2237.915133][T28717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2237.947833][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2237.947866][ T6019] dvb-usb: error while querying for an remote control event. [ 2237.993279][T28788] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6542'. [ 2237.996493][T28717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2238.109263][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2238.109285][ T6019] dvb-usb: error while querying for an remote control event. [ 2238.271627][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2238.271649][ T6019] dvb-usb: error while querying for an remote control event. [ 2238.357564][T26425] Bluetooth: hci5: command tx timeout [ 2238.427580][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 2238.427602][ T6019] dvb-usb: error while querying for an remote control event. [ 2238.475272][T28717] team0: Port device team_slave_0 added [ 2238.493724][T28717] team0: Port device team_slave_1 added [ 2238.587600][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2238.587622][T23192] dvb-usb: error while querying for an remote control event. [ 2238.648094][T28782] syz_tun: left allmulticast mode [ 2238.747695][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2238.747729][T23192] dvb-usb: error while querying for an remote control event. [ 2238.907652][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2238.907674][T23192] dvb-usb: error while querying for an remote control event. [ 2238.914598][T28717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2238.914610][T28717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2238.914625][T28717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2239.006112][T28717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2239.006126][T28717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2239.006142][T28717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2239.067652][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2239.067687][T23192] dvb-usb: error while querying for an remote control event. [ 2239.227696][T23192] dvb-usb: bulk message failed: -22 (1/0) [ 2239.227736][T23192] dvb-usb: error while querying for an remote control event. [ 2239.322840][ T5886] usb 6-1: USB disconnect, device number 10 [ 2239.590870][ T5886] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 2239.641970][T28717] hsr_slave_0: entered promiscuous mode [ 2239.690700][T28717] hsr_slave_1: entered promiscuous mode [ 2239.691356][T28717] debugfs: 'hsr0' already exists in 'hsr' [ 2239.691373][T28717] Cannot create hsr debugfs directory [ 2239.938918][T28797] netlink: 'syz.5.6546': attribute type 1 has an invalid length. [ 2240.437333][T26425] Bluetooth: hci5: command tx timeout [ 2241.460646][T28813] netlink: 344 bytes leftover after parsing attributes in process `syz.9.6551'. [ 2241.917330][T11611] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2242.237745][T11611] usb 7-1: Using ep0 maxpacket: 32 [ 2242.277934][T28831] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6556'. [ 2242.379737][T28717] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.614336][T11611] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.714513][T11611] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 2242.714533][T11611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.714544][T11611] usb 7-1: Product: syz [ 2242.714552][T11611] usb 7-1: Manufacturer: syz [ 2242.714560][T11611] usb 7-1: SerialNumber: syz [ 2242.720907][T11611] usb 7-1: config 0 descriptor?? [ 2242.906934][T11611] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench found [ 2242.906951][T11611] usb 7-1: selecting invalid altsetting 1 [ 2242.906961][T11611] snd_usb_variax 7-1:0.0: set_interface failed [ 2242.907129][T11611] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench now disconnected [ 2242.909892][T11611] snd_usb_variax 7-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 2243.255812][T28717] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.610687][T28717] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.030887][T28850] netlink: 344 bytes leftover after parsing attributes in process `syz.9.6562'. [ 2246.084236][T28717] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.704347][T11611] usb 7-1: USB disconnect, device number 119 [ 2246.734543][T28857] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6563'. [ 2247.188329][T28717] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2248.188560][T28871] program syz.6.6568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2248.236607][T28717] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2248.498309][T28717] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2248.597467][T21155] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2248.704287][T28717] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2248.837337][T21155] usb 7-1: Using ep0 maxpacket: 8 [ 2248.905005][T21155] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.905033][T21155] usb 7-1: config 0 has no interfaces? [ 2248.905064][T21155] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2248.905089][T21155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.959145][T21155] usb 7-1: config 0 descriptor?? [ 2249.027501][T28882] netlink: 344 bytes leftover after parsing attributes in process `syz.5.6572'. [ 2249.267353][T26185] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2249.274489][T28717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2249.313221][T28717] 8021q: adding VLAN 0 to HW filter on device team0 [ 2249.332033][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.332112][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2249.353483][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.353601][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2249.417348][T26185] usb 10-1: Using ep0 maxpacket: 8 [ 2249.419895][T26185] usb 10-1: config 0 has an invalid interface number: 122 but max is 0 [ 2249.419912][T26185] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.419923][T26185] usb 10-1: config 0 has no interface number 0 [ 2249.419953][T26185] usb 10-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2249.419975][T26185] usb 10-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 2249.419988][T26185] usb 10-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 2249.731660][T26185] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 2249.731679][T26185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.731691][T26185] usb 10-1: Product: syz [ 2249.731699][T26185] usb 10-1: Manufacturer: syz [ 2249.731708][T26185] usb 10-1: SerialNumber: syz [ 2249.770055][T26185] usb 10-1: config 0 descriptor?? [ 2249.771685][T28883] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2252.304885][T28717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2252.927596][T26185] usb 10-1: NFC: intf ffff8880ad950000 id ffffffff8deca2c0 [ 2252.993250][T26185] usb 10-1: USB disconnect, device number 69 [ 2254.170610][T28717] veth0_vlan: entered promiscuous mode [ 2254.195412][T26185] usb 7-1: USB disconnect, device number 120 [ 2254.233755][T28717] veth1_vlan: entered promiscuous mode [ 2254.316724][T28717] veth0_macvtap: entered promiscuous mode [ 2254.341169][T28717] veth1_macvtap: entered promiscuous mode [ 2254.347782][T21155] usb 8-1: new full-speed USB device number 111 using dummy_hcd [ 2254.400406][T28717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2254.423082][T28717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2254.488762][ T1151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.488798][ T1151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.488818][ T1151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.488837][ T1151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.538676][T21155] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2254.538703][T21155] usb 8-1: config 0 has no interface number 0 [ 2254.538752][T21155] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2254.538776][T21155] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.550498][T21155] usb 8-1: config 0 descriptor?? [ 2254.557353][T15819] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2254.610383][T21155] usb 8-1: selecting invalid altsetting 1 [ 2254.616138][T21155] dvb_ttusb_budget: ttusb_init_controller: error [ 2254.616156][T21155] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2254.757509][T15819] usb 10-1: Using ep0 maxpacket: 8 [ 2254.773997][T15819] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.774014][T15819] usb 10-1: config 0 has no interfaces? [ 2254.775752][T15819] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.775776][T15819] usb 10-1: config 0 has no interfaces? [ 2254.837958][T15819] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.837977][T15819] usb 10-1: config 0 has no interfaces? [ 2254.849012][T15819] usb 10-1: string descriptor 0 read error: -22 [ 2254.849163][T15819] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2254.849187][T15819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.880213][T28932] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6582'. [ 2254.889639][T15819] usb 10-1: config 0 descriptor?? [ 2254.965577][T21155] DVB: Unable to find symbol cx22700_attach() [ 2255.267618][T21155] DVB: Unable to find symbol tda10046_attach() [ 2255.267635][T21155] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2255.277914][T21155] usb 8-1: USB disconnect, device number 111 [ 2255.475971][T28927] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2255.475990][T28927] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2255.680359][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.680381][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2255.984272][T17078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.984288][T17078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.041973][ T5886] usb 10-1: USB disconnect, device number 70 [ 2256.257561][T28947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6584'. [ 2257.702278][T28961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6588'. [ 2259.153030][T28980] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6594'. [ 2259.327362][ T6019] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 2259.501574][ T6019] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2259.501640][ T6019] usb 6-1: config 0 has no interface number 0 [ 2259.501679][ T6019] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2259.501692][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.504858][ T6019] usb 6-1: config 0 descriptor?? [ 2259.593712][ T6019] usb 6-1: selecting invalid altsetting 1 [ 2259.596689][ T6019] dvb_ttusb_budget: ttusb_init_controller: error [ 2259.596708][ T6019] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2259.795644][T28989] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6596'. [ 2259.869431][ T6019] DVB: Unable to find symbol cx22700_attach() [ 2260.079218][ T6019] DVB: Unable to find symbol tda10046_attach() [ 2260.079230][ T6019] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2260.084955][ T6019] usb 6-1: USB disconnect, device number 11 [ 2260.287986][T28999] netlink: 'syz.6.6598': attribute type 12 has an invalid length. [ 2260.817374][T20378] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2260.987435][T20378] usb 6-1: Using ep0 maxpacket: 8 [ 2260.991415][T20378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.991431][T20378] usb 6-1: config 0 has no interfaces? [ 2260.992382][T20378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.992396][T20378] usb 6-1: config 0 has no interfaces? [ 2260.993303][T20378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.993320][T20378] usb 6-1: config 0 has no interfaces? [ 2261.029294][T20378] usb 6-1: string descriptor 0 read error: -22 [ 2261.029432][T20378] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2261.029457][T20378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.114360][T20378] usb 6-1: config 0 descriptor?? [ 2261.405434][T29004] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2261.405490][T29004] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2262.735212][ T5979] usb 6-1: USB disconnect, device number 12 [ 2263.066329][T29021] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6606'. [ 2263.170836][T29022] binder: 29018:29022 ioctl c0306201 0 returned -14 [ 2263.597148][T29037] kAFS: unable to lookup cell 'ÿ' [ 2263.599901][T29037] kAFS: unable to lookup cell '(,c¾Ì' [ 2263.737337][T20378] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 2263.789994][T29039] binder: BINDER_SET_CONTEXT_MGR already set [ 2263.790011][T29039] binder: 29038:29039 ioctl 4018620d 200000004a80 returned -16 [ 2263.909457][T20378] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2263.909475][T20378] usb 10-1: config 0 has no interface number 0 [ 2263.909504][T20378] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2263.909517][T20378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.913653][T20378] usb 10-1: config 0 descriptor?? [ 2263.957951][T20378] usb 10-1: selecting invalid altsetting 1 [ 2263.958520][T20378] dvb_ttusb_budget: ttusb_init_controller: error [ 2263.958537][T20378] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2264.339891][T20378] DVB: Unable to find symbol cx22700_attach() [ 2265.310056][T20378] DVB: Unable to find symbol tda10046_attach() [ 2265.310073][T20378] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2265.545341][T20378] usb 10-1: USB disconnect, device number 71 [ 2265.680849][T29058] netlink: 'syz.5.6617': attribute type 12 has an invalid length. [ 2266.321420][T29061] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6618'. [ 2268.128217][T29105] netlink: 344 bytes leftover after parsing attributes in process `syz.8.6638'. [ 2268.667830][T11358] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2268.843343][T11358] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2268.843374][T11358] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.843395][T11358] usb 10-1: Product: syz [ 2268.843410][T11358] usb 10-1: Manufacturer: syz [ 2268.843426][T11358] usb 10-1: SerialNumber: syz [ 2269.216921][T29117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.222935][T29117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2269.226368][T26425] Bluetooth: hci4: unknown advertising packet type: 0xff [ 2269.226438][T26425] Bluetooth: hci4: unknown advertising packet type: 0xfa [ 2269.226460][T26425] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 2269.226474][T26425] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 2269.226490][T26425] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2269.452489][T11358] rtl8150 10-1:1.0: couldn't reset the device [ 2269.452724][T11358] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 2269.497970][T11358] usb 10-1: USB disconnect, device number 72 [ 2269.595785][T29138] netlink: 344 bytes leftover after parsing attributes in process `syz.5.6652'. [ 2270.167743][T11358] usb 10-1: new full-speed USB device number 73 using dummy_hcd [ 2270.341705][T11358] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2270.341737][T11358] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.341754][T11358] usb 10-1: Product: syz [ 2270.341762][T11358] usb 10-1: Manufacturer: syz [ 2270.341770][T11358] usb 10-1: SerialNumber: syz [ 2270.350843][T11358] usb 10-1: config 0 descriptor?? [ 2270.362459][T11358] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2270.747974][ T5979] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2270.881150][T11358] gspca_stk1135: reg_w 0x2 err -110 [ 2270.882233][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882241][T11358] gspca_stk1135: Sensor write failed [ 2270.882256][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882262][T11358] gspca_stk1135: Sensor write failed [ 2270.882277][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882282][T11358] gspca_stk1135: Sensor read failed [ 2270.882297][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882303][T11358] gspca_stk1135: Sensor read failed [ 2270.882306][T11358] gspca_stk1135: Detected sensor type unknown (0x0) [ 2270.882411][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882418][T11358] gspca_stk1135: Sensor read failed [ 2270.882434][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882439][T11358] gspca_stk1135: Sensor read failed [ 2270.882454][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882459][T11358] gspca_stk1135: Sensor write failed [ 2270.882474][T11358] gspca_stk1135: serial bus timeout: status=0x00 [ 2270.882480][T11358] gspca_stk1135: Sensor write failed [ 2270.882537][T11358] stk1135 10-1:0.0: probe with driver stk1135 failed with error -110 [ 2271.029130][ T5979] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2271.029149][ T5979] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2271.029160][ T5979] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2271.029189][ T5979] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2271.100482][ T5979] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2271.100502][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2271.100514][ T5979] usb 6-1: Product: syz [ 2271.100522][ T5979] usb 6-1: Manufacturer: syz [ 2271.153925][ T5979] cdc_wdm 6-1:1.0: skipping garbage [ 2271.153938][ T5979] cdc_wdm 6-1:1.0: skipping garbage [ 2271.153958][ T5979] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2271.392157][T11358] usb 6-1: USB disconnect, device number 13 [ 2271.517553][ T5979] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2271.676758][ T5979] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2271.676787][ T5979] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2271.676826][ T5979] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2271.676849][ T5979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.807927][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6658'. [ 2271.838703][T29197] hsr_slave_0: left promiscuous mode [ 2271.880732][T29197] hsr_slave_1: left promiscuous mode [ 2271.987486][T11358] usb 9-1: USB disconnect, device number 65 [ 2273.548977][T29238] binder: 29237:29238 ioctl c0306201 0 returned -14 [ 2273.657982][ T5927] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2273.823836][ T5927] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2273.823867][ T5927] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2273.823888][ T5927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2273.823926][ T5927] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2273.825682][ T5927] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2273.825709][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2273.825731][ T5927] usb 6-1: Product: syz [ 2273.825746][ T5927] usb 6-1: Manufacturer: syz [ 2273.908131][ T5927] cdc_wdm 6-1:1.0: skipping garbage [ 2273.908145][ T5927] cdc_wdm 6-1:1.0: skipping garbage [ 2273.908166][ T5927] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2274.087841][T23192] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2274.114231][ T5927] usb 6-1: USB disconnect, device number 14 [ 2274.261382][T23192] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2274.261403][T23192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.261415][T23192] usb 7-1: Product: syz [ 2274.261423][T23192] usb 7-1: Manufacturer: syz [ 2274.261431][T23192] usb 7-1: SerialNumber: syz [ 2274.340677][ T5927] usb 10-1: USB disconnect, device number 73 [ 2274.559388][T29248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.578344][T29248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.578912][T26425] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2274.578926][T26425] Bluetooth: hci2: unknown advertising packet type: 0xfa [ 2274.578934][T26425] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 2274.578941][T26425] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 2274.578950][T26425] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2274.756789][T23192] rtl8150 7-1:1.0: couldn't reset the device [ 2274.757001][T23192] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 2274.814244][T23192] usb 7-1: USB disconnect, device number 121 [ 2274.994912][T29274] netlink: 892 bytes leftover after parsing attributes in process `syz.5.6710'. [ 2275.069975][T29276] syz_tun: entered allmulticast mode [ 2275.168303][T29275] syz_tun: left allmulticast mode [ 2276.177434][ T43] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2276.333097][ T43] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2276.333129][ T43] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2276.333149][ T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2276.333208][ T43] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2276.338659][ T43] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2276.338690][ T43] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2276.338711][ T43] usb 10-1: Product: syz [ 2276.338725][ T43] usb 10-1: Manufacturer: syz [ 2276.411686][ T43] cdc_wdm 10-1:1.0: skipping garbage [ 2276.411708][ T43] cdc_wdm 10-1:1.0: skipping garbage [ 2276.411743][ T43] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2276.582148][ T43] usb 10-1: USB disconnect, device number 74 [ 2276.604461][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6729'. [ 2276.717535][T11611] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2276.717935][T20378] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2276.891096][T11611] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2276.891124][T11611] usb 6-1: config 0 has no interface number 0 [ 2276.891173][T11611] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2276.891199][T11611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.897339][T20378] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2276.897368][T20378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.897388][T20378] usb 7-1: Product: syz [ 2276.897403][T20378] usb 7-1: Manufacturer: syz [ 2276.897418][T20378] usb 7-1: SerialNumber: syz [ 2276.962904][T11611] usb 6-1: config 0 descriptor?? [ 2276.977093][T11611] usb 6-1: selecting invalid altsetting 1 [ 2276.991280][T11611] dvb_ttusb_budget: ttusb_init_controller: error [ 2276.991354][T11611] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2277.165317][T11611] DVB: Unable to find symbol cx22700_attach() [ 2277.237987][T29310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2277.239335][T29310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.242296][T26425] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2277.242317][T26425] Bluetooth: hci2: unknown advertising packet type: 0xfa [ 2277.242332][T26425] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 2277.242346][T26425] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 2277.242362][T26425] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2277.303085][T11611] DVB: Unable to find symbol tda10046_attach() [ 2277.303108][T11611] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2277.373990][T20378] rtl8150 7-1:1.0: couldn't reset the device [ 2277.374329][T20378] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 2277.408686][T20378] usb 7-1: USB disconnect, device number 122 [ 2277.496353][ T43] usb 6-1: USB disconnect, device number 15 [ 2277.504158][T29350] syz_tun: entered promiscuous mode [ 2277.550446][T29350] team0: Port device syz_tun added [ 2277.641128][T29352] team0: Port device syz_tun removed [ 2277.670949][T29352] bridge_slave_0: left allmulticast mode [ 2277.670978][T29352] bridge_slave_0: left promiscuous mode [ 2277.671238][T29352] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.753379][T29352] bridge_slave_1: left allmulticast mode [ 2277.753410][T29352] bridge_slave_1: left promiscuous mode [ 2277.753730][T29352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.897888][T29352] bond0: (slave bond_slave_0): Releasing backup interface [ 2278.001630][T29352] bond0: (slave bond_slave_1): Releasing backup interface [ 2278.174682][T29352] team0: Port device team_slave_0 removed [ 2278.301129][T29352] team0: Port device team_slave_1 removed [ 2278.314731][T29352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2278.314759][T29352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2278.346580][T29352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2278.346607][T29352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2279.056916][ T37] audit: type=1326 audit(1766974915.045:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2279.058725][ T37] audit: type=1326 audit(1766974915.055:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2279.059063][ T37] audit: type=1326 audit(1766974915.055:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2279.072335][ T37] audit: type=1326 audit(1766974915.055:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2279.072468][ T37] audit: type=1326 audit(1766974915.065:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2279.072831][ T37] audit: type=1326 audit(1766974915.065:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccc37e1667 code=0x7ffc0000 [ 2279.083159][ T37] audit: type=1326 audit(1766974915.075:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccc37e15dc code=0x7ffc0000 [ 2279.083864][ T37] audit: type=1326 audit(1766974915.075:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccc37e1514 code=0x7ffc0000 [ 2279.131759][ T37] audit: type=1326 audit(1766974915.105:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccc37e1514 code=0x7ffc0000 [ 2279.177681][ T37] audit: type=1326 audit(1766974915.175:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29387 comm="syz.9.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccc37de3aa code=0x7ffc0000 [ 2279.916001][ T6019] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2280.080268][ T6019] usb 10-1: Using ep0 maxpacket: 32 [ 2280.099603][ T6019] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.099625][ T6019] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2280.099648][ T6019] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2280.099662][ T6019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.171956][ T6019] usb 10-1: config 0 descriptor?? [ 2283.097329][T21155] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2283.283100][T21155] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2283.283132][T21155] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2283.283153][T21155] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2283.283255][T21155] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2283.405036][T21155] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2283.405069][T21155] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2283.405089][T21155] usb 9-1: Product: syz [ 2283.405103][T21155] usb 9-1: Manufacturer: syz [ 2283.495093][T21155] cdc_wdm 9-1:1.0: skipping garbage [ 2283.495107][T21155] cdc_wdm 9-1:1.0: skipping garbage [ 2283.495115][T21155] cdc_wdm 9-1:1.0: skipping garbage [ 2283.495134][T21155] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2283.701872][T21155] usb 9-1: USB disconnect, device number 66 [ 2284.131556][T29425] netlink: 'syz.5.6771': attribute type 21 has an invalid length. [ 2284.131715][T29425] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6771'. [ 2284.136164][T29425] netlink: 'syz.5.6771': attribute type 21 has an invalid length. [ 2284.136233][T29425] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6771'. [ 2285.139962][ T6019] usbhid 10-1:0.0: can't add hid device: -71 [ 2285.140084][ T6019] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2285.244085][ T6019] usb 10-1: USB disconnect, device number 75 [ 2286.096967][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 2286.096986][ T37] audit: type=1326 audit(1766974922.085:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29464 comm="syz.8.6788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63816df749 code=0x0 [ 2286.587713][T23192] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2286.756633][T23192] usb 6-1: Using ep0 maxpacket: 16 [ 2286.777865][T23192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2286.777920][T23192] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2286.777950][T23192] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2286.778026][T23192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.790405][T23192] usb 6-1: config 0 descriptor?? [ 2286.816124][T23192] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2288.027703][T20378] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2288.207417][T20378] usb 7-1: Using ep0 maxpacket: 8 [ 2288.229590][T20378] usb 7-1: config 0 has no interfaces? [ 2288.246231][T20378] usb 7-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2288.246260][T20378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.246281][T20378] usb 7-1: Product: syz [ 2288.246295][T20378] usb 7-1: Manufacturer: syz [ 2288.246311][T20378] usb 7-1: SerialNumber: syz [ 2288.291565][T20378] usb 7-1: config 0 descriptor?? [ 2288.457520][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.457592][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.117153][T29533] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.145950][T29533] bridge0: port 1(bridge_slave_0) entered disabled state [ 2289.149461][T29533] bridge0: entered promiscuous mode [ 2289.478972][T29540] kAFS: unable to lookup cell 'ÿ' [ 2289.658205][T23192] usb 6-1: USB disconnect, device number 16 [ 2289.871280][T29552] loop5: detected capacity change from 0 to 7 [ 2289.887673][T29552] Dev loop5: unable to read RDB block 7 [ 2289.887718][T29552] loop5: unable to read partition table [ 2289.887918][T29552] loop5: partition table beyond EOD, truncated [ 2289.887938][T29552] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2290.898230][T29580] netlink: 'syz.9.6831': attribute type 1 has an invalid length. [ 2291.114206][T11611] usb 7-1: USB disconnect, device number 123 [ 2291.206425][T29580] bond1 (unregistering): Released all slaves [ 2291.390796][T29588] loop5: detected capacity change from 0 to 7 [ 2291.393515][T29588] Dev loop5: unable to read RDB block 7 [ 2291.393571][T29588] loop5: unable to read partition table [ 2291.393802][T29588] loop5: partition table beyond EOD, truncated [ 2291.393819][T29588] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2292.087840][T21155] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2292.318179][T21155] usb 7-1: Using ep0 maxpacket: 16 [ 2293.066773][T21155] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.066830][T21155] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2293.066875][T21155] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2293.066898][T21155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.071740][T21155] usb 7-1: config 0 descriptor?? [ 2293.112249][T21155] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2293.447531][T21155] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2293.599491][T21155] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.599554][T21155] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2293.599584][T21155] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2293.599627][T21155] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2293.599652][T21155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.615622][T21155] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2293.617811][T21155] usb 10-1: invalid MIDI out EP 0 [ 2293.704370][T21155] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2293.840104][T29632] syzkaller1: entered promiscuous mode [ 2293.840126][T29632] syzkaller1: entered allmulticast mode [ 2294.011898][T11611] usb 10-1: USB disconnect, device number 76 [ 2294.107839][T21155] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2294.284345][T21155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.284380][T21155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2294.284420][T21155] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2294.284443][T21155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.300139][T21155] usb 6-1: config 0 descriptor?? [ 2294.833137][T21155] hid_parser_main: 5 callbacks suppressed [ 2294.833163][T21155] hid-steam 0003:28DE:1142.002F: unknown main item tag 0x0 [ 2294.833194][T21155] hid-steam 0003:28DE:1142.002F: unknown main item tag 0x0 [ 2294.833221][T21155] hid-steam 0003:28DE:1142.002F: unknown main item tag 0x0 [ 2294.839424][T21155] hid-steam 0003:28DE:1142.002F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 2295.078472][T29675] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6854'. [ 2295.093498][ T5886] usb 6-1: USB disconnect, device number 17 [ 2295.704834][T29709] tipc: Started in network mode [ 2295.704854][T29709] tipc: Node identity ac1414aa, cluster identity 4711 [ 2295.723344][T29709] tipc: Enabled bearer , priority 10 [ 2295.888834][T21155] usb 7-1: USB disconnect, device number 124 [ 2296.457441][T21155] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 2296.661823][T21155] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2296.661856][T21155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.661877][T21155] usb 6-1: Product: syz [ 2296.661892][T21155] usb 6-1: Manufacturer: syz [ 2296.661908][T21155] usb 6-1: SerialNumber: syz [ 2296.675153][T21155] usb 6-1: config 0 descriptor?? [ 2296.711295][T21155] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2296.787500][ T804] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2296.845180][ T43] tipc: Node number set to 2886997162 [ 2296.942626][ T804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2296.942654][ T804] usb 7-1: config 0 has no interfaces? [ 2296.942685][ T804] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2296.942762][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2296.966004][ T804] usb 7-1: config 0 descriptor?? [ 2297.117478][T11611] usb 10-1: new full-speed USB device number 77 using dummy_hcd [ 2297.219958][T21155] gspca_stk1135: reg_w 0x2 err -110 [ 2297.221003][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221016][T21155] gspca_stk1135: Sensor write failed [ 2297.221044][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221053][T21155] gspca_stk1135: Sensor write failed [ 2297.221079][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221089][T21155] gspca_stk1135: Sensor read failed [ 2297.221116][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221126][T21155] gspca_stk1135: Sensor read failed [ 2297.221134][T21155] gspca_stk1135: Detected sensor type unknown (0x0) [ 2297.221167][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221177][T21155] gspca_stk1135: Sensor read failed [ 2297.221203][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221213][T21155] gspca_stk1135: Sensor read failed [ 2297.221237][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221246][T21155] gspca_stk1135: Sensor write failed [ 2297.221273][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2297.221283][T21155] gspca_stk1135: Sensor write failed [ 2297.221368][T21155] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 2297.349563][T11611] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2297.349591][T11611] usb 10-1: config 0 has no interface number 0 [ 2297.349637][T11611] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2297.349660][T11611] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.389951][T11611] usb 10-1: config 0 descriptor?? [ 2297.412091][T11611] usb 10-1: selecting invalid altsetting 1 [ 2297.412259][T11611] dvb_ttusb_budget: ttusb_init_controller: error [ 2297.412275][T11611] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2297.665263][T29756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2297.665663][T29756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.727488][T11611] DVB: Unable to find symbol cx22700_attach() [ 2297.974748][T11611] DVB: Unable to find symbol tda10046_attach() [ 2297.974764][T11611] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2298.018385][T21155] usb 10-1: USB disconnect, device number 77 [ 2301.238226][ T6019] usb 6-1: USB disconnect, device number 18 [ 2301.514501][T29802] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.580787][T29802] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.605120][T29802] bridge0: entered promiscuous mode [ 2302.139109][T11358] usb 7-1: USB disconnect, device number 125 [ 2302.267515][ T6019] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2302.427340][ T6019] usb 10-1: Using ep0 maxpacket: 32 [ 2302.428874][ T6019] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2302.432634][ T6019] usb 10-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 2302.432651][ T6019] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.432663][ T6019] usb 10-1: Product: syz [ 2302.432671][ T6019] usb 10-1: Manufacturer: syz [ 2302.432679][ T6019] usb 10-1: SerialNumber: syz [ 2302.492124][ T6019] usb 10-1: config 0 descriptor?? [ 2302.542316][ T6019] snd_usb_variax 10-1:0.0: Line 6 Variax Workbench found [ 2302.542333][ T6019] usb 10-1: selecting invalid altsetting 1 [ 2302.542343][ T6019] snd_usb_variax 10-1:0.0: set_interface failed [ 2302.543034][ T6019] snd_usb_variax 10-1:0.0: Line 6 Variax Workbench now disconnected [ 2302.545880][ T6019] snd_usb_variax 10-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 2304.597797][T11611] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2304.810148][T11611] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2304.810186][T11611] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2304.810231][T11611] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2304.810257][T11611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.956854][T29888] netlink: 'syz.8.6961': attribute type 12 has an invalid length. [ 2305.801129][T11611] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2305.807465][T17241] Bluetooth: hci0: command 0x0406 tx timeout [ 2305.856614][T11611] usb 6-1: invalid MIDI out EP 0 [ 2305.981616][ T5984] usb 10-1: USB disconnect, device number 78 [ 2306.833137][T11611] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2306.923591][T11611] usb 6-1: USB disconnect, device number 19 [ 2307.697650][ T5812] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2307.849078][ T5812] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2307.849108][ T5812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.849128][ T5812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2307.849181][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2307.851330][ T5812] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2307.851360][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2307.851378][ T5812] usb 7-1: Product: syz [ 2307.851386][ T5812] usb 7-1: Manufacturer: syz [ 2307.961692][ T5812] cdc_wdm 7-1:1.0: skipping garbage [ 2307.961706][ T5812] cdc_wdm 7-1:1.0: skipping garbage [ 2307.992450][ T5812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2307.992486][ T5812] cdc_wdm 7-1:1.0: Unknown control protocol [ 2308.474252][T11358] usb 7-1: USB disconnect, device number 126 [ 2308.994645][T29918] syz.5.6971 (29918) used greatest stack depth: 17624 bytes left [ 2309.199209][T29932] tipc: Started in network mode [ 2309.199227][T29932] tipc: Node identity ac14140f, cluster identity 4711 [ 2309.199457][T29932] tipc: New replicast peer: 255.255.255.255 [ 2309.201217][T29932] tipc: Enabled bearer , priority 10 [ 2309.609059][ T804] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2309.832358][ T804] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2309.832395][ T804] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2309.832431][ T804] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2309.832454][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.996951][ T804] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2310.001964][ T804] usb 7-1: invalid MIDI out EP 0 [ 2310.215234][ T804] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2310.252306][ T804] usb 7-1: USB disconnect, device number 127 [ 2310.333470][T21155] tipc: Node number set to 2886997007 [ 2313.472627][T30027] syz_tun: entered allmulticast mode [ 2313.484348][T30023] syz_tun: left allmulticast mode [ 2313.835687][T30041] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 2313.937357][ T5886] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2314.097282][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 2314.100854][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.103486][ T5886] usb 9-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 2314.103515][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.103536][ T5886] usb 9-1: Product: syz [ 2314.103548][ T5886] usb 9-1: Manufacturer: syz [ 2314.103556][ T5886] usb 9-1: SerialNumber: syz [ 2314.154629][T11611] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2314.171335][ T5886] usb 9-1: config 0 descriptor?? [ 2314.209208][ T5886] snd_usb_variax 9-1:0.0: Line 6 Variax Workbench found [ 2314.209235][ T5886] usb 9-1: selecting invalid altsetting 1 [ 2314.209251][ T5886] snd_usb_variax 9-1:0.0: set_interface failed [ 2314.209527][ T5886] snd_usb_variax 9-1:0.0: Line 6 Variax Workbench now disconnected [ 2314.209728][ T5886] snd_usb_variax 9-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 2314.331483][T11611] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2314.331521][T11611] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2314.331560][T11611] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2314.331585][T11611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.376913][T11358] usb 9-1: USB disconnect, device number 67 [ 2314.403266][T11611] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2314.403859][T11611] usb 6-1: invalid MIDI out EP 0 [ 2314.507638][T11611] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2314.633868][T11358] usb 6-1: USB disconnect, device number 20 [ 2316.176047][T30107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7050'. [ 2316.388580][T30112] input: syz1 as /devices/virtual/input/input124 [ 2316.437700][T21155] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 2316.520156][T30115] binder: 30110:30115 ioctl c0306201 0 returned -14 [ 2316.594528][T21155] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2316.594548][T21155] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.594559][T21155] usb 7-1: Product: syz [ 2316.594567][T21155] usb 7-1: Manufacturer: syz [ 2316.594575][T21155] usb 7-1: SerialNumber: syz [ 2316.633220][T21155] usb 7-1: config 0 descriptor?? [ 2316.670715][T21155] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2316.787547][ T5927] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2316.943070][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 2316.947005][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.999467][ T5927] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 2316.999499][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.999522][ T5927] usb 6-1: Product: syz [ 2316.999536][ T5927] usb 6-1: Manufacturer: syz [ 2316.999604][ T5927] usb 6-1: SerialNumber: syz [ 2317.066537][ T5927] usb 6-1: config 0 descriptor?? [ 2317.111579][ T5927] snd_usb_variax 6-1:0.0: Line 6 Variax Workbench found [ 2317.111605][ T5927] usb 6-1: selecting invalid altsetting 1 [ 2317.111673][ T5927] snd_usb_variax 6-1:0.0: set_interface failed [ 2317.112067][ T5927] snd_usb_variax 6-1:0.0: Line 6 Variax Workbench now disconnected [ 2317.116571][ T5927] snd_usb_variax 6-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 2317.177633][T21155] gspca_stk1135: reg_w 0x2 err -110 [ 2317.178677][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178691][T21155] gspca_stk1135: Sensor write failed [ 2317.178719][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178730][T21155] gspca_stk1135: Sensor write failed [ 2317.178760][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178770][T21155] gspca_stk1135: Sensor read failed [ 2317.178799][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178809][T21155] gspca_stk1135: Sensor read failed [ 2317.178816][T21155] gspca_stk1135: Detected sensor type unknown (0x0) [ 2317.178850][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178860][T21155] gspca_stk1135: Sensor read failed [ 2317.178885][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178895][T21155] gspca_stk1135: Sensor read failed [ 2317.178917][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178926][T21155] gspca_stk1135: Sensor write failed [ 2317.178951][T21155] gspca_stk1135: serial bus timeout: status=0x00 [ 2317.178961][T21155] gspca_stk1135: Sensor write failed [ 2317.179045][T21155] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 2317.373488][T11611] usb 6-1: USB disconnect, device number 21 [ 2318.823819][T30145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7052'. [ 2318.945780][T30145] hsr_slave_0: left promiscuous mode [ 2318.997765][T30145] hsr_slave_1: left promiscuous mode [ 2319.594246][ T804] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2319.641736][ T5886] IPVS: starting estimator thread 0... [ 2319.739224][ T804] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2319.739259][ T804] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2319.739296][ T804] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2319.739319][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.767750][T30165] IPVS: using max 15 ests per chain, 36000 per kthread [ 2320.132173][ T804] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2320.155408][ T804] usb 6-1: invalid MIDI out EP 0 [ 2320.415662][ T804] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2320.457630][ T804] usb 6-1: USB disconnect, device number 22 [ 2322.048985][T11611] usb 7-1: USB disconnect, device number 2 [ 2324.077358][ T804] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2324.227821][ T804] usb 7-1: Using ep0 maxpacket: 32 [ 2324.233998][ T804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.236623][ T804] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 2324.236652][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.236675][ T804] usb 7-1: Product: syz [ 2324.236691][ T804] usb 7-1: Manufacturer: syz [ 2324.236707][ T804] usb 7-1: SerialNumber: syz [ 2324.255624][ T804] usb 7-1: config 0 descriptor?? [ 2324.302372][ T804] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench found [ 2324.302408][ T804] usb 7-1: selecting invalid altsetting 1 [ 2324.302425][ T804] snd_usb_variax 7-1:0.0: set_interface failed [ 2324.302686][ T804] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench now disconnected [ 2324.302885][ T804] snd_usb_variax 7-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 2324.518398][ T5927] usb 7-1: USB disconnect, device number 3 [ 2325.485334][T30268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7116'. [ 2325.618685][T30272] netlink: 860 bytes leftover after parsing attributes in process `syz.6.7119'. [ 2325.929448][T30286] netlink: 868 bytes leftover after parsing attributes in process `syz.6.7125'. [ 2326.807371][T17241] Bluetooth: hci4: command 0x0406 tx timeout [ 2327.117849][T30297] netlink: 'syz.8.7128': attribute type 1 has an invalid length. [ 2327.734125][T30303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2327.751913][T30303] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2327.867827][T30297] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2328.247383][ T5984] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 2328.348664][T30319] netlink: 860 bytes leftover after parsing attributes in process `syz.9.7136'. [ 2328.399572][ T5984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2328.399609][ T5984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.399650][ T5984] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 2328.399676][ T5984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.404733][ T5984] usb 9-1: config 0 descriptor?? [ 2328.586760][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7139'. [ 2328.700881][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7139'. [ 2328.838606][ T5984] ryos 0003:1E7D:3138.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.8-1/input0 [ 2329.029469][T30333] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7131'. [ 2329.072625][ T5984] usb 9-1: USB disconnect, device number 68 [ 2329.809022][T30351] netlink: 860 bytes leftover after parsing attributes in process `syz.8.7149'. [ 2330.030631][T30356] binder: 30352:30356 ioctl c0306201 0 returned -14 [ 2331.610423][T30367] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 2334.659743][T30421] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7177'. [ 2334.659773][T30421] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7177'. [ 2334.659791][T30421] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7177'. [ 2334.897770][T30379] bridge0: port 1(erspan0) entered blocking state [ 2334.915863][T30379] bridge0: port 1(erspan0) entered disabled state [ 2334.919766][T30379] erspan0: entered allmulticast mode [ 2335.010034][T30379] erspan0: entered promiscuous mode [ 2335.056633][T30379] bridge0: port 1(erspan0) entered blocking state [ 2335.056772][T30379] bridge0: port 1(erspan0) entered forwarding state [ 2336.556551][T30439] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7184'. [ 2336.723231][T30443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7184'. [ 2336.893691][T30441] bridge1: port 1(veth3) entered blocking state [ 2336.897857][T30441] bridge1: port 1(veth3) entered disabled state [ 2336.898118][T30441] veth3: entered allmulticast mode [ 2336.900760][T30441] veth3: entered promiscuous mode [ 2337.247139][ T5979] usb 10-1: new full-speed USB device number 79 using dummy_hcd [ 2337.354587][T30459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7191'. [ 2337.354615][T30459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7191'. [ 2337.354632][T30459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7191'. [ 2337.680873][ T5979] usb 10-1: config 201 has an invalid interface number: 249 but max is 0 [ 2337.680904][ T5979] usb 10-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.680925][ T5979] usb 10-1: config 201 has no interface number 0 [ 2337.680974][ T5979] usb 10-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2337.681003][ T5979] usb 10-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2337.681086][ T5979] usb 10-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2337.681117][ T5979] usb 10-1: config 201 interface 249 has no altsetting 0 [ 2337.821046][ T5979] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2337.821078][ T5979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.821090][ T5979] usb 10-1: Product: syz [ 2337.821098][ T5979] usb 10-1: Manufacturer: syz [ 2337.821106][ T5979] usb 10-1: SerialNumber: syz [ 2338.146672][ T5979] ath6kl: Failed to submit usb control message: -71 [ 2338.146703][ T5979] ath6kl: unable to send the bmi data to the device: -71 [ 2338.146712][ T5979] ath6kl: Unable to send get target info: -71 [ 2338.147680][ T5979] ath6kl: Failed to init ath6kl core: -71 [ 2338.148205][ T5979] ath6kl_usb 10-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2338.163268][ T5979] usb 10-1: USB disconnect, device number 79 [ 2341.698757][T30500] binder: 30492:30500 ioctl c0306201 0 returned -14 [ 2343.774923][T30520] netlink: 772 bytes leftover after parsing attributes in process `syz.6.7211'. [ 2344.766134][T30541] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7209'. [ 2346.306021][T30565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7228'. [ 2347.026791][T30580] netlink: 772 bytes leftover after parsing attributes in process `syz.9.7235'. [ 2347.665916][T30584] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7237'. [ 2347.816790][T30607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7248'. [ 2349.231215][T30611] syz.8.7250 (30611): drop_caches: 2 [ 2349.975943][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.976014][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.500457][T30631] SQUASHFS error: Failed to read block 0x0: -5 [ 2352.697095][T30640] nvme_fabrics: missing parameter 'transport=%s' [ 2352.697114][T30640] nvme_fabrics: missing parameter 'nqn=%s' [ 2353.247590][T11611] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2353.417554][T11611] usb 10-1: Using ep0 maxpacket: 8 [ 2353.429101][T11611] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2353.429173][T11611] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 2353.429201][T11611] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 2353.461183][T11611] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2353.461214][T11611] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.461235][T11611] usb 10-1: Product: syz [ 2353.461249][T11611] usb 10-1: Manufacturer: syz [ 2353.461265][T11611] usb 10-1: SerialNumber: syz [ 2353.477828][T30652] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2353.927133][T30654] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7264'. [ 2354.007945][ T37] audit: type=1326 audit(1766974990.005:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.008589][ T37] audit: type=1326 audit(1766974990.005:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.008903][ T37] audit: type=1326 audit(1766974990.005:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.011247][ T37] audit: type=1326 audit(1766974990.005:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.011651][ T37] audit: type=1326 audit(1766974990.005:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.015272][ T37] audit: type=1326 audit(1766974990.005:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.016299][ T37] audit: type=1326 audit(1766974990.005:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.016568][ T37] audit: type=1326 audit(1766974990.005:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.016822][ T37] audit: type=1326 audit(1766974990.005:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.226801][ T37] audit: type=1326 audit(1766974990.005:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30651 comm="syz.9.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2354.455220][T11611] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 2354.455545][T11611] cdc_ncm 10-1:1.0: bind() failure [ 2354.464732][T11611] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 2354.464777][T11611] cdc_ncm 10-1:1.1: bind() failure [ 2354.497304][T11611] usb 10-1: USB disconnect, device number 80 [ 2355.351260][T16119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2355.368479][T16119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2355.370142][T16119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2355.371607][T16119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2355.373172][T16119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2355.972374][T30711] bridge0: port 3(erspan0) entered blocking state [ 2355.972435][T30711] bridge0: port 3(erspan0) entered disabled state [ 2355.974969][T30711] erspan0: entered allmulticast mode [ 2355.977475][T30711] erspan0: entered promiscuous mode [ 2356.313384][T30708] netlink: 180 bytes leftover after parsing attributes in process `syz.9.7287'. [ 2357.039170][T16119] Bluetooth: hci5: command 0x0406 tx timeout [ 2357.403151][T16119] Bluetooth: hci3: command tx timeout [ 2358.141916][T30734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7295'. [ 2358.511877][T30743] syz.6.7298 (30743): drop_caches: 2 [ 2359.477941][T26425] Bluetooth: hci3: command tx timeout [ 2360.359874][T30757] input: syz1 as /devices/virtual/input/input125 [ 2360.408240][T30765] binder: 30755:30765 ioctl c0306201 0 returned -14 [ 2360.409192][T30765] IPv6: Can't replace route, no match found [ 2360.632184][T30762] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7305'. [ 2360.652147][T11358] usb 10-1: new full-speed USB device number 81 using dummy_hcd [ 2360.740911][T17526] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2360.784958][T11358] usb 10-1: device descriptor read/64, error -71 [ 2361.017562][T11358] usb 10-1: new full-speed USB device number 82 using dummy_hcd [ 2361.198185][T11358] usb 10-1: device descriptor read/64, error -71 [ 2361.309381][T11358] usb usb10-port1: attempt power cycle [ 2361.557342][T26425] Bluetooth: hci3: command tx timeout [ 2361.648146][T11358] usb 10-1: new full-speed USB device number 83 using dummy_hcd [ 2361.672621][T11358] usb 10-1: device descriptor read/8, error -71 [ 2361.874064][T30709] chnl_net:caif_netlink_parms(): no params data found [ 2361.917386][T11358] usb 10-1: new full-speed USB device number 84 using dummy_hcd [ 2361.939649][T11358] usb 10-1: device descriptor read/8, error -71 [ 2362.048438][T11358] usb usb10-port1: unable to enumerate USB device [ 2363.139898][T17526] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.156609][T30799] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 2363.220611][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7311'. [ 2363.647445][T26425] Bluetooth: hci3: command tx timeout [ 2364.030917][T17526] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2364.080660][T30806] netlink: 180 bytes leftover after parsing attributes in process `syz.9.7317'. [ 2364.777447][T21155] usb 10-1: new full-speed USB device number 85 using dummy_hcd [ 2364.871088][T17526] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2364.925273][T30709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.925414][T30709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2364.925697][T30709] bridge_slave_0: entered allmulticast mode [ 2364.929024][T30709] bridge_slave_0: entered promiscuous mode [ 2364.938259][T21155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2364.938290][T21155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2364.938337][T21155] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 2364.938361][T21155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.943257][T21155] usb 10-1: config 0 descriptor?? [ 2364.944957][T30709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.945334][T30709] bridge0: port 2(bridge_slave_1) entered disabled state [ 2364.946293][T30709] bridge_slave_1: entered allmulticast mode [ 2364.963795][T30709] bridge_slave_1: entered promiscuous mode [ 2365.325453][T30709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2365.385439][T30709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2365.386684][T21155] ryos 0003:1E7D:3138.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.9-1/input0 [ 2365.579581][T30821] overlayfs: failed to resolve './bus': -2 [ 2365.641005][T21155] usb 10-1: USB disconnect, device number 85 [ 2366.134208][T30839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7327'. [ 2366.134235][T30839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7327'. [ 2366.134252][T30839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7327'. [ 2366.183183][T30709] team0: Port device team_slave_0 added [ 2366.186977][T30709] team0: Port device team_slave_1 added [ 2367.341229][T30852] netlink: 180 bytes leftover after parsing attributes in process `syz.9.7330'. [ 2367.835385][T30709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2367.835398][T30709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2367.835413][T30709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2367.995290][T30709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2367.995309][T30709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2367.995336][T30709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2368.673688][T30709] hsr_slave_0: entered promiscuous mode [ 2368.683705][T30709] hsr_slave_1: entered promiscuous mode [ 2368.697605][T30709] debugfs: 'hsr0' already exists in 'hsr' [ 2368.697633][T30709] Cannot create hsr debugfs directory [ 2368.698055][T17526] bridge_slave_1: left allmulticast mode [ 2368.698079][T17526] bridge_slave_1: left promiscuous mode [ 2368.698321][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 2368.809988][T17526] bridge_slave_0: left allmulticast mode [ 2368.810009][T17526] bridge_slave_0: left promiscuous mode [ 2368.810197][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2369.841725][T30885] SQUASHFS error: Failed to read block 0x0: -5 [ 2370.871403][T30891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7340'. [ 2374.593112][T30919] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7349'. [ 2376.637129][T30931] syz.9.7352 (30931): drop_caches: 2 [ 2377.380159][T17526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2377.479254][T17526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2377.510302][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7354'. [ 2377.549578][T17526] bond0 (unregistering): Released all slaves [ 2378.829044][T17526] tipc: Left network mode [ 2379.008347][T30947] binder: 30941:30947 ioctl c0306201 0 returned -14 [ 2379.155524][T30949] nvme_fabrics: missing parameter 'transport=%s' [ 2379.155537][T30949] nvme_fabrics: missing parameter 'nqn=%s' [ 2380.157551][T30967] syz.5.7362 (30967): drop_caches: 2 [ 2381.180831][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7360'. [ 2381.297352][T30906] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2381.478751][T30906] usb 10-1: Using ep0 maxpacket: 8 [ 2381.483108][T30906] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.483177][T30906] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 2381.483205][T30906] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 2381.486184][T30906] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2381.486213][T30906] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.486235][T30906] usb 10-1: Product: syz [ 2381.486251][T30906] usb 10-1: Manufacturer: syz [ 2381.486267][T30906] usb 10-1: SerialNumber: syz [ 2381.571953][T30974] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2382.714755][ T37] audit: type=1326 audit(1766975018.675:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30972 comm="syz.9.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2382.716209][ T37] audit: type=1326 audit(1766975018.705:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30972 comm="syz.9.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2382.770990][ T37] audit: type=1326 audit(1766975018.765:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30972 comm="syz.9.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2382.772273][ T37] audit: type=1326 audit(1766975018.765:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30972 comm="syz.9.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccc37ddf90 code=0x7ffc0000 [ 2383.137589][ T37] audit: type=1326 audit(1766975019.125:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30972 comm="syz.9.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2383.141058][ T37] audit: type=1326 audit(1766975019.135:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30972 comm="syz.9.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc37df749 code=0x7ffc0000 [ 2383.632993][T30991] nvme_fabrics: missing parameter 'transport=%s' [ 2383.633011][T30991] nvme_fabrics: missing parameter 'nqn=%s' [ 2383.696287][T30906] cdc_ncm 10-1:1.0: bind() failure [ 2383.701125][T30906] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 2383.701152][T30906] cdc_ncm 10-1:1.1: bind() failure [ 2383.739898][T30906] usb 10-1: USB disconnect, device number 86 [ 2384.067593][T30997] binder: 30995:30997 ioctl c0306201 0 returned -14 [ 2384.377481][T17526] hsr_slave_0: left promiscuous mode [ 2384.417627][T17526] hsr_slave_1: left promiscuous mode [ 2384.418804][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2384.418829][T17526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2384.492975][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2384.493003][T17526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2384.855047][T17526] veth1_macvtap: left promiscuous mode [ 2384.855160][T17526] veth0_macvtap: left promiscuous mode [ 2384.855456][T17526] veth1_vlan: left promiscuous mode [ 2384.855635][T17526] veth0_vlan: left promiscuous mode [ 2391.210555][T17526] team0 (unregistering): Port device team_slave_1 removed [ 2391.482051][T17526] team0 (unregistering): Port device team_slave_0 removed [ 2394.752189][T31025] lo speed is unknown, defaulting to 1000 [ 2394.752431][T31025] lo speed is unknown, defaulting to 1000 [ 2394.753772][T31025] lo speed is unknown, defaulting to 1000 [ 2394.758844][T31025] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2394.769036][T31025] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2394.787482][T31025] lo speed is unknown, defaulting to 1000 [ 2394.789187][T31025] lo speed is unknown, defaulting to 1000 [ 2394.790793][T31025] lo speed is unknown, defaulting to 1000 [ 2394.792213][T31025] lo speed is unknown, defaulting to 1000 [ 2394.795665][T31025] lo speed is unknown, defaulting to 1000 [ 2394.798049][T31025] lo speed is unknown, defaulting to 1000 [ 2394.799472][T31025] lo speed is unknown, defaulting to 1000 [ 2394.800894][T31025] lo speed is unknown, defaulting to 1000 [ 2394.928173][T31007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7375'. [ 2396.129869][T31050] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2396.129898][T31050] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2396.129925][T31050] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2397.533425][T31061] nvme_fabrics: missing parameter 'transport=%s' [ 2397.533444][T31061] nvme_fabrics: missing parameter 'nqn=%s' [ 2398.457357][T26185] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 2398.587547][T26185] usb 6-1: device descriptor read/64, error -71 [ 2398.815954][T31074] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7393'. [ 2398.827584][T26185] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2398.957675][T26185] usb 6-1: device descriptor read/64, error -71 [ 2399.068005][T26185] usb usb6-port1: attempt power cycle [ 2399.405006][T17526] IPVS: stop unused estimator thread 0... [ 2399.417474][T26185] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2399.438003][T26185] usb 6-1: device descriptor read/8, error -71 [ 2399.440922][T30709] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2400.414032][T26185] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 2400.424040][T31087] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2400.424084][T31087] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2400.424105][T31087] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2400.436047][T26185] usb 6-1: device descriptor read/8, error -71 [ 2400.481855][T30709] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2400.537870][T26185] usb usb6-port1: unable to enumerate USB device [ 2400.620085][T30709] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2402.141027][T30709] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2403.109101][T31108] nvme_fabrics: missing parameter 'transport=%s' [ 2403.109121][T31108] nvme_fabrics: missing parameter 'nqn=%s' [ 2403.804782][T30709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2403.882784][T30709] 8021q: adding VLAN 0 to HW filter on device team0 [ 2403.910576][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2403.910758][T17526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2403.940098][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 2403.940177][T17526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2405.529756][T31132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7405'. [ 2406.034971][T31141] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7407'. [ 2406.248641][T30709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2407.804718][T31152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7409'. [ 2408.140025][T31152] bridge4: port 1(veth3) entered blocking state [ 2408.140544][T31152] bridge4: port 1(veth3) entered disabled state [ 2408.140692][T31152] veth3: entered allmulticast mode [ 2408.142265][T31152] veth3: entered promiscuous mode [ 2408.230268][T31154] bridge4: port 2(veth0_to_bond) entered blocking state [ 2408.230487][T31154] bridge4: port 2(veth0_to_bond) entered disabled state [ 2408.230717][T31154] veth0_to_bond: entered allmulticast mode [ 2408.244200][T31154] veth0_to_bond: entered promiscuous mode [ 2408.332116][T31159] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7410'. [ 2408.484324][T31159] bond1 (unregistering): Released all slaves [ 2409.370709][T31167] nvme_fabrics: missing parameter 'transport=%s' [ 2409.370727][T31167] nvme_fabrics: missing parameter 'nqn=%s' [ 2410.186814][T30709] veth0_vlan: entered promiscuous mode [ 2410.215656][T30709] veth1_vlan: entered promiscuous mode [ 2410.353516][T31185] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7417'. [ 2410.589273][T30709] veth0_macvtap: entered promiscuous mode [ 2410.621410][T30709] veth1_macvtap: entered promiscuous mode [ 2410.728367][T30709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2410.735549][T30709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2410.902436][ T1151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.902472][ T1151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.902492][ T1151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.902512][ T1151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.287107][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.314906][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2412.327351][T19665] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 2412.468750][ T1918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2412.468772][ T1918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2412.492361][T19665] usb 9-1: config 201 has an invalid interface number: 249 but max is 0 [ 2412.492389][T19665] usb 9-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2412.492410][T19665] usb 9-1: config 201 has no interface number 0 [ 2412.492456][T19665] usb 9-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2412.492485][T19665] usb 9-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2412.492508][T19665] usb 9-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2412.492537][T19665] usb 9-1: config 201 interface 249 has no altsetting 0 [ 2412.507401][T19665] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2412.507431][T19665] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.507452][T19665] usb 9-1: Product: syz [ 2412.507467][T19665] usb 9-1: Manufacturer: syz [ 2412.507481][T19665] usb 9-1: SerialNumber: syz [ 2412.726406][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2412.726421][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2412.826086][T19665] ath6kl: Failed to submit usb control message: -71 [ 2412.826128][T19665] ath6kl: unable to send the bmi data to the device: -71 [ 2412.826137][T19665] ath6kl: Unable to send get target info: -71 [ 2412.869837][T19665] ath6kl: Failed to init ath6kl core: -71 [ 2412.870185][T19665] ath6kl_usb 9-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2412.926449][T19665] usb 9-1: USB disconnect, device number 69 [ 2413.442777][T31213] netlink: 'syz.6.7427': attribute type 1 has an invalid length. [ 2413.658529][T31213] bond1: (slave gretap1): making interface the new active one [ 2413.710104][T31213] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2415.524756][T31235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7431'. [ 2416.213581][T31252] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7428'. [ 2416.877152][T31260] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2416.888528][T31260] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 2416.888982][T31260] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2416.888996][T31260] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 2417.167418][T31263] netlink: 'syz.8.7439': attribute type 1 has an invalid length. [ 2420.356852][T31290] syz.6.7445 (31290): drop_caches: 2 [ 2421.497383][T31300] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7447'. [ 2421.589804][T31302] siw: device registration error -23 [ 2422.822686][T31306] SQUASHFS error: Failed to read block 0x0: -5 [ 2423.756468][T31314] netlink: 'syz.6.7453': attribute type 1 has an invalid length. [ 2424.240657][T31328] syz.9.7455 (31328): drop_caches: 2 [ 2426.392289][T31337] nvme_fabrics: missing parameter 'transport=%s' [ 2426.392307][T31337] nvme_fabrics: missing parameter 'nqn=%s' [ 2426.533258][T31344] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7456'. [ 2427.087560][T19665] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 2427.250519][T19665] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 2427.250549][T19665] usb 6-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.250570][T19665] usb 6-1: config 201 has no interface number 0 [ 2427.250617][T19665] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2427.250645][T19665] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2427.250668][T19665] usb 6-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2427.250697][T19665] usb 6-1: config 201 interface 249 has no altsetting 0 [ 2427.254147][T19665] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2427.254165][T19665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.254176][T19665] usb 6-1: Product: syz [ 2427.254184][T19665] usb 6-1: Manufacturer: syz [ 2427.254192][T19665] usb 6-1: SerialNumber: syz [ 2427.626795][T19665] ath6kl: Failed to submit usb control message: -71 [ 2427.626827][T19665] ath6kl: unable to send the bmi data to the device: -71 [ 2427.626836][T19665] ath6kl: Unable to send get target info: -71 [ 2427.655553][T19665] ath6kl: Failed to init ath6kl core: -71 [ 2427.656087][T19665] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2427.753249][T19665] usb 6-1: USB disconnect, device number 27 [ 2427.884088][T31343] bridge0: port 3(erspan0) entered blocking state [ 2428.052255][T31343] bridge0: port 3(erspan0) entered disabled state [ 2428.386250][T31343] erspan0: entered allmulticast mode [ 2429.028363][T31343] erspan0: entered promiscuous mode [ 2429.200358][T31362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7466'. [ 2430.298087][T31369] netlink: 'syz.7.7467': attribute type 1 has an invalid length. [ 2430.459811][T31371] binder: 31370:31371 ioctl ab03 0 returned -22 [ 2430.461850][T31371] binder: 31370:31371 ioctl c0306201 0 returned -14 [ 2430.462034][T31371] binder: 31370:31371 ioctl 400454cd 324 returned -22 [ 2431.850044][ T37] audit: type=1326 audit(1766975067.845:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.854535][ T37] audit: type=1326 audit(1766975067.845:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.855352][ T37] audit: type=1326 audit(1766975067.860:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.855720][ T37] audit: type=1326 audit(1766975067.860:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.855882][ T37] audit: type=1326 audit(1766975067.860:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.856296][ T37] audit: type=1326 audit(1766975067.860:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.856676][ T37] audit: type=1326 audit(1766975067.860:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.911809][ T37] audit: type=1326 audit(1766975067.910:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.912188][ T37] audit: type=1326 audit(1766975067.910:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2431.912703][ T37] audit: type=1326 audit(1766975067.910:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31386 comm="syz.8.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2432.586823][T31398] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7477'. [ 2434.874204][T31412] binder: 31410:31412 ioctl ab03 0 returned -22 [ 2434.877799][T31412] binder: 31410:31412 ioctl c0306201 0 returned -14 [ 2434.877916][T31412] binder: 31410:31412 ioctl 400454cd 324 returned -22 [ 2439.369550][ T5984] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2439.520029][ T5984] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2439.520066][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2439.521056][ T5984] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2439.521073][ T5984] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2439.521084][ T5984] usb 7-1: Manufacturer: syz [ 2439.523893][ T5984] usb 7-1: config 0 descriptor?? [ 2439.653031][T31446] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7486'. [ 2439.713319][T31448] binder: 31447:31448 ioctl ab03 0 returned -22 [ 2439.715216][T31448] binder: 31447:31448 ioctl c0306201 0 returned -14 [ 2439.715401][T31448] binder: 31447:31448 ioctl 400454cd 324 returned -22 [ 2439.840493][ T5984] rc_core: IR keymap rc-hauppauge not found [ 2439.840516][ T5984] Registered IR keymap rc-empty [ 2439.842827][ T5984] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2441.995677][ T5984] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input130 [ 2442.000238][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 2442.228664][T31463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7494'. [ 2447.022119][T31495] binder: 31494:31495 ioctl ab03 0 returned -22 [ 2447.034116][T31495] binder: 31494:31495 ioctl 400454cd 324 returned -22 [ 2449.059001][T22971] usb 7-1: USB disconnect, device number 4 [ 2452.731285][T31538] binder: 31535:31538 ioctl ab03 0 returned -22 [ 2452.749006][T31538] binder: 31535:31538 ioctl 400454cd 324 returned -22 [ 2454.006799][T31543] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 2454.006925][T31543] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 2454.007027][T31543] kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 2454.007154][T31543] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 2454.007259][T31543] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 2454.007362][T31543] kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 2454.007463][T31543] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 2454.007564][T31543] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 2454.007748][T31543] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 2454.009283][T31543] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 2454.151490][T19665] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2454.201362][T22971] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 2454.304023][T19665] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2454.304082][T19665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2454.305271][T19665] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2454.305301][T19665] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2454.305323][T19665] usb 9-1: Manufacturer: syz [ 2454.362301][T19665] usb 9-1: config 0 descriptor?? [ 2454.616402][T22971] usb 7-1: config 201 has an invalid interface number: 249 but max is 0 [ 2454.616430][T22971] usb 7-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.616451][T22971] usb 7-1: config 201 has no interface number 0 [ 2454.616497][T22971] usb 7-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2454.616525][T22971] usb 7-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2454.616549][T22971] usb 7-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2454.616578][T22971] usb 7-1: config 201 interface 249 has no altsetting 0 [ 2454.804831][T22971] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2454.804864][T22971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.804886][T22971] usb 7-1: Product: syz [ 2454.804902][T22971] usb 7-1: Manufacturer: syz [ 2454.804918][T22971] usb 7-1: SerialNumber: syz [ 2455.469365][T16119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2455.489227][T16119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2455.492035][T16119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2455.494007][T16119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2455.495533][T16119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2455.598289][T22971] ath6kl: Failed to submit usb control message: -71 [ 2455.598336][T22971] ath6kl: unable to send the bmi data to the device: -71 [ 2455.598353][T22971] ath6kl: Unable to send get target info: -71 [ 2455.650012][T22971] ath6kl: Failed to init ath6kl core: -71 [ 2455.651091][T22971] ath6kl_usb 7-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2455.673834][T22971] usb 7-1: USB disconnect, device number 5 [ 2455.680520][T31557] lo speed is unknown, defaulting to 1000 [ 2455.690497][T19665] rc_core: IR keymap rc-hauppauge not found [ 2455.690516][T19665] Registered IR keymap rc-empty [ 2455.691891][T19665] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2455.694942][T19665] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input132 [ 2457.251352][T24263] usb 9-1: USB disconnect, device number 70 [ 2457.797163][T16119] Bluetooth: hci1: command tx timeout [ 2458.035344][T31583] binder: 31582:31583 ioctl ab03 0 returned -22 [ 2458.089347][T31583] binder: 31582:31583 ioctl 400454cd 324 returned -22 [ 2460.105808][T16119] Bluetooth: hci1: command tx timeout [ 2460.481434][T31596] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7532'. [ 2461.962881][T31605] nvme_fabrics: missing parameter 'transport=%s' [ 2461.962900][T31605] nvme_fabrics: missing parameter 'nqn=%s' [ 2462.175623][T16119] Bluetooth: hci1: command tx timeout [ 2462.350562][T31611] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2462.350589][T31611] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2462.350601][T31611] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2462.871382][T19797] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2463.022994][T19797] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2463.023057][T19797] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2463.024571][T19797] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2463.024600][T19797] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2463.024623][T19797] usb 9-1: Manufacturer: syz [ 2463.137962][T19797] usb 9-1: config 0 descriptor?? [ 2463.234247][T31623] siw: device registration error -23 [ 2464.209988][T31626] binder: 31625:31626 ioctl ab03 0 returned -22 [ 2464.225614][T19797] rc_core: IR keymap rc-hauppauge not found [ 2464.225634][T19797] Registered IR keymap rc-empty [ 2464.227005][T19797] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2464.228429][T31626] binder: 31625:31626 ioctl 400454cd 324 returned -22 [ 2464.240490][T19797] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input133 [ 2464.246462][T16119] Bluetooth: hci1: command tx timeout [ 2465.618122][T31627] rc rc0: two consecutive events of type space [ 2466.066623][T30938] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2466.254474][T31557] chnl_net:caif_netlink_parms(): no params data found [ 2466.275850][T31635] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7542'. [ 2466.897540][ T5979] usb 9-1: USB disconnect, device number 71 [ 2468.395984][T30938] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.497587][T31646] nvme_fabrics: missing parameter 'transport=%s' [ 2468.497605][T31646] nvme_fabrics: missing parameter 'nqn=%s' [ 2471.102366][T31663] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2471.102418][T31663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2471.102439][T31663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2471.486595][T31672] syz.8.7550 (31672): drop_caches: 2 [ 2471.758569][T31676] syz.8.7552 (31676): drop_caches: 2 [ 2471.847734][T30938] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2472.230372][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.230452][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.467522][T31687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7555'. [ 2472.896329][T30938] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.467513][T31557] bridge0: port 1(bridge_slave_0) entered blocking state [ 2473.467637][T31557] bridge0: port 1(bridge_slave_0) entered disabled state [ 2473.467837][T31557] bridge_slave_0: entered allmulticast mode [ 2473.470797][T31557] bridge_slave_0: entered promiscuous mode [ 2473.567899][T31557] bridge0: port 2(bridge_slave_1) entered blocking state [ 2473.568810][T31557] bridge0: port 2(bridge_slave_1) entered disabled state [ 2473.569090][T31557] bridge_slave_1: entered allmulticast mode [ 2473.571564][T31557] bridge_slave_1: entered promiscuous mode [ 2475.705697][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 2475.705847][ T37] audit: type=1326 audit(1766975112.173:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.705898][ T37] audit: type=1326 audit(1766975112.173:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.706030][ T37] audit: type=1326 audit(1766975112.173:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.706191][ T37] audit: type=1326 audit(1766975112.174:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.706416][ T37] audit: type=1326 audit(1766975112.174:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.706508][ T37] audit: type=1326 audit(1766975112.174:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.706674][ T37] audit: type=1326 audit(1766975112.174:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.706846][ T37] audit: type=1326 audit(1766975112.174:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.707024][ T37] audit: type=1326 audit(1766975112.174:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2475.707193][ T37] audit: type=1326 audit(1766975112.174:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31698 comm="syz.8.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63816df749 code=0x7ffc0000 [ 2476.732478][T31706] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2476.732523][T31706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2476.732545][T31706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2476.773513][T31557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2477.224329][T31557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2478.925249][T31557] team0: Port device team_slave_0 added [ 2478.975536][T31557] team0: Port device team_slave_1 added [ 2479.166465][T24263] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 2479.345818][T16119] Bluetooth: hci3: command 0x0406 tx timeout [ 2479.359854][T24263] usb 9-1: config 201 has an invalid interface number: 249 but max is 0 [ 2479.359884][T24263] usb 9-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2479.359905][T24263] usb 9-1: config 201 has no interface number 0 [ 2479.360008][T24263] usb 9-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2479.360041][T24263] usb 9-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2479.360064][T24263] usb 9-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2479.360092][T24263] usb 9-1: config 201 interface 249 has no altsetting 0 [ 2479.374845][T24263] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2479.374876][T24263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.374897][T24263] usb 9-1: Product: syz [ 2479.374912][T24263] usb 9-1: Manufacturer: syz [ 2479.374927][T24263] usb 9-1: SerialNumber: syz [ 2479.603966][T24263] ath6kl: Failed to submit usb control message: -71 [ 2479.603999][T24263] ath6kl: unable to send the bmi data to the device: -71 [ 2479.604008][T24263] ath6kl: Unable to send get target info: -71 [ 2479.631462][T24263] ath6kl: Failed to init ath6kl core: -71 [ 2479.631994][T24263] ath6kl_usb 9-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2479.734948][T24263] usb 9-1: USB disconnect, device number 72 [ 2481.392107][T31744] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7571'. [ 2481.415295][T31557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2481.415312][T31557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2481.415336][T31557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2481.460441][T31557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2481.460458][T31557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2481.460486][T31557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2482.496682][T31754] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2482.496709][T31754] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2482.496722][T31754] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2482.910713][T31557] hsr_slave_0: entered promiscuous mode [ 2482.917330][T31557] hsr_slave_1: entered promiscuous mode [ 2483.254255][T30938] erspan0: left allmulticast mode [ 2483.254283][T30938] erspan0: left promiscuous mode [ 2483.254530][T30938] bridge0: port 3(erspan0) entered disabled state [ 2484.355070][T30938] bridge_slave_1: left allmulticast mode [ 2484.355091][T30938] bridge_slave_1: left promiscuous mode [ 2484.393748][T30938] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.605953][T30938] bridge_slave_0: left allmulticast mode [ 2484.605982][T30938] bridge_slave_0: left promiscuous mode [ 2484.606236][T30938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.885646][T30938] veth0_to_bond: left allmulticast mode [ 2484.885676][T30938] veth0_to_bond: left promiscuous mode [ 2484.885889][T30938] bridge4: port 2(veth0_to_bond) entered disabled state [ 2485.034183][T30938] veth3: left allmulticast mode [ 2485.034212][T30938] veth3: left promiscuous mode [ 2485.052728][T30938] bridge4: port 1(veth3) entered disabled state [ 2485.524867][T31781] syz.8.7579 (31781): drop_caches: 2 [ 2485.915178][T31786] block nbd8: NBD_DISCONNECT [ 2485.920238][T31785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7581'. [ 2485.928361][T31785] 9p: Bad value for 'rfdno' [ 2485.982617][ T804] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 2486.126953][ T804] usb 7-1: config 201 has an invalid interface number: 249 but max is 0 [ 2486.126972][ T804] usb 7-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2486.126983][ T804] usb 7-1: config 201 has no interface number 0 [ 2486.127009][ T804] usb 7-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2486.127024][ T804] usb 7-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2486.127036][ T804] usb 7-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2486.127051][ T804] usb 7-1: config 201 interface 249 has no altsetting 0 [ 2486.128876][ T804] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2486.128893][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.128903][ T804] usb 7-1: Product: syz [ 2486.128911][ T804] usb 7-1: Manufacturer: syz [ 2486.128919][ T804] usb 7-1: SerialNumber: syz [ 2486.174397][T26185] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2486.337116][ T804] ath6kl: Failed to submit usb control message: -71 [ 2486.337147][ T804] ath6kl: unable to send the bmi data to the device: -71 [ 2486.337172][ T804] ath6kl: Unable to send get target info: -71 [ 2486.427142][ T804] ath6kl: Failed to init ath6kl core: -71 [ 2486.427601][ T804] ath6kl_usb 7-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2486.436849][ T804] usb 7-1: USB disconnect, device number 6 [ 2486.457690][T26185] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2486.457717][T26185] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2486.457737][T26185] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2486.497891][T26185] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2486.497910][T26185] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.497921][T26185] usb 9-1: Product: syz [ 2486.497929][T26185] usb 9-1: Manufacturer: syz [ 2486.497938][T26185] usb 9-1: SerialNumber: syz [ 2486.837165][T26185] usb 9-1: 0:2 : does not exist [ 2486.911378][T26185] usb 9-1: USB disconnect, device number 73 [ 2486.989314][T31784] block nbd8: Disconnected due to user request. [ 2486.989338][T31784] block nbd8: shutting down sockets [ 2488.760319][T31795] syz.8.7583 (31795): drop_caches: 2 [ 2488.829038][T31797] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7584'. [ 2490.287886][T30938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2490.352489][T30938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2490.374378][T30938] bond0 (unregistering): Released all slaves [ 2490.384275][T30938] bond1 (unregistering): Released all slaves [ 2490.393351][T30938] bond2 (unregistering): Released all slaves [ 2490.444678][T31792] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2490.444721][T31792] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2490.444742][T31792] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2492.784998][T30938] tipc: Disabling bearer [ 2492.925054][T30938] tipc: Left network mode [ 2493.233120][T31821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7592'. [ 2494.110052][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7592'. [ 2494.534913][T24263] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 2494.721774][T24263] usb 7-1: config 201 has an invalid interface number: 249 but max is 0 [ 2494.721842][T24263] usb 7-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 2494.721896][T24263] usb 7-1: config 201 has no interface number 0 [ 2494.722248][T24263] usb 7-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2494.722279][T24263] usb 7-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2494.722303][T24263] usb 7-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2494.794712][T24263] usb 7-1: config 201 interface 249 has no altsetting 0 [ 2494.910204][T24263] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2494.910244][T24263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.910302][T24263] usb 7-1: Product: syz [ 2494.910355][T24263] usb 7-1: Manufacturer: syz [ 2494.910371][T24263] usb 7-1: SerialNumber: syz [ 2495.504570][T31838] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7595'. [ 2495.719279][T24263] ath6kl: Failed to submit usb control message: -71 [ 2495.719328][T24263] ath6kl: unable to send the bmi data to the device: -71 [ 2495.719343][T24263] ath6kl: Unable to send get target info: -71 [ 2495.721651][T24263] ath6kl: Failed to init ath6kl core: -71 [ 2495.722199][T24263] ath6kl_usb 7-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2495.739913][T24263] usb 7-1: USB disconnect, device number 7 [ 2496.786190][T31844] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2496.786227][T31844] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2496.786244][T31844] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2497.311601][T31849] nvme_fabrics: missing parameter 'transport=%s' [ 2497.311620][T31849] nvme_fabrics: missing parameter 'nqn=%s' [ 2497.489513][T31863] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7597'. [ 2497.844923][ T5886] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 2498.008983][ T5886] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 2498.009042][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2498.012411][ T5886] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2498.012440][ T5886] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2498.012462][ T5886] usb 8-1: Manufacturer: syz [ 2498.061042][ T5886] usb 8-1: config 0 descriptor?? [ 2500.038872][ T5886] rc_core: IR keymap rc-hauppauge not found [ 2500.038929][ T5886] Registered IR keymap rc-empty [ 2500.056012][ T5886] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2500.097240][ T5886] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input134 [ 2500.193501][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 2501.797336][ T5886] usb 8-1: USB disconnect, device number 112 [ 2502.274120][T31896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7604'. [ 2503.333843][T31907] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7606'. [ 2503.427217][T31908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7604'. [ 2503.481707][T31903] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2503.481742][T31903] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2503.481763][T31903] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2504.031118][T31916] nvme_fabrics: missing parameter 'transport=%s' [ 2504.031131][T31916] nvme_fabrics: missing parameter 'nqn=%s' [ 2505.216469][T31926] nvme_fabrics: missing parameter 'transport=%s' [ 2505.216489][T31926] nvme_fabrics: missing parameter 'nqn=%s' [ 2508.565530][T31951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7618'. [ 2508.639672][T30938] hsr_slave_0: left promiscuous mode [ 2508.690013][T30938] hsr_slave_1: left promiscuous mode [ 2508.701986][T30938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2508.702015][T30938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2508.740944][T30938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2508.740971][T30938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2508.789589][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7618'. [ 2508.793564][T31953] nvme_fabrics: missing parameter 'transport=%s' [ 2508.793581][T31953] nvme_fabrics: missing parameter 'nqn=%s' [ 2508.922311][T31967] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7620'. [ 2509.026412][T30938] veth1_macvtap: left promiscuous mode [ 2509.026486][T30938] veth0_macvtap: left promiscuous mode [ 2509.026666][T30938] veth1_vlan: left promiscuous mode [ 2509.026798][T30938] veth0_vlan: left promiscuous mode [ 2509.425042][T31976] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7621'. [ 2512.160972][T32000] nvme_fabrics: missing parameter 'transport=%s' [ 2512.160991][T32000] nvme_fabrics: missing parameter 'nqn=%s' [ 2512.624529][T32010] syz.6.7624 (32010): drop_caches: 2 [ 2513.087316][T32019] nvme_fabrics: missing parameter 'transport=%s' [ 2513.087329][T32019] nvme_fabrics: missing parameter 'nqn=%s' [ 2514.366027][T16119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2514.372094][T16119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2514.373545][T16119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2514.407821][T16119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2514.409145][T16119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2514.614267][T30938] team0 (unregistering): Port device team_slave_1 removed [ 2514.933233][T30938] team0 (unregistering): Port device team_slave_0 removed [ 2516.561444][T16119] Bluetooth: hci0: command tx timeout [ 2518.643985][T16119] Bluetooth: hci0: command tx timeout [ 2519.065679][T32023] lo speed is unknown, defaulting to 1000 [ 2519.647930][T32023] chnl_net:caif_netlink_parms(): no params data found [ 2520.719929][T16119] Bluetooth: hci0: command tx timeout [ 2520.737087][T32023] bridge0: port 1(bridge_slave_0) entered blocking state [ 2520.748066][T32023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2520.748276][T32023] bridge_slave_0: entered allmulticast mode [ 2520.765125][T32023] bridge_slave_0: entered promiscuous mode [ 2520.768342][T32023] bridge0: port 2(bridge_slave_1) entered blocking state [ 2520.768468][T32023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2520.768664][T32023] bridge_slave_1: entered allmulticast mode [ 2520.798876][T32023] bridge_slave_1: entered promiscuous mode [ 2521.066968][T32023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2521.105335][T32023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2521.105595][T30938] bridge_slave_1: left allmulticast mode [ 2521.105618][T30938] bridge_slave_1: left promiscuous mode [ 2521.105854][T30938] bridge0: port 2(bridge_slave_1) entered disabled state [ 2521.190082][T30938] bridge_slave_0: left allmulticast mode [ 2521.190104][T30938] bridge_slave_0: left promiscuous mode [ 2521.190285][T30938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2521.479140][T30938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2521.559248][T30938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2521.620970][T30938] bond0 (unregistering): Released all slaves [ 2522.107597][T30938] hsr_slave_0: left promiscuous mode [ 2522.147763][T30938] hsr_slave_1: left promiscuous mode [ 2522.148457][T30938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2522.191526][T30938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2522.786616][T16119] Bluetooth: hci0: command tx timeout [ 2523.256716][T30938] team0 (unregistering): Port device team_slave_1 removed [ 2523.476019][T30938] team0 (unregistering): Port device team_slave_0 removed [ 2524.208506][T32023] team0: Port device team_slave_0 added [ 2524.242121][T32023] team0: Port device team_slave_1 added [ 2524.518332][T32023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2524.518348][T32023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2524.518381][T32023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2524.520895][T32023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2524.520910][T32023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2524.520937][T32023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2524.898046][T32023] hsr_slave_0: entered promiscuous mode [ 2524.899455][T32023] hsr_slave_1: entered promiscuous mode [ 2525.720371][T32023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2525.756003][T32023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2525.795264][T32023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2525.835488][T32023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2525.950442][T32023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2525.971577][T32023] 8021q: adding VLAN 0 to HW filter on device team0 [ 2525.981031][T17854] bridge0: port 1(bridge_slave_0) entered blocking state [ 2525.981160][T17854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2525.998605][T17854] bridge0: port 2(bridge_slave_1) entered blocking state [ 2525.998705][T17854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2526.216140][T32023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2526.278746][T32023] veth0_vlan: entered promiscuous mode [ 2526.286770][T32023] veth1_vlan: entered promiscuous mode [ 2526.323885][T32023] veth0_macvtap: entered promiscuous mode [ 2526.327215][T32023] veth1_macvtap: entered promiscuous mode [ 2526.343227][T32023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2526.348058][T32023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2526.360808][ T1101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2526.360899][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2526.360935][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2526.360971][ T1101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2526.632654][T30633] ------------[ cut here ]------------ [ 2526.632666][T30633] kernel BUG at net/ipv6/route.c:1473! [ 2526.634522][T30633] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2526.634560][T30633] CPU: 1 UID: 0 PID: 30633 Comm: kworker/1:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2526.634588][T30633] Tainted: [L]=SOFTLOCKUP [ 2526.634596][T30633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2526.634609][T30633] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 2526.634733][T30633] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 2526.634817][T30633] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 8e 72 9d f8 e9 f6 fa ff ff e8 54 3b 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 2526.634834][T30633] RSP: 0018:ffffc90004f570e0 EFLAGS: 00010293 [ 2526.634851][T30633] RAX: ffffffff89846ecc RBX: ffff888126def000 RCX: ffff888024703c80 [ 2526.634866][T30633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2526.634878][T30633] RBP: ffffc90004f571f0 R08: ffffe8ffffb19637 R09: 1ffffd1ffff632c6 [ 2526.634893][T30633] R10: dffffc0000000000 R11: fffff91ffff632c7 R12: ffff8880acffcdc0 [ 2526.634908][T30633] R13: ffffffff89845eb2 R14: dffffc0000000000 R15: 0000607ed8d2a630 [ 2526.634923][T30633] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 2526.634940][T30633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2526.634953][T30633] CR2: 00007fff89f1ee98 CR3: 0000000035568000 CR4: 00000000003526f0 [ 2526.634971][T30633] Call Trace: [ 2526.634982][T30633] [ 2526.634995][T30633] ? ip6_pol_route+0x162/0x1180 [ 2526.635023][T30633] ? __pfx_ip6_pol_route+0x10/0x10 [ 2526.635044][T30633] ? __lock_acquire+0x6b6/0x2cf0 [ 2526.635075][T30633] fib6_rule_lookup+0x1fc/0x6f0 [ 2526.635147][T30633] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 2526.635170][T30633] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 2526.635194][T30633] ? ip6_route_output_flags+0x2e/0x5d0 [ 2526.635223][T30633] ? ip6_route_output_flags+0x2e/0x5d0 [ 2526.635251][T30633] ip6_route_output_flags+0x364/0x5d0 [ 2526.635274][T30633] ? ip6_route_output_flags+0x2e/0x5d0 [ 2526.635297][T30633] ip6_dst_lookup_tail+0x299/0x1510 [ 2526.635328][T30633] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 2526.635353][T30633] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 2526.635375][T30633] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 2526.635394][T30633] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 2526.635417][T30633] ip6_dst_lookup_flow+0x47/0xe0 [ 2526.635442][T30633] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 2526.635466][T30633] send6+0x4ce/0x8d0 [ 2526.635485][T30633] ? rt_read_lock+0x203/0x490 [ 2526.635581][T30633] ? send6+0x220/0x8d0 [ 2526.635602][T30633] ? __pfx_send6+0x10/0x10 [ 2526.635619][T30633] ? rcu_is_watching+0x15/0xb0 [ 2526.635642][T30633] ? __local_bh_disable_ip+0x3c/0x420 [ 2526.635670][T30633] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 2526.635691][T30633] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 2526.635711][T30633] wg_socket_send_skb_to_peer+0x128/0x200 [ 2526.635733][T30633] wg_packet_send_handshake_response+0x195/0x2d0 [ 2526.635755][T30633] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 2526.635775][T30633] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 2526.635826][T30633] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2526.635847][T30633] ? lockdep_hardirqs_on+0x7b/0x110 [ 2526.635867][T30633] wg_packet_handshake_receive_worker+0x6a6/0xf90 [ 2526.635887][T30633] ? __lock_acquire+0x6b6/0x2cf0 [ 2526.635909][T30633] ? look_up_lock_class+0x57/0x110 [ 2526.635928][T30633] ? wg_packet_handshake_receive_worker+0x152/0xf90 [ 2526.635952][T30633] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 2526.635974][T30633] ? finish_task_switch+0x162/0x940 [ 2526.636011][T30633] ? do_raw_spin_lock+0x121/0x290 [ 2526.636030][T30633] ? lock_acquire+0x107/0x340 [ 2526.636053][T30633] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2526.636074][T30633] ? process_scheduled_works+0x9ef/0x1770 [ 2526.636096][T30633] ? process_scheduled_works+0x9ef/0x1770 [ 2526.636118][T30633] ? process_scheduled_works+0x9ef/0x1770 [ 2526.636138][T30633] ? process_scheduled_works+0x9ef/0x1770 [ 2526.636158][T30633] process_scheduled_works+0xad1/0x1770 [ 2526.636188][T30633] ? __pfx_process_scheduled_works+0x10/0x10 [ 2526.636227][T30633] ? do_raw_spin_lock+0x121/0x290 [ 2526.636254][T30633] worker_thread+0x8a0/0xda0 [ 2526.636279][T30633] ? __kthread_parkme+0x7b/0x200 [ 2526.636304][T30633] kthread+0x711/0x8a0 [ 2526.636329][T30633] ? __pfx_worker_thread+0x10/0x10 [ 2526.636349][T30633] ? __pfx_kthread+0x10/0x10 [ 2526.636371][T30633] ? rt_spin_unlock+0x150/0x200 [ 2526.636394][T30633] ? rt_spin_unlock+0x161/0x200 [ 2526.636416][T30633] ? __pfx_kthread+0x10/0x10 [ 2526.636439][T30633] ret_from_fork+0x510/0xa50 [ 2526.636468][T30633] ? __pfx_ret_from_fork+0x10/0x10 [ 2526.636486][T30633] ? __switch_to+0xc9e/0x1480 [ 2526.636513][T30633] ? __pfx_kthread+0x10/0x10 [ 2526.636536][T30633] ret_from_fork_asm+0x1a/0x30 [ 2526.636591][T30633] [ 2526.636602][T30633] Modules linked in: [ 2526.636626][T30633] ---[ end trace 0000000000000000 ]--- [ 2526.636646][T30633] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 2526.636669][T30633] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 8e 72 9d f8 e9 f6 fa ff ff e8 54 3b 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 2526.636685][T30633] RSP: 0018:ffffc90004f570e0 EFLAGS: 00010293 [ 2526.636702][T30633] RAX: ffffffff89846ecc RBX: ffff888126def000 RCX: ffff888024703c80 [ 2526.636717][T30633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2526.636730][T30633] RBP: ffffc90004f571f0 R08: ffffe8ffffb19637 R09: 1ffffd1ffff632c6 [ 2526.636745][T30633] R10: dffffc0000000000 R11: fffff91ffff632c7 R12: ffff8880acffcdc0 [ 2526.636760][T30633] R13: ffffffff89845eb2 R14: dffffc0000000000 R15: 0000607ed8d2a630 [ 2526.636775][T30633] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 2526.636791][T30633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2526.636806][T30633] CR2: 00007fff89f1ee98 CR3: 0000000035568000 CR4: 00000000003526f0 [ 2526.636829][T30633] Kernel panic - not syncing: Fatal exception in interrupt [ 2526.637287][T30633] Kernel Offset: disabled