last executing test programs: 17m58.024628037s ago: executing program 2 (id=19): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, &(0x7f0000001d40)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 17m55.363437011s ago: executing program 2 (id=21): socket$netlink(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000e80)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) close(0xffffffffffffffff) 17m46.982036088s ago: executing program 2 (id=29): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x5, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 17m45.726421838s ago: executing program 2 (id=33): quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0xee01, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r3, 0x0, 0x0) io_destroy(r3) 17m43.414620998s ago: executing program 2 (id=38): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8080000, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001cd00)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x11, 0x0, &(0x7f0000000040)) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r5, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r7, &(0x7f0000000000)={r0, r6, 0x4}) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$PPPIOCUNBRIDGECHAN(r7, 0x7434) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) connect$unix(r6, &(0x7f0000000080)=@file={0x1}, 0x6e) 17m41.385773478s ago: executing program 2 (id=39): r0 = syz_usb_connect$hid(0x1, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x82, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe342"], 0x10b8}, 0x4000000) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r6, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000a40)='T', 0x1}], 0x2, 0x80, 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) add_key(0x0, &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 17m26.313894997s ago: executing program 32 (id=39): r0 = syz_usb_connect$hid(0x1, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x82, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe342"], 0x10b8}, 0x4000000) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r6, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000a40)='T', 0x1}], 0x2, 0x80, 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) add_key(0x0, &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 16m42.194000306s ago: executing program 3 (id=126): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x4000, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 16m40.309487252s ago: executing program 3 (id=132): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a1c2cb00e382b0936b1b000211bb3bda660", 0x8b, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) 16m39.083477084s ago: executing program 3 (id=133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 16m35.403569163s ago: executing program 1 (id=138): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x5, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 16m34.791055977s ago: executing program 1 (id=139): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x5, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 16m33.974869508s ago: executing program 1 (id=141): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x206800) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000380)={{0x2, 0x2, 0xbbc0, 0xe2}, 0x6, 0x20000000, 0x0, r1, 0x6, 0x9e0e, 'syz0\x00', &(0x7f0000000200)=['(\x00', 'rpfilter\x00', '#\x00', '(\x00', '/dev/snd/controlC#\x00', '*${\x00'], 0x26}) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae60140000001100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0xf}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 16m31.959210196s ago: executing program 1 (id=147): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000240)="9b1dd63cb7d6335fbb76f160265f6945b0d42872cf95bb33", 0x18, 0x3b00, 0x0, 0x0) 16m31.664032159s ago: executing program 1 (id=149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8080000, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001cd00)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x11, 0x0, &(0x7f0000000040)) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x1) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r8, &(0x7f0000000000)={r0, r7, 0x4}) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$PPPIOCUNBRIDGECHAN(r8, 0x7434) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e) 16m29.762492222s ago: executing program 1 (id=150): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000e4f6ffff0000d6b35bdd8ad541ca6500000000000400fe000000887fb50dc4ad58f0200fde94384dc1bd0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 16m29.318772826s ago: executing program 3 (id=153): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) 16m27.834008209s ago: executing program 3 (id=154): write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r5, 0x0, 0x0) io_destroy(r5) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 16m26.551866583s ago: executing program 3 (id=155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r1, &(0x7f0000000f00)=@other={'lock', ' ', 'none'}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000e4f6ffff0000d6b35bdd8ad541ca6500000000000400fe000000887fb50dc4ad58f0200fde94384dc1bd0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd2d, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x9, 0x9}, {0x10, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000007680586d5bb1684a0000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xea, 0xf6, 0xd1, 0x8, 0x483, 0x1234, 0x761a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x8, 0x80, 0x40, "", [{{0x9, 0x4, 0xac, 0x5, 0x0, 0x62, 0x11, 0xe1, 0x9}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 16m13.170906095s ago: executing program 33 (id=150): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000e4f6ffff0000d6b35bdd8ad541ca6500000000000400fe000000887fb50dc4ad58f0200fde94384dc1bd0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 16m10.505863464s ago: executing program 34 (id=155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r1, &(0x7f0000000f00)=@other={'lock', ' ', 'none'}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000e4f6ffff0000d6b35bdd8ad541ca6500000000000400fe000000887fb50dc4ad58f0200fde94384dc1bd0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd2d, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x9, 0x9}, {0x10, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000007680586d5bb1684a0000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xea, 0xf6, 0xd1, 0x8, 0x483, 0x1234, 0x761a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x8, 0x80, 0x40, "", [{{0x9, 0x4, 0xac, 0x5, 0x0, 0x62, 0x11, 0xe1, 0x9}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 13m26.824073148s ago: executing program 0 (id=316): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x206800) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000380)={{0x2, 0x2, 0xbbc0, 0xe2}, 0x6, 0x20000000, 0x0, r1, 0x0, 0x9e0e, 'syz0\x00', &(0x7f0000000200)}) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae60140000001100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0xf}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 13m26.569557081s ago: executing program 0 (id=317): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m26.450934041s ago: executing program 0 (id=318): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000540)="929475f3d500c93ccc91a5bb7d873de924c66e5d55d354de2818f44c5f3d5c12c169", 0x1003, r2}, 0x38) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x80, 0x0, 0x7, 0xf7effffe}, {0x16, 0x0, 0x0, 0x1000}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20000023896) 13m24.831811668s ago: executing program 0 (id=320): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) signalfd4(r1, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) 13m22.695003407s ago: executing program 0 (id=322): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) 13m15.491322266s ago: executing program 0 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 12m59.258259861s ago: executing program 35 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 11.746809115s ago: executing program 7 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) getpid() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)=0x40) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@uid={'uid', 0x3d, r3}}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @remote}, 0x4, {0x2, 0x0, @empty}, 'lo\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030000000001000000000000000011000300686173683a69702c706f7274000000000900020073797a31000000000c000780080012400ffffffc050005000a00000005000400010009000500010007000000"], 0x58}}, 0x8090) 9.453750238s ago: executing program 7 (id=1498): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$key(0xf, 0x3, 0x2) dup3(r2, r1, 0x0) 9.21469186s ago: executing program 4 (id=1500): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 8.520476901s ago: executing program 4 (id=1501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa00", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r1, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)=""/136, 0x88}], 0x1}}], 0x1, 0x42, 0x0) 8.360432706s ago: executing program 4 (id=1504): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 8.13835988s ago: executing program 6 (id=1506): socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, r2, 0x0) r5 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001b00)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000100)=0x4, 0x4) 8.015161137s ago: executing program 4 (id=1508): syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000ceba569900240001082dbd7000fadbdf250c00000006000400fd000000"], 0x1c}}, 0x40050) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40000008}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) io_uring_setup(0x1004c55, &(0x7f0000000180)={0x0, 0x7c70, 0x10000, 0x2, 0x2ba}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000200)={'\x00', 0xff4a, 0x8, 0x4, 0x7, 0xfffffffffffffffb, 0xffffffffffffffff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2000775) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1a, 0x1, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bond0\x00'}) syz_open_dev$video(&(0x7f0000000080), 0x488, 0x3d5eeeca91f62bb9) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x3f00, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) 7.928767828s ago: executing program 6 (id=1510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) socket$inet(0x10, 0x3, 0x0) 6.711942972s ago: executing program 6 (id=1511): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 6.582914888s ago: executing program 5 (id=1512): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 6.026063675s ago: executing program 6 (id=1513): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) syz_usb_connect$midi(0x2, 0x31, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201120100000008e80962004000010203010902"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) recvmmsg(r3, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1}, 0x1800000}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111710000000000851000000200000085000000a000000095000000000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x966df94220706ae4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}]}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r6, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) 5.291192865s ago: executing program 8 (id=1515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x23, 0x1, [0x0]}, 0xa) 5.17776036s ago: executing program 5 (id=1516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff7) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x14}, 0x12, 0x1}}) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.087725556s ago: executing program 8 (id=1517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000004380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200025, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '\xbd*'}}, {@measure}, {@dont_measure}]}, 0xff, 0xc48, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.981136426s ago: executing program 5 (id=1518): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 4.950033863s ago: executing program 7 (id=1519): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f000000cc00)='./file0/file1/file0\x00', 0x0) inotify_init1(0x0) 4.506906047s ago: executing program 7 (id=1520): socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, r2, 0x0) r5 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001b00)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000100)=0x4, 0x4) 3.730767169s ago: executing program 8 (id=1521): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030322c736d61636b6673665e6f6f723d736d61636b66737472616e732d7574652c666f776e65723ee913b6e7858b459aea76a61374d95a5ba0ea131492042d59ca3669979b6c1e1ec7d9bb6c99ec974795d51b342596c4a62342a4d28a02f68f2ee922c8041f11fad6b3d4a0518253955e447f57f4d4dc2acad3457c75d1861af156d552fb5c05e042d5b09427d15fea177d488b", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab", @ANYBLOB="f9c1eb3e827127e08d98faa9d0c71b0e9140cd349baa"], 0xa, 0xc35, &(0x7f0000001c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x2, 0x40000867, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {0xd}, {0x3, 0xb}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x10022, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 3.730334986s ago: executing program 5 (id=1522): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000004380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200025, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '\xbd*'}}, {@measure}, {@dont_measure}]}, 0xff, 0xc48, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) 3.280567721s ago: executing program 7 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}, 0x1, 0x0, 0x0, 0x240048a0}, 0x6004000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x115, 0x70bd28, 0x25dfdbfd, {0x2, 0x18, 0x20, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x3, 0x14840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x61}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000044) 2.114064017s ago: executing program 5 (id=1524): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r0 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) ioprio_get$pid(0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 2.106690602s ago: executing program 4 (id=1525): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000004380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200025, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '\xbd*'}}, {@measure}, {@dont_measure}]}, 0xff, 0xc48, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) 2.049631288s ago: executing program 7 (id=1526): syz_open_dev$dvb_demux(&(0x7f0000000000), 0x4, 0x109000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r2, 0x50) r3 = syz_usb_connect$midi(0x1, 0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000083512100040000102030109021f00010118100409040001010103200609058e"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) syz_emit_ethernet(0x4f, &(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRESDEC=r1, @ANYRES64=0x0], 0x0) 1.802887871s ago: executing program 6 (id=1527): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.632946302s ago: executing program 8 (id=1528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff7) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x14}, 0x12, 0x1}}) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 254.013953ms ago: executing program 4 (id=1529): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$key(0xf, 0x3, 0x2) dup3(r2, r1, 0x0) 161.666056ms ago: executing program 8 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 143.175874ms ago: executing program 6 (id=1531): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000004380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200025, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '\xbd*'}}, {@measure}, {@dont_measure}]}, 0xff, 0xc48, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 129.839079ms ago: executing program 5 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 0s ago: executing program 8 (id=1533): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030322c736d61636b6673665e6f6f723d736d61636b66737472616e732d7574652c666f776e65723ee913b6e7858b459aea76a61374d95a5ba0ea131492042d59ca3669979b6c1e1ec7d9bb6c99ec974795d51b342596c4a62342a4d28a02f68f2ee922c8041f11fad6b3d4a0518253955e447f57f4d4dc2acad3457c75d1861af156d552fb5c05e042d5b09427d15fea177d488b", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab", @ANYBLOB="f9c1eb3e827127e08d98faa9d0c71b0e9140cd349baa"], 0xa, 0xc35, &(0x7f0000001c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x2, 0x40000867, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {0xd}, {0x3, 0xb}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x10022, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "200200", 0x48, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): etected capacity change from 0 to 2048 [ 1039.304426][T12957] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1039.304859][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.306510][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.313236][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.322211][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.325250][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.336831][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.337580][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.376073][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.388288][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.397559][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.398363][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.398857][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.401185][ T8553] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.405949][ T8553] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.416547][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.418835][ T8553] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.420477][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.426258][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.438437][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.438573][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.442637][T12957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.443125][ T8530] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1039.445414][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.447438][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.453818][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.458296][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.461010][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.461119][ T8530] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.546805][T12240] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1039.624269][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.702278][T12962] loop5: detected capacity change from 0 to 2048 [ 1039.716851][T12240] usb 5-1: Using ep0 maxpacket: 32 [ 1039.718348][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.719215][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.721068][T12962] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1039.730173][T12240] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1039.730201][T12240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.741487][T12240] usb 5-1: config 0 descriptor?? [ 1039.759096][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.759429][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.759701][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.760646][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.795742][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.797160][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.802313][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.803110][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.804492][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.810716][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.852563][T12962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.854172][ T8538] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1039.856590][ T8538] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.876894][ T8568] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.971124][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.972866][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.977024][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.977512][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.977972][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.977995][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.978008][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.978021][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.978033][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.978045][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979664][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979690][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979704][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979729][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979742][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979754][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.979766][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.980334][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.980729][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.981578][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.981968][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.982652][ T8553] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983345][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983369][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983382][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983394][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983406][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983418][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.983430][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.985723][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.986048][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1039.999414][T12240] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1040.021845][T12240] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1040.021889][T12240] dib0700: firmware download failed at 7 with -22 [ 1040.198406][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.204261][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.523635][ T8554] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1040.534437][ T8554] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1040.534661][ T8554] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1040.587679][ T8554] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1041.065967][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.078347][ T8538] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.296573][ T8538] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.350298][T11429] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1042.471337][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.471810][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.479816][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.479865][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.479911][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.479941][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.530389][ T8538] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.547461][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1042.634072][T12971] loop8: detected capacity change from 0 to 2048 [ 1042.651984][T12971] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1042.652669][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.652820][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.653336][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.654227][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.654493][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.654682][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.654850][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.655156][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.655481][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.655937][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.656049][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.656356][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.679089][T12240] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 1042.699506][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.707114][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.737860][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.738470][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.738505][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.738528][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.738550][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.738572][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.738594][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.789928][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.790845][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.790965][T12971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.795476][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1042.817562][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.829704][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.833475][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.835277][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.837994][T12240] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1042.843064][T12240] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.843125][T12240] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1042.843149][T12240] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1042.850726][T12240] usb 6-1: string descriptor 0 read error: -22 [ 1042.850863][T12240] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1042.850887][T12240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.863515][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.865473][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.872345][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.877247][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.877288][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.877311][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.968826][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1043.239937][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.242516][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.242583][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.242627][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.242818][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.273476][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.365721][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1043.384081][ T8561] team0 (unregistering): Port device team_slave_1 removed [ 1043.486173][ T8561] team0 (unregistering): Port device team_slave_0 removed [ 1043.501363][T12240] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1043.708281][T12734] hsr_slave_0: entered promiscuous mode [ 1043.709599][T12734] hsr_slave_1: entered promiscuous mode [ 1043.710609][T12734] debugfs: 'hsr0' already exists in 'hsr' [ 1043.710633][T12734] Cannot create hsr debugfs directory [ 1043.750999][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1043.818904][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.841461][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.956873][ T8523] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.976037][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.976093][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.976138][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.976183][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.976220][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.982303][ T205] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1043.999999][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1044.084773][T12981] loop8: detected capacity change from 0 to 2048 [ 1044.097158][T12981] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1044.100083][ T205] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.136550][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.143285][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.144575][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.144762][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.157988][ T1244] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.162632][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.167748][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.168491][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.174601][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.195623][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.209178][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.212786][ T8523] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.212935][T12981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1044.213085][ T8523] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.214363][ T8523] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.214541][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.222234][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.225243][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.230300][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.251195][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.252250][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.252279][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.252302][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.252324][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.252347][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.261476][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.265648][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.267260][T12240] usb 6-1: USB disconnect, device number 26 [ 1044.284877][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.299759][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.305449][ T8538] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.330298][ T9158] usb 5-1: USB disconnect, device number 79 [ 1044.335534][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.348009][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.348053][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.348077][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.362516][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.597050][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.597135][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.597206][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.597274][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.692575][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.782462][T12756] team0: Port device team_slave_0 added [ 1044.828488][T12756] team0: Port device team_slave_1 added [ 1044.838299][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.838915][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.838961][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.839003][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.839047][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.839076][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.954491][ T8568] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1044.965423][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1045.006497][T12991] loop4: detected capacity change from 0 to 2048 [ 1045.045903][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.046385][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.049386][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.051071][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.051726][ T8525] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.052354][ T8525] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.053017][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.053662][ T8525] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.054314][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.061286][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.121039][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.131046][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.164649][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.222037][T12991] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1045.229232][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.231048][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.232907][ T8537] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.235200][ T8537] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.235428][ T8537] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.240240][ T8537] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.247971][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.275613][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.298582][T12993] loop8: detected capacity change from 0 to 2048 [ 1045.315059][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.315531][ T8537] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.316040][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.316340][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.316414][T12991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.316512][ T1244] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.317935][ T8537] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.319138][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.413089][ T1244] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.415392][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.417871][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.419982][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.421052][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.423670][T12993] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1045.485273][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.487550][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.487564][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.487589][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.489543][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.491182][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.491417][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.491919][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.492460][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.492887][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.493097][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.493661][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.494099][ T8537] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.494215][T12993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.494364][ T8537] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.519147][ T1244] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.533994][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.539747][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.540711][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542414][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542451][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542474][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542496][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542518][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542539][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.542568][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543680][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543716][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543738][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543760][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543782][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543804][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.543825][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.544786][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.547273][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.549356][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.562467][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.569579][ T8568] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.572821][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575795][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575832][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575855][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575877][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575898][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575919][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.575940][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.591465][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.591478][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.591504][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.824563][ T8568] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.824647][ T8568] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.824716][ T8568] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.824786][ T8568] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.834388][ T8537] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1045.909068][T11135] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1046.105299][T12240] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1046.264283][T12240] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1046.264307][T12240] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.264326][T12240] usb 9-1: config 0 has no interface number 0 [ 1046.264362][T12240] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1046.264386][T12240] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1046.264408][T12240] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1046.264433][T12240] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1046.272064][T12240] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1046.272090][T12240] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1046.272111][T12240] usb 9-1: Manufacturer: syz [ 1046.279742][T12240] usb 9-1: config 0 descriptor?? [ 1046.365945][T12240] hub 9-1:0.52: bad descriptor, ignoring hub [ 1046.365975][T12240] hub 9-1:0.52: probe with driver hub failed with error -5 [ 1046.383823][T12756] hsr_slave_0: entered promiscuous mode [ 1046.396384][T12756] hsr_slave_1: entered promiscuous mode [ 1046.408312][T12756] debugfs: 'hsr0' already exists in 'hsr' [ 1046.408336][T12756] Cannot create hsr debugfs directory [ 1046.514637][T12240] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1046.514843][T12240] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1046.596916][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.611855][ T8537] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.611904][ T8537] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.611947][ T8537] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.611992][ T8537] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.612021][ T8537] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.647724][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1046.770075][ T5608] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1046.838750][ T5984] usb 9-1: USB disconnect, device number 50 [ 1047.449063][T11135] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1047.452001][T11135] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1047.452049][T11135] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1047.452080][T11135] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1047.502858][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1047.592126][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1047.809022][T13013] loop5: detected capacity change from 0 to 512 [ 1047.826564][ T1024] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.835454][T11135] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.835492][T11135] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.835511][T11135] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.843449][ T1244] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.846011][ T1244] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.848810][ T1244] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1047.854995][ T1024] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.856691][ T1244] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.904090][ T8537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.916654][T11135] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.934628][ T205] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.955781][ T1024] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1047.963855][T13013] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1172: dx entry: limit 1024 != root limit 124 [ 1047.963887][T13013] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1172: Corrupt directory, running e2fsck is recommended [ 1048.154588][T11135] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1048.254547][T13013] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1048.281542][ T205] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1048.281673][ T205] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1048.285187][T13013] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1172: corrupted in-inode xattr: invalid ea_ino [ 1048.285405][T13013] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1048.288727][ C1] EXT4-fs (loop5): initial error at time 1778337138: ext4_iget_extra_inode:5128: inode 15 [ 1048.288760][ C1] EXT4-fs (loop5): last error at time 1778337138: ext4_iget_extra_inode:5128: inode 15 [ 1048.322151][ T1024] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1048.322582][T13013] EXT4-fs (loop5): Remounting filesystem read-only [ 1048.365358][T13013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.467224][T13013] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1172: dx entry: limit 1024 != root limit 124 [ 1048.467261][T13013] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1172: Corrupt directory, running e2fsck is recommended [ 1048.523344][T13013] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1172: dx entry: limit 1024 != root limit 124 [ 1048.523377][T13013] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1172: Corrupt directory, running e2fsck is recommended [ 1049.492943][ T5858] kworker/0:7 (5858) used greatest stack depth: 15704 bytes left [ 1049.810425][T11429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.879194][T11429] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1049.948052][ T8561] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.175899][ T37] audit: type=1326 audit(1778337140.483:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.4.1174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f302072cdd9 code=0x0 [ 1050.263915][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1051.031125][ T8561] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.120315][T13033] loop4: detected capacity change from 0 to 2048 [ 1051.150821][T13033] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1051.152087][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.181571][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.183596][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.185862][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.185877][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.202984][ T8538] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.203222][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.203706][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.204109][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.204522][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.206215][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.269930][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.291991][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.292129][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.292592][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295059][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295192][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295694][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295717][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295731][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295743][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295755][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295767][ T8523] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.295967][T13033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1051.297419][ T8523] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1051.307936][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.307989][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.322666][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.324963][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.333403][T11135] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.361938][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.373507][ T205] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.414368][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.414410][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.414433][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.489918][T11135] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1051.619422][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1051.622528][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1051.622580][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1051.622619][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1051.628485][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1051.692813][ T1244] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1052.761873][ T205] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1052.762303][ T205] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1052.762351][ T205] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1052.762705][ T205] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1052.762762][ T205] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1052.762793][ T205] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1052.764834][ T8554] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1053.977148][ T5608] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1054.065516][T13046] netlink: 'syz.5.1179': attribute type 1 has an invalid length. [ 1054.117336][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1179'. [ 1054.143640][ T8561] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.307636][T12240] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1054.345095][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.345193][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.283390][T12240] usb 5-1: config 0 has no interfaces? [ 1055.286842][T12240] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1055.286870][T12240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.286888][T12240] usb 5-1: Product: syz [ 1055.286902][T12240] usb 5-1: Manufacturer: syz [ 1055.286915][T12240] usb 5-1: SerialNumber: syz [ 1055.306332][T12240] usb 5-1: config 0 descriptor?? [ 1055.461141][T13050] bond1: (slave gretap1): making interface the new active one [ 1055.524902][T13050] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1055.648058][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 1056.842617][ T8561] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.325763][ T5984] usb 5-1: USB disconnect, device number 80 [ 1057.436802][ T5746] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1057.522130][T13090] loop4: detected capacity change from 0 to 128 [ 1057.524555][T13091] netlink: 'syz.8.1190': attribute type 1 has an invalid length. [ 1057.550598][T11135] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.553210][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.553899][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554557][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554591][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554614][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554636][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554672][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554695][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554718][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.554740][ T8568] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.557754][ T8568] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1057.586503][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1190'. [ 1057.588887][ T5746] usb 6-1: Using ep0 maxpacket: 32 [ 1057.634820][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.634866][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.634890][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.634912][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.634935][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.634957][ T1024] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1057.647320][ T5746] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.647343][ T5746] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1057.647380][ T5746] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1057.647403][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.758558][ T5746] usb 6-1: config 0 descriptor?? [ 1057.953665][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1057.994016][T13094] bond6: (slave gretap1): making interface the new active one [ 1057.995043][ T8568] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1058.011095][ T5608] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1058.033319][T13094] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1058.388844][ T8561] bridge_slave_1: left allmulticast mode [ 1058.388877][ T8561] bridge_slave_1: left promiscuous mode [ 1058.389148][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.468566][ T8561] bridge_slave_0: left allmulticast mode [ 1058.468699][ T8561] bridge_slave_0: left promiscuous mode [ 1058.469062][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.488360][T13123] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1194'. [ 1059.440485][ T8561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.887281][ T8561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.908639][ T8561] bond0 (unregistering): Released all slaves [ 1060.272778][T12243] usb 6-1: USB disconnect, device number 27 [ 1060.446278][T13166] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 1060.562799][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1201'. [ 1060.950556][T13168] bond4: (slave gretap2): making interface the new active one [ 1060.953392][T13168] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1061.062784][T12243] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1061.219261][T12243] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1061.219289][T12243] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1061.219367][T12243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1061.219469][T12243] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1061.222385][T12243] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1061.222412][T12243] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1061.222432][T12243] usb 6-1: Product: syz [ 1061.222446][T12243] usb 6-1: Manufacturer: syz [ 1061.276564][T12243] cdc_wdm 6-1:1.0: skipping garbage [ 1061.276770][T12243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1063.508807][T12240] usb 6-1: USB disconnect, device number 28 [ 1063.786768][ T8561] hsr_slave_0: left promiscuous mode [ 1064.096911][ T8561] hsr_slave_1: left promiscuous mode [ 1064.098047][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.098070][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.136812][T12240] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1064.137766][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.137789][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.240470][ T8561] veth1_macvtap: left promiscuous mode [ 1064.254761][ T8561] veth0_macvtap: left promiscuous mode [ 1064.255141][ T8561] veth1_vlan: left promiscuous mode [ 1064.255335][ T8561] veth0_vlan: left promiscuous mode [ 1064.290258][T12240] usb 6-1: Using ep0 maxpacket: 32 [ 1064.299739][T12240] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.299763][T12240] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1064.299799][T12240] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1064.299823][T12240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.321425][T12240] usb 6-1: config 0 descriptor?? [ 1065.091232][T13229] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1213'. [ 1065.748291][ T8561] team0 (unregistering): Port device team_slave_1 removed [ 1065.787312][ T8561] team0 (unregistering): Port device team_slave_0 removed [ 1066.118247][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1066.693654][ T5746] usb 6-1: USB disconnect, device number 29 [ 1067.826864][T12240] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1068.019873][T12240] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1068.019901][T12240] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 1068.019920][T12240] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1068.019967][T12240] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.022081][T12240] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1068.022107][T12240] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1068.022128][T12240] usb 9-1: Product: syz [ 1068.022143][T12240] usb 9-1: Manufacturer: syz [ 1068.264436][T12240] cdc_wdm 9-1:1.0: skipping garbage [ 1068.264475][T12240] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1068.806268][T12734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1068.937029][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.983682][T12734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1069.122973][T13278] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1223'. [ 1069.146520][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1069.166691][T12734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1069.220095][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1069.241225][T12734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1069.279939][T12734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.827936][ T5746] usb 9-1: USB disconnect, device number 51 [ 1070.334745][T12756] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1070.393529][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.397733][T12756] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1070.459051][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.520833][T12756] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1070.549720][T12240] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1070.802336][T12240] usb 5-1: Using ep0 maxpacket: 32 [ 1070.832704][T12240] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.832729][T12240] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1070.832766][T12240] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1070.832789][T12240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.965551][T12240] usb 5-1: config 0 descriptor?? [ 1071.250539][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1071.332041][T12756] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1071.402460][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1071.634071][T12756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.658647][T12756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.665856][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.665988][ T8553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.702412][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.702592][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.594577][T12756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.553917][ T5614] usb 5-1: USB disconnect, device number 81 [ 1073.863406][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1073.896971][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1073.902149][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1073.903450][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1073.904108][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1075.423121][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1075.461251][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1075.465586][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1075.467100][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1075.468145][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1075.646124][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1237'. [ 1076.103165][ T5613] Bluetooth: hci2: command tx timeout [ 1076.519946][T13364] vlan2: entered allmulticast mode [ 1076.519967][T13364] bond7: entered allmulticast mode [ 1076.743770][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1076.926783][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1076.929980][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.930022][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1076.930046][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.979981][ T10] usb 6-1: config 0 descriptor?? [ 1077.621969][ T5613] Bluetooth: hci1: command tx timeout [ 1078.176849][ T5613] Bluetooth: hci2: command tx timeout [ 1079.622042][ T8553] bridge_slave_1: left allmulticast mode [ 1079.670118][ T8553] bridge_slave_1: left promiscuous mode [ 1079.692723][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.696929][ T5613] Bluetooth: hci1: command tx timeout [ 1079.931327][ T5912] usb 6-1: USB disconnect, device number 30 [ 1080.006297][ T8553] bridge_slave_0: left allmulticast mode [ 1080.006318][ T8553] bridge_slave_0: left promiscuous mode [ 1080.006516][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.029721][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1251'. [ 1080.264922][ T5613] Bluetooth: hci2: command tx timeout [ 1080.329212][T13439] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 1080.397147][ T8553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.517261][ T8553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.578757][ T8553] bond0 (unregistering): Released all slaves [ 1080.747118][T13432] vlan2: entered allmulticast mode [ 1080.747132][T13432] bond3: entered allmulticast mode [ 1080.873040][T13441] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1080.873675][T13441] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1081.366747][ T8553] hsr_slave_0: left promiscuous mode [ 1081.406864][ T8553] hsr_slave_1: left promiscuous mode [ 1081.407537][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.447436][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.776800][ T5613] Bluetooth: hci1: command tx timeout [ 1081.847319][ T10] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1082.007527][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1082.024916][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1082.024941][ T10] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1082.024954][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.062829][ T10] usb 9-1: config 0 descriptor?? [ 1082.074234][ T8553] team0 (unregistering): Port device team_slave_1 removed [ 1082.171019][ T8553] team0 (unregistering): Port device team_slave_0 removed [ 1082.336753][ T5613] Bluetooth: hci2: command tx timeout [ 1083.052339][T13333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.052513][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.052665][T13333] bridge_slave_0: entered allmulticast mode [ 1083.055196][T13333] bridge_slave_0: entered promiscuous mode [ 1083.131834][T13333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.132000][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.132147][T13333] bridge_slave_1: entered allmulticast mode [ 1083.134110][T13333] bridge_slave_1: entered promiscuous mode [ 1083.477671][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.545760][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.687508][T12240] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1083.743174][T13333] team0: Port device team_slave_0 added [ 1083.759008][T13333] team0: Port device team_slave_1 added [ 1083.839147][T12240] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1083.839172][T12240] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1083.839191][T12240] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1083.839237][T12240] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1083.841961][T12240] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1083.841987][T12240] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1083.842008][T12240] usb 6-1: Product: syz [ 1083.842022][T12240] usb 6-1: Manufacturer: syz [ 1083.856865][ T5613] Bluetooth: hci1: command tx timeout [ 1083.912282][T12240] cdc_wdm 6-1:1.0: skipping garbage [ 1083.912321][T12240] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1083.969165][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.969181][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.969206][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.021173][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.021188][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.021212][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.518162][T13333] hsr_slave_0: entered promiscuous mode [ 1084.522924][T13333] hsr_slave_1: entered promiscuous mode [ 1084.540939][T13333] debugfs: 'hsr0' already exists in 'hsr' [ 1084.540963][T13333] Cannot create hsr debugfs directory [ 1084.666230][ T10] usb 9-1: USB disconnect, device number 52 [ 1084.816442][T13509] netlink: 'syz.8.1266': attribute type 1 has an invalid length. [ 1084.859791][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1085.080962][T13511] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1085.105234][T13511] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 1085.447843][T13358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.448170][T13358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.448425][T13358] bridge_slave_0: entered allmulticast mode [ 1085.451746][T13358] bridge_slave_0: entered promiscuous mode [ 1085.649509][T13358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.649863][T13358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.650123][T13358] bridge_slave_1: entered allmulticast mode [ 1085.653736][T13358] bridge_slave_1: entered promiscuous mode [ 1086.245403][T12240] usb 6-1: USB disconnect, device number 31 [ 1086.840290][T13534] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1272'. [ 1086.930240][T13358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.084955][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 1087.575068][T12240] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1087.712169][T13549] netlink: 'syz.5.1278': attribute type 1 has an invalid length. [ 1087.721560][T12240] usb 9-1: Using ep0 maxpacket: 32 [ 1087.723623][T12240] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1087.723661][T12240] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1087.723685][T12240] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.733181][T12240] usb 9-1: config 0 descriptor?? [ 1087.829605][T13358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.003702][T13550] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1088.045509][T13550] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1088.816948][T13358] team0: Port device team_slave_0 added [ 1089.128738][T13572] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1283'. [ 1089.375926][T13358] team0: Port device team_slave_1 added [ 1089.528335][T13358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.528349][T13358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.528368][T13358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.547430][T13358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.547444][T13358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.547468][T13358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.022038][ T5746] usb 9-1: USB disconnect, device number 53 [ 1090.189636][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 1091.235071][T13588] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1091.813720][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1091.845497][T13358] hsr_slave_0: entered promiscuous mode [ 1091.854178][T13358] hsr_slave_1: entered promiscuous mode [ 1091.855258][T13358] debugfs: 'hsr0' already exists in 'hsr' [ 1091.855300][T13358] Cannot create hsr debugfs directory [ 1091.996857][T12240] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1092.147008][T12240] usb 5-1: Using ep0 maxpacket: 32 [ 1092.149103][T12240] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1092.149129][T12240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.190885][T12240] usb 5-1: config 0 descriptor?? [ 1092.418415][T12240] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1092.449128][T12240] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1092.449175][T12240] dib0700: firmware download failed at 7 with -22 [ 1092.483425][T12240] usb 5-1: USB disconnect, device number 82 [ 1093.222319][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 1094.627160][T12240] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1094.682111][T13641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1303'. [ 1094.781611][T12240] usb 9-1: Using ep0 maxpacket: 32 [ 1094.784660][T12240] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1094.784689][T12240] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.815515][T12240] usb 9-1: config 0 descriptor?? [ 1095.242864][T12240] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1095.255333][T12240] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1095.270596][T12240] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1095.270648][T12240] usb 9-1: media controller created [ 1095.409971][T12240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1098.492789][T12240] DVB: Unable to find symbol dib7000p_attach() [ 1098.492805][T12240] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1098.668422][T12240] rc_core: IR keymap rc-dib0700-rc5 not found [ 1098.668441][T12240] Registered IR keymap rc-empty [ 1098.668715][T12240] dvb-usb: could not initialize remote control. [ 1098.668725][T12240] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1098.669717][ T8561] bridge_slave_1: left allmulticast mode [ 1098.669747][ T8561] bridge_slave_1: left promiscuous mode [ 1098.670043][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.716882][T12240] usb 9-1: USB disconnect, device number 54 [ 1098.794751][ T8561] bridge_slave_0: left allmulticast mode [ 1098.794783][ T8561] bridge_slave_0: left promiscuous mode [ 1098.795036][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.907479][T12240] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1099.309971][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1099.457548][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1099.467161][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1099.467189][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.513454][ T10] usb 5-1: config 0 descriptor?? [ 1099.929841][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1099.931539][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1099.931582][ T10] dib0700: firmware download failed at 7 with -22 [ 1099.966114][ T10] usb 5-1: USB disconnect, device number 83 [ 1100.738085][ T8561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.742124][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1311'. [ 1100.827081][ T8561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.052889][ T8561] bond0 (unregistering): Released all slaves [ 1101.801375][T13705] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1101.894803][T13719] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1313'. [ 1102.966702][ T8561] hsr_slave_0: left promiscuous mode [ 1103.006741][ T8561] hsr_slave_1: left promiscuous mode [ 1103.007490][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.047775][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.547976][ T8561] team0 (unregistering): Port device team_slave_1 removed [ 1103.607494][ T8561] team0 (unregistering): Port device team_slave_0 removed [ 1104.883526][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 1108.245812][T13333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1108.299075][T13333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.301744][T13333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1108.380170][T13333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.582090][T13333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1108.610488][T13333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.626825][T13333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.694606][T13333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1108.883270][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1331'. [ 1109.740546][T13358] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1110.043107][T13358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1110.177010][ T5912] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1110.240256][T13358] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1110.327390][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1110.333278][ T5912] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1110.333306][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.389415][T13358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1110.410641][T13358] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.632731][T13358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1110.663668][ T5912] usb 5-1: config 0 descriptor?? [ 1110.685633][T13358] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.721781][T13358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1110.909247][ T5912] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1110.934111][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1110.934874][ T5912] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1110.934926][ T5912] usb 5-1: media controller created [ 1110.960549][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1111.154570][ T5912] DVB: Unable to find symbol dib7000p_attach() [ 1111.154597][ T5912] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1112.895073][T13333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.339082][ T5912] rc_core: IR keymap rc-dib0700-rc5 not found [ 1115.339102][ T5912] Registered IR keymap rc-empty [ 1115.339337][ T5912] dvb-usb: could not initialize remote control. [ 1115.339349][ T5912] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1115.420444][T13333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.451967][ T5912] usb 5-1: USB disconnect, device number 84 [ 1115.512488][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.512585][ T8553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.561290][ T5912] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1115.590911][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.591075][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.970493][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.970595][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.998463][T13358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.081923][T13358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.119958][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.120186][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.158701][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.158939][ T8553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.253235][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1342'. [ 1117.497278][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1346'. [ 1118.614593][T13333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.796829][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 1118.959025][T13358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.343336][T13333] veth0_vlan: entered promiscuous mode [ 1119.369877][T13333] veth1_vlan: entered promiscuous mode [ 1119.783596][T13333] veth0_macvtap: entered promiscuous mode [ 1119.817988][T13333] veth1_macvtap: entered promiscuous mode [ 1119.898789][T13333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.947236][T13333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.100382][ T8553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.101944][ T8553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.103729][ T8553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.108066][ T8553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.247111][ T9158] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1120.483541][ T9158] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1120.483568][ T9158] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 1120.483586][ T9158] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1120.483652][ T9158] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.502343][ T9158] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1120.502371][ T9158] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1120.502391][ T9158] usb 5-1: Product: syz [ 1120.502406][ T9158] usb 5-1: Manufacturer: syz [ 1120.580644][ T9158] cdc_wdm 5-1:1.0: skipping garbage [ 1120.580667][ T9158] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1120.981424][T13957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1356'. [ 1121.633185][ T8530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.633205][ T8530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.692217][T13358] veth0_vlan: entered promiscuous mode [ 1121.834405][ T8553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.834423][ T8553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.887028][T13358] veth1_vlan: entered promiscuous mode [ 1122.090013][T13358] veth0_macvtap: entered promiscuous mode [ 1122.111457][T13358] veth1_macvtap: entered promiscuous mode [ 1122.269001][T13358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.311158][T13358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.342501][ T8568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.360123][ T8568] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.364160][ T8568] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.364202][ T8568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.594204][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1366'. [ 1124.836407][ T8554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.836424][ T8554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.975229][ T8553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.975248][ T8553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.126795][ T5614] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1125.276889][ T5614] usb 6-1: Using ep0 maxpacket: 32 [ 1125.284558][ T5614] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1125.284587][ T5614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.316160][ T5614] usb 6-1: config 0 descriptor?? [ 1125.619682][ T5614] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1126.370407][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1126.524498][ T5614] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1126.524554][ T5614] usb 6-1: media controller created [ 1126.529714][T12243] usb 5-1: USB disconnect, device number 85 [ 1126.632198][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1126.783545][ T5614] DVB: Unable to find symbol dib7000p_attach() [ 1126.783559][ T5614] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1126.990981][ T5614] rc_core: IR keymap rc-dib0700-rc5 not found [ 1126.991002][ T5614] Registered IR keymap rc-empty [ 1126.991384][ T5614] dvb-usb: could not initialize remote control. [ 1126.991395][ T5614] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1127.025548][ T5614] usb 6-1: USB disconnect, device number 32 [ 1127.104279][ T5614] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1129.158530][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1379'. [ 1129.244180][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.285940][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.322919][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.335299][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.349797][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1130.007353][T12243] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1130.161512][T12243] usb 6-1: config 0 has no interfaces? [ 1130.168842][T12243] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1130.168868][T12243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.168888][T12243] usb 6-1: Product: syz [ 1130.168903][T12243] usb 6-1: Manufacturer: syz [ 1130.168917][T12243] usb 6-1: SerialNumber: syz [ 1130.190826][T12243] usb 6-1: config 0 descriptor?? [ 1131.628840][ T5613] Bluetooth: hci4: command tx timeout [ 1131.668684][ T9158] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1131.695661][T13986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.817445][ T9158] usb 7-1: Using ep0 maxpacket: 8 [ 1131.819268][ T9158] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1131.819294][ T9158] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.819329][ T9158] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1131.819341][ T9158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.865340][T13986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.961875][T11640] usb 6-1: USB disconnect, device number 33 [ 1133.442631][T14105] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1395'. [ 1133.663504][T13986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.707824][ T5613] Bluetooth: hci4: command tx timeout [ 1134.484455][T11640] usb 7-1: USB disconnect, device number 2 [ 1135.545873][T13986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.637479][T11640] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1135.783940][ T5613] Bluetooth: hci4: command tx timeout [ 1136.138789][T11640] usb 7-1: Using ep0 maxpacket: 32 [ 1136.153718][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.154209][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.156011][T14044] bridge_slave_0: entered allmulticast mode [ 1136.158385][T11640] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1136.158411][T11640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.164833][T14044] bridge_slave_0: entered promiscuous mode [ 1136.172474][T11640] usb 7-1: config 0 descriptor?? [ 1136.176773][T12240] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1136.180795][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.181773][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.182947][T14044] bridge_slave_1: entered allmulticast mode [ 1136.198056][T14044] bridge_slave_1: entered promiscuous mode [ 1136.336893][T12240] usb 6-1: Using ep0 maxpacket: 32 [ 1136.339963][T12240] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1136.339991][T12240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.369573][T12240] usb 6-1: config 0 descriptor?? [ 1136.404519][T11640] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1136.425777][T11640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1136.434723][T11640] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1136.434774][T11640] usb 7-1: media controller created [ 1136.556355][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.653320][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.656995][T12240] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1136.692834][T11640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1136.731102][T12240] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1137.246921][T12240] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1137.247010][T12240] usb 6-1: media controller created [ 1137.856773][ T5613] Bluetooth: hci4: command tx timeout [ 1138.076289][T11640] DVB: Unable to find symbol dib7000p_attach() [ 1138.076364][T11640] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1138.406971][ T5746] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1138.586538][ T5746] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1138.590698][ T5746] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 1138.590865][ T5746] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1138.591078][ T5746] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1138.624825][ T5746] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1138.624902][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1138.624924][ T5746] usb 9-1: Product: syz [ 1138.624939][ T5746] usb 9-1: Manufacturer: syz [ 1138.993381][ T5746] cdc_wdm 9-1:1.0: skipping garbage [ 1138.993545][ T5746] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1140.213516][T14044] team0: Port device team_slave_0 added [ 1140.241286][T11640] rc_core: IR keymap rc-dib0700-rc5 not found [ 1140.241366][T11640] Registered IR keymap rc-empty [ 1141.174210][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1406'. [ 1141.278085][ T6756] usb 9-1: USB disconnect, device number 55 [ 1142.028905][T11640] dvb-usb: could not initialize remote control. [ 1142.028922][T11640] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1142.410346][T11640] usb 7-1: USB disconnect, device number 3 [ 1142.411381][T12240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1142.720205][T14044] team0: Port device team_slave_1 added [ 1142.774957][T11640] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1142.794870][T12240] DVB: Unable to find symbol dib7000p_attach() [ 1142.794891][T12240] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1143.027575][T12240] rc_core: IR keymap rc-dib0700-rc5 not found [ 1143.027596][T12240] Registered IR keymap rc-empty [ 1143.027894][T12240] dvb-usb: could not initialize remote control. [ 1143.027903][T12240] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1143.138686][T12240] usb 6-1: USB disconnect, device number 34 [ 1143.268873][ T5746] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1143.308419][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.308436][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.308461][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.321746][T12240] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1143.418238][ T5746] usb 8-1: Using ep0 maxpacket: 8 [ 1143.439764][ T5746] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1143.439791][ T5746] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.439845][ T5746] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.439887][ T5746] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1143.439911][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.512800][ T5746] usbtmc 8-1:16.0: bulk endpoints not found [ 1143.568668][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.568681][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.568707][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.337427][T13986] bridge_slave_1: left allmulticast mode [ 1145.337462][T13986] bridge_slave_1: left promiscuous mode [ 1145.337736][T13986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.425913][T13986] bridge_slave_0: left allmulticast mode [ 1145.425946][T13986] bridge_slave_0: left promiscuous mode [ 1145.439316][T13986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.951792][ T5614] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1146.106792][ T5614] usb 7-1: Using ep0 maxpacket: 32 [ 1146.110170][ T5614] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1146.110198][ T5614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.121481][ T5614] usb 7-1: config 0 descriptor?? [ 1146.349188][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1418'. [ 1146.352627][ T5614] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1146.370759][T13986] erspan0 (unregistering): left allmulticast mode [ 1146.372157][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1146.376441][ T5614] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1146.376491][ T5614] usb 7-1: media controller created [ 1146.455876][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.471221][ T5912] usb 8-1: USB disconnect, device number 2 [ 1146.505033][T14203] netlink: 'syz.7.1419': attribute type 1 has an invalid length. [ 1146.582580][ T5614] DVB: Unable to find symbol dib7000p_attach() [ 1146.582590][ T5614] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1146.726060][ T5614] rc_core: IR keymap rc-dib0700-rc5 not found [ 1146.726082][ T5614] Registered IR keymap rc-empty [ 1146.927626][T13986] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1147.108178][T13986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.187264][T13986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.229544][T13986] bond0 (unregistering): Released all slaves [ 1147.245847][T13986] bond1 (unregistering): Released all slaves [ 1147.275844][T13986] bond2 (unregistering): Released all slaves [ 1147.303492][T13986] bond3 (unregistering): Released all slaves [ 1147.334176][T13986] bond4 (unregistering): Released all slaves [ 1147.362023][T13986] bond5 (unregistering): Released all slaves [ 1147.401526][T13986] bond6 (unregistering): Released all slaves [ 1147.432349][T13986] bond7 (unregistering): Released all slaves [ 1147.460234][T13986] bond8 (unregistering): Released all slaves [ 1148.010401][T14044] hsr_slave_0: entered promiscuous mode [ 1148.013893][T14044] hsr_slave_1: entered promiscuous mode [ 1148.042181][T14044] debugfs: 'hsr0' already exists in 'hsr' [ 1148.042205][T14044] Cannot create hsr debugfs directory [ 1149.808162][ T6756] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1149.958829][ T6756] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1149.958857][ T6756] usb 6-1: config 0 has no interface number 0 [ 1149.958901][ T6756] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1149.987627][ T6756] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1149.987654][ T6756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.987674][ T6756] usb 6-1: Product: syz [ 1149.987689][ T6756] usb 6-1: Manufacturer: syz [ 1149.987703][ T6756] usb 6-1: SerialNumber: syz [ 1150.027246][ T6756] usb 6-1: config 0 descriptor?? [ 1150.052303][ T6756] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1150.619004][T13986] hsr_slave_0: left promiscuous mode [ 1150.659971][T13986] hsr_slave_1: left promiscuous mode [ 1150.665422][T13986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.665448][T13986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.704927][T13986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.704952][T13986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.859385][T12240] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1150.927881][T13986] veth1_macvtap: left promiscuous mode [ 1150.928577][T13986] veth0_macvtap: left promiscuous mode [ 1150.943132][T13986] veth1_vlan: left promiscuous mode [ 1150.944700][T13986] veth0_vlan: left promiscuous mode [ 1151.033169][T12240] usb 9-1: Using ep0 maxpacket: 8 [ 1151.043482][T12240] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1151.043499][T12240] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.043528][T12240] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.043624][T12240] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1151.043648][T12240] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.196199][T12240] usbtmc 9-1:16.0: bulk endpoints not found [ 1151.620822][ T5614] dvb-usb: could not initialize remote control. [ 1151.620832][ T5614] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1151.693737][ T5614] usb 7-1: USB disconnect, device number 4 [ 1151.872019][ T5614] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1152.661935][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1430'. [ 1153.197467][T13986] team0 (unregistering): Port device team_slave_1 removed [ 1153.237392][T13986] team0 (unregistering): Port device team_slave_0 removed [ 1153.576696][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1153.701472][ T32] usb 6-1: USB disconnect, device number 35 [ 1153.723043][ T32] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1153.809411][T14264] netlink: 'syz.6.1432': attribute type 1 has an invalid length. [ 1153.866506][ T6756] usb 9-1: USB disconnect, device number 56 [ 1154.866826][ T6756] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1155.008872][T14296] loop7: detected capacity change from 0 to 2048 [ 1155.018790][ T6756] usb 7-1: Using ep0 maxpacket: 32 [ 1155.038480][ T6756] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1155.038507][ T6756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.043099][T14296] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1155.064790][ T6756] usb 7-1: config 0 descriptor?? [ 1155.111796][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.137488][ T8538] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.215241][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.219084][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.219881][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.220560][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.222158][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.282049][ T8568] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.366464][ T6756] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1155.428953][ T6756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.429698][ T6756] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1155.429753][ T6756] usb 7-1: media controller created [ 1155.497906][ T8568] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.497982][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.498886][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.501133][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.502850][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.506508][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.513737][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.513781][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.514472][ T8568] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.515210][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.515244][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.515267][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.515289][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.515310][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.515332][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.522077][T14296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1155.525378][ T6756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.528869][ T1244] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1155.529278][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.530397][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.530442][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.534359][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.546480][ T8568] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.549787][ T8553] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.566680][ T8538] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.608744][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.608788][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.608811][ T1244] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1155.664522][ T8553] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1156.649030][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1442'. [ 1156.649407][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1156.947998][ T6756] DVB: Unable to find symbol dib7000p_attach() [ 1156.948014][ T6756] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1157.180894][ T6756] rc_core: IR keymap rc-dib0700-rc5 not found [ 1157.180914][ T6756] Registered IR keymap rc-empty [ 1157.586699][T11640] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1157.691201][ T8523] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1157.691261][ T8523] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1157.767398][ T8523] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1157.767548][ T8523] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1157.767570][ T8523] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1157.776812][T11640] usb 9-1: Using ep0 maxpacket: 8 [ 1157.782827][T11640] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1157.782852][T11640] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.782898][T11640] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.782966][T11640] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1157.782980][T11640] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.854461][T11640] usbtmc 9-1:16.0: bulk endpoints not found [ 1157.868323][ T8525] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1157.944059][T13358] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1158.308030][T14328] netlink: 'syz.7.1445': attribute type 1 has an invalid length. [ 1158.557119][ T5614] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1158.707753][T14329] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1158.714354][T14329] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1158.720011][ T5614] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1158.720035][ T5614] usb 6-1: config 0 has no interface number 0 [ 1158.720078][ T5614] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1158.724913][ T5614] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1158.724939][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.724959][ T5614] usb 6-1: Product: syz [ 1158.724974][ T5614] usb 6-1: Manufacturer: syz [ 1158.724989][ T5614] usb 6-1: SerialNumber: syz [ 1158.738558][ T5614] usb 6-1: config 0 descriptor?? [ 1158.764105][ T5614] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1159.072673][ T32] usb 6-1: USB disconnect, device number 36 [ 1159.095347][T13986] IPVS: stop unused estimator thread 0... [ 1159.118867][ T32] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1160.280083][ T5614] usb 9-1: USB disconnect, device number 57 [ 1160.584912][ T6756] dvb-usb: could not initialize remote control. [ 1160.584922][ T6756] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1161.343184][T11640] usb 7-1: USB disconnect, device number 5 [ 1161.431179][T14375] netlink: 'syz.6.1456': attribute type 1 has an invalid length. [ 1162.303346][T11640] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1162.788898][T11640] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1163.389266][T14044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1163.494484][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.505551][T14044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1163.515063][T11640] usb 8-1: config 0 has no interfaces? [ 1163.526703][T11640] usb 8-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1163.526720][T11640] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.526731][T11640] usb 8-1: Product: syz [ 1163.526739][T11640] usb 8-1: Manufacturer: syz [ 1163.526746][T11640] usb 8-1: SerialNumber: syz [ 1163.541922][T11640] usb 8-1: config 0 descriptor?? [ 1163.650462][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1163.651280][T14044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1163.776456][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.782025][T14044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1163.883922][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1164.457720][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.615771][T14455] netlink: 'syz.6.1471': attribute type 1 has an invalid length. [ 1164.732741][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.794976][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.801051][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.856919][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.857041][ T8553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.296942][T12240] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1165.450820][T12240] usb 7-1: Using ep0 maxpacket: 8 [ 1165.473946][T12240] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1165.473973][T12240] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.474022][T12240] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1165.474046][T12240] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1165.474078][T12240] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1165.474120][T12240] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1165.474144][T12240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.511422][T12240] usbtmc 7-1:16.0: bulk endpoints not found [ 1166.438422][ T6756] usb 8-1: USB disconnect, device number 3 [ 1166.492895][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.116776][ T6756] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1167.141497][T14044] veth0_vlan: entered promiscuous mode [ 1167.162626][T14044] veth1_vlan: entered promiscuous mode [ 1167.266786][ T6756] usb 9-1: Using ep0 maxpacket: 32 [ 1167.267073][T14044] veth0_macvtap: entered promiscuous mode [ 1167.277429][T14044] veth1_macvtap: entered promiscuous mode [ 1167.285668][ T6756] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1167.285695][ T6756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.325013][ T6756] usb 9-1: config 0 descriptor?? [ 1167.352065][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.373952][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.394560][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.394898][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.394938][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.394973][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.563955][ T6756] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1167.672518][ T6756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1167.687535][ T6756] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1167.687589][ T6756] usb 9-1: media controller created [ 1167.742508][ T6756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.152379][ T6756] DVB: Unable to find symbol dib7000p_attach() [ 1168.152395][ T6756] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1169.443706][ T6756] rc_core: IR keymap rc-dib0700-rc5 not found [ 1169.443727][ T6756] Registered IR keymap rc-empty [ 1169.505906][ T5746] usb 7-1: USB disconnect, device number 6 [ 1170.112884][T13985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.112905][T13985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.209495][ T5338] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1170.396024][ T5338] usb 7-1: config 0 has no interfaces? [ 1170.406472][ T5338] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1170.406496][ T5338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.406515][ T5338] usb 7-1: Product: syz [ 1170.406529][ T5338] usb 7-1: Manufacturer: syz [ 1170.425790][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.425806][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.447690][ T5338] usb 7-1: SerialNumber: syz [ 1170.465591][ T5338] usb 7-1: config 0 descriptor?? [ 1170.724929][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 1173.005419][ T6756] dvb-usb: could not initialize remote control. [ 1173.005430][ T6756] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1173.940642][ T5746] usb 7-1: USB disconnect, device number 7 [ 1173.996336][ T5730] usb 9-1: USB disconnect, device number 58 [ 1174.026714][T14204] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1174.190341][T14204] usb 8-1: Using ep0 maxpacket: 8 [ 1174.193810][T14204] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1174.193839][T14204] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.193887][T14204] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.193909][T14204] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1174.193932][T14204] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1174.193973][T14204] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1174.193996][T14204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.307161][ T5730] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1174.360684][T14204] usbtmc 8-1:16.0: bulk endpoints not found [ 1174.619599][T14593] loop8: detected capacity change from 0 to 2048 [ 1174.623979][T14593] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1174.624850][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.625798][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.626160][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.666384][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.674994][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.675863][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.676489][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.700374][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.713672][T13985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.715416][T13985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.733416][T13985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.745149][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.789510][T14593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1174.794695][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1174.809409][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.854390][T13985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.872712][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.874144][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1174.923971][ T1244] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.025492][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.592026][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.592901][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.593036][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.593134][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.593230][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.593325][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.593417][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.594318][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.594968][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.660961][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.680064][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.695299][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.716020][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.740365][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.740408][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.740433][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1176.384201][ T8553] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.384259][ T8553] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.384300][ T8553] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.384337][ T8553] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.385324][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.476732][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1176.749834][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.753488][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.753541][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.753589][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.753636][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.812424][ T8553] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.832251][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.850400][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1176.858121][T14204] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1177.020104][T14204] usb 7-1: config 0 has no interfaces? [ 1177.035502][T14204] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1177.035529][T14204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.035548][T14204] usb 7-1: Product: syz [ 1177.035563][T14204] usb 7-1: Manufacturer: syz [ 1177.035578][T14204] usb 7-1: SerialNumber: syz [ 1177.091890][T14204] usb 7-1: config 0 descriptor?? [ 1177.222229][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.229200][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.484107][T14626] loop8: detected capacity change from 0 to 512 [ 1177.496763][T14626] EXT4-fs: inline encryption not supported [ 1177.506087][T14204] usb 8-1: USB disconnect, device number 4 [ 1177.526110][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.536338][T13985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.565478][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.577023][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.578479][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1177.578847][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.581950][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.589689][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.589877][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.612144][ T1024] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1177.612205][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.612234][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.626680][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1177.634093][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.638454][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.653836][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.655383][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.667567][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.676976][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.678086][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1177.685589][T14626] EXT4-fs (loop8): 1 orphan inode deleted [ 1177.736890][ T8525] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1177.736985][ T8525] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:25: Failed to release dquot type 1 [ 1177.737006][ T8525] loop8: lost filesystem error report for type 5 error -117 [ 1177.744144][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1177.751791][T14626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.755736][ T8525] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1177.759427][T14626] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.834003][ T37] audit: type=1800 audit(1778337268.153:265): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1517" name="bus" dev="loop8" ino=16 res=0 errno=0 [ 1178.762364][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.762458][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.762506][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.762558][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.815762][T14641] loop5: detected capacity change from 0 to 512 [ 1178.822318][T14641] EXT4-fs: inline encryption not supported [ 1178.826534][ T1244] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.828544][ T7846] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.833217][ T40] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.869681][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.871862][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.874001][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.875427][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.877636][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.880543][ T8525] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.883015][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.919136][ T1244] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.929180][ T57] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.953898][ T8554] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.953935][ T8554] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1178.983305][ T8525] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.983346][ T8525] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1178.985097][ T40] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.001556][T13986] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.017171][ T40] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.033186][T13986] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.033240][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.036036][ T40] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.046683][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1179.055914][T14641] EXT4-fs (loop5): 1 orphan inode deleted [ 1179.069814][T14641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.072301][ T1024] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.072573][T14641] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.121768][ T8554] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1179.121868][ T8554] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:53: Failed to release dquot type 1 [ 1179.158885][ T40] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.170247][T13986] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.174894][ T37] audit: type=1800 audit(1778337269.493:266): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1522" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 1179.270354][T14646] loop8: detected capacity change from 0 to 2048 [ 1179.272427][T14646] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1179.272951][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.273908][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.274091][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.276656][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.276956][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.281652][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.287092][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.357229][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.357701][ T1024] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.357915][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.358627][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.363561][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.364508][T14646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1179.364687][ T40] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.365182][ T40] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.415938][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.419942][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.426798][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.429307][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.440147][ T40] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.468497][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.473506][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.473553][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.473576][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.473589][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.473601][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.474317][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.475267][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.475792][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.510675][T13986] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.546688][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.569496][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.572511][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.576697][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.576741][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.576765][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1179.593293][ T37] audit: type=1326 audit(1778337269.903:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14647 comm="syz.7.1523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda06e7cdd9 code=0x0 [ 1179.829609][ T40] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.829700][ T40] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.829767][ T40] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.829830][ T40] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1179.835310][T13985] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.445821][ T8553] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.489871][ T8525] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.490273][ T8525] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.490334][ T8525] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.490366][ T8525] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.531072][T14654] loop4: detected capacity change from 0 to 512 [ 1180.535082][T14654] EXT4-fs: inline encryption not supported [ 1180.535691][ T8553] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.541580][T14204] usb 7-1: USB disconnect, device number 8 [ 1180.544592][ T8553] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.547820][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.550071][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.553892][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.559693][T11429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.561189][ T8553] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.569119][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.569697][T13986] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.569739][T13986] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.610870][ T57] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.640090][T13986] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.655343][ T8553] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.694494][ T8525] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.702778][T11135] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.742483][ T8553] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.754047][ T8554] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.754536][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.760064][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.763586][ T8554] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.780893][T11429] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1180.799603][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.800313][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.801356][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1180.842531][T14654] EXT4-fs (loop4): 1 orphan inode deleted [ 1180.861319][T14654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.861546][T13986] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.861804][T14654] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.868034][ T6756] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1180.912418][T11135] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.929615][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.938069][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.938245][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.938463][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.938587][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.945246][T13986] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1180.993123][ T37] audit: type=1800 audit(1778337271.233:268): pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1525" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 1181.048287][ T6756] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1181.050023][ T6756] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.050074][ T6756] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1181.050098][ T6756] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1181.077282][ T6756] usb 8-1: string descriptor 0 read error: -22 [ 1181.077421][ T6756] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1181.077444][ T6756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.087727][ T7846] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1182.024910][ T6756] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1182.070330][T14392] udevd[14392]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.251956][ T6756] usb 8-1: USB disconnect, device number 5 [ 1182.266022][ T8554] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.266451][ T8554] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.267747][ T8554] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.267988][ T8554] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.370512][T14044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.415087][T11135] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.525809][ T8525] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.543535][T14682] netlink: 'syz.5.1532': attribute type 5 has an invalid length. [ 1182.543553][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1532'. [ 1182.550804][T14683] loop6: detected capacity change from 0 to 512 [ 1182.551818][T14683] EXT4-fs: inline encryption not supported [ 1182.560392][T14044] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1182.612499][T14679] loop8: detected capacity change from 0 to 2048 [ 1182.614191][T14679] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1182.620843][T14682] bridge_slave_0: left allmulticast mode [ 1182.620873][T14682] bridge_slave_0: left promiscuous mode [ 1182.621141][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.642155][ T57] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.654058][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.656080][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.659424][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.659645][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.659848][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.660043][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.660537][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.660930][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.661392][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.661585][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.662147][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.662675][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.664837][T14679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1182.665001][T11135] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.665909][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.735552][T11135] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.764137][ T8554] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.772133][ T8553] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.793223][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.798441][ T8553] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.801495][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.802419][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.802455][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.802486][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.802508][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.802853][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.802884][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.803576][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.804330][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.805104][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.807830][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.808559][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.809733][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.810835][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.810940][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.811030][ T8525] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.833064][T14682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1182.840018][ T8553] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1182.906664][ T32] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1183.008692][ T8553] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1183.008739][ T8553] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1183.009619][ T8553] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1183.019992][ T8553] lo_rw_aio[ 1183.019992][ T8553] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1183.042022][T14679] ------------[ cut here ]------------ [ 1183.042033][T14679] within_last_ext && elen > ((loff_t)offset + 1) << inode->i_blkbits [ 1183.042064][T14679] WARNING: fs/udf/inode.c:683 at udf_setsize+0xdf5/0x10b0, CPU#1: syz.8.1533/14679 [ 1183.042112][T14679] Modules linked in: [ 1183.042142][T14679] CPU: 1 UID: 0 PID: 14679 Comm: syz.8.1533 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1183.042171][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.042188][T14679] RIP: 0010:udf_setsize+0xdf5/0x10b0 [ 1183.042226][T14679] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cf 87 dc 07 cc e8 49 06 75 fe 45 89 f4 e9 2a fe ff ff e8 3c 06 75 fe 90 <0f> 0b 90 e9 8a f7 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 9f f2 ff ff [ 1183.042244][T14679] RSP: 0018:ffffc90003ec7aa0 EFLAGS: 00010283 [ 1183.042262][T14679] RAX: ffffffff834fc5e4 RBX: ffff8880388fdc80 RCX: 0000000000080000 [ 1183.042279][T14679] RDX: ffffc90005489000 RSI: 0000000000000484 RDI: 0000000000000485 [ 1183.042293][T14679] RBP: ffffc90003ec7c00 R08: 0000000000000000 R09: 0000000000000000 [ 1183.042307][T14679] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: 0000000000000001 [ 1183.042322][T14679] R13: 1ffff920007d8f68 R14: 0000000000000200 R15: 0000000000000e00 [ 1183.042337][T14679] FS: 00007fa4c71466c0(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 [ 1183.042355][T14679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.042370][T14679] CR2: 0000001b2f603ff8 CR3: 0000000039f80000 CR4: 00000000003526f0 [ 1183.042389][T14679] Call Trace: [ 1183.042397][T14679] [ 1183.042423][T14679] ? __pfx_udf_setsize+0x10/0x10 [ 1183.042454][T14679] ? rwbase_write_lock+0x568/0x730 [ 1183.042495][T14679] udf_setattr+0x3a2/0x5a0 [ 1183.042522][T14679] ? __pfx_udf_setattr+0x10/0x10 [ 1183.042551][T14679] notify_change+0xc18/0xf60 [ 1183.042585][T14679] do_truncate+0x1c2/0x250 [ 1183.042621][T14679] ? __pfx_do_truncate+0x10/0x10 [ 1183.042671][T14679] do_ftruncate+0x49c/0x550 [ 1183.042694][T14679] ? __pfx_do_ftruncate+0x10/0x10 [ 1183.042715][T14679] ? __fget_files+0x2a/0x420 [ 1183.042743][T14679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.042768][T14679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.042791][T14679] __x64_sys_ftruncate+0x8f/0xe0 [ 1183.042813][T14679] do_syscall_64+0x15f/0xf80 [ 1183.042839][T14679] ? trace_irq_disable+0x3b/0x140 [ 1183.042870][T14679] ? clear_bhb_loop+0x40/0x90 [ 1183.042895][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.042916][T14679] RIP: 0033:0x7fa4c8eecdd9 [ 1183.042944][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.042961][T14679] RSP: 002b:00007fa4c7146028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 1183.042982][T14679] RAX: ffffffffffffffda RBX: 00007fa4c9165fa0 RCX: 00007fa4c8eecdd9 [ 1183.042998][T14679] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000008 [ 1183.043034][T14679] RBP: 00007fa4c8f82d69 R08: 0000000000000000 R09: 0000000000000000 [ 1183.043048][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.043062][T14679] R13: 00007fa4c9166038 R14: 00007fa4c9165fa0 R15: 00007fff7c13d478 [ 1183.043097][T14679] [ 1183.043113][T14679] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1183.043132][T14679] CPU: 1 UID: 0 PID: 14679 Comm: syz.8.1533 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1183.043156][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.043168][T14679] Call Trace: [ 1183.043177][T14679] [ 1183.043185][T14679] vpanic+0x56c/0xa60 [ 1183.043222][T14679] ? __pfx__printk+0x10/0x10 [ 1183.043242][T14679] ? __pfx_vpanic+0x10/0x10 [ 1183.043268][T14679] ? is_bpf_text_address+0x292/0x2b0 [ 1183.043291][T14679] ? is_bpf_text_address+0x26/0x2b0 [ 1183.043323][T14679] panic+0xc5/0xd0 [ 1183.043351][T14679] ? __pfx_panic+0x10/0x10 [ 1183.043395][T14679] __warn+0x315/0x4c0 [ 1183.043421][T14679] ? udf_setsize+0xdf5/0x10b0 [ 1183.043450][T14679] ? udf_setsize+0xdf5/0x10b0 [ 1183.043477][T14679] __report_bug+0x29a/0x540 [ 1183.043510][T14679] ? udf_setsize+0xdf5/0x10b0 [ 1183.043538][T14679] ? __pfx___report_bug+0x10/0x10 [ 1183.043564][T14679] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1183.043589][T14679] ? lockdep_hardirqs_on+0x7a/0x110 [ 1183.043613][T14679] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1183.043638][T14679] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1183.043668][T14679] ? reacquire_held_locks+0x104/0x190 [ 1183.043694][T14679] ? rt_spin_lock+0x1e0/0x400 [ 1183.043730][T14679] ? udf_setsize+0xdf5/0x10b0 [ 1183.043757][T14679] report_bug+0x16a/0x220 [ 1183.043781][T14679] ? udf_setsize+0xdf5/0x10b0 [ 1183.043807][T14679] ? udf_setsize+0xdf7/0x10b0 [ 1183.043833][T14679] handle_bug+0x9c/0x200 [ 1183.043861][T14679] exc_invalid_op+0x1a/0x50 [ 1183.043888][T14679] asm_exc_invalid_op+0x1a/0x20 [ 1183.043908][T14679] RIP: 0010:udf_setsize+0xdf5/0x10b0 [ 1183.043936][T14679] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cf 87 dc 07 cc e8 49 06 75 fe 45 89 f4 e9 2a fe ff ff e8 3c 06 75 fe 90 <0f> 0b 90 e9 8a f7 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 9f f2 ff ff [ 1183.043953][T14679] RSP: 0018:ffffc90003ec7aa0 EFLAGS: 00010283 [ 1183.043970][T14679] RAX: ffffffff834fc5e4 RBX: ffff8880388fdc80 RCX: 0000000000080000 [ 1183.043986][T14679] RDX: ffffc90005489000 RSI: 0000000000000484 RDI: 0000000000000485 [ 1183.044000][T14679] RBP: ffffc90003ec7c00 R08: 0000000000000000 R09: 0000000000000000 [ 1183.044014][T14679] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: 0000000000000001 [ 1183.044029][T14679] R13: 1ffff920007d8f68 R14: 0000000000000200 R15: 0000000000000e00 [ 1183.044052][T14679] ? udf_setsize+0xdf4/0x10b0 [ 1183.044108][T14679] ? __pfx_udf_setsize+0x10/0x10 [ 1183.044138][T14679] ? rwbase_write_lock+0x568/0x730 [ 1183.044177][T14679] udf_setattr+0x3a2/0x5a0 [ 1183.044220][T14679] ? __pfx_udf_setattr+0x10/0x10 [ 1183.044249][T14679] notify_change+0xc18/0xf60 [ 1183.044282][T14679] do_truncate+0x1c2/0x250 [ 1183.044316][T14679] ? __pfx_do_truncate+0x10/0x10 [ 1183.044367][T14679] do_ftruncate+0x49c/0x550 [ 1183.044390][T14679] ? __pfx_do_ftruncate+0x10/0x10 [ 1183.044410][T14679] ? __fget_files+0x2a/0x420 [ 1183.044437][T14679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.044461][T14679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.044483][T14679] __x64_sys_ftruncate+0x8f/0xe0 [ 1183.044505][T14679] do_syscall_64+0x15f/0xf80 [ 1183.044528][T14679] ? trace_irq_disable+0x3b/0x140 [ 1183.044559][T14679] ? clear_bhb_loop+0x40/0x90 [ 1183.044585][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.044605][T14679] RIP: 0033:0x7fa4c8eecdd9 [ 1183.044623][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.044641][T14679] RSP: 002b:00007fa4c7146028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 1183.044661][T14679] RAX: ffffffffffffffda RBX: 00007fa4c9165fa0 RCX: 00007fa4c8eecdd9 [ 1183.044677][T14679] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000008 [ 1183.044689][T14679] RBP: 00007fa4c8f82d69 R08: 0000000000000000 R09: 0000000000000000 [ 1183.044703][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.044716][T14679] R13: 00007fa4c9166038 R14: 00007fa4c9165fa0 R15: 00007fff7c13d478 [ 1183.044749][T14679] [ 1183.045060][T14679] Kernel Offset: disabled