last executing test programs: 7m35.085761058s ago: executing program 2 (id=438): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r0, 0x8d, 0x48, &(0x7f0000000340)="d021ed84d3c1eea58d3d2b029b1945627a56bc555d815a952755b2b8aa4221e8c7b5c5104751c1452ad98ce2b38265a4f9085473f67f3ccbcd292de2cae81a50f251afa72ca17981") 7m32.257525859s ago: executing program 2 (id=442): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000192c0)='coredump_filter\x00') syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) 7m28.064852485s ago: executing program 2 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f219", 0x78}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) 7m26.81651123s ago: executing program 2 (id=448): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) 7m24.815596079s ago: executing program 2 (id=455): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b700000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045503, &(0x7f0000002a40)) bpf$MAP_CREATE(0x0, 0x0, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000006ffffe8000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0) read$watch_queue(r8, &(0x7f00000002c0)=""/37, 0x25) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7m23.645553128s ago: executing program 2 (id=456): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 7m22.28709455s ago: executing program 32 (id=456): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 5m21.919776113s ago: executing program 0 (id=654): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000066001fff2900000000000000000000001c3f969d1087167c8d8dbac724b5009c36f2b78c9667ecbbd6057a8355307bfcd62de68538c348f46d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000004}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040814) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) socket$alg(0x26, 0x5, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) 5m18.113055493s ago: executing program 0 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m17.840460822s ago: executing program 0 (id=663): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x18b}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x63, 0x0, 0x0) 5m17.56689868s ago: executing program 0 (id=664): syz_usb_connect(0x1, 0x2d, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 5m13.1475252s ago: executing program 0 (id=669): syz_usb_connect(0x1, 0x2d, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 5m11.641334339s ago: executing program 0 (id=673): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) 5m10.236753424s ago: executing program 33 (id=673): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) 5m0.205087426s ago: executing program 1 (id=691): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 4m56.723568746s ago: executing program 1 (id=696): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1, 0x800, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) dup3(r1, r5, 0x80000) 4m52.983529244s ago: executing program 1 (id=702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x6e855000) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) syz_open_pts(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) 4m49.328310243s ago: executing program 1 (id=707): syz_usb_connect(0x1, 0x2d, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulG5vWUkGkogcpVop689Bud7ehZLdbspvShIpWFMGTSPHsj5M3/wFRBL15FDx7kkKRUi+CsDLb2bjt7jabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJlupiYiTd/e7c/taMV2SaDZf/y1p7ZPmo+MzqT1Z5rGI+O79iEO57nLrK6uLhUqlvJTl5xrVy3P1ldXDF6uFhfJC+dL88WePzp+Yf+bE/JbF+sd7r54/9dVLX9x498dfXnvr1JNJnIy92bbOOLbKbMxm38lk+hXe48WtLmzEklEfAJuS3po77t7lsT+mY0crBQD8l70dEU0AYMwk2n8AGDPt/wO0x/aGMQ72T3brhYjY1Sv+iWzMbldrHHT3neSekZEkIma2oPzZiLj65gdfp0sMaRwSoJd3rkfEuZnZ7vov6ZqzsFFPD7DP7H159R9sn2/T/s+JXv2f3Fr/J3r0f6Z63Lubsf79n7u5BcX0lfb/nuvZ/12btDazI8v9v9Xnm0wuXKyU07rtkYg4GJNTaf7IA8o49vHzP/Tb1tn/S5e0/HZfMDuOmxNT936mVGgUHibmTreuRzw+0Sv+ZO38J336v2cGLKPx/ROf99u2fvzD1fws4qme5//vGW1Jx/zEqeianzjXuh7m2ldFt/yH0/v6lT/q+NPzv/vB8c8knfM16xsv46dP/ny537bNXv87kzda6Z3ZuquFRmPpSMTO5JXu9R1TSNv59v5p/AcPPLj+63X9p38Tnhsw/sVPvzy/+fiHK42/tKHzv/HEgZ+/6R1PM5ttvO75P9ZKHczWDFL/DXqAD/PdAQAAAAAAAAAAAAAAAAAAAAAAAMCgchGxN5Jcfi2dy+Xzd9/h/WjszlVq9cahC7XlS6VovSt7JiZz7SddTnc8D/VI9jz8dn7+vvzRiNgXETem/tfK54u1SmnUwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZk+f9/+nfp0a9dEBAEOza9QHAABsO+0/AIwf7T8AjB/tPwCMH+0/AIwf7T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDdub06XRp/n77WjHNl66sLC/WrhwuleuL+epyMV+sLV3OL9RqC5Vyvlirrvf7KrXa5fnjsXx1rlGuN+bqK6tnq7XlS42zF6uFhfLZ8uS2RAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1NfWV0sVCrlJQkJCYm1xKhrJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/h78CAAD//6LRHug=") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 4m45.344641967s ago: executing program 1 (id=714): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) pipe2$9p(0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8) 4m43.009104105s ago: executing program 1 (id=718): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f219", 0x78}, {&(0x7f0000001100)}, {&(0x7f0000001200)="e86b23ea031a0d0335d120405fcbc0e8261e54e194b7ac7427e456a0c74eba6fd030e30723c080ff9d1d60aa58929f37061fea9199560e8c9734c24ad5a9849b6dc72795f44e9954bf08f35b5483099d17afa38d10de84516fb241942b5dc2443a0df8de2b82fba03bd1aaf1a8b54a56340e1c17ec2c1f797cb9e8534005fad205586e8df9c5e5846de0a63ea0935349fbe97099bcd39d198870265cb0e9d30982731773077edf0340e001654b40167f7172daaaf09261d1a91c77ab96126862c5af4dedd795869895c3f9770a945fc27c4579371167a0e2981f9e678f36a1f5c630359af6d41a45159b21d214d2b46132bc35cb5dc8a2324c3b447144e3ec5aa60a0791c33111d4c18e54f0f61d99dc68d109530c58fbb766a533071d8f12d4fa93efa0867620756cb13183b963714fc8f641ff59bcb98d36d132c30e4aacf1585a2aa076bf6ab258ee85734651c05ab4c24c32f18f2a884ff3562b367cb24c4e35587a42b7da49d69756a1f5e1e8eac669e0b968e8d88d863f7ea0a364926f0fb64d8f347c39f68ae32be6a3d875a7470dd209327d4060c75fba01cfb285aca1e8a1bddf0759ba9485bcbb585593374041cb2354fcee8290aad5ffc690a4c8e36ae09540b10f40310567b2c82ab527d403468524a4d42488e2a8f8a144ee47e00ffbfc09aa3138237780e160e63c97700d5c1a5c8e198e223d11bcc2e684c04c42d185977aa42accf31fb8d90162e07dbf4dcc6222e0e3d81493c390a61bf506ba14b044fc268e0a04756440280d62e249857eea9234cbd65d7e08ad58bcccd4244c2ebd7c781f4661fc448e04db6a9150d48022ce3aebddba51c23ae242a9c6d8ad4f4dff925f5a7033b5f6f765d96aa316ec31ef2c022e2c381defb051b81aa9710379e8e775abe6e9d632439c998ffa48e7e54208d12a4c2e018f2873e26f6ea2c758cbd10069baba0f85d8509c5c4475b29c6358c96dd61ae8181a99cd453820f6a6509c29543b9c7db410e6d9d60082ccc2602b8cf91a59a8b8c2fcba7f43913f4b0a2842042f20488cf58de93150a9b7d0a7c4b9a84ad330ca34efbe0a878064983c915a6f24a35dfdd866f53326ecc117f84b4e46449eb5cb4164288fcbad2562e8ba76a6d18b9e58ef69973a7ff12618e4dfbeada86b059be11ed49317e47b5205d74966f72f92db62baef8809f0a9f75faec55b8ad241277a5f", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) 4m41.381137729s ago: executing program 34 (id=718): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f219", 0x78}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) 4m38.951612053s ago: executing program 4 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m38.69550149s ago: executing program 4 (id=728): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m38.40729636s ago: executing program 4 (id=729): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff00000000000000004e2200000a002000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000046b5af24c87334b800ff010000000000000000000000000000000000000000000000000000000000000000005400000000000000037f00009b21562b39706cad9000000040000000000000000000000000000000000a0010000100"/133], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRES64=r1], 0x1c}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="e33f62f00980ffff", 0x8) 4m34.091153093s ago: executing program 4 (id=734): syz_usb_connect(0x1, 0x2d, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 4m30.249977035s ago: executing program 4 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 4m28.978840344s ago: executing program 4 (id=742): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r5, &(0x7f0000000080)=""/72, 0x48) 4m27.396291928s ago: executing program 35 (id=742): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r5, &(0x7f0000000080)=""/72, 0x48) 1m44.342843285s ago: executing program 6 (id=1004): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x141540, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) ftruncate(r0, 0x101) futex(&(0x7f000000cffc), 0x80000000000b, 0x1, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x40000004}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_complete(r5) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) 1m41.510850726s ago: executing program 6 (id=1009): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b700000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045503, &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000006ffffe8000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0) read$watch_queue(r8, &(0x7f00000002c0)=""/37, 0x25) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m36.773856411s ago: executing program 9 (id=1016): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1m36.112376446s ago: executing program 9 (id=1018): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a1"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a8", 0x31}, {&(0x7f0000001400)="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", 0x37a}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m34.073409381s ago: executing program 9 (id=1021): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x141540, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) ftruncate(r0, 0x101) futex(&(0x7f000000cffc), 0x80000000000b, 0x1, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x40000004}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_complete(r5) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) 1m31.667996059s ago: executing program 9 (id=1024): syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 1m28.5260146s ago: executing program 9 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x103040, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r5, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xc8) 1m27.976479473s ago: executing program 6 (id=1031): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f219", 0x78}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) 1m26.182108853s ago: executing program 9 (id=1032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@polexpire={0x21c, 0x1b, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in=@loopback, @in6=@private0, 0x4e21, 0x200, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x27}, {0x8000000000000000, 0xd, 0x3, 0x6, 0x90000000, 0x8, 0x28, 0x7fffffffffffffff}, {0xd70, 0xb, 0x100, 0x9}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, 0x40}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7}}, @algo_auth={0x141, 0x1, {{'cbcmac(cast5-generic)\x00'}, 0x7c8, "43bd238d335d347b5bcfcb11e94d094d55ca668076a111f50b71bdce5ea7722efa7543a391efa227aa4b88cc845fb683f91d059182d15f9c47e1e677588b8e068a3bcaf1f0a4422554b6a81e3e2dd9fdcf126a1f218e7340a15e8808337c55782216ce17fae91d9e3d4bd9ce978c9db7bf31dead79782e5a21000a786b6d8bf98a28661afb80db2735148230edcc50473e1e6f6c91da788ac90b155902f21b325e3e37ca43bc5892f0900b1671d3b6e561d70e28ae5fa2c662a68fe375084277d2b6b2674968a93901bb1e9b37fc72a759023d37e4fefaed7361c6ef12f9456f38003b25fa7d74dea5ffffc42e0a3400bede9070ccfe8c99bc"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, 0x0, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)='x', 0x1}, {&(0x7f0000000180)="271fce168276258497b7f9059d5e28c36dce4f0b6ddbc0939c42b4ec36aca64fd542f68bac8f7ec62ba799a44334ad5633472faea9f9be5c57adedde123431bfe584e4ce7ecf9e09788c0cafe0fbef2e99698e3fa0500b2d6a6eb5a6df84daee60beb1411b6b0b9aff14a03c1e8ffce266dd7025b908615d0b5d82e85a338514fdf812a1f7e0c8f640e5d97779278189ebd7672e360a2f91d30f9497b68d976ffd12c8c5d307e91639e2e2c5e88da6c595061de67b4c351a5b8ae2d45f167f150b855d06cbb47b8fc5f3f31a2a11df6dbea6ded7a8bb82523f9552f7af38016dd51eeac3917685be104c2b11ab6e", 0xee}, {&(0x7f0000000380)="b3bf750ae26147744b8b290b3975798f23b408128c62bdeb9944b7e57a4e1d38a742de721649de56403bd02abc53b64dff03d7df7e907cf993417b533e6be2903ccb2ffaaf76f8229eed9292939758b49dfe1e3f4fd0f6ca411a36cd29b29c8aa5c50b15793317c50059d69714e6bf42610e7ffab218b726706320d3b0ae7e0bbf92ad80e7ff5650efecaf4b7e9ffa7117ae6c0afeb4580a5c0b82e1e8533a376533831c5478e5b962b64dfd3a19632877c67a5eb714e1ceaa58d548881c7cf65e447f2b0e1edc4e09d00ae9453c7455e8ad91a62c46aff6ee703b0d5b0d684f47922cc663f7cd5a0b7de059ee8d7ac97f9958ed44d68f", 0xf7}, {&(0x7f0000000280)="a47a295e35f32426e785d70fbeec67fb8588f22664f9a6cbbea02b5de82e100673", 0x21}, {&(0x7f0000000480)="c152af24072ff806941216ad8e0258e696b56eca62ffcf0dd967b33d543013263c0947919d611b4cb9740225d39dba5cec5c4bb151b7cd66be479a36618a5ecf49bfd1e83a398f14d86690ea51939d17d9bc58bb48813afdcacfbe06f735bfd8538e916d7b5bbb46b5f9db5c9acd79ff84c1024a3f3dffad2afde99430e3f9d5d342a0c55765c85a0b05f73a1eb713a838be1b33b153ba5df171c5129749ed69b2", 0xa1}], 0x5) 1m25.085636809s ago: executing program 6 (id=1036): r0 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8003) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r7}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x1, &(0x7f0000000000)=0x4, 0x4) r9 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) fcntl$getflags(r2, 0x401) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_register$IORING_REGISTER_FILES(r9, 0x20, &(0x7f0000000000)=[r9], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) 1m22.14340457s ago: executing program 6 (id=1041): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1m19.778998093s ago: executing program 6 (id=1043): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRES64=r1], 0x1c}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="e33f62f00980ffff", 0x8) 1m9.970674355s ago: executing program 36 (id=1032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@polexpire={0x21c, 0x1b, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in=@loopback, @in6=@private0, 0x4e21, 0x200, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x27}, {0x8000000000000000, 0xd, 0x3, 0x6, 0x90000000, 0x8, 0x28, 0x7fffffffffffffff}, {0xd70, 0xb, 0x100, 0x9}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, 0x40}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7}}, @algo_auth={0x141, 0x1, {{'cbcmac(cast5-generic)\x00'}, 0x7c8, "43bd238d335d347b5bcfcb11e94d094d55ca668076a111f50b71bdce5ea7722efa7543a391efa227aa4b88cc845fb683f91d059182d15f9c47e1e677588b8e068a3bcaf1f0a4422554b6a81e3e2dd9fdcf126a1f218e7340a15e8808337c55782216ce17fae91d9e3d4bd9ce978c9db7bf31dead79782e5a21000a786b6d8bf98a28661afb80db2735148230edcc50473e1e6f6c91da788ac90b155902f21b325e3e37ca43bc5892f0900b1671d3b6e561d70e28ae5fa2c662a68fe375084277d2b6b2674968a93901bb1e9b37fc72a759023d37e4fefaed7361c6ef12f9456f38003b25fa7d74dea5ffffc42e0a3400bede9070ccfe8c99bc"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, 0x0, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)='x', 0x1}, {&(0x7f0000000180)="271fce168276258497b7f9059d5e28c36dce4f0b6ddbc0939c42b4ec36aca64fd542f68bac8f7ec62ba799a44334ad5633472faea9f9be5c57adedde123431bfe584e4ce7ecf9e09788c0cafe0fbef2e99698e3fa0500b2d6a6eb5a6df84daee60beb1411b6b0b9aff14a03c1e8ffce266dd7025b908615d0b5d82e85a338514fdf812a1f7e0c8f640e5d97779278189ebd7672e360a2f91d30f9497b68d976ffd12c8c5d307e91639e2e2c5e88da6c595061de67b4c351a5b8ae2d45f167f150b855d06cbb47b8fc5f3f31a2a11df6dbea6ded7a8bb82523f9552f7af38016dd51eeac3917685be104c2b11ab6e", 0xee}, {&(0x7f0000000380)="b3bf750ae26147744b8b290b3975798f23b408128c62bdeb9944b7e57a4e1d38a742de721649de56403bd02abc53b64dff03d7df7e907cf993417b533e6be2903ccb2ffaaf76f8229eed9292939758b49dfe1e3f4fd0f6ca411a36cd29b29c8aa5c50b15793317c50059d69714e6bf42610e7ffab218b726706320d3b0ae7e0bbf92ad80e7ff5650efecaf4b7e9ffa7117ae6c0afeb4580a5c0b82e1e8533a376533831c5478e5b962b64dfd3a19632877c67a5eb714e1ceaa58d548881c7cf65e447f2b0e1edc4e09d00ae9453c7455e8ad91a62c46aff6ee703b0d5b0d684f47922cc663f7cd5a0b7de059ee8d7ac97f9958ed44d68f", 0xf7}, {&(0x7f0000000280)="a47a295e35f32426e785d70fbeec67fb8588f22664f9a6cbbea02b5de82e100673", 0x21}, {&(0x7f0000000480)="c152af24072ff806941216ad8e0258e696b56eca62ffcf0dd967b33d543013263c0947919d611b4cb9740225d39dba5cec5c4bb151b7cd66be479a36618a5ecf49bfd1e83a398f14d86690ea51939d17d9bc58bb48813afdcacfbe06f735bfd8538e916d7b5bbb46b5f9db5c9acd79ff84c1024a3f3dffad2afde99430e3f9d5d342a0c55765c85a0b05f73a1eb713a838be1b33b153ba5df171c5129749ed69b2", 0xa1}], 0x5) 1m2.958305155s ago: executing program 37 (id=1043): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRES64=r1], 0x1c}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="e33f62f00980ffff", 0x8) 15.184489545s ago: executing program 8 (id=1147): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 15.088903823s ago: executing program 3 (id=1148): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000002c0)={0x3, {0x7, 0x5, 0x8001, 0x10000}, {0x4, 0x9, 0x7, 0x200}, {0x0, 0xeb}}) socket$inet6(0xa, 0x2, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13.535880214s ago: executing program 8 (id=1149): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ip6gre0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 13.484510644s ago: executing program 7 (id=1150): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c15, &(0x7f0000000240)=ANY=[]) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xcc7159d0d2eb8b2d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x94) r4 = socket(0x10, 0x803, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x75, 0x9, 0x3c, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x80000000, 0x3}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x244, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r6}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085) 11.933855413s ago: executing program 5 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(0xffffffffffffffff, 0x1) 11.185297871s ago: executing program 5 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 10.366963905s ago: executing program 5 (id=1153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf5b30000) syz_emit_ethernet(0x6e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@newtaction={0x95c, 0x30, 0x400, 0x70bd26, 0x0, {}, [{0x4}, {0x4b8, 0x1, [@m_xt={0x368, 0x2, 0x0, 0x0, {{0x7}, {0x264, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x63, 0x6, {0x0, 'raw\x00', 0xf, 0x9, "6f835c6c886ed4a467778bdda182c169b2191065892684bf79309a7168a062c919754c469dbac2251bb17ba513c1a0f1970c86fd7364e5cd77"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x114, 0x6, {0x1, 'security\x00', 0x3, 0x7fff, "4c69f8eeb0e9bd7a3547ffccb6cecd0969afe656a8548926e7af30741942a59ae87207b30647a204bc29d4a81ecac76957e33c7ab148225187351e74407f8c0637ef298da8b142e61a3bf8a48ad216f5fa8bf5e821d8ea27d39ee36d747ce981fad06bd6280dd9116cc925d18e21a32478d309eb1b2f256b4f2756a5ef58d347035a8f7c24b00a3261e9f66b849295e542725ae1ee514baac005f24898dbc442f655043a48ff59e23605d714d0301036c6cac34f16b5bda33d07a78c86dd3c5a1ae86cf54e0435382f7362486c56404019d3d0db62c9a893d679657cab9133a4f5a8b982b2294ead06f4"}}, @TCA_IPT_TARG={0xde, 0x6, {0x2, 'security\x00', 0x1, 0x0, "28863819a9dadd92ac26bbf820cfc4c4b3587f559e354ba82c64b37a6e061e48d72c5a00e16a772f30771bcc197266e957f3a2eb6dcae7f72d2d199fed113ffffc9fdad10a74c7d96aa9fe38c8c964ec489b1723a4c0a4be31d64b42c62892f8c410c65f7fdb709761c1da7b80aeeeebdd86bc8b5effb7e93d60a9f03e6184a994bc14c670922fdd69624a614191c18a511c48e470cb15ff0b13089c286d11ad9e331fe355d2a47e5093252c4f70244d327920f9"}}]}, {0xde, 0x6, "78884829ebe4cbe1c30d5d2d369c8078807a6e9a29ceffe5c22a8337dcc38f286f8ed1eb04a8ed7a05d05eb117b8181da77b2753f70078ce6a8d54c581d759391826b12262edf0af63b7a3da28354cfdb5971fc43d975bdd812066bb332ee825aa39df294ddadc3ecfcfcfbd11cdc77c94e35364e591ee7f1b93e51c42f1170d6326f8635dbbd87062fd12d09123fbac5794e5df2f5847d8ac76455e067444b9afcf8c776932e8811b92718d7cac0b924193df60c6cd7a7545d684c52187a88aabf5c73191776f2f931106ff8b411dd3c4e6804f70fe13f703eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0x100, 0xe, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x54, 0x800, 0x10000000, 0x814b, 0xffff0001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x95a1, 0x8, 0x1, 0x80000001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x5, 0x1, 0x400}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0xffffffffffffffff, 0x2, 0x7}, 0x1}}]}, {0x5e, 0x6, "3c3c54c2fd11de1f243363dcfa7a09332ca5e00be504e67cef4bcf1d6bcac4ad20fdf4b349e4a219dc2e7af8f8b2bca59c8d33f56c27c6bcf48af2ae8749d5553f44f3e672fea8c227f340d3f11c86ed59babfb54b85f2ab26e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_vlan={0x4c, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x131}]}, {0x17, 0x6, "4d6bb9abbb5cedc4c1487ca0eaefc5d947a554"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x48c, 0x1, [@m_simple={0x238, 0x11, 0x0, 0x0, {{0xb}, {0x1b8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xf, 0x5, 0x7fffffff, 0x7}}, @TCA_DEF_DATA={0x189, 0x3, '\xae\x9aS\x03U+\x8f\x1f\xf4\xe0\x8e\x88(N\x9b\xba\xf5G\xd3\xdaVL?\xf8=\xdb(\xb9\t\x0e\x9f_n\v\xb7B\xbe\xc8)=\xa5\xd1?\xa3-\xed\xfe`m\x17-\xa1\x87\xd0\xd4P\rpG\xaaC,\xa2\x8d\xd7\'_\xd8I\xe4P\x01\xaf+f\"6\xd9\xce\xd2\x8f\x0e\x9c*_#2|\xc0\xcb\xbe\x841\x92\':3\x82\xca\xccu\xe6\x1f\xda\xda\x16\t\xac\x0f!\xe5\xf6I|\xac1I*\xa2\x83\xb0\xbc\x84&:\xbd\x91\x9a\xaa\x99\x9a\xbf\x19\xddB\r\xf6\x90O\x7f\xbb\xbb\xdc\x9b70\xda2b\x16\xdc\xde\x8c\xb7\xec3\x1cl\xb1\x92\xed\xef\xa4:\x00\x82\xe68V\x1c\xa1?8\xc0$\x83KyG\'\xb1\x1a\x7f\xc5\xa4uc\xfbF\x93\xcdt\xb2>6\x90d|\x95\x97g\xbc\xfc]\xe7\xfdtZp\xee\x1d!\xd1\xe7oW\xd3\xf7#\xc0\x86\xb6x.\xe9\x99D\xa5W\xa7\xc5g\x1a\x15s\xaa\xda\b\xfb\xbe\x8c\\\n\x99\x96.\xb6\xda)\xe2S\xe7T\xad\xd7\x1f\f\x9e\av{-\x9b\x88\xfd\xf1-\xe8\xa7\vh\bM!\xafCo\xe2\\\xe9\n\f\xd0ID@\xb2\xc7\x9f\b1\rf\x9dk\xd5\x81\xb6\x0f\x123\x19\x1d\xf0d\xe2\xa93\x94wC\xf5h\xdc\xe2\xaaj\rr\\G\xd2\xa5S\xf3\x96\xeb\xdb\x13\x00?:-\x99\xd1\xe7pl\xfb\xad\xa4<\xad+\xb3f-\xad\x98\x1c\x95\x9etK\x9dv\xea31.\x03o%\x1a\xba!\xb3\x10\xc5\xab*\xea\xb0\x87K/\xe1\x1d\x04'}, @TCA_DEF_DATA={0xd, 0x3, 'ip6_vti0\x00'}]}, {0x55, 0x6, "804b768e401adc144c44c64ba57f27f8cf87a9e6fe8573d574fbf129975c04b9ed61d5283fcfffc324f2239d6526f15b33a7e0bf131938d94ab79d5af3b3bd02f05a51f8b4a8fdbc6094cab7dedf3e1d59"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x134, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3ff, 0x2, 0xffffffff, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xfffffffa, 0x20000000, 0x9, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0xef, 0xfffffffb, 0x0, 0x8a33, 0xfffffc01}}]}, {0xbe, 0x6, "59536d9c741d4eee2b47b70f8273888348c3ae795744a47e22b289428c65688624adf68d2ee717fc3eee0d7f6bfb68e09809d73774d2ee557c37137a9058fc2e35fd683bc41ab3e2f113a8208b74c4c2abe905c9f2cf7fb2844ad0ab0ef9a4c9f3bc010de07f7df1174a3a059edde531ae5400610bea58454c617cfa932a07781688b3f29c32ed738c3ec26a790c95950c12d0c0f9c9682a9b0fa7b534020b3c0b56769ccb735d18ccb1b73d4db3c7e8ee7b5e7806dba360d271"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x11c, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x9, 0x2, 0x4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd49a, 0xff, 0x6, 0x5, 0x6}}]}, {0xbf, 0x6, "d2f6ebf6cd49441740e60e3ac4927173a623b951573590962ef5f347f06d2277d86ff8ddfc4c591ee2196c922c676f948c0faa12cff5208a36a4283f99255523dea2ac43103dd224ec2ff103759105f2f0722018cf7162c0c946b9bafa7ef31a4c068a125014d40a62f8189edced117add8af837a661ee13eba9490c58b9ff366e251fbbc45d42f067c84d3ae586c3f4d18f7e305f082603aff2f6b1844883451656e519c1bade3ba7889585a2ab30964ad25832466f28ae2d9eec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x95c}}, 0x8091) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 9.337727465s ago: executing program 5 (id=1154): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f219", 0x78}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) 8.539427145s ago: executing program 7 (id=1155): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x3, 0x0, 0x0, 0x9, 0xb, 0x10cf, 0x5508, 0xc336, 0x1, 0xb, 'syz1\x00'}) 8.325900369s ago: executing program 5 (id=1156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x168, 0x2, [@TCA_BASIC_EMATCHES={0x128, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff7f}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x9e1c, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xef6}, {0xb25, 0x9, 0xfff8, 0x1, 0x9, 0x2, 0xa74b546439a9262b}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xfff9}, {0x2, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x19e, 0x8, 0x8}, {0x0, 0x5, 0x4}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_META={0x9c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x9}, {0x8, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="fafb4d029b", @TCF_META_TYPE_VAR='[h', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e16039fe4d55"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2c, 0xef, 0x1}, {0x7ff, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="9a9b21bf3e", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7cf, 0x8, 0x1}, {0xfff, 0x0, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3}, {0x4, 0xfa, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="38473777ea2684d0aa", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x27, 0x2}, {0x59, 0x9, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x3c, 0x3, [@m_sample={0x38, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.897207778s ago: executing program 8 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf5b30000) syz_emit_ethernet(0x6e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@newtaction={0x95c, 0x30, 0x400, 0x70bd26, 0x0, {}, [{0x4}, {0x4b8, 0x1, [@m_xt={0x368, 0x2, 0x0, 0x0, {{0x7}, {0x264, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x63, 0x6, {0x0, 'raw\x00', 0xf, 0x9, "6f835c6c886ed4a467778bdda182c169b2191065892684bf79309a7168a062c919754c469dbac2251bb17ba513c1a0f1970c86fd7364e5cd77"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x114, 0x6, {0x1, 'security\x00', 0x3, 0x7fff, "4c69f8eeb0e9bd7a3547ffccb6cecd0969afe656a8548926e7af30741942a59ae87207b30647a204bc29d4a81ecac76957e33c7ab148225187351e74407f8c0637ef298da8b142e61a3bf8a48ad216f5fa8bf5e821d8ea27d39ee36d747ce981fad06bd6280dd9116cc925d18e21a32478d309eb1b2f256b4f2756a5ef58d347035a8f7c24b00a3261e9f66b849295e542725ae1ee514baac005f24898dbc442f655043a48ff59e23605d714d0301036c6cac34f16b5bda33d07a78c86dd3c5a1ae86cf54e0435382f7362486c56404019d3d0db62c9a893d679657cab9133a4f5a8b982b2294ead06f4"}}, @TCA_IPT_TARG={0xde, 0x6, {0x2, 'security\x00', 0x1, 0x0, "28863819a9dadd92ac26bbf820cfc4c4b3587f559e354ba82c64b37a6e061e48d72c5a00e16a772f30771bcc197266e957f3a2eb6dcae7f72d2d199fed113ffffc9fdad10a74c7d96aa9fe38c8c964ec489b1723a4c0a4be31d64b42c62892f8c410c65f7fdb709761c1da7b80aeeeebdd86bc8b5effb7e93d60a9f03e6184a994bc14c670922fdd69624a614191c18a511c48e470cb15ff0b13089c286d11ad9e331fe355d2a47e5093252c4f70244d327920f9"}}]}, {0xde, 0x6, "78884829ebe4cbe1c30d5d2d369c8078807a6e9a29ceffe5c22a8337dcc38f286f8ed1eb04a8ed7a05d05eb117b8181da77b2753f70078ce6a8d54c581d759391826b12262edf0af63b7a3da28354cfdb5971fc43d975bdd812066bb332ee825aa39df294ddadc3ecfcfcfbd11cdc77c94e35364e591ee7f1b93e51c42f1170d6326f8635dbbd87062fd12d09123fbac5794e5df2f5847d8ac76455e067444b9afcf8c776932e8811b92718d7cac0b924193df60c6cd7a7545d684c52187a88aabf5c73191776f2f931106ff8b411dd3c4e6804f70fe13f703eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0x100, 0xe, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x54, 0x800, 0x10000000, 0x814b, 0xffff0001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x95a1, 0x8, 0x1, 0x80000001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x5, 0x1, 0x400}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0xffffffffffffffff, 0x2, 0x7}, 0x1}}]}, {0x5e, 0x6, "3c3c54c2fd11de1f243363dcfa7a09332ca5e00be504e67cef4bcf1d6bcac4ad20fdf4b349e4a219dc2e7af8f8b2bca59c8d33f56c27c6bcf48af2ae8749d5553f44f3e672fea8c227f340d3f11c86ed59babfb54b85f2ab26e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_vlan={0x4c, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x131}]}, {0x17, 0x6, "4d6bb9abbb5cedc4c1487ca0eaefc5d947a554"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x48c, 0x1, [@m_simple={0x238, 0x11, 0x0, 0x0, {{0xb}, {0x1b8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xf, 0x5, 0x7fffffff, 0x7}}, @TCA_DEF_DATA={0x189, 0x3, '\xae\x9aS\x03U+\x8f\x1f\xf4\xe0\x8e\x88(N\x9b\xba\xf5G\xd3\xdaVL?\xf8=\xdb(\xb9\t\x0e\x9f_n\v\xb7B\xbe\xc8)=\xa5\xd1?\xa3-\xed\xfe`m\x17-\xa1\x87\xd0\xd4P\rpG\xaaC,\xa2\x8d\xd7\'_\xd8I\xe4P\x01\xaf+f\"6\xd9\xce\xd2\x8f\x0e\x9c*_#2|\xc0\xcb\xbe\x841\x92\':3\x82\xca\xccu\xe6\x1f\xda\xda\x16\t\xac\x0f!\xe5\xf6I|\xac1I*\xa2\x83\xb0\xbc\x84&:\xbd\x91\x9a\xaa\x99\x9a\xbf\x19\xddB\r\xf6\x90O\x7f\xbb\xbb\xdc\x9b70\xda2b\x16\xdc\xde\x8c\xb7\xec3\x1cl\xb1\x92\xed\xef\xa4:\x00\x82\xe68V\x1c\xa1?8\xc0$\x83KyG\'\xb1\x1a\x7f\xc5\xa4uc\xfbF\x93\xcdt\xb2>6\x90d|\x95\x97g\xbc\xfc]\xe7\xfdtZp\xee\x1d!\xd1\xe7oW\xd3\xf7#\xc0\x86\xb6x.\xe9\x99D\xa5W\xa7\xc5g\x1a\x15s\xaa\xda\b\xfb\xbe\x8c\\\n\x99\x96.\xb6\xda)\xe2S\xe7T\xad\xd7\x1f\f\x9e\av{-\x9b\x88\xfd\xf1-\xe8\xa7\vh\bM!\xafCo\xe2\\\xe9\n\f\xd0ID@\xb2\xc7\x9f\b1\rf\x9dk\xd5\x81\xb6\x0f\x123\x19\x1d\xf0d\xe2\xa93\x94wC\xf5h\xdc\xe2\xaaj\rr\\G\xd2\xa5S\xf3\x96\xeb\xdb\x13\x00?:-\x99\xd1\xe7pl\xfb\xad\xa4<\xad+\xb3f-\xad\x98\x1c\x95\x9etK\x9dv\xea31.\x03o%\x1a\xba!\xb3\x10\xc5\xab*\xea\xb0\x87K/\xe1\x1d\x04'}, @TCA_DEF_DATA={0xd, 0x3, 'ip6_vti0\x00'}]}, {0x55, 0x6, "804b768e401adc144c44c64ba57f27f8cf87a9e6fe8573d574fbf129975c04b9ed61d5283fcfffc324f2239d6526f15b33a7e0bf131938d94ab79d5af3b3bd02f05a51f8b4a8fdbc6094cab7dedf3e1d59"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x134, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3ff, 0x2, 0xffffffff, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xfffffffa, 0x20000000, 0x9, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0xef, 0xfffffffb, 0x0, 0x8a33, 0xfffffc01}}]}, {0xbe, 0x6, "59536d9c741d4eee2b47b70f8273888348c3ae795744a47e22b289428c65688624adf68d2ee717fc3eee0d7f6bfb68e09809d73774d2ee557c37137a9058fc2e35fd683bc41ab3e2f113a8208b74c4c2abe905c9f2cf7fb2844ad0ab0ef9a4c9f3bc010de07f7df1174a3a059edde531ae5400610bea58454c617cfa932a07781688b3f29c32ed738c3ec26a790c95950c12d0c0f9c9682a9b0fa7b534020b3c0b56769ccb735d18ccb1b73d4db3c7e8ee7b5e7806dba360d271"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x11c, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x9, 0x2, 0x4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd49a, 0xff, 0x6, 0x5, 0x6}}]}, {0xbf, 0x6, "d2f6ebf6cd49441740e60e3ac4927173a623b951573590962ef5f347f06d2277d86ff8ddfc4c591ee2196c922c676f948c0faa12cff5208a36a4283f99255523dea2ac43103dd224ec2ff103759105f2f0722018cf7162c0c946b9bafa7ef31a4c068a125014d40a62f8189edced117add8af837a661ee13eba9490c58b9ff366e251fbbc45d42f067c84d3ae586c3f4d18f7e305f082603aff2f6b1844883451656e519c1bade3ba7889585a2ab30964ad25832466f28ae2d9eec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x95c}}, 0x8091) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x0, 0x3, 0x47, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 7.83039475s ago: executing program 7 (id=1158): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) 7.798119597s ago: executing program 5 (id=1159): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) dup2(r2, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x10000000000000, 0x2a0000) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000040)={@empty, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 6.555829503s ago: executing program 8 (id=1160): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 6.204979091s ago: executing program 3 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x2c, r8, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 4.934242149s ago: executing program 8 (id=1162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.948047707s ago: executing program 3 (id=1163): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f00000001c0)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 3.807455033s ago: executing program 7 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2.040860448s ago: executing program 3 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.848076481s ago: executing program 7 (id=1166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x2b, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000a440)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40001}}], 0x1, 0x40048c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x104) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 1.157143198s ago: executing program 3 (id=1167): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) acct(&(0x7f0000000040)='./file0\x00') 1.045393146s ago: executing program 7 (id=1168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@polexpire={0x21c, 0x1b, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in=@loopback, @in6=@private0, 0x4e21, 0x200, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x27}, {0x8000000000000000, 0xd, 0x3, 0x6, 0x90000000, 0x8, 0x28, 0x7fffffffffffffff}, {0xd70, 0xb, 0x100, 0x9}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, 0x40}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7}}, @algo_auth={0x141, 0x1, {{'cbcmac(cast5-generic)\x00'}, 0x7c8, "43bd238d335d347b5bcfcb11e94d094d55ca668076a111f50b71bdce5ea7722efa7543a391efa227aa4b88cc845fb683f91d059182d15f9c47e1e677588b8e068a3bcaf1f0a4422554b6a81e3e2dd9fdcf126a1f218e7340a15e8808337c55782216ce17fae91d9e3d4bd9ce978c9db7bf31dead79782e5a21000a786b6d8bf98a28661afb80db2735148230edcc50473e1e6f6c91da788ac90b155902f21b325e3e37ca43bc5892f0900b1671d3b6e561d70e28ae5fa2c662a68fe375084277d2b6b2674968a93901bb1e9b37fc72a759023d37e4fefaed7361c6ef12f9456f38003b25fa7d74dea5ffffc42e0a3400bede9070ccfe8c99bc"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, 0x0, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)='x', 0x1}, {&(0x7f0000000180)="271fce168276258497b7f9059d5e28c36dce4f0b6ddbc0939c42b4ec36aca64fd542f68bac8f7ec62ba799a44334ad5633472faea9f9be5c57adedde123431bfe584e4ce7ecf9e09788c0cafe0fbef2e99698e3fa0500b2d6a6eb5a6df84daee60beb1411b6b0b9aff14a03c1e8ffce266dd7025b908615d0b5d82e85a338514fdf812a1f7e0c8f640e5d97779278189ebd7672e360a2f91d30f9497b68d976ffd12c8c5d307e91639e2e2c5e88da6c595061de67b4c351a5b8ae2d45f167f150b855d06cbb47b8fc5f3f31a2a11df6dbea6ded7a8bb82523f9552f7af38016dd51eeac3917685be104c2b11ab6e", 0xee}, {&(0x7f0000000380)="b3bf750ae26147744b8b290b3975798f23b408128c62bdeb9944b7e57a4e1d38a742de721649de56403bd02abc53b64dff03d7df7e907cf993417b533e6be2903ccb2ffaaf76f8229eed9292939758b49dfe1e3f4fd0f6ca411a36cd29b29c8aa5c50b15793317c50059d69714e6bf42610e7ffab218b726706320d3b0ae7e0bbf92ad80e7ff5650efecaf4b7e9ffa7117ae6c0afeb4580a5c0b82e1e8533a376533831c5478e5b962b64dfd3a19632877c67a5eb714e1ceaa58d548881c7cf65e447f2b0e1edc4e09d00ae9453c7455e8ad91a62c46aff6ee703b0d5b0d684f47922cc663f7cd5a0b7de059ee8d7ac97f9958ed44d68f", 0xf7}, {&(0x7f0000000280)="a47a295e35f32426e785d70fbeec67fb8588f22664f9a6cbbea02b5de82e100673", 0x21}, {&(0x7f0000000480)="c152af24072ff806941216ad8e0258e696b56eca62ffcf0dd967b33d543013263c0947919d611b4cb9740225d39dba5cec5c4bb151b7cd66be479a36618a5ecf49bfd1e83a398f14d86690ea51939d17d9bc58bb48813afdcacfbe06f735bfd8538e916d7b5bbb46b5f9db5c9acd79ff84c1024a3f3dffad2afde99430e3f9d5d342a0c55765c85a0b05f73a1eb713a838be1b33b153ba5df171c5129749ed69b2", 0xa1}], 0x5) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201f37a159b68b0267e030000000000000002ae0000000109022b207a86e69bbae8f98a5c01000000090401001186eee2000905", @ANYRES8=0x0], 0x0) 291.002134ms ago: executing program 3 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf5b30000) syz_emit_ethernet(0x6e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@newtaction={0x95c, 0x30, 0x400, 0x70bd26, 0x0, {}, [{0x4}, {0x4b8, 0x1, [@m_xt={0x368, 0x2, 0x0, 0x0, {{0x7}, {0x264, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x63, 0x6, {0x0, 'raw\x00', 0xf, 0x9, "6f835c6c886ed4a467778bdda182c169b2191065892684bf79309a7168a062c919754c469dbac2251bb17ba513c1a0f1970c86fd7364e5cd77"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x114, 0x6, {0x1, 'security\x00', 0x3, 0x7fff, "4c69f8eeb0e9bd7a3547ffccb6cecd0969afe656a8548926e7af30741942a59ae87207b30647a204bc29d4a81ecac76957e33c7ab148225187351e74407f8c0637ef298da8b142e61a3bf8a48ad216f5fa8bf5e821d8ea27d39ee36d747ce981fad06bd6280dd9116cc925d18e21a32478d309eb1b2f256b4f2756a5ef58d347035a8f7c24b00a3261e9f66b849295e542725ae1ee514baac005f24898dbc442f655043a48ff59e23605d714d0301036c6cac34f16b5bda33d07a78c86dd3c5a1ae86cf54e0435382f7362486c56404019d3d0db62c9a893d679657cab9133a4f5a8b982b2294ead06f4"}}, @TCA_IPT_TARG={0xde, 0x6, {0x2, 'security\x00', 0x1, 0x0, "28863819a9dadd92ac26bbf820cfc4c4b3587f559e354ba82c64b37a6e061e48d72c5a00e16a772f30771bcc197266e957f3a2eb6dcae7f72d2d199fed113ffffc9fdad10a74c7d96aa9fe38c8c964ec489b1723a4c0a4be31d64b42c62892f8c410c65f7fdb709761c1da7b80aeeeebdd86bc8b5effb7e93d60a9f03e6184a994bc14c670922fdd69624a614191c18a511c48e470cb15ff0b13089c286d11ad9e331fe355d2a47e5093252c4f70244d327920f9"}}]}, {0xde, 0x6, "78884829ebe4cbe1c30d5d2d369c8078807a6e9a29ceffe5c22a8337dcc38f286f8ed1eb04a8ed7a05d05eb117b8181da77b2753f70078ce6a8d54c581d759391826b12262edf0af63b7a3da28354cfdb5971fc43d975bdd812066bb332ee825aa39df294ddadc3ecfcfcfbd11cdc77c94e35364e591ee7f1b93e51c42f1170d6326f8635dbbd87062fd12d09123fbac5794e5df2f5847d8ac76455e067444b9afcf8c776932e8811b92718d7cac0b924193df60c6cd7a7545d684c52187a88aabf5c73191776f2f931106ff8b411dd3c4e6804f70fe13f703eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0x100, 0xe, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x54, 0x800, 0x10000000, 0x814b, 0xffff0001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x95a1, 0x8, 0x1, 0x80000001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x5, 0x1, 0x400}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0xffffffffffffffff, 0x2, 0x7}, 0x1}}]}, {0x5e, 0x6, "3c3c54c2fd11de1f243363dcfa7a09332ca5e00be504e67cef4bcf1d6bcac4ad20fdf4b349e4a219dc2e7af8f8b2bca59c8d33f56c27c6bcf48af2ae8749d5553f44f3e672fea8c227f340d3f11c86ed59babfb54b85f2ab26e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_vlan={0x4c, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x131}]}, {0x17, 0x6, "4d6bb9abbb5cedc4c1487ca0eaefc5d947a554"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x48c, 0x1, [@m_simple={0x238, 0x11, 0x0, 0x0, {{0xb}, {0x1b8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xf, 0x5, 0x7fffffff, 0x7}}, @TCA_DEF_DATA={0x189, 0x3, '\xae\x9aS\x03U+\x8f\x1f\xf4\xe0\x8e\x88(N\x9b\xba\xf5G\xd3\xdaVL?\xf8=\xdb(\xb9\t\x0e\x9f_n\v\xb7B\xbe\xc8)=\xa5\xd1?\xa3-\xed\xfe`m\x17-\xa1\x87\xd0\xd4P\rpG\xaaC,\xa2\x8d\xd7\'_\xd8I\xe4P\x01\xaf+f\"6\xd9\xce\xd2\x8f\x0e\x9c*_#2|\xc0\xcb\xbe\x841\x92\':3\x82\xca\xccu\xe6\x1f\xda\xda\x16\t\xac\x0f!\xe5\xf6I|\xac1I*\xa2\x83\xb0\xbc\x84&:\xbd\x91\x9a\xaa\x99\x9a\xbf\x19\xddB\r\xf6\x90O\x7f\xbb\xbb\xdc\x9b70\xda2b\x16\xdc\xde\x8c\xb7\xec3\x1cl\xb1\x92\xed\xef\xa4:\x00\x82\xe68V\x1c\xa1?8\xc0$\x83KyG\'\xb1\x1a\x7f\xc5\xa4uc\xfbF\x93\xcdt\xb2>6\x90d|\x95\x97g\xbc\xfc]\xe7\xfdtZp\xee\x1d!\xd1\xe7oW\xd3\xf7#\xc0\x86\xb6x.\xe9\x99D\xa5W\xa7\xc5g\x1a\x15s\xaa\xda\b\xfb\xbe\x8c\\\n\x99\x96.\xb6\xda)\xe2S\xe7T\xad\xd7\x1f\f\x9e\av{-\x9b\x88\xfd\xf1-\xe8\xa7\vh\bM!\xafCo\xe2\\\xe9\n\f\xd0ID@\xb2\xc7\x9f\b1\rf\x9dk\xd5\x81\xb6\x0f\x123\x19\x1d\xf0d\xe2\xa93\x94wC\xf5h\xdc\xe2\xaaj\rr\\G\xd2\xa5S\xf3\x96\xeb\xdb\x13\x00?:-\x99\xd1\xe7pl\xfb\xad\xa4<\xad+\xb3f-\xad\x98\x1c\x95\x9etK\x9dv\xea31.\x03o%\x1a\xba!\xb3\x10\xc5\xab*\xea\xb0\x87K/\xe1\x1d\x04'}, @TCA_DEF_DATA={0xd, 0x3, 'ip6_vti0\x00'}]}, {0x55, 0x6, "804b768e401adc144c44c64ba57f27f8cf87a9e6fe8573d574fbf129975c04b9ed61d5283fcfffc324f2239d6526f15b33a7e0bf131938d94ab79d5af3b3bd02f05a51f8b4a8fdbc6094cab7dedf3e1d59"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x134, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3ff, 0x2, 0xffffffff, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xfffffffa, 0x20000000, 0x9, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0xef, 0xfffffffb, 0x0, 0x8a33, 0xfffffc01}}]}, {0xbe, 0x6, "59536d9c741d4eee2b47b70f8273888348c3ae795744a47e22b289428c65688624adf68d2ee717fc3eee0d7f6bfb68e09809d73774d2ee557c37137a9058fc2e35fd683bc41ab3e2f113a8208b74c4c2abe905c9f2cf7fb2844ad0ab0ef9a4c9f3bc010de07f7df1174a3a059edde531ae5400610bea58454c617cfa932a07781688b3f29c32ed738c3ec26a790c95950c12d0c0f9c9682a9b0fa7b534020b3c0b56769ccb735d18ccb1b73d4db3c7e8ee7b5e7806dba360d271"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x11c, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x9, 0x2, 0x4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd49a, 0xff, 0x6, 0x5, 0x6}}]}, {0xbf, 0x6, "d2f6ebf6cd49441740e60e3ac4927173a623b951573590962ef5f347f06d2277d86ff8ddfc4c591ee2196c922c676f948c0faa12cff5208a36a4283f99255523dea2ac43103dd224ec2ff103759105f2f0722018cf7162c0c946b9bafa7ef31a4c068a125014d40a62f8189edced117add8af837a661ee13eba9490c58b9ff366e251fbbc45d42f067c84d3ae586c3f4d18f7e305f082603aff2f6b1844883451656e519c1bade3ba7889585a2ab30964ad25832466f28ae2d9eec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x95c}}, 0x8091) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x0, 0x3, 0x47, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 0s ago: executing program 8 (id=1170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@polexpire={0x21c, 0x1b, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in=@loopback, @in6=@private0, 0x4e21, 0x200, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x27}, {0x8000000000000000, 0xd, 0x3, 0x6, 0x90000000, 0x8, 0x28, 0x7fffffffffffffff}, {0xd70, 0xb, 0x100, 0x9}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, 0x40}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7}}, @algo_auth={0x141, 0x1, {{'cbcmac(cast5-generic)\x00'}, 0x7c8, "43bd238d335d347b5bcfcb11e94d094d55ca668076a111f50b71bdce5ea7722efa7543a391efa227aa4b88cc845fb683f91d059182d15f9c47e1e677588b8e068a3bcaf1f0a4422554b6a81e3e2dd9fdcf126a1f218e7340a15e8808337c55782216ce17fae91d9e3d4bd9ce978c9db7bf31dead79782e5a21000a786b6d8bf98a28661afb80db2735148230edcc50473e1e6f6c91da788ac90b155902f21b325e3e37ca43bc5892f0900b1671d3b6e561d70e28ae5fa2c662a68fe375084277d2b6b2674968a93901bb1e9b37fc72a759023d37e4fefaed7361c6ef12f9456f38003b25fa7d74dea5ffffc42e0a3400bede9070ccfe8c99bc"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, 0x0, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201f37a159b68b0267e030000000000000002ae0000000109022b207a86e69bbae8f98a5c01000000090401001186eee2000905", @ANYRES8=0x0], 0x0) kernel console output (not intermixed with test programs): ino=15 res=0 errno=0 [ 353.543796][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.563494][ T5853] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 353.587712][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.641045][ T5853] usb 5-1: Product: syz [ 353.645295][ T5853] usb 5-1: Manufacturer: syz [ 353.657197][ T5853] usb 5-1: SerialNumber: syz [ 353.672037][ T30] audit: type=1800 audit(1773380024.750:162): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 353.702168][ T5853] usb 5-1: config 0 descriptor?? [ 353.755135][ T5853] gm12u320 5-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 353.785470][ T5853] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 353.837908][ T5853] usb-storage 5-1:0.0: USB Mass Storage device detected [ 353.852345][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 353.867261][ T5826] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 353.902682][ T5853] usb-storage 5-1:0.0: device ignored [ 354.090943][ T5826] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 354.181339][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 354.403045][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.497231][ T29] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 354.532098][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.621187][ T5853] usb 5-1: USB disconnect, device number 13 [ 354.654712][ T29] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 354.685299][ T29] usb 6-1: config 1 has no interface number 3 [ 354.711572][ T29] usb 6-1: config 1 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.758057][ T29] usb 6-1: config 1 interface 4 has no altsetting 0 [ 354.780746][ T29] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 354.842033][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.865761][ T29] usb 6-1: Product: syz [ 354.869955][ T29] usb 6-1: Manufacturer: syz [ 354.891289][ T29] usb 6-1: SerialNumber: syz [ 354.925936][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.039704][ T3005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.238003][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.249992][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.920553][ T3005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.128810][ T3005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.292377][ T3005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.802362][ T29] usb 6-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 357.081148][ T7903] hfs: can't find a HFS filesystem on dev nullb0 [ 357.452399][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 357.472617][ T29] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 357.661650][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 357.736144][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.757093][ T5931] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 357.766763][ T5931] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 357.818399][ T5931] usb 5-1: config 1 has no interface number 3 [ 357.849081][ T5931] usb 5-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 357.887254][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 357.960707][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.972814][ T29] usb 6-1: USB disconnect, device number 12 [ 357.988844][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.005944][ T5931] usb 5-1: config 1 interface 4 has no altsetting 0 [ 358.013113][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.023958][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.037955][ T5931] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 358.092449][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.102042][ T5931] usb 5-1: Product: syz [ 358.106242][ T5931] usb 5-1: Manufacturer: syz [ 358.111154][ T5931] usb 5-1: SerialNumber: syz [ 358.116430][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.184968][ T3005] hsr0: left allmulticast mode [ 358.189825][ T3005] hsr_slave_0: left allmulticast mode [ 358.240255][ T3005] hsr_slave_1: left allmulticast mode [ 358.247127][ T3005] hsr0: left promiscuous mode [ 358.253102][ T3005] bridge0: port 3(hsr0) entered disabled state [ 358.288618][ T3005] bridge_slave_1: left allmulticast mode [ 358.305299][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.321337][ T3005] bridge_slave_1: left promiscuous mode [ 358.397479][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.414448][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.424007][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.573951][ T3005] bridge_slave_0: left allmulticast mode [ 358.636802][ T3005] bridge_slave_0: left promiscuous mode [ 358.652276][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.994374][ T5931] usb 5-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 359.041261][ T5931] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 359.203218][ T5931] usb 5-1: USB disconnect, device number 14 [ 359.477182][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.052341][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 360.171282][ T5141] Bluetooth: hci2: command tx timeout [ 360.192672][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.251822][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 360.324604][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.346283][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 360.391162][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 360.391251][ T3005] bond0 (unregistering): Released all slaves [ 360.476727][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 360.525678][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.593687][ T24] usb 5-1: Product: syz [ 360.674274][ T24] usb 5-1: Manufacturer: syz [ 360.678922][ T24] usb 5-1: SerialNumber: syz [ 360.692255][ T24] usb 5-1: config 0 descriptor?? [ 360.765237][ T7934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 361.231709][ T7931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 361.313345][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 362.254652][ T5141] Bluetooth: hci2: command tx timeout [ 363.774308][ T7965] netlink: 'syz.5.470': attribute type 1 has an invalid length. [ 363.929101][ T3005] hsr_slave_0: left promiscuous mode [ 363.946168][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.470'. [ 363.966727][ T3005] hsr_slave_1: left promiscuous mode [ 363.990187][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.030951][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.047656][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.061273][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.226884][ T3005] veth1_macvtap: left promiscuous mode [ 364.243680][ T3005] veth0_macvtap: left promiscuous mode [ 364.264757][ T3005] veth1_vlan: left promiscuous mode [ 364.290255][ T3005] veth0_vlan: left promiscuous mode [ 364.331139][ T5141] Bluetooth: hci2: command tx timeout [ 364.912760][ T5853] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 365.231110][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 365.491971][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 365.523197][ T5934] usb 5-1: USB disconnect, device number 15 [ 365.564484][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.590762][ T5853] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.630349][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 365.669040][ T5853] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 365.729666][ T5853] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 365.851830][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.863123][ T5853] usb 2-1: config 0 descriptor?? [ 365.869455][ T7972] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.254852][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.262642][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.269534][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.276775][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.284541][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.291596][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.298478][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.307635][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.314598][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.321597][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.329726][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.338860][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.345864][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.352890][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.359771][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.367888][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.374835][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.381960][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.389170][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.396651][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.411324][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.411715][ T51] Bluetooth: hci2: command tx timeout [ 366.418314][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.441561][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.449314][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.460487][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.471515][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.482514][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.492801][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.501374][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.509113][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.520234][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.533399][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.811176][ T5839] Bluetooth: hci6: unexpected event 0x14 length: 0 < 6 [ 366.818604][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 366.862263][ T10] usb 2-1: USB disconnect, device number 10 [ 366.869429][ T5141] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 367.319618][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 367.377116][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 368.791359][ T791] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 368.981802][ T7965] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 369.000133][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 369.092035][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.119953][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.180960][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.327393][ T791] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 369.387324][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 369.420583][ T791] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.761508][ T791] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 369.771383][ T791] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 369.779404][ T791] usb 5-1: Manufacturer: syz [ 370.510516][ T791] usb 5-1: config 0 descriptor?? [ 370.911157][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 371.084134][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 371.095765][ T791] rc_core: IR keymap rc-hauppauge not found [ 371.121097][ T791] Registered IR keymap rc-empty [ 371.130791][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.138231][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 371.151199][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 371.171907][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.268800][ T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 371.311436][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 371.342550][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.367873][ T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 371.397743][ T10] usb 4-1: Product: syz [ 371.416893][ T10] usb 4-1: Manufacturer: syz [ 371.420875][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.436477][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.444668][ T10] usb 4-1: SerialNumber: syz [ 371.456211][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.488896][ T7912] bridge_slave_0: entered allmulticast mode [ 371.501535][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.533332][ T10] usb 4-1: config 0 descriptor?? [ 371.557021][ T8017] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 371.565729][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.612017][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.622241][ T7912] bridge_slave_0: entered promiscuous mode [ 371.661279][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.756020][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.792764][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.820928][ T8015] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 371.833607][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.887124][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.013927][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.069524][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.071177][ T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.112239][ T7912] bridge_slave_1: entered allmulticast mode [ 372.179866][ T791] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 372.199429][ T7912] bridge_slave_1: entered promiscuous mode [ 372.259814][ T791] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 372.366850][ T791] usb 5-1: USB disconnect, device number 16 [ 372.801269][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.016009][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.272165][ T791] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 373.384405][ T29] usb 4-1: USB disconnect, device number 12 [ 373.441108][ T5853] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 373.540894][ T7912] team0: Port device team_slave_0 added [ 373.573010][ T7912] team0: Port device team_slave_1 added [ 373.593912][ T791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 373.616644][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 373.670029][ T791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 373.715939][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 373.734119][ T5853] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 373.797043][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 373.844043][ T5853] usb 1-1: SerialNumber: syz [ 373.865481][ T791] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.875334][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.891915][ T5853] usb 1-1: config 0 descriptor?? [ 373.894882][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.909361][ T791] usb 2-1: Product: syz [ 374.022869][ T5853] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 374.080125][ T5853] usb 1-1: Detected FT232A [ 374.118396][ T5853] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 374.145985][ T791] usb 2-1: Manufacturer: syz [ 374.302192][ T791] usb 2-1: SerialNumber: syz [ 374.312312][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.367936][ T791] usb 2-1: config 0 descriptor?? [ 374.382435][ T8047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.426802][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.595263][ T8047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.621361][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.843717][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.911744][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.400153][ T791] usb 1-1: USB disconnect, device number 12 [ 375.457481][ T791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 375.501403][ T791] ftdi_sio 1-1:0.0: device disconnected [ 375.512945][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 375.522032][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.488'. [ 375.536496][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 375.555602][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.488'. [ 375.660804][ T7912] hsr_slave_0: entered promiscuous mode [ 375.686184][ T7912] hsr_slave_1: entered promiscuous mode [ 375.707463][ T7912] debugfs: 'hsr0' already exists in 'hsr' [ 375.731159][ T7912] Cannot create hsr debugfs directory [ 376.464131][ T8082] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 376.548550][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 377.177726][ T7912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.220500][ T5934] usb 2-1: USB disconnect, device number 11 [ 377.337892][ T7912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.407647][ T7912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.442765][ T7912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.880494][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.887062][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.384174][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.543375][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.590295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.597603][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.871285][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.878582][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.580625][ T8113] ipvlan0: entered promiscuous mode [ 380.274108][ T1204] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 380.488075][ T1204] usb 6-1: Using ep0 maxpacket: 16 [ 380.533604][ T1204] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.568790][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.615601][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.647865][ T1204] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 380.713020][ T1204] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.798895][ T1204] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.856347][ T1204] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.922963][ T1204] usb 6-1: Manufacturer: syz [ 381.035095][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.049446][ T1204] usb 6-1: config 0 descriptor?? [ 381.317798][ T8136] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 381.751148][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 381.844521][ T1204] rc_core: IR keymap rc-hauppauge not found [ 381.863515][ T1204] Registered IR keymap rc-empty [ 381.931756][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 381.937588][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 381.971243][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 382.013902][ T1204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 382.033731][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 382.060036][ T1204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 382.072602][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 382.156500][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 382.169048][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 382.207582][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.245522][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 382.257233][ T10] usb 5-1: Product: syz [ 382.273075][ T10] usb 5-1: Manufacturer: syz [ 382.292033][ T10] usb 5-1: SerialNumber: syz [ 382.302255][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 382.324279][ T10] usb 5-1: config 0 descriptor?? [ 382.531409][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 382.551259][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 382.571226][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.328510][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.441170][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.461199][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.506706][ T1204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.523464][ T1204] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 383.523485][ T1204] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 383.527913][ T1204] usb 6-1: USB disconnect, device number 13 [ 383.537086][ T8130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.784380][ T8130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.801421][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 383.801443][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 383.801619][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 383.801632][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 384.746484][ T7912] veth0_vlan: entered promiscuous mode [ 384.838993][ T7912] veth1_vlan: entered promiscuous mode [ 384.949369][ T8168] input: syz0 as /devices/virtual/input/input34 [ 385.018879][ T7912] veth0_macvtap: entered promiscuous mode [ 385.275049][ T7912] veth1_macvtap: entered promiscuous mode [ 385.430782][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.573349][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.637434][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.705159][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.770599][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.838116][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.315925][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.352919][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.539405][ T10] usb 5-1: USB disconnect, device number 17 [ 386.775433][ T8177] syz.3.503 (8177): drop_caches: 2 [ 386.914549][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.714602][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.411386][ T8201] fuse: Bad value for 'fd' [ 389.301121][ T5901] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 389.561314][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 389.571841][ T5901] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 389.616176][ T5901] usb 7-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 389.625955][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.653940][ T5901] usb 7-1: Product: syz [ 389.660335][ T5901] usb 7-1: Manufacturer: syz [ 389.821110][ T5901] usb 7-1: SerialNumber: syz [ 390.083074][ T8195] fuse: Unknown parameter '00000000000000000000006' [ 390.263650][ T5901] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 390.665127][ T5901] usb 7-1: USB disconnect, device number 2 [ 390.845202][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.381175][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 391.611266][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 391.630425][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.683723][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.746361][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.799543][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.816460][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.849314][ T29] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.917798][ T29] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.927766][ T29] usb 7-1: Manufacturer: syz [ 391.995985][ T29] usb 7-1: config 0 descriptor?? [ 392.224183][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 392.281804][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 392.352373][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 392.391448][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 392.461135][ T29] rc_core: IR keymap rc-hauppauge not found [ 392.472517][ T29] Registered IR keymap rc-empty [ 392.491267][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 392.690072][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 392.742111][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 393.136576][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input35 [ 393.348338][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 393.381230][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 393.451205][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 393.501260][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 393.738065][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 393.751524][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 393.793712][ T8243] trusted_key: encrypted_key: key user:syz not found [ 394.451764][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 394.596842][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 394.617486][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 394.661192][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 394.682687][ T8246] trusted_key: encrypted_key: insufficient parameters specified [ 394.704710][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 394.761142][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 394.789813][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 394.822039][ T29] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 394.876381][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 394.909265][ T29] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 394.949287][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.979228][ T29] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 394.991037][ T24] usb 5-1: Product: syz [ 394.995210][ T24] usb 5-1: Manufacturer: syz [ 395.031329][ T24] usb 5-1: SerialNumber: syz [ 395.157082][ T29] usb 7-1: USB disconnect, device number 3 [ 395.175792][ T24] usb 5-1: config 0 descriptor?? [ 395.194613][ T8240] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 395.461377][ T8240] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 396.075118][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 397.405206][ T8275] netlink: 'syz.5.524': attribute type 1 has an invalid length. [ 397.465000][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.524'. [ 397.881156][ T1204] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 398.060486][ T8286] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 398.122514][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.525'. [ 398.380553][ T1204] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 398.548995][ T1204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 398.664067][ T1204] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 398.704255][ T1204] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.717298][ T1204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.967263][ T1204] usb 7-1: Product: syz [ 398.979168][ T1204] usb 7-1: Manufacturer: syz [ 399.000735][ T1204] usb 7-1: SerialNumber: syz [ 399.027902][ T1204] usb 7-1: config 0 descriptor?? [ 399.060549][ T8278] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 399.280573][ T5901] usb 5-1: USB disconnect, device number 18 [ 399.377712][ T8271] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 401.828511][ T8313] trusted_key: encrypted_key: key user:syz not found [ 402.811230][ T8319] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 403.716071][ T5934] usb 7-1: USB disconnect, device number 4 [ 404.246423][ T8333] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 406.123082][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 406.206672][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 407.716892][ T8365] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 407.933911][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 409.050130][ T8365] bond1: (slave gretap1): making interface the new active one [ 409.082271][ T8365] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 409.262660][ T8381] binder: 8377:8381 ioctl c0306201 0 returned -14 [ 410.508841][ T8387] trusted_key: encrypted_key: key user:syz not found [ 411.914268][ T8381] syz.0.541 (8381): drop_caches: 2 [ 412.195217][ T5901] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 412.443277][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 412.474985][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 412.547826][ T5901] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 412.556662][ T8376] syz.3.540 (8376): drop_caches: 2 [ 412.591301][ T5901] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 412.661064][ T5901] usb 2-1: config 1 has no interface number 3 [ 412.671162][ T5901] usb 2-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 412.767127][ T5901] usb 2-1: config 1 interface 4 has no altsetting 0 [ 412.806373][ T5901] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 412.856689][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.917407][ T5901] usb 2-1: Product: syz [ 412.939497][ T5901] usb 2-1: Manufacturer: syz [ 412.963531][ T5901] usb 2-1: SerialNumber: syz [ 413.202829][ T8407] binder: 8401:8407 ioctl c0306201 0 returned -14 [ 413.703638][ T8407] syz.3.545 (8407): drop_caches: 2 [ 413.914454][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.927115][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.258601][ T5901] usb 2-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 415.326906][ T5901] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 415.714328][ T8424] fuse: Bad value for 'fd' [ 416.374835][ T5901] usb 2-1: USB disconnect, device number 12 [ 416.694649][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.889018][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 416.932840][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 416.988156][ T8430] binder: 8425:8430 ioctl c0306201 0 returned -14 [ 417.022183][ T8430] syz.5.550 (8430): drop_caches: 2 [ 418.071276][ T5901] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 418.281331][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 418.338424][ T5901] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 418.379152][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 418.433285][ T5901] usb 4-1: SerialNumber: syz [ 418.453180][ T5901] usb 4-1: config 0 descriptor?? [ 418.489021][ T5901] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 418.622305][ T5901] usb 4-1: Detected FT232A [ 418.657628][ T5901] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 419.379874][ T8455] netlink: 'syz.6.555': attribute type 1 has an invalid length. [ 419.586562][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.6.555'. [ 419.625976][ T5901] usb 4-1: USB disconnect, device number 13 [ 419.688762][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 419.741686][ T5901] ftdi_sio 4-1:0.0: device disconnected [ 420.274089][ T8474] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 422.037230][ T8468] loop0: detected capacity change from 0 to 32768 [ 422.210146][ T8468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.557 (8468) [ 422.254311][ T8468] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 422.575411][ T8468] BTRFS info (device loop0): using sha256 checksum algorithm [ 422.911867][ T8468] BTRFS info (device loop0): enabling ssd optimizations [ 422.951143][ T8468] BTRFS info (device loop0): turning on async discard [ 422.958091][ T8468] BTRFS info (device loop0): enabling free space tree [ 423.238734][ T5824] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.931816][ T8512] fuse: Bad value for 'fd' [ 425.374062][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 425.392548][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 427.718947][ T8545] binder: 8540:8545 ioctl c0306201 0 returned -14 [ 428.020252][ T8545] syz.5.571 (8545): drop_caches: 2 [ 429.489126][ T8560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.549318][ T8566] syz.3.576 (8566): drop_caches: 2 [ 433.787958][ T8587] binder: 8584:8587 ioctl c0306201 0 returned -14 [ 433.938756][ T8588] syz.6.582 (8588): drop_caches: 2 [ 434.187812][ T8592] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 439.310587][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.317378][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.193584][ T8636] netlink: 'syz.6.590': attribute type 1 has an invalid length. [ 440.528174][ T5894] IPVS: starting estimator thread 0... [ 440.661338][ T8644] IPVS: using max 33 ests per chain, 79200 per kthread [ 440.995452][ T8646] syz.5.593 (8646): drop_caches: 2 [ 441.911872][ T8658] syz.0.597 (8658): drop_caches: 2 [ 442.336123][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 442.428674][ T8660] geneve2: entered promiscuous mode [ 442.503252][ T8660] geneve2: entered allmulticast mode [ 442.514420][ T135] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.592883][ T135] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.677747][ T135] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.761058][ T135] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 445.692204][ T8682] syz.4.604 (8682): drop_caches: 2 [ 445.901023][ T8684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.916428][ T8684] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 446.865184][ T8691] syz.1.606 (8691): drop_caches: 2 [ 448.109458][ T8698] hfs: can't find a HFS filesystem on dev nullb0 [ 449.146249][ T8706] binder: 8703:8706 ioctl c0306201 0 returned -14 [ 449.167191][ T8706] syz.0.609 (8706): drop_caches: 2 [ 452.681115][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 452.903064][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 452.934543][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 453.012254][ T5901] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 453.020323][ T5901] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 453.191443][ T5901] usb 4-1: config 1 has no interface number 3 [ 453.231253][ T5901] usb 4-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 453.284875][ T5901] usb 4-1: config 1 interface 4 has no altsetting 0 [ 453.325509][ T5901] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 453.336037][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.431463][ T5901] usb 4-1: Product: syz [ 453.468078][ T5901] usb 4-1: Manufacturer: syz [ 453.488468][ T5901] usb 4-1: SerialNumber: syz [ 453.885735][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.910148][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.245816][ T5901] usb 4-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 455.267913][ T5901] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 455.704102][ T5901] usb 4-1: USB disconnect, device number 14 [ 457.358219][ T8753] binder: 8750:8753 ioctl c0306201 0 returned -14 [ 457.379651][ T8753] syz.5.620 (8753): drop_caches: 2 [ 460.484164][ T8783] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 462.441503][ T5894] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 462.834389][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 462.908611][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 462.992525][ T5894] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 463.053346][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.062744][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.150496][ T5894] usb 6-1: Product: syz [ 463.166770][ T5894] usb 6-1: Manufacturer: syz [ 463.189030][ T5894] usb 6-1: SerialNumber: syz [ 463.300614][ T5894] usb 6-1: config 0 descriptor?? [ 463.379838][ T8810] syz.6.633 (8810): drop_caches: 2 [ 463.402740][ T8797] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.149365][ T8797] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 467.086777][ T5894] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 467.256183][ T10] usb 6-1: USB disconnect, device number 14 [ 467.281145][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 467.308241][ T5894] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.401091][ T5894] usb 7-1: config 1 interface 0 has no altsetting 0 [ 467.481940][ T5894] usb 7-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 467.650131][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.668589][ T5894] usb 7-1: Product: syz [ 467.672979][ T5894] usb 7-1: Manufacturer: syz [ 467.677570][ T5894] usb 7-1: SerialNumber: syz [ 467.938820][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.962498][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.003649][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.067783][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.127799][ T8821] loop6: detected capacity change from 0 to 512 [ 468.185983][ T8821] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 468.193102][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 468.271747][ T8821] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.637: bg 0: block 104: invalid block bitmap [ 468.284353][ T8821] loop6: lost filesystem error report for type 5 error -117 [ 468.290980][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 468.305372][ C0] EXT4-fs (loop6): initial error at time 1773380907: ext4_validate_block_bitmap:432 [ 468.314393][ T8821] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 468.314783][ C0] EXT4-fs (loop6): last error at time 1773380907: ext4_validate_block_bitmap:432 [ 468.424790][ T8821] loop6: lost filesystem error report for type 5 error -117 [ 468.432961][ T8821] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.637: invalid indirect mapped block 1 (level 1) [ 468.491164][ T8821] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 468.491815][ T8821] EXT4-fs (loop6): 1 truncate cleaned up [ 468.536006][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 468.577680][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 468.613888][ T8821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.631641][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 469.018568][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 469.048037][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.049952][ T30] audit: type=1800 audit(1773380908.059:163): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.637" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 469.103107][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.138441][ T24] usb 6-1: Product: syz [ 469.160152][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.176437][ T24] usb 6-1: Manufacturer: syz [ 469.199398][ T24] usb 6-1: SerialNumber: syz [ 469.237165][ T24] usb 6-1: config 0 descriptor?? [ 469.262092][ T8837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 469.320002][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input36 [ 469.341724][ T5175] bcm5974 7-1:1.0: could not read from device [ 469.397552][ T5175] bcm5974 7-1:1.0: could not read from device [ 469.411301][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 469.431106][ T5894] usb 7-1: USB disconnect, device number 5 [ 469.441777][ T5175] bcm5974 7-1:1.0: could not read from device [ 469.461923][ T5175] bcm5974 7-1:1.0: could not read from device [ 469.554460][ T8837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 469.591091][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 469.608158][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.661100][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.701314][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.712192][ T5880] udevd[5880]: Error opening device "/dev/input/event4": No such file or directory [ 469.747861][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.790523][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 469.816999][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 469.857203][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 469.888752][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 469.928144][ T8845] syz.0.643 (8845): drop_caches: 2 [ 470.044075][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.105759][ T7912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.129521][ T8848] syz.4.642 (8848): drop_caches: 2 [ 470.160062][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.170916][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.296452][ T10] usb 2-1: Manufacturer: syz [ 470.411284][ T10] usb 2-1: config 0 descriptor?? [ 471.084867][ T10] rc_core: IR keymap rc-hauppauge not found [ 471.092391][ T10] Registered IR keymap rc-empty [ 471.111824][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.362875][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.493545][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 471.610126][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 471.764998][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.853730][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.905171][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.956031][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.131190][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.172221][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.255291][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.325700][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.598912][ T5901] usb 6-1: USB disconnect, device number 15 [ 472.715956][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.771068][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.840075][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.867153][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.959500][ T10] usb 2-1: USB disconnect, device number 13 [ 476.057928][ T8888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.278772][ T8894] syz.6.652 (8894): drop_caches: 2 [ 478.313378][ T8909] netlink: 'syz.1.655': attribute type 27 has an invalid length. [ 479.051331][ T29] IPVS: starting estimator thread 0... [ 479.181100][ T8915] IPVS: using max 33 ests per chain, 79200 per kthread [ 479.642821][ T8922] syz.6.658 (8922): drop_caches: 2 [ 479.662652][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 479.978284][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 479.994091][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.011205][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.040157][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.067440][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 480.097314][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.188963][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 480.411582][ T5901] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 480.481234][ T5901] usb 4-1: Manufacturer: syz [ 480.498474][ T5901] usb 4-1: config 0 descriptor?? [ 480.931139][ T5901] rc_core: IR keymap rc-hauppauge not found [ 480.954938][ T5901] Registered IR keymap rc-empty [ 480.978108][ T8932] syz.5.661 (8932): drop_caches: 2 [ 480.988402][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.034976][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.084707][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 481.208251][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 481.331467][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.518028][ T8938] loop0: detected capacity change from 0 to 2048 [ 481.531170][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.550140][ T8938] EXT4-fs: Ignoring removed mblk_io_submit option [ 481.582950][ T8938] EXT4-fs: Ignoring removed i_version option [ 481.614834][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.661086][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.692439][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.706731][ T8938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.728943][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.789478][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.803919][ T30] audit: type=1800 audit(1773380920.889:164): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.664" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 481.851859][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.886374][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.931342][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 481.971462][ T29] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 481.973636][ T5901] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 482.070323][ T5901] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 482.123801][ T29] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 482.151037][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.179375][ T5901] usb 4-1: USB disconnect, device number 15 [ 482.181179][ T29] usb 6-1: config 0 descriptor?? [ 482.217656][ T29] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 482.332687][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 482.607471][ T29] gp8psk: usb in 128 operation failed. [ 484.841126][ T30] audit: type=1800 audit(1773380923.909:165): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 485.569506][ T29] gp8psk: usb in 146 operation failed. [ 485.595836][ T5824] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 485.645236][ T29] gp8psk: failed to get FW version [ 485.686166][ T29] gp8psk: usb in 149 operation failed. [ 485.686588][ T5824] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 485.692592][ T29] gp8psk: failed to get FPGA version [ 485.802638][ T8965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.991720][ T29] gp8psk: usb in 138 operation failed. [ 485.999375][ T29] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 486.035211][ T29] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 486.223223][ T29] usb 6-1: USB disconnect, device number 16 [ 486.811074][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 486.932385][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.954208][ T1153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.000067][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 487.074687][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 487.141238][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 487.205483][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.215220][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.225001][ T29] usb 6-1: Product: syz [ 487.241171][ T29] usb 6-1: Manufacturer: syz [ 487.245899][ T29] usb 6-1: SerialNumber: syz [ 487.362082][ T29] usb 6-1: config 0 descriptor?? [ 487.514889][ T8970] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.818921][ T8970] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.913767][ T1153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.202871][ T1153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.476117][ T1153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.776160][ T8981] netlink: 'syz.1.672': attribute type 27 has an invalid length. [ 489.186997][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.220391][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.229589][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.252087][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.263639][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.355850][ T1153] bridge_slave_1: left allmulticast mode [ 489.387630][ T1153] bridge_slave_1: left promiscuous mode [ 489.441012][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.632301][ T1153] bridge_slave_0: left allmulticast mode [ 489.783115][ T1153] bridge_slave_0: left promiscuous mode [ 489.788885][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.847849][ T5934] usb 6-1: USB disconnect, device number 17 [ 490.351070][ T5977] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 490.503471][ T5977] usb 6-1: Using ep0 maxpacket: 16 [ 490.521818][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.571106][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.603370][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 490.665962][ T5977] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 490.692198][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.761983][ T5977] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 490.792669][ T5977] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 490.822537][ T5977] usb 6-1: Manufacturer: syz [ 490.823083][ T1153] bond1 (unregistering): (slave gretap1): Releasing active interface [ 490.866998][ T5977] usb 6-1: config 0 descriptor?? [ 490.992379][ T9006] binder: 9001:9006 ioctl c0306201 0 returned -14 [ 491.013152][ T9006] syz.3.679 (9006): drop_caches: 2 [ 491.218859][ T5977] rc_core: IR keymap rc-hauppauge not found [ 491.225425][ T5977] Registered IR keymap rc-empty [ 491.230506][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 491.243970][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.277316][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.308595][ T1153] bond0 (unregistering): Released all slaves [ 491.313525][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 491.356297][ T1153] bond1 (unregistering): Released all slaves [ 491.372731][ T5141] Bluetooth: hci1: command tx timeout [ 491.426135][ T1153] bond2 (unregistering): Released all slaves [ 491.538615][ T5977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 491.832965][ T5977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input39 [ 491.984023][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.083086][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.131265][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.181095][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.259503][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.442935][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.491533][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.513060][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.545944][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.595877][ T5977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.723632][ T5977] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 492.865955][ T5977] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.059089][ T5977] usb 6-1: USB disconnect, device number 18 [ 493.251164][ T1153] hsr_slave_0: left promiscuous mode [ 493.296529][ T1153] hsr_slave_1: left promiscuous mode [ 493.330195][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.377407][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.426680][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.451462][ T5141] Bluetooth: hci1: command tx timeout [ 493.473997][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.528750][ T9031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.369172][ T1153] veth1_macvtap: left promiscuous mode [ 494.406267][ T1153] veth0_macvtap: left promiscuous mode [ 494.432092][ T1153] veth1_vlan: left promiscuous mode [ 494.473255][ T1153] veth0_vlan: left promiscuous mode [ 494.977082][ T9039] syz.3.685 (9039): drop_caches: 2 [ 495.536857][ T5141] Bluetooth: hci1: command tx timeout [ 496.390189][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 496.408776][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 497.612122][ T5141] Bluetooth: hci1: command tx timeout [ 498.299112][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 499.292030][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.337991][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.420769][ T8984] bridge_slave_0: entered allmulticast mode [ 499.795724][ T8984] bridge_slave_0: entered promiscuous mode [ 499.863476][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.991099][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.059107][ T8984] bridge_slave_1: entered allmulticast mode [ 500.099598][ T8984] bridge_slave_1: entered promiscuous mode [ 500.192881][ T9084] binder: 9078:9084 ioctl c0306201 0 returned -14 [ 500.244047][ T9084] syz.4.693 (9084): drop_caches: 2 [ 500.812092][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.694'. [ 500.861138][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.867460][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.909565][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.924775][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.069004][ T8984] team0: Port device team_slave_0 added [ 501.162653][ T8984] team0: Port device team_slave_1 added [ 501.328967][ T9091] netlink: 'syz.3.692': attribute type 27 has an invalid length. [ 501.374499][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.405406][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.532137][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.583443][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.634671][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.790971][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.058649][ T8984] hsr_slave_0: entered promiscuous mode [ 502.099399][ T8984] hsr_slave_1: entered promiscuous mode [ 502.132988][ T8984] debugfs: 'hsr0' already exists in 'hsr' [ 502.151507][ T8984] Cannot create hsr debugfs directory [ 504.014343][ T8984] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 504.348220][ T8984] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 504.628090][ T8984] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 504.685005][ T8984] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 505.123307][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.189930][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.346843][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.354034][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.432683][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.439848][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.320480][ T9163] binder: 9151:9163 ioctl c0306201 0 returned -14 [ 506.376595][ T9163] syz.3.704 (9163): drop_caches: 2 [ 506.987750][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.643495][ T9186] loop1: detected capacity change from 0 to 2048 [ 509.650786][ T9186] EXT4-fs: Ignoring removed mblk_io_submit option [ 509.717093][ T9186] EXT4-fs: Ignoring removed i_version option [ 509.776550][ T9186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.882705][ T30] audit: type=1800 audit(1773380948.959:166): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.707" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 510.366425][ T8984] veth0_vlan: entered promiscuous mode [ 510.484238][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.709'. [ 510.602280][ T8984] veth1_vlan: entered promiscuous mode [ 510.766268][ T8984] veth0_macvtap: entered promiscuous mode [ 510.821387][ T8984] veth1_macvtap: entered promiscuous mode [ 510.902751][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.962754][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.277001][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.374951][ T1153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.466863][ T1153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.533884][ T1153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.609184][ T9212] netlink: 'syz.4.708': attribute type 27 has an invalid length. [ 511.823941][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.933559][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.968113][ T9218] syz.3.710 (9218): drop_caches: 2 [ 512.142310][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.320972][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.368477][ T5819] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 513.656560][ T5819] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 514.964302][ T8202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.067885][ T8202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.244440][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.287025][ T8202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.319078][ T8202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.723358][ T8202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.821100][ T8202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.090791][ T8202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.161267][ T8202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.404907][ T9259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.436299][ T8202] hsr0: left allmulticast mode [ 517.462331][ T8202] hsr_slave_0: left allmulticast mode [ 517.477993][ T8202] hsr_slave_1: left allmulticast mode [ 517.560776][ T8202] hsr0: left promiscuous mode [ 517.599072][ T8202] bridge0: port 3(hsr0) entered disabled state [ 517.645051][ T8202] bridge_slave_1: left allmulticast mode [ 517.687202][ T8202] bridge_slave_1: left promiscuous mode [ 517.711352][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.799571][ T8202] bridge_slave_0: left allmulticast mode [ 517.843438][ T8202] bridge_slave_0: left promiscuous mode [ 517.999927][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.179798][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 518.222479][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 518.261249][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.296733][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.307757][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.686494][ T8202] bond1 (unregistering): (slave gretap1): Releasing active interface [ 519.731009][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 519.901370][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 519.913579][ T8202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.926529][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 519.957660][ T8202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.996654][ T10] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 520.017412][ T8202] bond0 (unregistering): Released all slaves [ 520.045756][ T10] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 520.094115][ T8202] bond1 (unregistering): Released all slaves [ 520.110719][ T10] usb 6-1: config 1 has no interface number 3 [ 520.151260][ T10] usb 6-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 520.198739][ T8202] bond2 (unregistering): Released all slaves [ 520.205188][ T10] usb 6-1: config 1 interface 4 has no altsetting 0 [ 520.216360][ T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 520.254252][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.284679][ T10] usb 6-1: Product: syz [ 520.303525][ T10] usb 6-1: Manufacturer: syz [ 520.328449][ T10] usb 6-1: SerialNumber: syz [ 520.365994][ T9292] netlink: 'syz.3.724': attribute type 27 has an invalid length. [ 520.411103][ T5839] Bluetooth: hci0: command tx timeout [ 520.677621][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.684136][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 520.686762][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.911822][ T8202] hsr_slave_0: left promiscuous mode [ 522.014135][ T8202] hsr_slave_1: left promiscuous mode [ 522.169324][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.208563][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.294285][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.332055][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.481974][ T9321] syz.3.731 (9321): drop_caches: 2 [ 522.517990][ T5839] Bluetooth: hci0: command tx timeout [ 522.661190][ T8202] veth1_macvtap: left promiscuous mode [ 522.661235][ T8202] veth0_macvtap: left promiscuous mode [ 522.661329][ T8202] veth1_vlan: left promiscuous mode [ 522.661384][ T8202] veth0_vlan: left promiscuous mode [ 523.442897][ T10] usb 6-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 523.549076][ T10] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 523.812458][ T9335] syz.5.733 (9335): drop_caches: 2 [ 523.958833][ T10] usb 6-1: USB disconnect, device number 19 [ 524.120480][ T9188] udevd[9188]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.601042][ T5839] Bluetooth: hci0: command tx timeout [ 524.808371][ T9340] loop4: detected capacity change from 0 to 2048 [ 524.818458][ T9340] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.868361][ T9340] EXT4-fs: Ignoring removed i_version option [ 524.997477][ T9340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.078468][ T30] audit: type=1800 audit(1773380964.159:167): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.734" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 525.113970][ T8202] team0 (unregistering): Port device team_slave_1 removed [ 525.213575][ T8202] team0 (unregistering): Port device team_slave_0 removed [ 526.243860][ T9349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.405673][ T9269] chnl_net:caif_netlink_parms(): no params data found [ 526.791162][ T5839] Bluetooth: hci0: command tx timeout [ 527.402690][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.476788][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.501389][ T9269] bridge_slave_0: entered allmulticast mode [ 527.588830][ T9269] bridge_slave_0: entered promiscuous mode [ 527.633949][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.658114][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.843305][ T9269] bridge_slave_1: entered allmulticast mode [ 527.877120][ T9269] bridge_slave_1: entered promiscuous mode [ 528.267600][ T9269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.315353][ T9269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.435369][ T5830] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 528.524742][ T9269] team0: Port device team_slave_0 added [ 528.570814][ T5830] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 528.587274][ T9269] team0: Port device team_slave_1 added [ 528.831082][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.861197][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.011506][ T9269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.172139][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.189353][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.339942][ T9269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.467781][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.737307][ T1153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.790194][ T1153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 530.230164][ T9269] hsr_slave_0: entered promiscuous mode [ 530.272068][ T9269] hsr_slave_1: entered promiscuous mode [ 530.280404][ T9269] debugfs: 'hsr0' already exists in 'hsr' [ 530.396152][ T9269] Cannot create hsr debugfs directory [ 531.274330][ T1153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.373611][ T1153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.180434][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.194023][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.202586][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.210735][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.224021][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 532.243919][ T1153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.301024][ T1153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.429452][ T9416] syz.6.746 (9416): drop_caches: 2 [ 533.197414][ T1153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.280163][ T1153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.331761][ T5839] Bluetooth: hci5: command tx timeout [ 534.770891][ T1153] bridge_slave_1: left allmulticast mode [ 534.801096][ T1153] bridge_slave_1: left promiscuous mode [ 534.845686][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.950002][ T1153] bridge_slave_0: left allmulticast mode [ 534.977668][ T9438] syz.7.749 (9438): drop_caches: 2 [ 535.004690][ T1153] bridge_slave_0: left promiscuous mode [ 535.045156][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.455917][ T9448] loop6: detected capacity change from 0 to 2048 [ 535.476096][ T9448] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.497902][ T9448] EXT4-fs: Ignoring removed i_version option [ 535.641563][ T9448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.675390][ T30] audit: type=1800 audit(1773380974.749:168): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.751" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 536.105265][ T1153] bond1 (unregistering): (slave gretap1): Releasing active interface [ 536.323013][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.343401][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.375320][ T1153] bond0 (unregistering): Released all slaves [ 536.406968][ T1153] bond1 (unregistering): Released all slaves [ 536.510265][ T5839] Bluetooth: hci5: command tx timeout [ 537.555746][ T9470] binder: 9467:9470 ioctl c0306201 0 returned -14 [ 537.577488][ T9470] syz.3.755 (9470): drop_caches: 2 [ 537.833357][ T9269] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 538.377686][ T9269] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 538.504224][ T9269] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 538.558828][ T9269] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 538.661198][ T5839] Bluetooth: hci5: command tx timeout [ 539.079746][ T7912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.097057][ T1153] hsr_slave_0: left promiscuous mode [ 539.113271][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.138572][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.194868][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.246824][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.352502][ T1153] veth1_macvtap: left promiscuous mode [ 539.358046][ T1153] veth0_macvtap: left promiscuous mode [ 539.426221][ T1153] veth1_vlan: left promiscuous mode [ 539.442407][ T1153] veth0_vlan: left promiscuous mode [ 539.954854][ T9494] syz.7.757 (9494): drop_caches: 2 [ 540.314490][ T9510] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 540.443172][ T9511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 540.731019][ T5839] Bluetooth: hci5: command tx timeout [ 540.805044][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 541.252590][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 542.010362][ T9522] trusted_key: encrypted_key: key user:syz not found [ 543.012663][ T5901] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 543.369072][ T9417] chnl_net:caif_netlink_parms(): no params data found [ 543.423893][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.509196][ T5901] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 543.538853][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.549481][ T5901] usb 6-1: Product: syz [ 543.554441][ T5901] usb 6-1: Manufacturer: syz [ 543.559232][ T5901] usb 6-1: SerialNumber: syz [ 543.564741][ T9510] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 543.779096][ T9523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input40 [ 544.177799][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.185389][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.321371][ T9417] bridge_slave_0: entered allmulticast mode [ 544.405349][ T9417] bridge_slave_0: entered promiscuous mode [ 544.475725][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.499399][ T1153] IPVS: stop unused estimator thread 0... [ 544.519409][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.557017][ T9417] bridge_slave_1: entered allmulticast mode [ 544.580167][ T9417] bridge_slave_1: entered promiscuous mode [ 544.780383][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.840794][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.231396][ T9417] team0: Port device team_slave_0 added [ 545.371753][ T9417] team0: Port device team_slave_1 added [ 545.536861][ T5901] usb 6-1: USB disconnect, device number 20 [ 545.613380][ T9188] udevd[9188]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.613916][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.750589][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.931352][ T9417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.015635][ T9269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.062559][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.094124][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.117790][ T9562] syz.3.769 (9562): drop_caches: 2 [ 546.189871][ T9417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.453103][ T9417] hsr_slave_0: entered promiscuous mode [ 546.481846][ T9417] hsr_slave_1: entered promiscuous mode [ 546.513579][ T9417] debugfs: 'hsr0' already exists in 'hsr' [ 546.531066][ T9417] Cannot create hsr debugfs directory [ 546.562485][ T9269] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.920199][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.927461][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.989062][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.996340][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.355101][ T9576] misc userio: No port type given on /dev/userio [ 548.087562][ T9417] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 548.246558][ T9417] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 548.344498][ T9417] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 548.469876][ T9417] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 549.306778][ T9607] trusted_key: encrypted_key: key user:syz not found [ 550.003677][ T9269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.146086][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.246082][ T29] IPVS: starting estimator thread 0... [ 550.286386][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.351073][ T9615] IPVS: using max 25 ests per chain, 60000 per kthread [ 550.684483][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.691788][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.759142][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.766424][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.286368][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.470193][ T9269] veth0_vlan: entered promiscuous mode [ 552.556710][ T9269] veth1_vlan: entered promiscuous mode [ 553.024801][ T9269] veth0_macvtap: entered promiscuous mode [ 553.641459][ T9269] veth1_macvtap: entered promiscuous mode [ 553.987906][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.085627][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.240404][ T1018] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.296393][ T1018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.352279][ T1018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.398300][ T1018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.992235][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.024106][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.324421][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.399781][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.431029][ T9417] veth0_vlan: entered promiscuous mode [ 555.561557][ T9417] veth1_vlan: entered promiscuous mode [ 555.763985][ T9417] veth0_macvtap: entered promiscuous mode [ 556.295818][ T9417] veth1_macvtap: entered promiscuous mode [ 557.021908][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.109639][ T9528] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 557.298660][ T9528] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.331238][ T9528] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 557.345822][ T9528] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.384491][ T9528] usb 7-1: Product: syz [ 557.388708][ T9528] usb 7-1: Manufacturer: syz [ 557.408277][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.453392][ T9528] usb 7-1: SerialNumber: syz [ 557.486631][ T9528] usb 7-1: config 0 descriptor?? [ 557.509737][ T9528] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 557.522994][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.533618][ T9528] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 557.576041][ T1018] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.617840][ T9528] usb-storage 7-1:0.0: USB Mass Storage device detected [ 557.669718][ T1018] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.167627][ T9528] usb-storage 7-1:0.0: device ignored [ 558.284433][ T1018] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.636798][ T29] usb 7-1: USB disconnect, device number 6 [ 558.954394][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.001127][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.080276][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.121209][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.204110][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.210467][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293724][ T9756] syz.6.791 (9756): drop_caches: 2 [ 564.602166][ T9764] syz.8.793 (9764): drop_caches: 2 [ 565.056204][ T9775] syz.3.795 (9775): drop_caches: 2 [ 566.299983][ T9785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.331514][ T1204] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 566.837722][ T1204] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.270200][ T1204] usb 9-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 567.310178][ T1204] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.352887][ T1204] usb 9-1: Product: syz [ 567.357111][ T1204] usb 9-1: Manufacturer: syz [ 567.384260][ T1204] usb 9-1: SerialNumber: syz [ 567.497517][ T1204] usb 9-1: config 0 descriptor?? [ 567.526999][ T1204] gm12u320 9-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 567.574058][ T1204] gm12u320 9-1:0.0: probe with driver gm12u320 failed with error -5 [ 567.615655][ T1204] usb-storage 9-1:0.0: USB Mass Storage device detected [ 567.657527][ T1204] usb-storage 9-1:0.0: device ignored [ 568.434637][ T29] usb 9-1: USB disconnect, device number 2 [ 572.607849][ T9846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.314355][ T9867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.647180][ T9893] binder: 9889:9893 ioctl c0306201 0 returned -14 [ 576.691540][ T9893] syz.3.814 (9893): drop_caches: 2 [ 582.906205][ T9946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.652640][ T9962] binder: 9958:9962 ioctl c0306201 0 returned -14 [ 583.970058][ T9963] syz.9.826 (9963): drop_caches: 2 [ 584.240583][ T9969] syz.8.827 (9969): drop_caches: 2 [ 585.078808][ T5934] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 585.283616][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.327809][ T5934] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 585.368884][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.457931][ T5934] usb 6-1: Product: syz [ 585.487247][ T5934] usb 6-1: Manufacturer: syz [ 585.524980][ T5934] usb 6-1: SerialNumber: syz [ 585.572190][ T5934] usb 6-1: config 0 descriptor?? [ 585.614963][ T5934] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 585.801034][ T5934] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 586.261508][ T5934] usb-storage 6-1:0.0: USB Mass Storage device detected [ 586.306378][ T5934] usb-storage 6-1:0.0: device ignored [ 586.520430][ T1204] usb 6-1: USB disconnect, device number 21 [ 587.061916][ T9988] binder: 9985:9988 ioctl c0306201 0 returned -14 [ 587.108778][ T9988] syz.7.830 (9988): drop_caches: 2 [ 587.431915][ T9998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.934807][T10019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.104838][T10078] binder: 10071:10078 ioctl c0306201 0 returned -14 [ 596.145147][T10078] syz.8.843 (10078): drop_caches: 2 [ 596.301035][ T9528] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 596.463106][ T9528] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.549786][ T9528] usb 10-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 596.619761][ T9528] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.863664][ T9528] usb 10-1: Product: syz [ 596.867961][ T9528] usb 10-1: Manufacturer: syz [ 596.911440][ T9528] usb 10-1: SerialNumber: syz [ 596.952659][ T9528] usb 10-1: config 0 descriptor?? [ 597.006634][ T9528] gm12u320 10-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 597.045490][ T9528] gm12u320 10-1:0.0: probe with driver gm12u320 failed with error -5 [ 597.105555][ T9528] usb-storage 10-1:0.0: USB Mass Storage device detected [ 597.148365][ T9528] usb-storage 10-1:0.0: device ignored [ 597.845064][ T24] usb 10-1: USB disconnect, device number 2 [ 597.928267][T10095] fuse: Bad value for 'fd' [ 599.786559][T10122] binder: 10110:10122 ioctl c0306201 0 returned -14 [ 599.878167][T10122] syz.3.849 (10122): drop_caches: 2 [ 600.651222][ T1204] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 600.821381][ T1204] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 600.828946][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 600.853879][ T1204] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.914186][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 600.953841][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 601.003025][ T1204] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 601.018164][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 601.070242][ T1204] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.118768][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 601.180989][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 601.218641][ T1204] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 601.231055][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 601.280977][ T1204] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.347293][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 601.391230][ T1204] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 601.456075][ T1204] usb 7-1: string descriptor 0 read error: -22 [ 601.511092][ T1204] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 601.574005][ T1204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.696297][ T1204] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.705833][T10150] syz.9.852 (10150): drop_caches: 2 [ 603.775042][T10165] binder: 10161:10165 ioctl c0306201 0 returned -14 [ 603.828423][T10165] syz.3.855 (10165): drop_caches: 2 [ 605.257425][T10171] binder: 10170:10171 ioctl c0306201 0 returned -14 [ 605.266747][T10171] syz.8.857 (10171): drop_caches: 2 [ 606.011091][ T1204] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 606.191016][ T1204] usb 9-1: Using ep0 maxpacket: 32 [ 606.228039][ T1204] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 606.257590][ T1204] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 606.294078][ T1204] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.339386][ T1204] usb 9-1: Product: syz [ 606.369551][ T1204] usb 9-1: Manufacturer: syz [ 606.397922][ T1204] usb 9-1: SerialNumber: syz [ 606.991278][ T9528] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 607.285642][ T9528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.308284][ T9528] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 607.334633][ T9528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.436170][ T9528] usb 4-1: Product: syz [ 607.454143][ T9528] usb 4-1: Manufacturer: syz [ 607.469384][ T9528] usb 4-1: SerialNumber: syz [ 607.498907][ T9528] usb 4-1: config 0 descriptor?? [ 607.529246][ T9528] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 607.678333][ T9528] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 608.208261][ T9528] usb-storage 4-1:0.0: USB Mass Storage device detected [ 608.245955][ T9528] usb-storage 4-1:0.0: device ignored [ 608.418097][ T24] usb 4-1: USB disconnect, device number 16 [ 608.681706][ T1204] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 608.975985][ T5901] usb 7-1: USB disconnect, device number 7 [ 609.108116][ T1204] usb 9-1: USB disconnect, device number 3 [ 609.546355][ T9188] udevd[9188]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.904338][T10220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.955536][T10218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 612.971800][T10265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.125539][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'. [ 615.154796][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'. [ 615.170777][ T8202] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.182337][ T8202] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.182390][ T8202] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.182421][ T8202] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.546643][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 617.217166][T10298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.219932][T10306] syz.9.878 (10306): drop_caches: 2 [ 619.266318][T10317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.338882][T10318] syz.6.880 (10318): drop_caches: 2 [ 620.269002][T10324] loop8: detected capacity change from 0 to 2048 [ 620.407784][T10324] EXT4-fs: Ignoring removed mblk_io_submit option [ 620.663452][T10324] EXT4-fs: Ignoring removed i_version option [ 620.837314][T10324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.939106][ T30] audit: type=1800 audit(1773381316.014:169): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.882" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 623.347361][T10357] syz.9.886 (10357): drop_caches: 2 [ 623.763174][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.769627][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.766560][T10365] loop5: detected capacity change from 0 to 2048 [ 624.992938][ T9269] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.119518][T10365] EXT4-fs: Ignoring removed mblk_io_submit option [ 625.251242][T10365] EXT4-fs: Ignoring removed i_version option [ 625.535882][T10365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.681629][ T30] audit: type=1800 audit(1773381320.764:170): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.887" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 627.216400][T10402] syz.9.892 (10402): drop_caches: 2 [ 627.264267][T10403] syzkaller0: entered promiscuous mode [ 627.269801][T10403] syzkaller0: entered allmulticast mode [ 627.282807][T10403] tipc: Enabled bearer , priority 0 [ 627.563886][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.062075][T10393] tipc: Resetting bearer [ 628.347398][T10393] tipc: Disabling bearer [ 628.527815][T10412] binder: 10409:10412 ioctl c0306201 0 returned -14 [ 628.571407][T10412] syz.5.894 (10412): drop_caches: 2 [ 628.785266][ T5931] tipc: Node number set to 1681038580 [ 630.133627][T10425] trusted_key: encrypted_key: insufficient parameters specified [ 630.997004][T10429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.331142][ T5931] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 633.521817][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 633.643460][ T5931] usb 8-1: unable to get BOS descriptor or descriptor too short [ 633.663523][ T5931] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 633.774655][ T5931] usb 8-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 633.807189][ T5931] usb 8-1: config 1 has no interface number 3 [ 633.826758][ T5931] usb 8-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 633.898066][T10464] fuse: Bad value for 'fd' [ 634.561211][ T5931] usb 8-1: config 1 interface 4 has no altsetting 0 [ 634.630929][ T5931] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 634.660023][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.669179][ T5931] usb 8-1: Product: syz [ 634.734087][ T5931] usb 8-1: Manufacturer: syz [ 634.739291][ T5931] usb 8-1: SerialNumber: syz [ 635.569329][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.579050][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.148548][T10477] syzkaller0: entered promiscuous mode [ 636.154320][T10477] syzkaller0: entered allmulticast mode [ 636.166699][T10477] tipc: Started in network mode [ 636.172619][T10477] tipc: Node identity 5e68f294, cluster identity 4711 [ 636.179980][T10477] tipc: Enabled bearer , priority 0 [ 636.280241][ T5931] usb 8-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 636.387557][ T5931] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 636.804777][ T5931] usb 8-1: USB disconnect, device number 2 [ 637.001964][ T9188] udevd[9188]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.166448][T10469] tipc: Resetting bearer [ 637.482461][T10469] tipc: Disabling bearer [ 637.769460][ T24] tipc: Node number set to 1583936148 [ 639.208163][T10508] syzkaller0: entered promiscuous mode [ 639.214487][T10508] syzkaller0: entered allmulticast mode [ 639.228124][T10508] tipc: Enabling of bearer rejected, failed to enable media [ 640.261830][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 640.464261][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 640.523466][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.605055][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.656889][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 640.717503][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 640.769440][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.852767][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 640.910606][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 640.951801][ T24] usb 7-1: Manufacturer: syz [ 641.012151][ T24] usb 7-1: config 0 descriptor?? [ 641.051327][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 641.541084][ T24] rc_core: IR keymap rc-hauppauge not found [ 641.582451][T10524] binder: 10519:10524 ioctl c0306201 0 returned -14 [ 641.598261][T10524] syz.7.912 (10524): drop_caches: 2 [ 641.613835][ T24] Registered IR keymap rc-empty [ 641.638969][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 641.773971][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 641.812398][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 641.880394][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input43 [ 641.970050][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.081470][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.119987][T10535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.249062][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.336892][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.371938][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.464427][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.501361][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.541273][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.597521][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.651312][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 642.725936][ T24] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 642.779477][ T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.099956][ T24] usb 7-1: USB disconnect, device number 8 [ 643.503105][T10554] fuse: Bad value for 'fd' [ 644.529175][T10548] : entered promiscuous mode [ 645.391963][T10567] fuse: Unknown parameter 'gro00000000000000000000' [ 646.101175][ T791] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 646.419893][ T791] usb 8-1: Using ep0 maxpacket: 8 [ 646.429943][ T791] usb 8-1: unable to get BOS descriptor or descriptor too short [ 646.609442][ T791] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 646.627986][ T791] usb 8-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 646.669653][ T791] usb 8-1: config 1 has no interface number 3 [ 646.702975][ T791] usb 8-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 646.885112][ T791] usb 8-1: config 1 interface 4 has no altsetting 0 [ 647.009900][ T791] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 647.027303][ T791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.088453][ T791] usb 8-1: Product: syz [ 647.130412][ T791] usb 8-1: Manufacturer: syz [ 647.165709][ T791] usb 8-1: SerialNumber: syz [ 647.701282][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.728068][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.275271][ T791] usb 8-1: 1:1: invalid format type 0xb04 is detected, processed as PCM [ 649.309320][ T791] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 650.423605][ T791] usb 8-1: USB disconnect, device number 3 [ 650.764018][ T9188] udevd[9188]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.512621][ T791] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 651.535350][T10623] syzkaller0: entered promiscuous mode [ 651.573130][T10623] syzkaller0: entered allmulticast mode [ 651.778020][ T791] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 651.839920][T10623] tipc: Enabling of bearer rejected, failed to enable media [ 651.857140][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.8.933'. [ 651.898769][ T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 652.186294][ T791] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 652.500371][ T791] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 652.531737][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.579412][ T791] usb 7-1: Product: syz [ 652.595860][ T791] usb 7-1: Manufacturer: syz [ 652.663814][ T791] usb 7-1: SerialNumber: syz [ 652.809986][ T791] usb 7-1: config 0 descriptor?? [ 652.849831][T10619] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 653.367422][T10609] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.343632][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.936'. [ 655.399033][T10657] trusted_key: encrypted_key: insufficient parameters specified [ 656.149284][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.936'. [ 656.162121][ T58] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.231033][ T135] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.239940][ T135] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.391047][ T135] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.435943][T10662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.679889][ T5141] Bluetooth: hci5: link tx timeout [ 657.686875][ T5141] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.335288][ T5853] usb 7-1: USB disconnect, device number 9 [ 659.641234][T10693] Bluetooth: MGMT ver 1.23 [ 661.061296][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 661.573387][T10706] fuse: Bad value for 'fd' [ 662.911223][T10711] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.060385][T10733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.537104][T10744] ieee802154 phy0 wpan0: encryption failed: -22 [ 671.313168][T10758] fuse: Bad value for 'fd' [ 673.694182][T10769] fuse: Unknown parameter 'gro00000000000000000000' [ 675.247207][T10785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.725397][T10817] fuse: Bad value for 'fd' [ 680.401583][T10825] : entered promiscuous mode [ 682.857992][T10846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.082026][T10844] evm: overlay not supported [ 683.812971][ T5901] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 684.680651][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 685.688337][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.695034][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.554817][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 686.566279][ T5901] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 687.919314][T10871] fuse: Bad value for 'fd' [ 691.644151][ T5901] usb 7-1: string descriptor 0 read error: -32 [ 691.650442][ T5901] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.662809][T10893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.929366][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.694689][ T5901] usb 7-1: config 0 descriptor?? [ 692.739335][ T5901] usb 7-1: can't set config #0, error -32 [ 693.149828][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 694.291067][T10881] usb 7-1: USB disconnect, device number 10 [ 696.162557][T10922] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 701.533629][T10944] trusted_key: encrypted_key: insufficient parameters specified [ 702.443081][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1016'. [ 704.169854][T10959] syz.5.1017 (10959) used greatest stack depth: 18632 bytes left [ 706.317932][T10976] : entered promiscuous mode [ 708.688660][T10989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 711.081996][T11000] qrtr: Invalid version 47 [ 712.911200][T11014] trusted_key: encrypted_key: insufficient parameters specified [ 717.853764][T11056] syz.6.1041 (11056): drop_caches: 2 [ 720.041231][ T5904] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 720.500927][ T5904] usb 6-1: device descriptor read/64, error -71 [ 720.781395][ T5904] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 723.449478][T11083] trusted_key: encrypted_key: key user:syz not found [ 732.973344][T11134] trusted_key: encrypted_key: key user:syz not found [ 733.730247][T11143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 733.747759][T11143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 733.811416][T11143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 733.829090][T11143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 733.837196][T11143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 734.587549][T11149] syz.8.1059 (11149): drop_caches: 2 [ 735.951245][ T5141] Bluetooth: hci6: command tx timeout [ 736.870188][T11163] 9p: Bad value for 'rfdno' [ 737.636292][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1070'. [ 737.697070][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1070'. [ 738.010992][T11143] Bluetooth: hci6: command tx timeout [ 738.021155][T11143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.032010][T11143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.040515][T11143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.054740][T11143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 738.066076][T11143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 738.471102][ T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 738.587364][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1070'. [ 738.596565][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1070'. [ 738.661198][ T24] usb 4-1: device descriptor read/64, error -71 [ 739.061853][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 739.441196][ T24] usb 4-1: device descriptor read/64, error -71 [ 739.520550][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.553105][ T24] usb usb4-port1: attempt power cycle [ 739.921762][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 740.010332][ T24] usb 4-1: device descriptor read/8, error -71 [ 740.365140][T11143] Bluetooth: hci5: command tx timeout [ 740.373885][T11143] Bluetooth: hci6: command tx timeout [ 740.640967][ T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 740.643397][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.091172][ T24] usb 4-1: device not accepting address 20, error -71 [ 741.170327][ T24] usb usb4-port1: unable to enumerate USB device [ 741.601510][T11203] trusted_key: encrypted_key: key user:syz not found [ 742.252612][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.421076][ T5141] Bluetooth: hci6: command tx timeout [ 742.421164][T11143] Bluetooth: hci5: command tx timeout [ 742.788920][T11142] chnl_net:caif_netlink_parms(): no params data found [ 742.942352][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.491005][T11143] Bluetooth: hci5: command tx timeout [ 744.652643][T11216] syz.7.1078 (11216): drop_caches: 2 [ 745.196123][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.232928][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.240264][T11142] bridge_slave_0: entered allmulticast mode [ 745.260798][T11142] bridge_slave_0: entered promiscuous mode [ 745.267020][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 745.283210][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.290335][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1082'. [ 745.300035][T11142] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.310690][T11142] bridge_slave_1: entered allmulticast mode [ 745.357961][T11142] bridge_slave_1: entered promiscuous mode [ 745.810078][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 745.859952][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1082'. [ 746.495909][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.499415][T11142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.502357][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.544842][T11142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.571001][T11143] Bluetooth: hci5: command tx timeout [ 746.839507][T11142] team0: Port device team_slave_0 added [ 746.875299][ T58] bridge_slave_1: left allmulticast mode [ 747.091739][ T58] bridge_slave_1: left promiscuous mode [ 747.097496][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.998313][ T58] bridge_slave_0: left allmulticast mode [ 748.005152][ T58] bridge_slave_0: left promiscuous mode [ 748.011643][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.981515][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.237351][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.386081][ T58] bond0 (unregistering): Released all slaves [ 750.434938][T11142] team0: Port device team_slave_1 added [ 750.584058][T11171] chnl_net:caif_netlink_parms(): no params data found [ 752.965698][T11142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.980232][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.083056][T11142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.322866][T11142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.329957][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.356991][T11142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.255500][T11291] : entered promiscuous mode [ 754.981102][ T58] hsr_slave_0: left promiscuous mode [ 754.993536][ T58] hsr_slave_1: left promiscuous mode [ 755.007673][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.236064][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.729675][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.760938][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.225628][ T58] veth1_macvtap: left promiscuous mode [ 757.245352][ T58] veth0_macvtap: left promiscuous mode [ 757.277609][ T58] veth1_vlan: left promiscuous mode [ 757.461273][ T58] veth0_vlan: left promiscuous mode [ 760.191957][T11332] syz.8.1110 (11332): drop_caches: 2 [ 761.811091][ T58] team0 (unregistering): Port device team_slave_1 removed [ 761.857986][ T58] team0 (unregistering): Port device team_slave_0 removed [ 762.916964][T11142] hsr_slave_0: entered promiscuous mode [ 762.960796][T11142] hsr_slave_1: entered promiscuous mode [ 762.967277][T11142] debugfs: 'hsr0' already exists in 'hsr' [ 762.991022][T11142] Cannot create hsr debugfs directory [ 764.067540][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.102752][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.138597][T11171] bridge_slave_0: entered allmulticast mode [ 764.245801][T11171] bridge_slave_0: entered promiscuous mode [ 764.474870][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.571203][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.628439][T11171] bridge_slave_1: entered allmulticast mode [ 764.761467][T11171] bridge_slave_1: entered promiscuous mode [ 765.416948][T11171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.509541][T11171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.039691][T11171] team0: Port device team_slave_0 added [ 768.069319][T11171] team0: Port device team_slave_1 added [ 768.120982][ T1204] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 768.201714][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.840341][T11387] syz.8.1121 (11387): drop_caches: 2 [ 769.860669][ T1204] usb 4-1: device descriptor read/64, error -71 [ 770.455675][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.134131][T11171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.177321][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.257823][T11171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.402344][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.505599][T11171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.513354][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.574065][T11171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.258705][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.117454][T11414] 9p: Bad value for 'rfdno' [ 774.177100][T11171] hsr_slave_0: entered promiscuous mode [ 774.222293][T11171] hsr_slave_1: entered promiscuous mode [ 774.229224][T11171] debugfs: 'hsr0' already exists in 'hsr' [ 774.265495][T11171] Cannot create hsr debugfs directory [ 774.947091][ T30] audit: type=1326 audit(1773383006.030:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz.8.1122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87f379c799 code=0x0 [ 775.790399][T11450] 9p: Bad value for 'rfdno' [ 777.799876][ T58] bridge_slave_1: left allmulticast mode [ 777.809338][ T58] bridge_slave_1: left promiscuous mode [ 777.845860][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.888217][ T58] bridge_slave_0: left allmulticast mode [ 777.922271][ T58] bridge_slave_0: left promiscuous mode [ 777.952244][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.415141][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.439468][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.466593][ T58] bond0 (unregistering): Released all slaves [ 779.492388][ T58] bond1 (unregistering): Released all slaves [ 779.701802][T11142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 779.773316][T11142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 779.903595][ T58] : left promiscuous mode [ 780.324569][T11142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 780.456389][T11142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 782.175444][ T24] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 782.814122][ T24] usb 8-1: device descriptor read/64, error -71 [ 783.570975][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 783.656177][ T58] hsr_slave_0: left promiscuous mode [ 784.848459][ T58] hsr_slave_1: left promiscuous mode [ 785.144614][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.160924][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.192016][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.199456][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.248728][ T58] veth1_macvtap: left promiscuous mode [ 785.263905][ T58] veth0_macvtap: left promiscuous mode [ 785.300015][ T58] veth1_vlan: left promiscuous mode [ 785.316907][ T58] veth0_vlan: left promiscuous mode [ 787.668892][ T58] team0 (unregistering): Port device team_slave_1 removed [ 788.072758][ T58] team0 (unregistering): Port device team_slave_0 removed [ 790.365197][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1149'. [ 790.538430][T11570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input48 [ 790.716153][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 790.725941][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 790.741380][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 790.761143][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.784982][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.427090][T11171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 793.617494][ T5141] Bluetooth: hci2: command tx timeout [ 793.836144][T11171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 794.827094][T11171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 794.919954][T11171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.701705][T11143] Bluetooth: hci2: command tx timeout [ 796.651689][T11171] kthread_run failed with err -4 [ 797.685621][ T5141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 797.698232][ T5141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 797.706091][ T5141] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 797.714567][ T5141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 797.737321][ T5141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 797.931641][ T5141] Bluetooth: hci2: command tx timeout [ 798.720993][T11571] ================================================================== [ 798.729103][T11571] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 798.736227][T11571] Read of size 8 at addr ffff88804cb480a8 by task khidpd_10cf5508/11571 [ 798.744557][T11571] [ 798.746886][T11571] CPU: 0 UID: 0 PID: 11571 Comm: khidpd_10cf5508 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.746921][T11571] Tainted: [L]=SOFTLOCKUP [ 798.746931][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 798.746945][T11571] Call Trace: [ 798.746955][T11571] [ 798.746964][T11571] dump_stack_lvl+0xe8/0x150 [ 798.747002][T11571] print_report+0xba/0x230 [ 798.747032][T11571] ? __mutex_lock+0x812/0x1300 [ 798.747061][T11571] kasan_report+0x117/0x150 [ 798.747094][T11571] ? __mutex_lock+0x812/0x1300 [ 798.747127][T11571] __mutex_lock+0x812/0x1300 [ 798.747158][T11571] ? __mutex_lock+0x5ac/0x1300 [ 798.747189][T11571] ? l2cap_unregister_user+0x6a/0x1b0 [ 798.747220][T11571] ? __pfx___mutex_lock+0x10/0x10 [ 798.747253][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747285][T11571] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 798.747325][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747354][T11571] ? lockdep_hardirqs_on+0x7a/0x110 [ 798.747383][T11571] l2cap_unregister_user+0x6a/0x1b0 [ 798.747415][T11571] hidp_session_thread+0x3cb/0x440 [ 798.747450][T11571] ? __pfx_hidp_session_thread+0x10/0x10 [ 798.747482][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747512][T11571] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 798.747547][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747579][T11571] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 798.747613][T11571] ? __kthread_parkme+0x7a/0x1f0 [ 798.747649][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747679][T11571] ? __kthread_parkme+0x19c/0x1f0 [ 798.747718][T11571] kthread+0x388/0x470 [ 798.747748][T11571] ? __pfx_hidp_session_thread+0x10/0x10 [ 798.747780][T11571] ? __pfx_kthread+0x10/0x10 [ 798.747805][T11571] ret_from_fork+0x51e/0xb90 [ 798.747838][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747869][T11571] ? __pfx_ret_from_fork+0x10/0x10 [ 798.747900][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.747929][T11571] ? __switch_to+0xc7d/0x1450 [ 798.747960][T11571] ? __pfx_kthread+0x10/0x10 [ 798.747984][T11571] ret_from_fork_asm+0x1a/0x30 [ 798.748032][T11571] [ 798.748041][T11571] [ 798.953830][T11571] The buggy address belongs to the physical page: [ 798.960226][T11571] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804cb49d40 pfn:0x4cb48 [ 798.970279][T11571] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 798.977508][T11571] raw: 00fff00000000000 ffffea00015b7108 ffff8880b8640c40 0000000000000000 [ 798.986103][T11571] raw: ffff88804cb49d40 0000000000000000 00000000ffffffff 0000000000000000 [ 798.994675][T11571] page dumped because: kasan: bad access detected [ 799.001077][T11571] page_owner tracks the page as freed [ 799.006425][T11571] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 11171, tgid 11171 (syz-executor), ts 737978735004, free_ts 798657209865 [ 799.024655][T11571] post_alloc_hook+0x231/0x280 [ 799.029424][T11571] get_page_from_freelist+0x24dc/0x2580 [ 799.035009][T11571] __alloc_frozen_pages_noprof+0x18d/0x380 [ 799.040820][T11571] alloc_pages_mpol+0x232/0x4a0 [ 799.045673][T11571] ___kmalloc_large_node+0x4e/0x150 [ 799.050863][T11571] __kmalloc_large_node_noprof+0x18/0x90 [ 799.056512][T11571] __kmalloc_noprof+0x3e8/0x760 [ 799.061353][T11571] hci_alloc_dev_priv+0x28/0x2060 [ 799.066370][T11571] vhci_create_device+0x120/0x650 [ 799.071398][T11571] vhci_write+0x3ce/0x4a0 [ 799.075728][T11571] vfs_write+0x61d/0xb90 [ 799.079969][T11571] ksys_write+0x150/0x270 [ 799.084287][T11571] do_syscall_64+0x14d/0xf80 [ 799.088868][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.094756][T11571] page last free pid 11171 tgid 11171 stack trace: [ 799.101237][T11571] __free_frozen_pages+0xc2b/0xdb0 [ 799.106348][T11571] bt_host_release+0x82/0x90 [ 799.110928][T11571] device_release+0x9e/0x1d0 [ 799.115517][T11571] kobject_put+0x228/0x560 [ 799.119933][T11571] vhci_release+0x15a/0x1a0 [ 799.124440][T11571] __fput+0x44f/0xa70 [ 799.128427][T11571] task_work_run+0x1d9/0x270 [ 799.133031][T11571] do_exit+0x70f/0x23c0 [ 799.137175][T11571] do_group_exit+0x21b/0x2d0 [ 799.141753][T11571] get_signal+0x1284/0x1330 [ 799.146258][T11571] arch_do_signal_or_restart+0xbc/0x830 [ 799.151799][T11571] exit_to_user_mode_loop+0x86/0x480 [ 799.157078][T11571] do_syscall_64+0x32d/0xf80 [ 799.161661][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.167544][T11571] [ 799.169852][T11571] Memory state around the buggy address: [ 799.175465][T11571] ffff88804cb47f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.183539][T11571] ffff88804cb48000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.191602][T11571] >ffff88804cb48080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.199676][T11571] ^ [ 799.205032][T11571] ffff88804cb48100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.213087][T11571] ffff88804cb48180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 799.221135][T11571] ================================================================== [ 799.230446][T11571] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 799.237651][T11571] CPU: 0 UID: 0 PID: 11571 Comm: khidpd_10cf5508 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.249024][T11571] Tainted: [L]=SOFTLOCKUP [ 799.253339][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 799.263473][T11571] Call Trace: [ 799.266746][T11571] [ 799.269665][T11571] vpanic+0x56c/0xa60 [ 799.273655][T11571] ? __pfx_vpanic+0x10/0x10 [ 799.278166][T11571] panic+0xc5/0xd0 [ 799.281893][T11571] ? __pfx_panic+0x10/0x10 [ 799.286314][T11571] ? __mutex_lock+0x812/0x1300 [ 799.291081][T11571] ? __mutex_lock+0x812/0x1300 [ 799.295840][T11571] check_panic_on_warn+0x89/0xb0 [ 799.300771][T11571] ? __mutex_lock+0x812/0x1300 [ 799.305538][T11571] end_report+0x73/0x180 [ 799.309785][T11571] ? __mutex_lock+0x812/0x1300 [ 799.314541][T11571] kasan_report+0x128/0x150 [ 799.319043][T11571] ? __mutex_lock+0x812/0x1300 [ 799.323806][T11571] __mutex_lock+0x812/0x1300 [ 799.328396][T11571] ? __mutex_lock+0x5ac/0x1300 [ 799.333186][T11571] ? l2cap_unregister_user+0x6a/0x1b0 [ 799.338560][T11571] ? __pfx___mutex_lock+0x10/0x10 [ 799.343589][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.349219][T11571] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 799.355029][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.360662][T11571] ? lockdep_hardirqs_on+0x7a/0x110 [ 799.365876][T11571] l2cap_unregister_user+0x6a/0x1b0 [ 799.371100][T11571] hidp_session_thread+0x3cb/0x440 [ 799.376226][T11571] ? __pfx_hidp_session_thread+0x10/0x10 [ 799.381863][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.387506][T11571] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 799.393756][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.399392][T11571] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 799.405641][T11571] ? __kthread_parkme+0x7a/0x1f0 [ 799.410600][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.416229][T11571] ? __kthread_parkme+0x19c/0x1f0 [ 799.421260][T11571] kthread+0x388/0x470 [ 799.425325][T11571] ? __pfx_hidp_session_thread+0x10/0x10 [ 799.430995][T11571] ? __pfx_kthread+0x10/0x10 [ 799.435609][T11571] ret_from_fork+0x51e/0xb90 [ 799.440202][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.445832][T11571] ? __pfx_ret_from_fork+0x10/0x10 [ 799.450944][T11571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.456612][T11571] ? __switch_to+0xc7d/0x1450 [ 799.461287][T11571] ? __pfx_kthread+0x10/0x10 [ 799.465869][T11571] ret_from_fork_asm+0x1a/0x30 [ 799.470649][T11571] [ 799.473935][T11571] Kernel Offset: disabled [ 799.478246][T11571] Rebooting in 86400 seconds..