last executing test programs: 24m36.032314197s ago: executing program 5 (id=697): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000180)="38c9522ade", 0x5}], 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x4a0802, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) close(r0) 24m34.198427768s ago: executing program 5 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x3cf2, 0xf181, 0x9, 0x11, 0x8, 0x81}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x8}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c0001800800", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 24m31.769708572s ago: executing program 5 (id=704): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001000001440005002001"], 0xf8}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$MAP_CREATE(0x0, &(0x7f0000019340)=@bloom_filter={0x1e, 0x80, 0xfffffffe, 0x7f, 0x15008, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x6}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d0007", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) 24m26.69620578s ago: executing program 5 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x8, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {0x2, 0xfff1}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4041880) 24m23.800226204s ago: executing program 5 (id=720): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000850) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 24m21.015592142s ago: executing program 5 (id=724): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xce, &(0x7f0000001540)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x2d, 0x4, 0x1, 0x9, 0xbc, 0x68, 0x0, 0x8, 0x2, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x14, 0x29, 0x0, 0x9, [0x5, 0x10001, 0x8f, 0x0]}, @rr={0x7, 0x13, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0xf, 0xad, [@empty, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0x61, 0x1, 0xe, [{@rand_addr=0x64010102, 0x9}, {@broadcast, 0xfffffff8}, {@local}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}, {@multicast2, 0x10001}, {@broadcast, 0x4}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic={0x82, 0x6, "de169f5f"}, @timestamp_addr={0x44, 0x4, 0xfe, 0x1, 0x6}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x2, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x687}]}]}}, {0x1e, 0xb5, 0x0, @remote}}}}}, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 24m5.572367643s ago: executing program 32 (id=724): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xce, &(0x7f0000001540)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x2d, 0x4, 0x1, 0x9, 0xbc, 0x68, 0x0, 0x8, 0x2, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x14, 0x29, 0x0, 0x9, [0x5, 0x10001, 0x8f, 0x0]}, @rr={0x7, 0x13, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0xf, 0xad, [@empty, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0x61, 0x1, 0xe, [{@rand_addr=0x64010102, 0x9}, {@broadcast, 0xfffffff8}, {@local}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}, {@multicast2, 0x10001}, {@broadcast, 0x4}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic={0x82, 0x6, "de169f5f"}, @timestamp_addr={0x44, 0x4, 0xfe, 0x1, 0x6}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x2, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x687}]}]}}, {0x1e, 0xb5, 0x0, @remote}}}}}, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 21m39.835611602s ago: executing program 4 (id=1069): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8013, r1, 0x8000000) 21m36.916720329s ago: executing program 4 (id=1071): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(r1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 21m34.846558552s ago: executing program 4 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 21m32.868862098s ago: executing program 4 (id=1081): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x964, 0x8}, 0x8) 21m31.376306777s ago: executing program 4 (id=1084): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000850) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21m29.103782652s ago: executing program 4 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000000, 0x7, 0x4d, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 21m12.803717575s ago: executing program 33 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000000, 0x7, 0x4d, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 20m25.609434625s ago: executing program 6 (id=1210): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8013, r1, 0x8000000) 20m24.115534014s ago: executing program 6 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 20m22.343807111s ago: executing program 6 (id=1219): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = io_uring_setup(0x155d, &(0x7f00000000c0)={0x0, 0xbaa4, 0x0, 0x2, 0x242, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f00000003c0)=""/69, 0x45}], 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x5, &(0x7f0000000e80)=0x0) io_pgetevents(r4, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r6, 0x0}]) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24080}, 0x4c050) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 20m19.429368366s ago: executing program 6 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20m17.700361652s ago: executing program 6 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 20m16.70368019s ago: executing program 6 (id=1236): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r0, 0x47f6, 0x40, 0x2, 0x0, 0x0) 20m0.560632037s ago: executing program 34 (id=1236): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r0, 0x47f6, 0x40, 0x2, 0x0, 0x0) 18m5.185338638s ago: executing program 2 (id=1579): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80", 0x2b}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36", 0x6a}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18m4.268169147s ago: executing program 2 (id=1583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) socket$inet6(0xa, 0xd9086cd06f538072, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d", 0xc6}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000007c0)={0x8, &(0x7f0000000180)=""/157, &(0x7f0000000700)=[{0x7, 0x66, 0x7, &(0x7f00000000c0)=""/102}, {0xff, 0x1000, 0x6, &(0x7f0000000dc0)=""/4096}, {0x6, 0x0, 0x2, 0x0}, {0x3, 0x7c, 0xe, &(0x7f0000000480)=""/124}, {0x59, 0x4e, 0x1, &(0x7f0000000800)=""/78}, {0x7fff, 0x56, 0x1, &(0x7f0000000580)=""/86}, {0x1, 0xfd, 0xffffffff, &(0x7f0000000600)=""/253}, {0x0, 0x0, 0x4, 0x0}]}) connect$tipc(0xffffffffffffffff, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 17m58.272166891s ago: executing program 2 (id=1599): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 17m56.041081781s ago: executing program 2 (id=1608): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef3597413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905a9aafab4afaaf755a3f6a004", "036c47bd9bffa90a323ae306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 17m53.176289967s ago: executing program 2 (id=1614): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd20, 0xfffffffc, {0x4}}, 0x14}}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff00000000000000000200"], 0xd8}}, 0x0) 17m52.079704767s ago: executing program 2 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x11}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [@routing={0x2b, 0x0, 0x0, 0xf}], "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"}}}}}}, 0xfce) 17m50.942800596s ago: executing program 35 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x11}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [@routing={0x2b, 0x0, 0x0, 0xf}], "a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a"}}}}}}, 0xfce) 5m56.918985246s ago: executing program 0 (id=3097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) r2 = memfd_create(0x0, 0x0) ftruncate(r2, 0x7d) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f00000008c0)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 5m55.262295105s ago: executing program 9 (id=3102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/140, 0x32, 0x8c, 0x1}, 0x20) 5m52.881028701s ago: executing program 9 (id=3103): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0xc6, &(0x7f0000001540)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x2b, 0x4, 0x1, 0x9, 0xb4, 0x68, 0x0, 0x8, 0x2, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x14, 0x29, 0x0, 0x9, [0x5, 0x10001, 0x8f, 0x0]}, @rr={0x7, 0x13, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0xf, 0xad, [@empty, @empty, @remote]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0xe, [{@rand_addr=0x64010102, 0x9}, {@broadcast, 0xfffffff8}, {@local}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}, {@multicast2, 0x10001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic={0x82, 0x6, "de169f5f"}, @timestamp_addr={0x44, 0x4, 0xfe, 0x1, 0x6}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x2, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x687}]}]}}, {0x1e, 0xb5, 0x0, @remote}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") ioctl$TCXONC(r0, 0x4b3a, 0x0) 5m52.830104321s ago: executing program 0 (id=3104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 5m50.395151362s ago: executing program 9 (id=3108): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 5m49.93139677s ago: executing program 0 (id=3110): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0xd3e, 0x1000, 0x3, {0x1, @meta={0x21a32829, 0x6bcb0364, 0xd663, 0x6cdf, 0x7646e620}}, 0x5b14}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 5m48.634263844s ago: executing program 9 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x7d) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r6, r7, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0, r2}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 5m47.663209351s ago: executing program 9 (id=3116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r5, r6, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 5m46.844513514s ago: executing program 9 (id=3118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d", 0xc6}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) socket$alg(0x26, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000007c0)={0x8, &(0x7f0000000180)=""/157, &(0x7f0000000700)=[{0x7, 0x66, 0x7, &(0x7f00000000c0)=""/102}, {0xff, 0x1000, 0x6, &(0x7f0000000dc0)=""/4096}, {0x6, 0x0, 0x2, 0x0}, {0x3, 0x7c, 0xe, &(0x7f0000000480)=""/124}, {0x59, 0x4e, 0x1, &(0x7f0000000800)=""/78}, {0x7fff, 0x56, 0x1, &(0x7f0000000580)=""/86}, {0x1, 0xfd, 0xffffffff, &(0x7f0000000600)=""/253}, {0x0, 0x0, 0x4, 0x0}]}) connect$tipc(r4, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 5m41.998495235s ago: executing program 0 (id=3125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r2, 0x7d) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)) 5m40.485234876s ago: executing program 0 (id=3130): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x300fff2) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000002200)=0xf1eb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x2000c889}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000400)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 5m37.976841541s ago: executing program 0 (id=3134): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0xd3e, 0x1000, 0x3, {0x1, @meta={0x21a32829, 0x6bcb0364, 0xd663, 0x6cdf, 0x7646e620}}, 0x5b14}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) accept4$ax25(r5, &(0x7f0000000300)={{0x3, @null}, [@netrom, @bcast, @remote, @bcast, @netrom, @remote, @remote, @rose]}, &(0x7f0000000180)=0x48, 0x80000) 5m30.253552614s ago: executing program 36 (id=3118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d", 0xc6}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) socket$alg(0x26, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000007c0)={0x8, &(0x7f0000000180)=""/157, &(0x7f0000000700)=[{0x7, 0x66, 0x7, &(0x7f00000000c0)=""/102}, {0xff, 0x1000, 0x6, &(0x7f0000000dc0)=""/4096}, {0x6, 0x0, 0x2, 0x0}, {0x3, 0x7c, 0xe, &(0x7f0000000480)=""/124}, {0x59, 0x4e, 0x1, &(0x7f0000000800)=""/78}, {0x7fff, 0x56, 0x1, &(0x7f0000000580)=""/86}, {0x1, 0xfd, 0xffffffff, &(0x7f0000000600)=""/253}, {0x0, 0x0, 0x4, 0x0}]}) connect$tipc(r4, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 5m21.338314958s ago: executing program 37 (id=3134): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0xd3e, 0x1000, 0x3, {0x1, @meta={0x21a32829, 0x6bcb0364, 0xd663, 0x6cdf, 0x7646e620}}, 0x5b14}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) accept4$ax25(r5, &(0x7f0000000300)={{0x3, @null}, [@netrom, @bcast, @remote, @bcast, @netrom, @remote, @remote, @rose]}, &(0x7f0000000180)=0x48, 0x80000) 1m31.44661292s ago: executing program 3 (id=3559): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xda, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xf8, 0x30, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x23}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x40, "a25b6dc72915"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x405, 0x1, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xe, 0x3, 0x74, 0x8, "fd64836cafba6c"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x90, 0x1, 0x5, 0x3, "6e2382d1e8ccd0"}, @as_header={0x7, 0x24, 0x1, 0xe7, 0xd9, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x2c, "59eb3120"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc8, 0x3, 0x3, 0x2, "2a14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0xd, 0x8, {0x7, 0x25, 0x1, 0x8, 0xb5, 0x177a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x6, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc, 0x3, 0x7, 0x4, "25eb", "88bd86"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xdf, 0x1, 0xc, {0x7, 0x25, 0x1, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x7, 0x5, 0x9, 0xff, 0xef}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0xfe, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x81, 0x8, 0x5, 0x45}]}, 0x3, [{0xaa, &(0x7f00000004c0)=@string={0xaa, 0x3, "06cfd2ba44c91671c063209935c6f6169da45a4f93f7a064e46d11db58c924b4bef0c20347bb8e20404db6d0e8a0db11de59af2c5693937a129214fcf4458a1b671fb2ba5cdb3c724eef1f682edfdd2061fc248927ec220b3c8dc507b514a6ef0b4aca7b0330d1a64cda3be402d95f837cf54b48134a5c8ba2cf1ad843d6f2dbfbb8f61f366c10f30753e9c231192ad1805f29cb61206398624b035feb750b0d6fb61d703300f678"}}, {0x61, &(0x7f0000000180)=@string={0x61, 0x3, "61c30d928c2509659bd73d45a2e3b449a618a5c53c720aec2c78d2113c4d1977383cfe3d7116560b40397466760ffcfbef268e5dabd55a0dd8b6ca4efef3e632587e2d72272d2b7a874c453900b3116ae7f997faf5b8eba45a36c51328d7b8"}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "c4fd68a591a4790e5730d9a88ede608c82a3a38e5097b4ae95b39e3707d07f6665fea1c1d8a2761f14d644d0cf54a29f4a7d010890941e5da9b69463e4530825786af7bc6a4cfb6afd43c31e9e9cb9e7e07eeacc5077663d0b04914a4049d36a94ab08547907c91c50362f45a5560970097b8acaf3820332f00df64ed23efa43db3e71a3b6ac2330193137fb85360b1af165bfb2f61a9620e779a75fd707ba010770e90d2936684d9a6360a3613ba0daca54451843a852627dcad420b0ef75a4fa297bfcef995c8b489cbe87797b98"}}]}) r0 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 1m27.984597436s ago: executing program 3 (id=3563): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000850) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m24.576993711s ago: executing program 3 (id=3564): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f5", 0x2c}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99", 0x5e}, {&(0x7f0000001400)="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", 0x536}], 0x3, &(0x7f0000002400)=[{0x10, 0x1, 0x8}], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m12.579458951s ago: executing program 3 (id=3580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r8, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe0012ff0000", 0x1b) pwritev(r5, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, 0xffffff01, 0xa) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x8006}]}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.069805575s ago: executing program 3 (id=3584): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r1, 0x8008550e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000ec0), 0x0, 0x40440c5) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/137, 0x89}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0xffff, 0x9, 0x5059, 0x40000, r0, 0x200, '\x00', r3, 0xffffffffffffffff, 0x1}, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x248, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff], 'lo\x00', 'dvmrp0\x00', {0xff}, {}, 0x84, 0x9, 0x4, 0x58}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe2, 0x28, "6c8c61c7cb55d04abaae4658fdaad4b05e818e14980e5fb6af19c6c71daf"}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'team_slave_1\x00', 'bond0\x00', {}, {}, 0x4, 0x40, 0x9, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x7f, {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) r7 = io_uring_setup(0x669, &(0x7f00000002c0)) close_range(r7, 0xffffffffffffffff, 0x0) fcntl$setsig(r7, 0xa, 0x35) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 1m7.239092153s ago: executing program 3 (id=3587): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 50.368513672s ago: executing program 38 (id=3587): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 20.506487081s ago: executing program 7 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x7d) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r6, r7, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0, r2}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 18.113090895s ago: executing program 7 (id=3649): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f5", 0x2c}, {0x0}, {0x0}], 0x3, &(0x7f0000002400)=[{0x10, 0x1, 0x8}], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 17.382564856s ago: executing program 7 (id=3653): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 14.587861556s ago: executing program 7 (id=3656): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(0x0, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000900)={0x0, 0xba1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0x7, 0x6, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0xd, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x584, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0x7fffffff, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0xfd, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x88, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000001d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xa0, 0x10}, {&(0x7f0000000440)=@in6={0xa, 0x4e22, 0xaa, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001c80)}], 0x2, 0x850) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) dup(r3) 14.191139381s ago: executing program 1 (id=3657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x7d) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r6, r7, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0, r2}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 12.599850127s ago: executing program 7 (id=3659): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) setrlimit(0xa, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x300fff2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x2000c889}, 0x20000000) r1 = fsopen(&(0x7f0000000400)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 12.200310437s ago: executing program 1 (id=3661): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000850) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.07144193s ago: executing program 1 (id=3662): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, 0x0, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.890881477s ago: executing program 8 (id=3666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x0, 0x0}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 5.172273974s ago: executing program 8 (id=3667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x7d) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r6, r7, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0, r2}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 4.583480146s ago: executing program 1 (id=3668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, 0x0, 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r5, 0x0, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 4.455423955s ago: executing program 8 (id=3669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r1, 0x7d) r2 = fanotify_init(0x8, 0x80000) fanotify_mark(r2, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f00000008c0)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 4.419735855s ago: executing program 7 (id=3670): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010006418e01400004fcff", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x29d, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0xfff, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, &(0x7f0000000340)=0xc) 4.197525794s ago: executing program 8 (id=3671): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x10, 0x80805, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.669963595s ago: executing program 1 (id=3672): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f5", 0x2c}, {0x0}, {&(0x7f0000001400)="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", 0x379}], 0x3, &(0x7f0000002400)=[{0x10, 0x1, 0x8}], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.722447269s ago: executing program 8 (id=3673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) close_range(r4, 0xffffffffffffffff, 0x0) 104.224531ms ago: executing program 1 (id=3674): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(0x0, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000900)={0x0, 0xba1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0x7, 0x6, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0xd, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x584, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0x7fffffff, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0xfd, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x88, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000001d40)=[{&(0x7f0000000440)=@in6={0xa, 0x4e22, 0xaa, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001c80)}], 0x1, 0x850) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) dup(r3) 0s ago: executing program 8 (id=3675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5", 0x15) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): vice number 46 using dummy_hcd [ 1230.707815][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 1230.729975][ T5926] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1230.757069][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.783462][ T5926] usb 1-1: Product: syz [ 1230.804301][ T5926] usb 1-1: Manufacturer: syz [ 1230.823446][ T5926] usb 1-1: SerialNumber: syz [ 1230.857029][ T5926] usb 1-1: config 0 descriptor?? [ 1230.891774][ T5926] hub 1-1:0.0: bad descriptor, ignoring hub [ 1230.912237][ T5926] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1231.252515][ T5926] usb 1-1: USB disconnect, device number 46 [ 1232.570165][ T30] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1235.055226][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 1235.134292][ T30] usb 4-1: device descriptor read/all, error -71 [ 1236.754555][T15208] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1237.229440][T15213] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1237.989722][T15217] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2503'. [ 1238.078889][T15215] tipc: Enabled bearer , priority 0 [ 1238.131092][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 1238.177700][T15219] nbd: socks must be embedded in a SOCK_ITEM attr [ 1239.377315][T15209] tipc: Disabling bearer [ 1239.800453][T14783] udevd[14783]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1239.817549][T10443] tipc: Node number set to 2886145039 [ 1239.861404][T14784] udevd[14784]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1242.639982][T13018] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1243.676524][T13018] usb 2-1: Using ep0 maxpacket: 8 [ 1243.709985][T13018] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1243.758075][T13018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1243.809514][T13018] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1244.635503][T13018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.646002][T13018] usb 2-1: Product: syz [ 1244.650560][T13018] usb 2-1: Manufacturer: syz [ 1244.655175][T13018] usb 2-1: SerialNumber: syz [ 1244.749564][T13018] usb 2-1: config 0 descriptor?? [ 1244.809300][T13018] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1245.151888][ T5988] usb 2-1: USB disconnect, device number 65 [ 1245.239434][T15282] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2518'. [ 1246.027640][T11278] Bluetooth: hci2: command 0x0406 tx timeout [ 1246.447315][T15292] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1249.783294][T15308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1249.797104][T15308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1250.393162][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1250.453705][T15310] nbd: socks must be embedded in a SOCK_ITEM attr [ 1250.491322][T15314] tipc: Enabled bearer , priority 0 [ 1250.614245][T15311] tipc: Disabling bearer [ 1251.431242][T15316] udevd[15316]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1251.486961][T15317] udevd[15317]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1252.597467][T15339] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2532'. [ 1255.551681][T15360] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2537'. [ 1255.561453][T15360] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2537'. [ 1256.813688][T15371] tipc: Started in network mode [ 1256.836653][T15371] tipc: Node identity 5a62f21d4c6f, cluster identity 4711 [ 1257.288068][T15371] tipc: Enabled bearer , priority 0 [ 1257.492253][T15370] tipc: Disabling bearer [ 1258.562803][T11278] Bluetooth: hci0: command 0x0c1a tx timeout [ 1259.515550][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1259.529992][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.530068][ T5832] Tainted: [L]=SOFTLOCKUP [ 1259.530085][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1259.530115][ T5832] Workqueue: hci5 hci_rx_work [ 1259.530174][ T5832] Call Trace: [ 1259.530189][ T5832] [ 1259.530207][ T5832] dump_stack_lvl+0x100/0x190 [ 1259.530284][ T5832] sysfs_warn_dup.cold+0x1c/0x28 [ 1259.530353][ T5832] sysfs_create_dir_ns+0x24b/0x2b0 [ 1259.530414][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1259.530470][ T5832] ? find_held_lock+0x2b/0x80 [ 1259.530524][ T5832] ? kobject_add_internal+0x25f/0x930 [ 1259.530565][ T5832] ? kobject_add_internal+0x25f/0x930 [ 1259.530608][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.530664][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 1259.530717][ T5832] kobject_add_internal+0x2c8/0x930 [ 1259.530772][ T5832] kobject_add+0x16a/0x1e0 [ 1259.530816][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 1259.530865][ T5832] ? class_to_subsys+0x10f/0x150 [ 1259.530925][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.530985][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.531039][ T5832] ? kobject_put+0xb9/0x640 [ 1259.531107][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 1259.531178][ T5832] device_add+0x294/0x1950 [ 1259.531230][ T5832] ? __pfx_dev_set_name+0x10/0x10 [ 1259.531293][ T5832] ? __pfx_device_add+0x10/0x10 [ 1259.531346][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.531403][ T5832] ? mgmt_send_event_skb+0x2fb/0x460 [ 1259.531472][ T5832] hci_conn_add_sysfs+0x1a3/0x260 [ 1259.531529][ T5832] le_conn_complete_evt+0x11cb/0x1f40 [ 1259.531589][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1259.531651][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1259.531701][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 1259.531748][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 1259.531801][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1259.531864][ T5832] hci_event_packet+0x682/0x11c0 [ 1259.531911][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1259.531965][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 1259.532013][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.532063][ T5832] ? kcov_remote_start+0x374/0x660 [ 1259.532116][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 1259.532170][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.532228][ T5832] hci_rx_work+0x451/0xfc0 [ 1259.532284][ T5832] process_one_work+0xa23/0x19a0 [ 1259.532342][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 1259.532376][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.532438][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.532491][ T5832] worker_thread+0x5ef/0xe50 [ 1259.532546][ T5832] ? kthread+0x13a/0x450 [ 1259.532602][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 1259.532635][ T5832] kthread+0x370/0x450 [ 1259.532691][ T5832] ? __pfx_kthread+0x10/0x10 [ 1259.532752][ T5832] ret_from_fork+0x754/0xd80 [ 1259.532815][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 1259.532887][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.532934][ T5832] ? __switch_to+0x7b4/0x1120 [ 1259.532971][ T5832] ? __pfx_kthread+0x10/0x10 [ 1259.533016][ T5832] ret_from_fork_asm+0x1a/0x30 [ 1259.533068][ T5832] [ 1259.533131][ T5832] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1259.864697][ T5832] Bluetooth: hci5: failed to register connection device [ 1259.871886][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2545'. [ 1261.026536][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 1261.038013][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 1261.148701][T15402] ceph: No mds server is up or the cluster is laggy [ 1261.170785][T15393] nbd: socks must be embedded in a SOCK_ITEM attr [ 1261.315572][T15406] block nbd64: NBD_DISCONNECT [ 1261.911527][T15406] udevd[15406]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1261.997492][T15417] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2549'. [ 1262.863748][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1262.870825][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1264.729035][T15432] nfs: Unknown parameter 'ÿÿÿÿ' [ 1267.798350][T15456] tipc: Enabled bearer , priority 0 [ 1267.936442][T15459] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2558'. [ 1267.964737][T15453] tipc: Disabling bearer [ 1268.186353][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 1270.625103][T15467] ceph: No mds server is up or the cluster is laggy [ 1270.648681][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 1270.769535][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 1271.154113][ T30] libceph: connect (1)[c::]:6789 error -101 [ 1271.252180][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1271.543190][T15480] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2563'. [ 1272.400071][T15489] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1274.388154][T10443] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1275.307178][T10443] usb 9-1: device descriptor read/64, error -71 [ 1275.691857][T10443] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1275.843067][T10443] usb 9-1: device descriptor read/64, error -71 [ 1276.103719][T10443] usb usb9-port1: attempt power cycle [ 1277.972658][T10443] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1278.271468][T15529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2576'. [ 1278.985383][T10443] usb 9-1: device descriptor read/8, error -71 [ 1280.369912][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1280.383430][T15536] ceph: No mds server is up or the cluster is laggy [ 1280.393996][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1280.762352][T15546] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2580'. [ 1282.954138][T15561] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1287.040245][T15587] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2589'. [ 1287.050585][T15587] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2589'. [ 1287.425192][T10443] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1287.598506][T10443] usb 1-1: device descriptor read/64, error -71 [ 1287.856414][T15590] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1288.098520][T10443] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1288.269581][T10443] usb 1-1: device descriptor read/64, error -71 [ 1288.551051][T10443] usb usb1-port1: attempt power cycle [ 1289.030251][T10443] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1289.272996][T15598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2594'. [ 1289.353027][T10443] usb 1-1: device descriptor read/8, error -71 [ 1292.134737][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 1292.223764][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 1292.266424][T15611] ceph: No mds server is up or the cluster is laggy [ 1292.810141][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 1293.740321][T15625] nbd: socks must be embedded in a SOCK_ITEM attr [ 1294.673194][T15572] udevd[15572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1294.685245][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2605'. [ 1294.724414][T15644] bridge_slave_1: left allmulticast mode [ 1294.742356][T15644] bridge_slave_1: left promiscuous mode [ 1294.755366][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.999742][T15644] bridge_slave_0: left allmulticast mode [ 1295.006292][T15644] bridge_slave_0: left promiscuous mode [ 1295.030852][T15652] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1295.162279][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.465121][T15657] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1298.313928][T15668] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2611'. [ 1300.698620][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1300.743708][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1300.825462][T15679] ceph: No mds server is up or the cluster is laggy [ 1302.149947][T15692] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2619'. [ 1302.160419][T15692] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2619'. [ 1302.366194][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 1304.409526][T15712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1304.420304][T15712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1304.842345][T15713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2622'. [ 1304.853073][T15713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2622'. [ 1305.973844][T15721] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1306.315443][T15722] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2626'. [ 1308.266957][ T30] libceph: connect (1)[c::]:6789 error -101 [ 1308.281107][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1308.295331][T15744] ceph: No mds server is up or the cluster is laggy [ 1309.165630][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 1309.173069][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 1309.932585][ T5927] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1310.059228][T15762] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2637'. [ 1310.068473][T15762] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2637'. [ 1310.100413][T15766] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1310.134704][ T5927] usb 8-1: device descriptor read/64, error -71 [ 1310.747988][ T5927] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1310.902340][ T5927] usb 8-1: device descriptor read/64, error -71 [ 1311.020527][ T5927] usb usb8-port1: attempt power cycle [ 1311.617640][ T5927] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1311.717451][ T5927] usb 8-1: device descriptor read/8, error -71 [ 1312.312903][ T5927] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1312.412779][ T5927] usb 8-1: device descriptor read/8, error -71 [ 1312.537862][ T5927] usb usb8-port1: unable to enumerate USB device [ 1313.750716][T15789] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2644'. [ 1315.838940][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1315.848015][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1316.749416][T15807] ceph: No mds server is up or the cluster is laggy [ 1316.959643][T15815] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1317.026477][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1317.032850][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1319.152333][T13018] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1320.433196][T15838] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1320.823748][T13018] usb 8-1: device descriptor read/64, error -71 [ 1321.337504][T15835] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1321.347770][T13018] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1321.599717][T13018] usb 8-1: device descriptor read/64, error -71 [ 1321.853205][T13018] usb usb8-port1: attempt power cycle [ 1322.425990][T15852] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1324.229603][T15865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1324.239408][T15865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1324.670762][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 1324.728581][T15866] nbd: socks must be embedded in a SOCK_ITEM attr [ 1325.302024][T15755] udevd[15755]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1325.541497][T15747] udevd[15747]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1326.715546][T15885] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1326.772572][ T30] libceph: connect (1)[c::]:6789 error -101 [ 1326.803484][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1326.814664][T15884] ceph: No mds server is up or the cluster is laggy [ 1328.460118][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1328.487070][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.286295][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2675'. [ 1330.789181][T10443] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1331.879204][T11278] Bluetooth: hci0: command 0x0c1a tx timeout [ 1333.763029][T10443] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1334.002722][T10443] usb 4-1: can't read configurations, error -71 [ 1334.086169][T11278] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1334.179074][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2683'. [ 1334.434145][T15950] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1334.778382][T15941] nbd: socks must be embedded in a SOCK_ITEM attr [ 1334.822068][T15747] block nbd64: NBD_DISCONNECT [ 1335.658205][T15747] udevd[15747]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1337.804897][T15974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2690'. [ 1341.625367][T15993] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1342.647855][ T30] libceph: connect (1)[c::]:6789 error -101 [ 1342.666684][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1342.770852][T16004] ceph: No mds server is up or the cluster is laggy [ 1343.301683][T16011] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1347.588568][T16032] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2704'. [ 1348.097352][T11278] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1348.155779][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2705'. [ 1348.999439][T16035] nbd: socks must be embedded in a SOCK_ITEM attr [ 1349.062352][T16044] block nbd64: NBD_DISCONNECT [ 1349.361152][T16053] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1353.475249][T16044] udevd[16044]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1353.674270][T16068] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2711'. [ 1356.179203][T16084] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1356.624404][T16091] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1358.668786][T16102] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2720'. [ 1358.678794][T16102] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2720'. [ 1362.362951][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 1362.371582][T16119] ceph: No mds server is up or the cluster is laggy [ 1362.386040][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 1362.635194][ T5988] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1363.018222][ T5988] usb 9-1: Using ep0 maxpacket: 8 [ 1363.480157][ T5988] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1363.712959][ T5892] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1363.722679][ T5988] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1363.737604][ T5988] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1363.748729][ T5988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.813825][ T5988] usb 9-1: Product: syz [ 1363.818145][ T5988] usb 9-1: Manufacturer: syz [ 1363.874639][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1363.892239][ T5988] usb 9-1: SerialNumber: syz [ 1363.906525][ T5988] usb 9-1: config 0 descriptor?? [ 1364.518290][T16146] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1364.927419][ T5988] streamzap 9-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1365.112003][ T5892] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1365.211935][T13018] usb 9-1: USB disconnect, device number 26 [ 1365.337908][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1365.461527][T16150] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2729'. [ 1365.488356][ T5892] usb usb1-port1: attempt power cycle [ 1365.773538][T16155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2730'. [ 1365.788675][T16155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2730'. [ 1366.135557][ T5892] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1366.817756][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1372.084060][T16184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1372.093499][T16184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1375.300979][T16215] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1375.310669][T16215] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1377.157028][ T5919] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1377.465870][ T5919] usb 8-1: Using ep0 maxpacket: 8 [ 1377.553264][ T5919] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1377.652202][ T5919] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1377.872012][ T5919] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1377.967201][T16234] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1378.336462][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.392119][ T5919] usb 8-1: Product: syz [ 1378.412947][ T5919] usb 8-1: Manufacturer: syz [ 1378.430147][ T5919] usb 8-1: SerialNumber: syz [ 1378.447153][ T5919] usb 8-1: config 0 descriptor?? [ 1378.487919][ T5919] streamzap 8-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1379.117966][ T30] usb 8-1: USB disconnect, device number 28 [ 1383.177210][T16268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2754'. [ 1383.532344][T16275] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2758'. [ 1383.541746][T16275] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2758'. [ 1383.953221][T16267] ceph: No mds server is up or the cluster is laggy [ 1383.960505][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 1383.996867][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 1384.848751][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 1384.919037][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 1387.475353][T16304] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1390.034649][T16324] tipc: Enabling of bearer rejected, failed to enable media [ 1393.300204][T16348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1393.310932][T16348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1394.136011][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1394.142456][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.315451][T16387] loop0: detected capacity change from 0 to 512 [ 1398.346611][T16387] ext4: Unknown parameter 'smackfsdef' [ 1399.300278][T16390] tipc: Enabling of bearer rejected, failed to enable media [ 1399.977067][T16408] loop0: detected capacity change from 0 to 512 [ 1399.991371][T16408] EXT4-fs: Ignoring removed bh option [ 1400.056828][T16408] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1400.166785][T16408] EXT4-fs (loop0): 1 truncate cleaned up [ 1400.192877][T16408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.935632][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.593811][T16357] udevd[16357]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1406.684780][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 1406.876754][T16462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1408.048721][T16489] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2808'. [ 1408.201027][T16488] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[16488] [ 1411.990578][T13018] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1412.319944][T13018] usb 10-1: device descriptor read/64, error -71 [ 1412.633528][T13018] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1412.911319][T13018] usb 10-1: device descriptor read/64, error -71 [ 1413.138318][T13018] usb usb10-port1: attempt power cycle [ 1413.963311][T13018] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1414.013136][T13018] usb 10-1: device descriptor read/8, error -71 [ 1414.309282][T13018] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1415.298739][T13018] usb 10-1: device descriptor read/8, error -71 [ 1415.444263][T13018] usb usb10-port1: unable to enumerate USB device [ 1416.013872][T16555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2825'. [ 1416.589410][T16555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2825'. [ 1417.933783][T13018] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1418.062564][T16565] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1418.191025][T13018] usb 4-1: Using ep0 maxpacket: 8 [ 1418.198308][T13018] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1418.223500][T13018] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1418.263207][T13018] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1418.308468][T13018] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1418.361011][T13018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1418.420412][T13018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1418.472609][T13018] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1418.488693][T13018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.531545][T13018] usb 4-1: Product: syz [ 1418.546014][T13018] usb 4-1: Manufacturer: syz [ 1418.564336][T13018] usb 4-1: SerialNumber: syz [ 1418.611637][T13018] usb 4-1: config 0 descriptor?? [ 1418.767738][T16560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1418.816465][T13018] hub 4-1:0.0: bad descriptor, ignoring hub [ 1418.849524][T13018] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1418.933675][T13018] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 1419.609894][T13018] usb 4-1: USB disconnect, device number 53 [ 1422.184842][T13018] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1422.503997][T13018] usb 8-1: device descriptor read/64, error -71 [ 1422.763879][T13018] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1423.084450][T13018] usb 8-1: device descriptor read/64, error -71 [ 1423.255787][T13018] usb usb8-port1: attempt power cycle [ 1423.629592][T13018] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1423.966334][T13018] usb 8-1: device descriptor read/8, error -71 [ 1424.290019][T13018] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1424.378002][T13018] usb 8-1: device descriptor read/8, error -71 [ 1424.581128][T13018] usb usb8-port1: unable to enumerate USB device [ 1424.644188][T16617] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1427.391071][ T5926] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1427.394814][T16636] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2846'. [ 1428.732609][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 1428.774960][ T5926] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1428.862229][T16643] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1429.225404][ T5926] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1429.253683][ T5926] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1429.295170][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1429.342938][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1429.374702][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1430.103682][T16573] udevd[16573]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1430.810512][ T5926] usb 1-1: string descriptor 0 read error: -71 [ 1430.816867][ T5926] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1430.846068][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.907564][ T5926] usb 1-1: config 0 descriptor?? [ 1430.928268][ T5926] usb 1-1: can't set config #0, error -71 [ 1430.981473][ T5926] usb 1-1: USB disconnect, device number 55 [ 1431.358606][T16665] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1432.185676][ T30] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1432.478895][ T30] usb 4-1: device descriptor read/64, error -71 [ 1433.718834][ T30] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1433.907957][T16686] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1433.917317][ T30] usb 4-1: device descriptor read/64, error -71 [ 1434.083312][ T30] usb usb4-port1: attempt power cycle [ 1435.391398][ T30] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1435.639461][ T30] usb 4-1: device descriptor read/8, error -71 [ 1437.769377][T10443] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1437.959405][T10443] usb 9-1: Using ep0 maxpacket: 8 [ 1438.000037][T10443] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 1438.010754][T10443] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1438.041117][T10443] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1438.092435][T10443] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1438.124636][T10443] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1438.194012][T10443] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1438.272257][T10443] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1438.316284][T10443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.493733][T10443] usb 9-1: Product: syz [ 1438.498051][T10443] usb 9-1: Manufacturer: syz [ 1438.546494][T10443] usb 9-1: SerialNumber: syz [ 1438.617051][T10443] usb 9-1: config 0 descriptor?? [ 1438.664677][T16705] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1438.701053][T10443] hub 9-1:0.0: bad descriptor, ignoring hub [ 1438.736634][T10443] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1438.785393][T10443] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input23 [ 1438.952984][ T5927] usb 9-1: USB disconnect, device number 27 [ 1439.575094][T16734] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1442.585743][T16751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1442.596329][T16744] syzkaller0: entered promiscuous mode [ 1442.661427][ T5926] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1442.738681][T16744] syzkaller0: entered allmulticast mode [ 1442.832513][ T5926] usb 8-1: device descriptor read/64, error -71 [ 1443.088856][ T5926] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1443.228032][ T5926] usb 8-1: device descriptor read/64, error -71 [ 1443.348226][ T5926] usb usb8-port1: attempt power cycle [ 1444.468052][ T5926] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1444.616921][ T5926] usb 8-1: device descriptor read/8, error -71 [ 1444.950406][ T5927] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1445.047705][T16777] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1445.493082][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 1446.273215][ T5927] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.288975][ T5927] usb 4-1: config 0 has no interface number 0 [ 1446.306186][ T5927] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1446.318809][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.373758][ T5927] usb 4-1: Product: syz [ 1446.387261][ T5927] usb 4-1: Manufacturer: syz [ 1446.395165][ T5927] usb 4-1: SerialNumber: syz [ 1446.437492][ T5927] usb 4-1: config 0 descriptor?? [ 1446.462674][ T5927] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1446.488436][ T5927] usb 4-1: selecting invalid altsetting 1 [ 1446.499241][ T5927] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1446.740789][T11116] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1447.056617][ T5927] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1447.070371][ T5927] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1447.080804][ T5927] usb 4-1: media controller created [ 1447.101179][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1447.151931][ T5927] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1447.162996][ T5927] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1447.170876][ T5927] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1447.213667][T11116] usb 2-1: Using ep0 maxpacket: 8 [ 1447.226826][T11116] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1447.261190][T11116] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1447.279259][T11116] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1447.298975][ T5927] usb 4-1: USB disconnect, device number 58 [ 1447.337720][T11116] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1447.383860][T11116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1447.414842][T11116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1447.665324][T11116] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1447.675375][T11116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.683480][T11116] usb 2-1: Product: syz [ 1447.690323][T11116] usb 2-1: Manufacturer: syz [ 1447.695205][T11116] usb 2-1: SerialNumber: syz [ 1447.711171][T16792] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1447.740700][T11116] usb 2-1: config 0 descriptor?? [ 1447.758099][T16768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1447.774554][T11116] hub 2-1:0.0: bad descriptor, ignoring hub [ 1447.795993][T11116] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1447.837440][T11116] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 1448.003082][T11116] usb 2-1: USB disconnect, device number 66 [ 1451.350491][T16812] syzkaller0: entered promiscuous mode [ 1451.420305][T16812] syzkaller0: entered allmulticast mode [ 1451.721737][T16822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 1451.950862][T13018] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1452.281223][T13018] usb 10-1: device descriptor read/64, error -71 [ 1452.633759][T13018] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1453.053484][T13018] usb 10-1: device descriptor read/64, error -71 [ 1454.521978][T13018] usb usb10-port1: attempt power cycle [ 1456.329324][T11116] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1456.630892][T11116] usb 2-1: Using ep0 maxpacket: 32 [ 1456.673812][T11116] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1456.688946][T11116] usb 2-1: config 0 has no interface number 0 [ 1456.730119][T11116] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1456.760299][T11116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.989031][T11116] usb 2-1: Product: syz [ 1457.005444][T11116] usb 2-1: Manufacturer: syz [ 1457.010180][T11116] usb 2-1: SerialNumber: syz [ 1457.265328][T11116] usb 2-1: config 0 descriptor?? [ 1457.313967][T11116] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1457.402213][T11116] usb 2-1: selecting invalid altsetting 1 [ 1457.472129][T11116] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1457.545069][T11116] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1459.609805][T11116] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1459.618117][T11116] usb 2-1: media controller created [ 1459.633650][T11116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1459.706604][T11116] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1459.713654][T11116] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1459.727783][T11116] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1459.759753][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1459.769675][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1459.891786][T16881] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1459.932132][T11116] usb 2-1: USB disconnect, device number 67 [ 1460.485824][ T5927] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1461.301956][ T5927] usb 1-1: device descriptor read/64, error -71 [ 1462.389201][ T5927] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1462.825591][ T5927] usb 1-1: device descriptor read/64, error -71 [ 1463.845395][ T5927] usb usb1-port1: attempt power cycle [ 1466.615890][T16929] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1466.753965][T16929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1466.834250][T16935] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1468.474406][T16947] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2931'. [ 1468.976548][T10443] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1469.441989][T10443] usb 4-1: device descriptor read/64, error -71 [ 1469.846654][T10443] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1470.017558][T10443] usb 4-1: device descriptor read/64, error -71 [ 1470.136059][T10443] usb usb4-port1: attempt power cycle [ 1470.531831][T10443] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1470.595733][T10443] usb 4-1: device descriptor read/8, error -71 [ 1471.193267][T10443] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1471.679426][T10443] usb 4-1: device descriptor read/8, error -71 [ 1471.826463][T10443] usb usb4-port1: unable to enumerate USB device [ 1472.933101][T16983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2940'. [ 1476.618150][T17000] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2944'. [ 1476.659483][T17000] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2944'. [ 1477.980118][T17007] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2945'. [ 1477.989396][T17007] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2945'. [ 1478.680765][T17009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2947'. [ 1481.163180][ T5900] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1482.616492][ T5900] usb 9-1: Using ep0 maxpacket: 16 [ 1482.627593][ T5900] usb 9-1: no configurations [ 1482.632306][ T5900] usb 9-1: can't read configurations, error -22 [ 1482.830566][ T5900] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1483.957990][ T5900] usb 9-1: Using ep0 maxpacket: 16 [ 1484.081940][ T5900] usb 9-1: device descriptor read/all, error -71 [ 1484.107457][ T5900] usb usb9-port1: attempt power cycle [ 1485.914225][T17053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2960'. [ 1485.940265][T17053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2960'. [ 1486.653872][T17058] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2961'. [ 1487.453360][T17062] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1489.864715][T17076] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2965'. [ 1493.612489][ T5926] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1493.986496][ T5926] usb 10-1: Using ep0 maxpacket: 8 [ 1494.004666][ T5926] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1494.857072][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1494.925542][ T5926] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1495.458991][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.477175][ T5926] usb 10-1: Product: syz [ 1495.781599][ T5926] usb 10-1: Manufacturer: syz [ 1495.812678][ T5926] usb 10-1: SerialNumber: syz [ 1495.853452][ T5926] usb 10-1: config 0 descriptor?? [ 1495.980288][ T5926] streamzap 10-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1496.399765][ T5926] usb 10-1: USB disconnect, device number 18 [ 1496.834838][T17136] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2977'. [ 1499.116814][T17155] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2981'. [ 1501.126020][T17174] loop0: detected capacity change from 0 to 164 [ 1501.502858][T17181] Unsupported NM flag settings (240) [ 1501.513359][T17181] Unsupported NM flag settings (240) [ 1503.122740][T17188] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2991'. [ 1503.647054][ T5927] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1503.732531][T17205] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2995'. [ 1503.742884][T17205] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2995'. [ 1503.892379][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 1503.911798][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1503.941662][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1503.981586][ T5927] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1503.991087][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.011728][ T5927] usb 2-1: Product: syz [ 1504.027095][ T5927] usb 2-1: Manufacturer: syz [ 1504.049043][ T5927] usb 2-1: SerialNumber: syz [ 1504.082030][ T5927] usb 2-1: config 0 descriptor?? [ 1504.112115][ T5927] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1504.336962][ T5927] usb 2-1: USB disconnect, device number 68 [ 1507.993558][T17232] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3002'. [ 1513.467220][ T791] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1514.364691][ T791] usb 1-1: Using ep0 maxpacket: 8 [ 1514.508290][ T791] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1515.347957][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1515.365160][ T791] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1515.411380][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.647700][ T791] usb 1-1: Product: syz [ 1516.424159][ T791] usb 1-1: Manufacturer: syz [ 1516.810066][ T791] usb 1-1: SerialNumber: syz [ 1516.868750][ T791] usb 1-1: config 0 descriptor?? [ 1517.014868][ T791] usb 1-1: can't set config #0, error -71 [ 1517.391505][ T791] usb 1-1: USB disconnect, device number 59 [ 1519.734335][T17318] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3022'. [ 1525.408796][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.415561][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1527.060139][ T5900] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1527.650970][T16912] libceph: mon0 (1)[c::]:6789 socket error on write [ 1527.668538][T17373] ceph: No mds server is up or the cluster is laggy [ 1527.904143][ T5900] usb 10-1: Using ep0 maxpacket: 8 [ 1528.263000][ T5900] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1528.278533][ T5926] libceph: mon0 (1)[c::]:6789 socket error on write [ 1528.490504][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1528.505184][ T5900] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1528.515168][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.523761][ T5900] usb 10-1: Product: syz [ 1528.528029][ T5900] usb 10-1: Manufacturer: syz [ 1528.532739][ T5900] usb 10-1: SerialNumber: syz [ 1529.382794][ T5900] usb 10-1: config 0 descriptor?? [ 1529.538248][ T5900] usb 10-1: can't set config #0, error -71 [ 1529.568906][ T5900] usb 10-1: USB disconnect, device number 19 [ 1533.901908][T17410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1539.391609][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1539.415731][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1539.490086][T17451] ceph: No mds server is up or the cluster is laggy [ 1548.537101][T17504] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3071'. [ 1550.286567][T10443] libceph: connect (1)[c::]:6789 error -101 [ 1550.293731][T10443] libceph: mon0 (1)[c::]:6789 connect error [ 1550.409927][T17518] ceph: No mds server is up or the cluster is laggy [ 1558.843409][T17589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3091'. [ 1560.028141][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1560.034838][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1560.042183][T17588] ceph: No mds server is up or the cluster is laggy [ 1560.329698][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1560.343050][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1579.511879][T17762] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1580.746991][T13018] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1581.133640][T13018] usb 8-1: Using ep0 maxpacket: 8 [ 1581.195465][T13018] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1581.366477][T13018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1581.644910][T13018] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1581.899832][T13018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.908862][T13018] usb 8-1: Product: syz [ 1581.913430][T13018] usb 8-1: Manufacturer: syz [ 1581.918115][T13018] usb 8-1: SerialNumber: syz [ 1581.926764][T13018] usb 8-1: config 0 descriptor?? [ 1582.016746][T13018] streamzap 8-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1582.971290][T13018] usb 8-1: USB disconnect, device number 37 [ 1591.074751][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1591.082220][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1593.111900][T17849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1593.155539][T17849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1593.176510][T17849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1593.187962][T17849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1593.199072][T17849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1594.393665][T17857] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[17857] [ 1594.756423][ T791] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1594.939127][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 1595.429145][T17849] Bluetooth: hci6: command tx timeout [ 1595.994501][ T791] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1596.042091][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.134286][ T791] usb 2-1: Product: syz [ 1596.143087][ T791] usb 2-1: Manufacturer: syz [ 1596.177045][ T791] usb 2-1: SerialNumber: syz [ 1596.226938][ T791] usb 2-1: config 0 descriptor?? [ 1596.260662][ T791] hub 2-1:0.0: bad descriptor, ignoring hub [ 1597.365911][ T791] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1597.643326][T17849] Bluetooth: hci6: command tx timeout [ 1598.002570][ T5900] usb 2-1: USB disconnect, device number 69 [ 1600.655282][T17849] Bluetooth: hci6: command tx timeout [ 1601.417565][T17849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1601.431614][T17849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1601.443280][T17849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1601.456587][T17849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1601.507195][T17849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1602.963568][T17849] Bluetooth: hci6: command tx timeout [ 1603.810078][ T1156] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.141907][T17849] Bluetooth: hci3: command tx timeout [ 1606.446296][T17849] Bluetooth: hci3: command tx timeout [ 1607.722679][ T1156] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.675562][T17849] Bluetooth: hci3: command tx timeout [ 1609.900726][ T1156] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.139103][ T1156] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.893947][ T5832] Bluetooth: hci3: command tx timeout [ 1614.361129][T17847] chnl_net:caif_netlink_parms(): no params data found [ 1614.424829][ T1156] bridge_slave_1: left allmulticast mode [ 1614.454661][ T1156] bridge_slave_1: left promiscuous mode [ 1614.466610][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.170277][ T1156] bridge_slave_0: left allmulticast mode [ 1616.176330][ T1156] bridge_slave_0: left promiscuous mode [ 1616.182376][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.776303][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.002961][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.214241][ T1156] bond0 (unregistering): Released all slaves [ 1622.321894][T17894] chnl_net:caif_netlink_parms(): no params data found [ 1627.401070][T17847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.408953][T17847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.416936][T17847] bridge_slave_0: entered allmulticast mode [ 1627.426025][T17847] bridge_slave_0: entered promiscuous mode [ 1627.446153][T17847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.453331][T17847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.476729][T17847] bridge_slave_1: entered allmulticast mode [ 1627.484870][T17847] bridge_slave_1: entered promiscuous mode [ 1627.649333][T18127] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[18127] [ 1628.582851][T13018] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1628.594605][T18130] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1629.164884][T17894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.177259][T17894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.207891][T17894] bridge_slave_0: entered allmulticast mode [ 1629.216249][T17894] bridge_slave_0: entered promiscuous mode [ 1629.260474][T13018] usb 2-1: Using ep0 maxpacket: 16 [ 1629.285482][T13018] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1629.303720][T13018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.313798][T13018] usb 2-1: Product: syz [ 1629.318500][T13018] usb 2-1: Manufacturer: syz [ 1629.323197][T13018] usb 2-1: SerialNumber: syz [ 1630.762806][T13018] usb 2-1: config 0 descriptor?? [ 1630.768638][T13018] usb 2-1: can't set config #0, error -71 [ 1630.776369][T13018] usb 2-1: USB disconnect, device number 70 [ 1631.767196][T17847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.822644][T17894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.476472][T17894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.506238][T17894] bridge_slave_1: entered allmulticast mode [ 1634.648811][T17894] bridge_slave_1: entered promiscuous mode [ 1636.147148][T17847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.230970][T18184] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1637.500034][ T1156] hsr_slave_0: left promiscuous mode [ 1637.506324][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3219'. [ 1637.553095][ T1156] hsr_slave_1: left promiscuous mode [ 1637.571893][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.610706][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.638604][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.793175][T18189] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1637.831296][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.892202][ T1156] veth1_macvtap: left promiscuous mode [ 1637.906007][ T1156] veth0_macvtap: left promiscuous mode [ 1637.911648][ T1156] veth1_vlan: left promiscuous mode [ 1637.935265][ T1156] veth0_vlan: left promiscuous mode [ 1638.606460][T18201] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1638.620902][T18203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1638.632840][T18203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1638.643756][T18201] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1641.106054][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1641.229581][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1643.254811][T17894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.261438][T18240] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3233'. [ 1643.273407][T18240] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3233'. [ 1643.419469][T17847] team0: Port device team_slave_0 added [ 1643.454146][T17847] team0: Port device team_slave_1 added [ 1643.530777][T17894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.833280][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'. [ 1644.733999][T17847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.751784][T17847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.785077][T17847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.893929][T17894] team0: Port device team_slave_0 added [ 1644.905686][T18251] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.3237'. [ 1644.980171][T17847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.168659][T17847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.369913][T17847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.161217][T17894] team0: Port device team_slave_1 added [ 1646.437143][T17894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.466249][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.568605][T17894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.623592][T17894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.661321][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.773961][T17894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.786165][ T6001] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1646.985854][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1647.045118][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.068570][T17847] hsr_slave_0: entered promiscuous mode [ 1647.108618][ T6001] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1647.120434][T17847] hsr_slave_1: entered promiscuous mode [ 1647.126890][T17847] debugfs: 'hsr0' already exists in 'hsr' [ 1647.165374][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.203530][T17847] Cannot create hsr debugfs directory [ 1647.254028][ T6001] usb 4-1: config 0 descriptor?? [ 1647.605970][T17894] hsr_slave_0: entered promiscuous mode [ 1647.621644][T17894] hsr_slave_1: entered promiscuous mode [ 1647.628607][T17894] debugfs: 'hsr0' already exists in 'hsr' [ 1647.679623][T17894] Cannot create hsr debugfs directory [ 1648.131957][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.152079][ T6001] usbhid 4-1:0.0: can't add hid device: -71 [ 1648.160198][ T6001] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1648.279455][ T6001] usb 4-1: USB disconnect, device number 63 [ 1649.942908][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.054606][T18299] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3244'. [ 1651.997064][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.576444][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.139367][T18339] ptrace attach of "./syz-executor exec"[10721] was attempted by "./syz-executor exec"[18339] [ 1654.399604][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1654.414594][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1654.423029][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1654.456103][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1654.469604][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1654.747704][ T5900] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1654.837996][T16912] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1654.845869][ T5892] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1654.955828][ T5900] usb 9-1: Using ep0 maxpacket: 16 [ 1655.009147][ T5900] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1655.029799][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.054137][ T5900] usb 9-1: Product: syz [ 1655.060293][ T5892] usb 8-1: Using ep0 maxpacket: 16 [ 1655.075021][ T5900] usb 9-1: Manufacturer: syz [ 1655.103526][ T5892] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1655.119326][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.133012][T16912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1655.144383][ T5900] usb 9-1: SerialNumber: syz [ 1655.153521][ T5892] usb 8-1: Product: syz [ 1655.175448][ T5900] usb 9-1: config 0 descriptor?? [ 1655.182934][T16912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.195231][ T5892] usb 8-1: Manufacturer: syz [ 1655.215110][ T5892] usb 8-1: SerialNumber: syz [ 1655.224605][T16912] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1655.240156][ T5900] hub 9-1:0.0: bad descriptor, ignoring hub [ 1655.281495][ T5892] usb 8-1: config 0 descriptor?? [ 1655.293677][ T5900] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1655.310793][T16912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.339780][ T5892] as10x_usb: device has been detected [ 1655.377179][ T5892] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1655.395698][T16912] usb 4-1: config 0 descriptor?? [ 1655.475923][ T5892] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1655.582799][ T5900] usb 9-1: USB disconnect, device number 31 [ 1655.607181][ T5892] as10x_usb: error during firmware upload part1 [ 1655.634971][ T5892] Registered device Sky IT Digital Key (green led) [ 1655.698501][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.770147][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.847600][T18346] random: crng reseeded on system resumption [ 1655.980648][ T5926] usb 8-1: USB disconnect, device number 38 [ 1656.106313][ T5926] Unregistered device Sky IT Digital Key (green led) [ 1656.122151][ T5926] as10x_usb: device has been disconnected [ 1656.207295][T16912] usbhid 4-1:0.0: can't add hid device: -71 [ 1656.223768][T16912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1656.281527][T16912] usb 4-1: USB disconnect, device number 64 [ 1656.722216][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1656.734917][T17849] Bluetooth: hci2: command tx timeout [ 1656.740887][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1656.771875][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.793254][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.830504][ T1156] bond0 (unregistering): Released all slaves [ 1657.626229][ T1156] tipc: Disabling bearer [ 1657.632037][ T1156] tipc: Left network mode [ 1657.865158][T18341] chnl_net:caif_netlink_parms(): no params data found [ 1658.336040][T18381] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1658.936331][T17849] Bluetooth: hci2: command tx timeout [ 1659.956436][T18265] udevd[18265]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1660.040158][T18271] udevd[18271]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 1660.605391][T18341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.847444][T18341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.158841][T17849] Bluetooth: hci2: command tx timeout [ 1661.763563][T18341] bridge_slave_0: entered allmulticast mode [ 1661.805897][T18341] bridge_slave_0: entered promiscuous mode [ 1661.908434][T18341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.924467][T18341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.935396][T18341] bridge_slave_1: entered allmulticast mode [ 1661.944371][T18341] bridge_slave_1: entered promiscuous mode [ 1663.446214][T17849] Bluetooth: hci2: command tx timeout [ 1663.818529][ T5892] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1664.140048][T18341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.244013][T18341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.256886][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1664.525874][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.535915][ T5892] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1664.545675][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.426195][ T5892] usb 2-1: config 0 descriptor?? [ 1665.483229][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1665.495478][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1665.504314][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1665.524101][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1665.532401][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1665.761767][T18341] team0: Port device team_slave_0 added [ 1665.839385][ T1156] hsr_slave_0: left promiscuous mode [ 1665.859181][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.917778][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.962987][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.971575][ T5892] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1665.990563][ T5892] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1665.998595][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.035952][ T5892] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1666.082105][ T5892] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1666.268163][ T5892] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1666.275933][ T5892] elan 0003:04F3:0755.0015: failed to start in urb: -90 [ 1666.293646][ T5892] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1666.327018][ T5892] usb 2-1: USB disconnect, device number 71 [ 1666.408950][ T1156] veth1_macvtap: left promiscuous mode [ 1666.460496][ T1156] veth0_macvtap: left promiscuous mode [ 1666.499223][ T1156] veth1_vlan: left promiscuous mode [ 1666.511701][ T1156] veth0_vlan: left promiscuous mode [ 1666.575225][T18470] fido_id[18470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1667.741543][ T5832] Bluetooth: hci6: command tx timeout [ 1667.996828][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1668.067390][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1668.593556][T18341] team0: Port device team_slave_1 added [ 1669.014557][T18341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.038316][T18341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.272324][T18341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.286914][T18341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.294114][T18341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.330404][T18341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.092357][ T5832] Bluetooth: hci6: command tx timeout [ 1670.458371][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3283'. [ 1670.530741][T18341] hsr_slave_0: entered promiscuous mode [ 1670.638806][T18341] hsr_slave_1: entered promiscuous mode [ 1670.760149][T18341] debugfs: 'hsr0' already exists in 'hsr' [ 1670.805514][T18341] Cannot create hsr debugfs directory [ 1671.115726][T18518] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[18518] [ 1671.893351][ T1156] IPVS: stop unused estimator thread 0... [ 1672.007949][T10443] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1672.197537][T10443] usb 4-1: Using ep0 maxpacket: 16 [ 1672.245586][T10443] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1672.272415][ T5832] Bluetooth: hci6: command tx timeout [ 1672.282205][T10443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.315219][T10443] usb 4-1: Product: syz [ 1672.319802][T10443] usb 4-1: Manufacturer: syz [ 1672.334693][T10443] usb 4-1: SerialNumber: syz [ 1672.390381][T10443] usb 4-1: config 0 descriptor?? [ 1672.912964][T10443] hub 4-1:0.0: bad descriptor, ignoring hub [ 1672.929330][T10443] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1673.270945][T10443] usb 4-1: USB disconnect, device number 65 [ 1674.505874][ T5832] Bluetooth: hci6: command tx timeout [ 1680.041759][ T1156] bridge_slave_1: left allmulticast mode [ 1680.073217][ T1156] bridge_slave_1: left promiscuous mode [ 1680.079044][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.150530][ T1156] bridge_slave_0: left allmulticast mode [ 1680.292164][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1680.302043][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1680.302102][ T5832] Tainted: [L]=SOFTLOCKUP [ 1680.302123][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1680.302147][ T5832] Workqueue: hci5 hci_rx_work [ 1680.302197][ T5832] Call Trace: [ 1680.302209][ T5832] [ 1680.302222][ T5832] dump_stack_lvl+0x100/0x190 [ 1680.302283][ T5832] sysfs_warn_dup.cold+0x1c/0x28 [ 1680.302339][ T5832] sysfs_create_dir_ns+0x24b/0x2b0 [ 1680.302389][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1680.302439][ T5832] ? find_held_lock+0x2b/0x80 [ 1680.302485][ T5832] ? kobject_add_internal+0x25f/0x930 [ 1680.302522][ T5832] ? kobject_add_internal+0x25f/0x930 [ 1680.302563][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.302610][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 1680.302654][ T5832] kobject_add_internal+0x2c8/0x930 [ 1680.302700][ T5832] kobject_add+0x16a/0x1e0 [ 1680.302736][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 1680.302771][ T5832] ? class_to_subsys+0x10f/0x150 [ 1680.302820][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.302868][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.302914][ T5832] ? kobject_put+0xb9/0x640 [ 1680.302972][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 1680.303034][ T5832] device_add+0x294/0x1950 [ 1680.303078][ T5832] ? __pfx_dev_set_name+0x10/0x10 [ 1680.303136][ T5832] ? __pfx_device_add+0x10/0x10 [ 1680.303179][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.303226][ T5832] ? mgmt_send_event_skb+0x2fb/0x460 [ 1680.303289][ T5832] hci_conn_add_sysfs+0x1a3/0x260 [ 1680.303348][ T5832] le_conn_complete_evt+0x11cb/0x1f40 [ 1680.303409][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1680.303471][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1680.303522][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 1680.303570][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 1680.303623][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1680.303679][ T5832] hci_event_packet+0x682/0x11c0 [ 1680.303727][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1680.303781][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 1680.303829][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.303880][ T5832] ? kcov_remote_start+0x374/0x660 [ 1680.303929][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 1680.303983][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.304040][ T5832] hci_rx_work+0x451/0xfc0 [ 1680.304097][ T5832] process_one_work+0xa23/0x19a0 [ 1680.304166][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 1680.304201][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.304319][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.304374][ T5832] worker_thread+0x5ef/0xe50 [ 1680.304431][ T5832] ? kthread+0x13a/0x450 [ 1680.304487][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 1680.304521][ T5832] kthread+0x370/0x450 [ 1680.304578][ T5832] ? __pfx_kthread+0x10/0x10 [ 1680.304641][ T5832] ret_from_fork+0x754/0xd80 [ 1680.304705][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 1680.304769][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1680.304814][ T5832] ? __switch_to+0x7b4/0x1120 [ 1680.304858][ T5832] ? __pfx_kthread+0x10/0x10 [ 1680.304919][ T5832] ret_from_fork_asm+0x1a/0x30 [ 1680.304989][ T5832] [ 1680.305074][ T5832] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1680.630431][T11116] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1680.692607][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3302'. [ 1680.787535][ T5832] Bluetooth: hci5: failed to register connection device [ 1680.798695][ T1156] bridge_slave_0: left promiscuous mode [ 1680.810641][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.928856][T11116] usb 9-1: Using ep0 maxpacket: 8 [ 1681.119919][T11116] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1681.149982][T18619] nbd: socks must be embedded in a SOCK_ITEM attr [ 1681.271125][ T1156] bridge_slave_1: left allmulticast mode [ 1681.398021][T11116] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1681.422402][ T1156] bridge_slave_1: left promiscuous mode [ 1681.563394][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.759133][T11116] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1681.958988][T11116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.979370][ T1156] bridge_slave_0: left allmulticast mode [ 1682.107945][ T1156] bridge_slave_0: left promiscuous mode [ 1682.213248][T11116] usb 9-1: Product: syz [ 1682.280170][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.314025][T11116] usb 9-1: Manufacturer: syz [ 1682.438319][T11116] usb 9-1: SerialNumber: syz [ 1682.860623][T11116] usb 9-1: config 0 descriptor?? [ 1682.958463][T17849] Bluetooth: hci5: command 0x0406 tx timeout [ 1683.970563][T18527] udevd[18527]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1684.061265][T18527] udevd[18527]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1684.134653][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.186743][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.220676][ T1156] bond0 (unregistering): Released all slaves [ 1684.529822][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.553850][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.599773][ T1156] bond0 (unregistering): Released all slaves [ 1684.649234][T18451] chnl_net:caif_netlink_parms(): no params data found [ 1685.181485][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 1685.286967][T11116] usb 9-1: can't set config #0, error -71 [ 1685.348825][T11116] usb 9-1: USB disconnect, device number 32 [ 1685.418412][T18341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1685.899340][T18341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1685.932724][T18341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1687.385515][T18341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1687.452988][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1688.294507][T18451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.326036][T18686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1688.335361][T18451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.342738][T18451] bridge_slave_0: entered allmulticast mode [ 1688.373286][T18686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1688.453611][T18451] bridge_slave_0: entered promiscuous mode [ 1688.494782][T18451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.844753][T18451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.131266][T18451] bridge_slave_1: entered allmulticast mode [ 1689.144279][T18451] bridge_slave_1: entered promiscuous mode [ 1690.537230][T18527] udevd[18527]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 1690.622975][ T1156] hsr_slave_0: left promiscuous mode [ 1690.714662][ T1156] hsr_slave_1: left promiscuous mode [ 1690.739337][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1690.775819][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.684064][ T1156] hsr_slave_0: left promiscuous mode [ 1691.690630][ T1156] hsr_slave_1: left promiscuous mode [ 1691.696794][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.705661][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.889323][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1692.922521][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1695.873509][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1695.916241][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1697.237195][T18516] udevd[18516]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1697.355085][T18451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.379045][T18451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.800740][T18451] team0: Port device team_slave_0 added [ 1699.055633][T18451] team0: Port device team_slave_1 added [ 1699.967307][T18792] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1700.458426][T18803] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1701.123819][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3336'. [ 1701.242152][T18341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.318351][T18451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.349040][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.482099][T18451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.608951][T18451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.660975][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.937117][T18451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.601057][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1702.612826][T18341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.627057][T18451] hsr_slave_0: entered promiscuous mode [ 1703.696841][T18451] hsr_slave_1: entered promiscuous mode [ 1703.706313][T18451] debugfs: 'hsr0' already exists in 'hsr' [ 1703.712160][T18451] Cannot create hsr debugfs directory [ 1703.851356][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.858579][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.898558][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.905775][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.092550][T18815] nbd: socks must be embedded in a SOCK_ITEM attr [ 1704.105566][T18516] block nbd64: NBD_DISCONNECT [ 1705.451150][T10443] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1706.501927][T10443] usb 9-1: Using ep0 maxpacket: 16 [ 1706.622591][T18516] udevd[18516]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1706.628148][T10443] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1706.662360][T10443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.674592][T10443] usb 9-1: Product: syz [ 1706.679051][T10443] usb 9-1: Manufacturer: syz [ 1706.684004][T10443] usb 9-1: SerialNumber: syz [ 1706.690920][T18341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1706.715082][T10443] usb 9-1: config 0 descriptor?? [ 1706.765627][T10443] as10x_usb: device has been detected [ 1706.781983][T10443] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1706.840833][T10443] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1707.762899][T10443] as10x_usb: error during firmware upload part1 [ 1707.770059][T10443] Registered device Sky IT Digital Key (green led) [ 1708.070054][ T5926] usb 9-1: USB disconnect, device number 33 [ 1709.136153][ T5926] Unregistered device Sky IT Digital Key (green led) [ 1709.151467][ T5926] as10x_usb: device has been disconnected [ 1711.065917][T18879] ceph: No mds server is up or the cluster is laggy [ 1711.073994][T16912] libceph: mon0 (1)[c::]:6789 socket error on write [ 1711.193687][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3350'. [ 1715.771420][T18341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1717.143041][T16912] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1717.357082][T16912] usb 2-1: Using ep0 maxpacket: 16 [ 1717.403094][T16912] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1717.455582][T16912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.560240][T16912] usb 2-1: Product: syz [ 1717.615010][T16912] usb 2-1: Manufacturer: syz [ 1717.620401][T16912] usb 2-1: SerialNumber: syz [ 1717.974655][T16912] usb 2-1: config 0 descriptor?? [ 1718.058232][T18950] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3364'. [ 1718.833443][T18932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.883717][T16912] as10x_usb: device has been detected [ 1718.894940][T16912] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1718.911950][T16912] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1718.915666][T18932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.928011][T16912] as10x_usb: error during firmware upload part1 [ 1719.008694][T16912] Registered device Sky IT Digital Key (green led) [ 1719.132593][T18932] random: crng reseeded on system resumption [ 1719.360088][ T791] usb 2-1: USB disconnect, device number 72 [ 1719.503960][ T791] Unregistered device Sky IT Digital Key (green led) [ 1719.520162][ T791] as10x_usb: device has been disconnected [ 1719.572095][T18451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1720.608505][T18451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1720.829097][T18451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1720.878869][T17849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1720.892577][T17849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1720.908308][T17849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1720.964489][T18451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1722.051236][T17849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1722.066182][T17849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1722.419558][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1722.426588][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.073926][T18451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.745303][ T5832] Bluetooth: hci3: command tx timeout [ 1725.554744][T19032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1726.194605][T19037] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1726.231376][T18516] udevd[18516]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1726.901503][ T5832] Bluetooth: hci3: command tx timeout [ 1727.625252][T18451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.154207][ T5832] Bluetooth: hci3: command tx timeout [ 1730.210722][T19070] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1730.659263][T17849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1730.958188][T17849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1730.979223][T17849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1730.998519][T17849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1731.997265][T17849] Bluetooth: hci3: command tx timeout [ 1732.007976][T17849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1732.481079][T19096] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1732.486514][T19082] udevd[19082]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1733.658130][T19120] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3391'. [ 1734.528779][T18977] chnl_net:caif_netlink_parms(): no params data found [ 1734.593135][T19129] ceph: No mds server is up or the cluster is laggy [ 1734.600775][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 1734.611847][T11278] Bluetooth: hci2: command tx timeout [ 1734.646912][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 1734.985739][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 1735.021145][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 1735.214071][ T5892] libceph: mon0 (1)[c::]:6789 socket error on write [ 1735.858090][T19144] ceph: No mds server is up or the cluster is laggy [ 1735.890445][ T5892] libceph: mon0 (1)[c::]:6789 socket error on write [ 1737.286887][T11278] Bluetooth: hci2: command tx timeout [ 1739.427151][ T7136] bridge_slave_1: left allmulticast mode [ 1739.433099][ T7136] bridge_slave_1: left promiscuous mode [ 1739.480654][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.550888][T11278] Bluetooth: hci2: command tx timeout [ 1739.656700][ T7136] bridge_slave_0: left allmulticast mode [ 1739.676664][ T7136] bridge_slave_0: left promiscuous mode [ 1739.692186][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.827859][T11278] Bluetooth: hci2: command tx timeout [ 1742.584569][T19190] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3406'. [ 1742.728154][ T7136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.749846][T19082] udevd[19082]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1742.772183][ T7136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.796622][ T7136] bond0 (unregistering): Released all slaves [ 1742.923398][T18977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.960571][T18977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.015645][T18977] bridge_slave_0: entered allmulticast mode [ 1743.064875][T18977] bridge_slave_0: entered promiscuous mode [ 1743.079902][T18977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.100464][T18977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.139675][T18977] bridge_slave_1: entered allmulticast mode [ 1743.176628][T18977] bridge_slave_1: entered promiscuous mode [ 1743.338388][T18977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.380366][T18977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.851088][T18977] team0: Port device team_slave_0 added [ 1743.906806][ T7136] hsr_slave_0: left promiscuous mode [ 1743.915255][ T7136] hsr_slave_1: left promiscuous mode [ 1743.929733][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.942135][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1746.461158][ T7136] team0 (unregistering): Port device team_slave_1 removed [ 1746.530392][ T7136] team0 (unregistering): Port device team_slave_0 removed [ 1747.781076][T19239] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1749.399789][T18977] team0: Port device team_slave_1 added [ 1749.918071][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1749.967454][T19254] ceph: No mds server is up or the cluster is laggy [ 1749.977040][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1750.133388][T18977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.140911][T18977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1752.047060][T18977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1752.652274][T18977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1752.674119][T18977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1752.727545][T18977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.065673][T19271] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1753.516452][T18977] hsr_slave_0: entered promiscuous mode [ 1753.554054][T18977] hsr_slave_1: entered promiscuous mode [ 1753.560848][T18977] debugfs: 'hsr0' already exists in 'hsr' [ 1753.580288][T18977] Cannot create hsr debugfs directory [ 1755.655075][T19077] chnl_net:caif_netlink_parms(): no params data found [ 1757.816020][T19339] ceph: No mds server is up or the cluster is laggy [ 1757.979262][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1758.024566][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1759.802969][T19077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.871998][T19077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.955338][T19077] bridge_slave_0: entered allmulticast mode [ 1760.163161][T19077] bridge_slave_0: entered promiscuous mode [ 1760.893999][T19380] ceph: No mds server is up or the cluster is laggy [ 1760.914720][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 1761.087215][T19077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.139886][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 1761.277742][T19077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.286441][T19077] bridge_slave_1: entered allmulticast mode [ 1761.294793][T19077] bridge_slave_1: entered promiscuous mode [ 1762.510277][T19392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1764.379325][T19077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.767193][T19400] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1764.798144][T19077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.833968][T19401] ceph: No mds server is up or the cluster is laggy [ 1764.858089][ T5927] libceph: mon0 (1)[c::]:6789 socket error on write [ 1765.926757][T19077] team0: Port device team_slave_0 added [ 1766.974629][T19077] team0: Port device team_slave_1 added [ 1767.508670][T19430] ceph: No mds server is up or the cluster is laggy [ 1767.573061][T18629] libceph: connect (1)[c::]:6789 error -101 [ 1767.598594][T18629] libceph: mon0 (1)[c::]:6789 connect error [ 1768.074669][T19077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.100308][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.196742][T19077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1768.278764][T19077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1768.342972][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.470981][T19077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.570736][T19455] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1771.330958][T19077] hsr_slave_0: entered promiscuous mode [ 1772.322901][T19077] hsr_slave_1: entered promiscuous mode [ 1772.329675][T19077] debugfs: 'hsr0' already exists in 'hsr' [ 1772.335697][T19077] Cannot create hsr debugfs directory [ 1773.871257][T19476] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1774.107621][ T7136] bridge_slave_1: left allmulticast mode [ 1774.172722][ T7136] bridge_slave_1: left promiscuous mode [ 1774.194932][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.517933][ T7136] bridge_slave_0: left allmulticast mode [ 1774.537828][ T7136] bridge_slave_0: left promiscuous mode [ 1774.543752][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.101515][T19494] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1778.383288][T19509] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1778.689089][T19514] udevd[19514]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1781.449994][ T7136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1781.506073][ T7136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.581671][ T7136] bond0 (unregistering): Released all slaves [ 1782.918831][T19560] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[19560] [ 1783.546176][ T5919] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1784.231221][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 1784.259422][ T5919] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1784.319290][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.367050][ T5919] usb 4-1: Product: syz [ 1784.380068][ T5919] usb 4-1: Manufacturer: syz [ 1784.499165][ T5919] usb 4-1: SerialNumber: syz [ 1784.595974][ T5919] usb 4-1: config 0 descriptor?? [ 1785.070945][ T5919] hub 4-1:0.0: bad descriptor, ignoring hub [ 1785.118522][ T5919] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1785.516257][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1785.546602][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1785.557196][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1785.565429][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1785.573411][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1785.582911][ T30] libceph: mon0 (1)[c::]:6789 socket error on write [ 1785.588152][ T5919] usb 4-1: USB disconnect, device number 66 [ 1785.887982][ T5900] libceph: mon0 (1)[c::]:6789 socket error on write [ 1786.081068][T19591] ceph: No mds server is up or the cluster is laggy [ 1786.703857][ T7136] hsr_slave_0: left promiscuous mode [ 1786.756542][ T7136] hsr_slave_1: left promiscuous mode [ 1786.774363][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.825254][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.923584][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1786.923932][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1787.120606][T19612] ceph: No mds server is up or the cluster is laggy [ 1787.858211][ T5832] Bluetooth: hci6: command tx timeout [ 1788.067743][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1788.074370][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1788.267506][T19624] ceph: No mds server is up or the cluster is laggy [ 1788.274941][T13018] libceph: connect (1)[c::]:6789 error -101 [ 1788.290835][T13018] libceph: mon0 (1)[c::]:6789 connect error [ 1788.547804][ T7136] team0 (unregistering): Port device team_slave_1 removed [ 1788.610765][ T7136] team0 (unregistering): Port device team_slave_0 removed [ 1790.075472][ T5832] Bluetooth: hci6: command tx timeout [ 1790.790326][T19649] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[19649] [ 1791.902867][T10443] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1792.100329][T10443] usb 2-1: Using ep0 maxpacket: 16 [ 1792.141910][T10443] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1792.166091][T10443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.208308][T10443] usb 2-1: Product: syz [ 1792.228498][T10443] usb 2-1: Manufacturer: syz [ 1792.233397][T10443] usb 2-1: SerialNumber: syz [ 1792.264828][T10443] usb 2-1: config 0 descriptor?? [ 1792.372437][ T5832] Bluetooth: hci6: command tx timeout [ 1792.458086][T10443] hub 2-1:0.0: bad descriptor, ignoring hub [ 1792.489217][T10443] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1792.518796][T19590] chnl_net:caif_netlink_parms(): no params data found [ 1792.821960][ T5892] usb 2-1: USB disconnect, device number 73 [ 1792.928068][T11278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1792.942793][T11278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1792.956740][T11278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1792.968753][T11278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1792.982121][T11278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1793.593363][T19590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.600781][T19590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.620986][T19590] bridge_slave_0: entered allmulticast mode [ 1793.671462][T19590] bridge_slave_0: entered promiscuous mode [ 1793.737792][T19590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.763341][T19590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.787939][T19590] bridge_slave_1: entered allmulticast mode [ 1793.824684][T19590] bridge_slave_1: entered promiscuous mode [ 1794.298283][T19590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.345844][T19590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.520678][T11278] Bluetooth: hci6: command tx timeout [ 1794.788721][T19590] team0: Port device team_slave_0 added [ 1794.816277][T19590] team0: Port device team_slave_1 added [ 1795.211203][T11278] Bluetooth: hci3: command tx timeout [ 1795.217109][T19590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.246178][T19590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.167168][T19590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.180987][T19590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.234593][T19590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.264279][T19590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.407251][ T7136] bridge_slave_1: left allmulticast mode [ 1796.426119][ T7136] bridge_slave_1: left promiscuous mode [ 1796.444794][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.458504][ T7136] bridge_slave_0: left allmulticast mode [ 1796.475152][ T7136] bridge_slave_0: left promiscuous mode [ 1796.486156][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.520350][T11278] Bluetooth: hci3: command tx timeout [ 1798.553896][ T7136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.587920][ T7136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.607416][ T7136] bond0 (unregistering): Released all slaves [ 1799.445245][T19590] hsr_slave_0: entered promiscuous mode [ 1799.538704][T19590] hsr_slave_1: entered promiscuous mode [ 1799.566454][T19590] debugfs: 'hsr0' already exists in 'hsr' [ 1799.596234][T19590] Cannot create hsr debugfs directory [ 1801.264065][T11278] Bluetooth: hci3: command tx timeout [ 1802.073088][ T7136] hsr_slave_0: left promiscuous mode [ 1802.084043][ T7136] hsr_slave_1: left promiscuous mode [ 1802.098082][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1803.227816][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.540440][T11278] Bluetooth: hci3: command tx timeout [ 1804.990827][T19735] ceph: No mds server is up or the cluster is laggy [ 1804.999013][T16912] libceph: connect (1)[c::]:6789 error -101 [ 1805.006742][T16912] libceph: mon0 (1)[c::]:6789 connect error [ 1805.684965][ T7136] team0 (unregistering): Port device team_slave_1 removed [ 1805.752544][ T7136] team0 (unregistering): Port device team_slave_0 removed [ 1807.310916][T19673] chnl_net:caif_netlink_parms(): no params data found [ 1807.424902][T16912] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1807.836172][T16912] usb 8-1: Using ep0 maxpacket: 16 [ 1807.856656][T16912] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1807.873183][T16912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.840829][T16912] usb 8-1: Product: syz [ 1809.845152][T16912] usb 8-1: Manufacturer: syz [ 1809.851977][T16912] usb 8-1: SerialNumber: syz [ 1809.860660][T16912] usb 8-1: config 0 descriptor?? [ 1809.874464][T16912] as10x_usb: device has been detected [ 1809.881176][T16912] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1809.940133][T16912] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1809.955630][T16912] as10x_usb: error during firmware upload part1 [ 1809.962710][T16912] Registered device Sky IT Digital Key (green led) [ 1810.108998][T19755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.146486][T19755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.158643][T19755] random: crng reseeded on system resumption [ 1810.180721][ T30] usb 8-1: USB disconnect, device number 39 [ 1810.238038][ T30] Unregistered device Sky IT Digital Key (green led) [ 1810.252352][ T30] as10x_usb: device has been disconnected [ 1810.492767][T19673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.517516][T19673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.525623][T19673] bridge_slave_0: entered allmulticast mode [ 1810.536734][T19673] bridge_slave_0: entered promiscuous mode [ 1810.601442][T19673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.610092][T19673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.864300][T19673] bridge_slave_1: entered allmulticast mode [ 1810.874015][T19673] bridge_slave_1: entered promiscuous mode [ 1811.748775][T19673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.839846][T19673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.938877][T19673] team0: Port device team_slave_0 added [ 1812.947506][T19673] team0: Port device team_slave_1 added [ 1813.749275][T19673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.769788][T19673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.820211][T19673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.339859][T19673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.428825][T19673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.539998][T19673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.413741][T19673] hsr_slave_0: entered promiscuous mode [ 1817.420601][T19673] hsr_slave_1: entered promiscuous mode [ 1817.444216][T19673] debugfs: 'hsr0' already exists in 'hsr' [ 1817.450098][T19673] Cannot create hsr debugfs directory [ 1817.635727][ T5919] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1818.094381][ T5919] usb 8-1: Using ep0 maxpacket: 16 [ 1818.126216][ T5919] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1818.238236][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.307924][ T5919] usb 8-1: Product: syz [ 1818.312156][ T5919] usb 8-1: Manufacturer: syz [ 1818.316792][ T5919] usb 8-1: SerialNumber: syz [ 1818.617837][ T5919] usb 8-1: config 0 descriptor?? [ 1818.656100][ T5919] as10x_usb: device has been detected [ 1818.663887][ T5919] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1818.706914][ T5919] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1819.090963][ T5919] as10x_usb: error during firmware upload part1 [ 1819.158832][T19826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.294750][ T5919] Registered device Sky IT Digital Key (green led) [ 1819.358822][T19826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.431242][T19826] random: crng reseeded on system resumption [ 1819.697872][ T5919] usb 8-1: USB disconnect, device number 40 [ 1819.947072][T19590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1820.088950][ T5919] Unregistered device Sky IT Digital Key (green led) [ 1820.106472][ T5919] as10x_usb: device has been disconnected [ 1820.171636][T19590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1820.481312][T19590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1820.904854][T19590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1822.059944][ T5900] libceph: mon0 (1)[c::]:6789 socket error on write [ 1822.446214][T19869] ceph: No mds server is up or the cluster is laggy [ 1823.734195][ T7136] bridge_slave_1: left allmulticast mode [ 1823.872132][ T7136] bridge_slave_1: left promiscuous mode [ 1823.890330][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.942795][ T7136] bridge_slave_0: left allmulticast mode [ 1823.948660][ T7136] bridge_slave_0: left promiscuous mode [ 1823.962165][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.525953][ T7136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1825.547529][ T7136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1825.566954][ T7136] bond0 (unregistering): Released all slaves [ 1827.640413][ T7136] hsr_slave_0: left promiscuous mode [ 1827.649082][ T7136] hsr_slave_1: left promiscuous mode [ 1827.655208][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.668836][ T30] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1827.686720][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.734095][T19912] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1827.844839][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 1827.858400][ T30] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1827.884659][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.907451][ T30] usb 4-1: Product: syz [ 1827.917000][ T30] usb 4-1: Manufacturer: syz [ 1827.928128][ T30] usb 4-1: SerialNumber: syz [ 1827.960628][ T30] usb 4-1: config 0 descriptor?? [ 1828.001464][ T30] as10x_usb: device has been detected [ 1828.015592][ T30] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1828.074558][ T30] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1828.108915][ T30] as10x_usb: error during firmware upload part1 [ 1828.126480][ T30] Registered device Sky IT Digital Key (green led) [ 1828.228611][T19914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.293185][T19914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.363153][T19914] random: crng reseeded on system resumption [ 1828.394178][ T30] usb 4-1: USB disconnect, device number 67 [ 1828.457574][ T30] Unregistered device Sky IT Digital Key (green led) [ 1828.457770][ T7136] team0 (unregistering): Port device team_slave_1 removed [ 1828.488910][ T30] as10x_usb: device has been disconnected [ 1828.532638][ T7136] team0 (unregistering): Port device team_slave_0 removed [ 1828.842048][T11278] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1834.241744][T19590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.337801][T19590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.536110][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.543574][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.096083][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.103276][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.987840][T10443] libceph: connect (1)[c::]:6789 error -101 [ 1837.009071][T10443] libceph: mon0 (1)[c::]:6789 connect error [ 1837.063751][T19590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1837.074808][T19590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1837.094057][T19953] ceph: No mds server is up or the cluster is laggy [ 1837.279645][T19673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1837.612630][T19673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1837.696980][ T791] libceph: connect (1)[c::]:6789 error -101 [ 1838.034583][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 1838.097490][T19673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1838.367864][T19673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1840.080647][T19590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.274899][T19673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1840.287773][ T5900] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1840.356722][T19673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1840.513716][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1840.593011][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.600283][ T7136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.432754][ T5900] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1841.441939][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.488554][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.496478][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.517420][ T5900] usb 2-1: Product: syz [ 1843.521647][ T5900] usb 2-1: Manufacturer: syz [ 1843.526688][ T5900] usb 2-1: SerialNumber: syz [ 1843.596727][ T5900] usb 2-1: config 0 descriptor?? [ 1843.676654][ T5900] usb 2-1: can't set config #0, error -71 [ 1843.716847][ T5900] usb 2-1: USB disconnect, device number 74 [ 1850.442953][T19673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1850.948282][ T5892] libceph: mon0 (1)[c::]:6789 socket error on write [ 1851.062933][T20043] ceph: No mds server is up or the cluster is laggy [ 1851.272149][T11278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1851.293005][T11278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1851.302819][T11278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1851.333004][T11278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1851.343192][T11278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1853.593984][ T5832] Bluetooth: hci2: command tx timeout [ 1853.737729][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.745674][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.972657][ T5927] libceph: mon0 (1)[c::]:6789 socket error on write [ 1854.391039][ T5927] libceph: mon0 (1)[c::]:6789 socket error on write [ 1855.231912][ T5927] libceph: mon0 (1)[c::]:6789 socket error on write [ 1855.816419][ T5832] Bluetooth: hci2: command tx timeout [ 1856.332636][T20079] ceph: No mds server is up or the cluster is laggy [ 1858.038707][ T5832] Bluetooth: hci2: command tx timeout [ 1858.169454][T11278] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1858.195401][T11278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1858.208910][T11278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1858.989359][T11278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1859.021789][T11278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1860.283702][T11278] Bluetooth: hci2: command tx timeout [ 1860.462429][T20119] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1861.301232][T11278] Bluetooth: hci6: command tx timeout [ 1861.805801][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1861.842927][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1861.909502][T20134] ceph: No mds server is up or the cluster is laggy [ 1863.616788][T11278] Bluetooth: hci6: command tx timeout [ 1865.822190][T11278] Bluetooth: hci6: command tx timeout [ 1868.043183][T11278] Bluetooth: hci6: command tx timeout [ 1873.547334][T20221] ceph: No mds server is up or the cluster is laggy [ 1873.565464][T10443] libceph: connect (1)[c::]:6789 error -101 [ 1873.586790][T10443] libceph: mon0 (1)[c::]:6789 connect error [ 1873.609540][T11278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1873.663063][T11278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1873.683017][T11278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1873.699062][T11278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1873.710756][T11278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1873.854827][T20059] chnl_net:caif_netlink_parms(): no params data found [ 1873.929375][T16912] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1874.153033][T16912] usb 8-1: Using ep0 maxpacket: 16 [ 1874.171215][T16912] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1874.242224][T16912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.262835][T16912] usb 8-1: Product: syz [ 1874.271352][T16912] usb 8-1: Manufacturer: syz [ 1874.276281][T16912] usb 8-1: SerialNumber: syz [ 1875.141289][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.532229][T16912] usb 8-1: config 0 descriptor?? [ 1876.211093][T11278] Bluetooth: hci3: command tx timeout [ 1876.498279][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.514466][T16912] as10x_usb: device has been detected [ 1876.568938][T16912] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1876.582400][T20243] random: crng reseeded on system resumption [ 1876.682824][T16912] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1876.714120][T16912] as10x_usb: error during firmware upload part1 [ 1876.746333][T16912] Registered device Sky IT Digital Key (green led) [ 1876.758074][T16912] usb 8-1: USB disconnect, device number 41 [ 1877.369591][ T5892] syz1: Port: 1 Link DOWN [ 1877.514074][T16912] Unregistered device Sky IT Digital Key (green led) [ 1877.532028][T16912] as10x_usb: device has been disconnected [ 1878.395926][T11278] Bluetooth: hci3: command tx timeout [ 1878.812530][T20059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.843705][T20059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.879219][T20059] bridge_slave_0: entered allmulticast mode [ 1878.907938][T20059] bridge_slave_0: entered promiscuous mode [ 1878.947597][T20059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.988044][T20059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.018921][T20059] bridge_slave_1: entered allmulticast mode [ 1879.050713][T20059] bridge_slave_1: entered promiscuous mode [ 1879.525265][ T7136] smc: removing ib device syz1 [ 1880.636809][T11278] Bluetooth: hci3: command tx timeout [ 1882.922719][T11278] Bluetooth: hci3: command tx timeout [ 1885.037244][T20059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.337028][T20059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.367857][ T791] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1885.595249][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 1885.646885][ T791] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1885.672972][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.042193][ T791] usb 2-1: Product: syz [ 1886.204995][ T791] usb 2-1: Manufacturer: syz [ 1886.287847][ T791] usb 2-1: SerialNumber: syz [ 1886.368840][ T791] usb 2-1: config 0 descriptor?? [ 1886.437608][ T791] as10x_usb: device has been detected [ 1886.893267][ T791] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1886.959989][T20310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.781182][T20310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.042187][ T791] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1889.063399][ T791] as10x_usb: error during firmware upload part1 [ 1889.070375][ T791] Registered device Sky IT Digital Key (green led) [ 1889.107602][ T791] usb 2-1: USB disconnect, device number 75 [ 1889.112720][T20059] team0: Port device team_slave_0 added [ 1889.245885][ T791] Unregistered device Sky IT Digital Key (green led) [ 1889.266361][ T791] as10x_usb: device has been disconnected [ 1889.337755][T20107] chnl_net:caif_netlink_parms(): no params data found [ 1889.432431][T20059] team0: Port device team_slave_1 added [ 1889.532093][ T1156] bridge_slave_1: left allmulticast mode [ 1889.544872][ T1156] bridge_slave_1: left promiscuous mode [ 1889.566793][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.586034][ T1156] bridge_slave_0: left allmulticast mode [ 1889.593338][ T1156] bridge_slave_0: left promiscuous mode [ 1889.610143][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.838663][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.864242][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.927850][ T1156] bond0 (unregistering): Released all slaves [ 1895.214980][T20059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.258074][T20059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.445176][T20059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.824318][T20059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.844448][T20059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.078423][T20059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1897.989208][T20404] block device autoloading is deprecated and will be removed. [ 1898.331192][ T1156] hsr_slave_0: left promiscuous mode [ 1898.518191][ T1156] hsr_slave_1: left promiscuous mode [ 1898.541731][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1899.798761][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1900.930136][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1900.952694][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1901.312712][T20107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.323726][T20107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.331324][T20107] bridge_slave_0: entered allmulticast mode [ 1901.340376][T20107] bridge_slave_0: entered promiscuous mode [ 1901.524356][T20107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.541804][T20107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.560077][T20107] bridge_slave_1: entered allmulticast mode [ 1901.572851][T20107] bridge_slave_1: entered promiscuous mode [ 1901.599726][T20059] hsr_slave_0: entered promiscuous mode [ 1901.631966][T20059] hsr_slave_1: entered promiscuous mode [ 1901.724416][T20059] debugfs: 'hsr0' already exists in 'hsr' [ 1901.730222][T20059] Cannot create hsr debugfs directory [ 1903.256201][T16912] libceph: connect (1)[c::]:6789 error -101 [ 1903.736477][T20466] ceph: No mds server is up or the cluster is laggy [ 1903.791969][T16912] libceph: mon0 (1)[c::]:6789 connect error [ 1904.098578][T20107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.401010][T20214] chnl_net:caif_netlink_parms(): no params data found [ 1904.472778][T20107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1906.295682][T20107] team0: Port device team_slave_0 added [ 1906.330229][T20107] team0: Port device team_slave_1 added [ 1906.374951][T20497] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1908.778773][ T1156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.801576][T16912] libceph: connect (1)[c::]:6789 error -101 [ 1908.808555][T20510] ceph: No mds server is up or the cluster is laggy [ 1908.824472][T16912] libceph: mon0 (1)[c::]:6789 connect error [ 1908.983575][T20107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.013579][T20107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.112030][T20107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.292907][ T1156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.928859][T20107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.967708][T20107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.030913][T20107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.096456][T20214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.112050][T20214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.128396][T20214] bridge_slave_0: entered allmulticast mode [ 1910.146046][T20214] bridge_slave_0: entered promiscuous mode [ 1910.210816][ T1156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.317910][T20214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.347365][T20214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.354716][T20214] bridge_slave_1: entered allmulticast mode [ 1910.415379][T20214] bridge_slave_1: entered promiscuous mode [ 1912.765477][ T1156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.882353][T20107] hsr_slave_0: entered promiscuous mode [ 1912.911033][T20107] hsr_slave_1: entered promiscuous mode [ 1912.920905][T20107] debugfs: 'hsr0' already exists in 'hsr' [ 1912.935163][T20107] Cannot create hsr debugfs directory [ 1914.134528][T20214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1914.253541][T20214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1914.937011][T20214] team0: Port device team_slave_0 added [ 1914.993272][T11278] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1915.086416][T20214] team0: Port device team_slave_1 added [ 1915.138748][T20214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.146071][T20214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.270454][T20214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1917.468765][T20214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1917.481681][T20214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1917.509383][T20214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1918.743740][T11278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1918.781868][T11278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1918.938633][T11278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1918.947012][T11278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1918.955154][T11278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1919.016870][T11278] ================================================================== [ 1919.024986][T11278] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe57/0x1050 [ 1919.033007][T11278] Read of size 8 at addr ffff88802b786480 by task kworker/u9:1/11278 [ 1919.041089][T11278] [ 1919.043527][T11278] CPU: 0 UID: 0 PID: 11278 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.043586][T11278] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1919.043602][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1919.043629][T11278] Workqueue: hci1 hci_rx_work [ 1919.043680][T11278] Call Trace: [ 1919.043694][T11278] [ 1919.043708][T11278] dump_stack_lvl+0x100/0x190 [ 1919.043767][T11278] print_report+0x156/0x4c9 [ 1919.043823][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.043870][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.043917][T11278] ? __phys_addr+0xe8/0x180 [ 1919.043973][T11278] ? l2cap_connect_cfm+0xe57/0x1050 [ 1919.044019][T11278] kasan_report+0xdf/0x1e0 [ 1919.044073][T11278] ? l2cap_connect_cfm+0xe57/0x1050 [ 1919.044131][T11278] l2cap_connect_cfm+0xe57/0x1050 [ 1919.044185][T11278] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1919.044238][T11278] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1919.044285][T11278] le_conn_complete_evt+0x195c/0x1f40 [ 1919.044340][T11278] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1919.044396][T11278] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1919.044444][T11278] ? skb_pull_data+0x15f/0x1e0 [ 1919.044490][T11278] hci_le_meta_evt+0x34a/0x5f0 [ 1919.044542][T11278] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1919.044597][T11278] hci_event_packet+0x682/0x11c0 [ 1919.044642][T11278] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1919.044695][T11278] ? __pfx_hci_event_packet+0x10/0x10 [ 1919.044743][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.044791][T11278] ? kcov_remote_start+0x374/0x660 [ 1919.044839][T11278] ? lockdep_hardirqs_on+0x78/0x100 [ 1919.044894][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.044947][T11278] hci_rx_work+0x451/0xfc0 [ 1919.045007][T11278] process_one_work+0xa23/0x19a0 [ 1919.045058][T11278] ? __pfx_process_one_work+0x10/0x10 [ 1919.045094][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.045159][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.045210][T11278] worker_thread+0x5ef/0xe50 [ 1919.045257][T11278] ? kthread+0x13a/0x450 [ 1919.045317][T11278] ? __pfx_worker_thread+0x10/0x10 [ 1919.045352][T11278] kthread+0x370/0x450 [ 1919.045409][T11278] ? __pfx_kthread+0x10/0x10 [ 1919.045469][T11278] ret_from_fork+0x754/0xd80 [ 1919.045532][T11278] ? __pfx_ret_from_fork+0x10/0x10 [ 1919.045594][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.045642][T11278] ? __switch_to+0x7b4/0x1120 [ 1919.045685][T11278] ? __pfx_kthread+0x10/0x10 [ 1919.045746][T11278] ret_from_fork_asm+0x1a/0x30 [ 1919.045803][T11278] [ 1919.045817][T11278] [ 1919.290501][T11278] Allocated by task 11278: [ 1919.294917][T11278] kasan_save_stack+0x30/0x50 [ 1919.299706][T11278] kasan_save_track+0x14/0x30 [ 1919.304399][T11278] __kasan_kmalloc+0xaa/0xb0 [ 1919.309267][T11278] l2cap_chan_create+0x44/0x940 [ 1919.314154][T11278] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 1919.319989][T11278] l2cap_sock_new_connection_cb+0x101/0x260 [ 1919.325917][T11278] l2cap_connect_cfm+0x4e2/0x1050 [ 1919.330976][T11278] le_conn_complete_evt+0x195c/0x1f40 [ 1919.336463][T11278] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1919.342030][T11278] hci_le_meta_evt+0x34a/0x5f0 [ 1919.346906][T11278] hci_event_packet+0x682/0x11c0 [ 1919.351880][T11278] hci_rx_work+0x451/0xfc0 [ 1919.356411][T11278] process_one_work+0xa23/0x19a0 [ 1919.361365][T11278] worker_thread+0x5ef/0xe50 [ 1919.365972][T11278] kthread+0x370/0x450 [ 1919.370070][T11278] ret_from_fork+0x754/0xd80 [ 1919.374693][T11278] ret_from_fork_asm+0x1a/0x30 [ 1919.379471][T11278] [ 1919.381792][T11278] Freed by task 20565: [ 1919.385856][T11278] kasan_save_stack+0x30/0x50 [ 1919.390554][T11278] kasan_save_track+0x14/0x30 [ 1919.395251][T11278] kasan_save_free_info+0x3b/0x70 [ 1919.400455][T11278] __kasan_slab_free+0x5f/0x80 [ 1919.405255][T11278] kfree+0x1f6/0x6b0 [ 1919.409180][T11278] l2cap_chan_put+0x235/0x300 [ 1919.413937][T11278] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 1919.419525][T11278] l2cap_sock_release+0x69/0x280 [ 1919.424496][T11278] __sock_release+0xb3/0x260 [ 1919.429236][T11278] sock_close+0x1c/0x30 [ 1919.433506][T11278] __fput+0x3ff/0xb40 [ 1919.437513][T11278] task_work_run+0x150/0x240 [ 1919.442105][T11278] exit_to_user_mode_loop+0x100/0x4a0 [ 1919.447506][T11278] do_syscall_64+0x67c/0xf80 [ 1919.452119][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.458027][T11278] [ 1919.460396][T11278] The buggy address belongs to the object at ffff88802b786000 [ 1919.460396][T11278] which belongs to the cache kmalloc-2k of size 2048 [ 1919.474597][T11278] The buggy address is located 1152 bytes inside of [ 1919.474597][T11278] freed 2048-byte region [ffff88802b786000, ffff88802b786800) [ 1919.488590][T11278] [ 1919.490916][T11278] The buggy address belongs to the physical page: [ 1919.497325][T11278] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b780 [ 1919.506093][T11278] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1919.514701][T11278] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1919.522314][T11278] page_type: f5(slab) [ 1919.526318][T11278] raw: 00fff00000000040 ffff88813fe3a000 dead000000000100 dead000000000122 [ 1919.535177][T11278] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1919.543787][T11278] head: 00fff00000000040 ffff88813fe3a000 dead000000000100 dead000000000122 [ 1919.552585][T11278] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1919.561413][T11278] head: 00fff00000000003 ffffea0000ade001 00000000ffffffff 00000000ffffffff [ 1919.570199][T11278] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1919.578969][T11278] page dumped because: kasan: bad access detected [ 1919.585827][T11278] page_owner tracks the page as allocated [ 1919.591543][T11278] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 91493927305, free_ts 91454913425 [ 1919.613165][T11278] post_alloc_hook+0x153/0x170 [ 1919.618043][T11278] get_page_from_freelist+0x111d/0x3140 [ 1919.623600][T11278] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1919.629700][T11278] new_slab+0xa6/0x6b0 [ 1919.633798][T11278] refill_objects+0x26b/0x400 [ 1919.638488][T11278] __pcs_replace_empty_main+0x1ab/0x660 [ 1919.644045][T11278] __kmalloc_noprof+0x688/0x850 [ 1919.648991][T11278] ops_init+0x77/0x5f0 [ 1919.653082][T11278] setup_net+0x118/0x3a0 [ 1919.657434][T11278] copy_net_ns+0x46f/0x7c0 [ 1919.661932][T11278] create_new_namespaces+0x3ea/0xac0 [ 1919.667236][T11278] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1919.672898][T11278] ksys_unshare+0x473/0xad0 [ 1919.677420][T11278] __x64_sys_unshare+0x31/0x40 [ 1919.682202][T11278] do_syscall_64+0x106/0xf80 [ 1919.686997][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.692899][T11278] page last free pid 5822 tgid 5822 stack trace: [ 1919.699222][T11278] __free_frozen_pages+0x7e1/0x10d0 [ 1919.704456][T11278] qlist_free_all+0x47/0xe0 [ 1919.709061][T11278] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1919.714542][T11278] __kasan_slab_alloc+0x69/0x90 [ 1919.719500][T11278] __kmalloc_node_track_caller_noprof+0x2ba/0x850 [ 1919.725941][T11278] kmemdup_noprof+0x29/0x60 [ 1919.730557][T11278] ip6_route_net_init+0x224/0x8d0 [ 1919.735970][T11278] ops_init+0x1e2/0x5f0 [ 1919.740165][T11278] setup_net+0x118/0x3a0 [ 1919.744427][T11278] copy_net_ns+0x46f/0x7c0 [ 1919.748872][T11278] create_new_namespaces+0x3ea/0xac0 [ 1919.754179][T11278] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1919.759835][T11278] ksys_unshare+0x473/0xad0 [ 1919.764359][T11278] __x64_sys_unshare+0x31/0x40 [ 1919.769145][T11278] do_syscall_64+0x106/0xf80 [ 1919.773762][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.779665][T11278] [ 1919.781981][T11278] Memory state around the buggy address: [ 1919.787615][T11278] ffff88802b786380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.795714][T11278] ffff88802b786400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.803790][T11278] >ffff88802b786480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.811858][T11278] ^ [ 1919.815935][T11278] ffff88802b786500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.824147][T11278] ffff88802b786580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.832430][T11278] ================================================================== [ 1920.852206][T11278] Disabling lock debugging due to kernel taint [ 1920.858399][T11278] ================================================================== [ 1920.866457][T11278] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x7c0/0x1050 [ 1920.874380][T11278] Read of size 4 at addr deacfffffffffc8c by task kworker/u9:1/11278 [ 1920.882546][T11278] [ 1920.884958][T11278] CPU: 1 UID: 0 PID: 11278 Comm: kworker/u9:1 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1920.885013][T11278] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1920.885028][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1920.885052][T11278] Workqueue: hci1 hci_rx_work [ 1920.885096][T11278] Call Trace: [ 1920.885107][T11278] [ 1920.885121][T11278] dump_stack_lvl+0x100/0x190 [ 1920.885173][T11278] kasan_report+0xdf/0x1e0 [ 1920.885222][T11278] ? l2cap_connect_cfm+0x7c0/0x1050 [ 1920.885270][T11278] kasan_check_range+0x10f/0x1e0 [ 1920.885323][T11278] l2cap_connect_cfm+0x7c0/0x1050 [ 1920.885370][T11278] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1920.885416][T11278] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1920.885458][T11278] le_conn_complete_evt+0x195c/0x1f40 [ 1920.885507][T11278] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1920.885557][T11278] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1920.885601][T11278] ? skb_pull_data+0x15f/0x1e0 [ 1920.885640][T11278] hci_le_meta_evt+0x34a/0x5f0 [ 1920.885686][T11278] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1920.885733][T11278] hci_event_packet+0x682/0x11c0 [ 1920.885775][T11278] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1920.885821][T11278] ? __pfx_hci_event_packet+0x10/0x10 [ 1920.885864][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.885914][T11278] ? kcov_remote_start+0x374/0x660 [ 1920.885958][T11278] ? lockdep_hardirqs_on+0x78/0x100 [ 1920.886007][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.886054][T11278] hci_rx_work+0x451/0xfc0 [ 1920.886099][T11278] process_one_work+0xa23/0x19a0 [ 1920.886144][T11278] ? __pfx_process_one_work+0x10/0x10 [ 1920.886175][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.886225][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.886270][T11278] worker_thread+0x5ef/0xe50 [ 1920.886311][T11278] ? kthread+0x13a/0x450 [ 1920.886361][T11278] ? __pfx_worker_thread+0x10/0x10 [ 1920.886392][T11278] kthread+0x370/0x450 [ 1920.886442][T11278] ? __pfx_kthread+0x10/0x10 [ 1920.886495][T11278] ret_from_fork+0x754/0xd80 [ 1920.886550][T11278] ? __pfx_ret_from_fork+0x10/0x10 [ 1920.886605][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.886647][T11278] ? __switch_to+0x7b4/0x1120 [ 1920.886686][T11278] ? __pfx_kthread+0x10/0x10 [ 1920.886739][T11278] ret_from_fork_asm+0x1a/0x30 [ 1920.886788][T11278] [ 1920.886801][T11278] ================================================================== [ 1921.238839][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.245352][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.279463][T11278] Oops: general protection fault, probably for non-canonical address 0xfbd59bffffffff91: 0000 [#1] SMP KASAN NOPTI [ 1921.291601][T11278] KASAN: maybe wild-memory-access in range [0xdeacfffffffffc88-0xdeacfffffffffc8f] [ 1921.301008][T11278] CPU: 1 UID: 0 PID: 11278 Comm: kworker/u9:1 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1921.312335][T11278] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1921.317878][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1921.328034][T11278] Workqueue: hci1 hci_rx_work [ 1921.332843][T11278] RIP: 0010:l2cap_connect_cfm+0x7c7/0x1050 [ 1921.338779][T11278] Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 71 f2 77 f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 f0 85 e3 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 89 [ 1921.358665][T11278] RSP: 0018:ffffc900079cf838 EFLAGS: 00010213 [ 1921.364763][T11278] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001c383000 [ 1921.372865][T11278] RDX: 0000000000000000 RSI: ffffffff81c6f37d RDI: ffff88801c703d00 [ 1921.381051][T11278] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000 [ 1921.389207][T11278] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88805a26403d [ 1921.397218][T11278] R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff8880530f9a80 [ 1921.405198][T11278] FS: 0000000000000000(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 1921.414156][T11278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1921.420746][T11278] CR2: 000055590e5f5950 CR3: 0000000087df9000 CR4: 0000000000350ef0 [ 1921.428733][T11278] Call Trace: [ 1921.432012][T11278] [ 1921.434946][T11278] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1921.440430][T11278] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1921.445910][T11278] le_conn_complete_evt+0x195c/0x1f40 [ 1921.451307][T11278] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1921.457143][T11278] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1921.462713][T11278] ? skb_pull_data+0x15f/0x1e0 [ 1921.467580][T11278] hci_le_meta_evt+0x34a/0x5f0 [ 1921.472366][T11278] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1921.478452][T11278] hci_event_packet+0x682/0x11c0 [ 1921.483410][T11278] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1921.488708][T11278] ? __pfx_hci_event_packet+0x10/0x10 [ 1921.494100][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.499755][T11278] ? kcov_remote_start+0x374/0x660 [ 1921.504977][T11278] ? lockdep_hardirqs_on+0x78/0x100 [ 1921.510290][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.515976][T11278] hci_rx_work+0x451/0xfc0 [ 1921.520418][T11278] process_one_work+0xa23/0x19a0 [ 1921.525373][T11278] ? __pfx_process_one_work+0x10/0x10 [ 1921.530944][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.536618][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.542263][T11278] worker_thread+0x5ef/0xe50 [ 1921.546862][T11278] ? kthread+0x13a/0x450 [ 1921.551211][T11278] ? __pfx_worker_thread+0x10/0x10 [ 1921.556341][T11278] kthread+0x370/0x450 [ 1921.560461][T11278] ? __pfx_kthread+0x10/0x10 [ 1921.565080][T11278] ret_from_fork+0x754/0xd80 [ 1921.569966][T11278] ? __pfx_ret_from_fork+0x10/0x10 [ 1921.575244][T11278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.580926][T11278] ? __switch_to+0x7b4/0x1120 [ 1921.585722][T11278] ? __pfx_kthread+0x10/0x10 [ 1921.590351][T11278] ret_from_fork_asm+0x1a/0x30 [ 1921.595150][T11278] [ 1921.598260][T11278] Modules linked in: [ 1921.602752][T11278] ---[ end trace 0000000000000000 ]--- [ 1921.612133][T11278] RIP: 0010:l2cap_connect_cfm+0x7c7/0x1050 [ 1921.618072][T11278] Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 71 f2 77 f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 f0 85 e3 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 89 [ 1921.638045][T11278] RSP: 0018:ffffc900079cf838 EFLAGS: 00010213 [ 1921.644306][T11278] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001c383000 [ 1921.652516][T11278] RDX: 0000000000000000 RSI: ffffffff81c6f37d RDI: ffff88801c703d00 [ 1921.660841][T11278] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000 [ 1921.669120][T11278] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88805a26403d [ 1921.677462][T11278] R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff8880530f9a80 [ 1921.685613][T11278] FS: 0000000000000000(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 1921.694810][T11278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1921.701624][T11278] CR2: 000055590e5f5950 CR3: 000000005e95c000 CR4: 0000000000350ef0 [ 1921.717146][T11278] Kernel panic - not syncing: Fatal exception [ 1921.723537][T11278] Kernel Offset: disabled [ 1921.727861][T11278] Rebooting in 86400 seconds..