last executing test programs: 26m53.339554131s ago: executing program 2 (id=668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)="878b7c"}) 26m50.429861735s ago: executing program 2 (id=673): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x2000003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x80000) readv(r1, &(0x7f0000002940)=[{0x0}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 26m48.648941136s ago: executing program 2 (id=676): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x4c, r3, 0x1, 0x1400, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 26m47.681036668s ago: executing program 2 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000840)={0x2d, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x56f6, {"b2c40f03a5fd88f643fd134c488c0798"}, 0x5, 0x6, 0xfffffffffffffffc}}}, 0xa0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xa0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_emit_ethernet(0x87a2f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20080) 26m46.307631945s ago: executing program 2 (id=682): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0xffffffff, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 26m43.519476351s ago: executing program 2 (id=685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x2c1, 0x3, {r2, r3/1000+60000}, {}, {}, 0x1, @can={{}, 0x0, 0x3}}, 0x48}}, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4014004}, 0x0) 26m27.9489551s ago: executing program 32 (id=685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x2c1, 0x3, {r2, r3/1000+60000}, {}, {}, 0x1, @can={{}, 0x0, 0x3}}, 0x48}}, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4014004}, 0x0) 18m9.026040815s ago: executing program 3 (id=1755): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(0x0, 0x2, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x38000000, 0x53f5}]}, 0xc, 0x2) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000003240), 0x0, 0x8000) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x40020891}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x100400) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x45, '\x00', @buffer={"08aa28fb236c1934e108f512b80034b920683e07edda7a112f685d4f3a155c71", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x2, @uvalue=0x7f}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x9}, {0x1, @uvalue=0x2}]}, 0x6}, {0xa, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b55913355f933502c0a9975e7de66b90754f408ec", 0x20}, 0x6}, {0x3f, '\x00', @data=0x6, 0x8}]}) 18m6.147412154s ago: executing program 4 (id=1765): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x40, 0x1, 0x4, "4d69f4ae"}, 0x0, 0x0}) 18m5.188176828s ago: executing program 0 (id=1767): syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679b, 0x8, 0x2000006, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000009c0)=0xd, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) epoll_create1(0x0) 18m4.407245494s ago: executing program 3 (id=1768): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() r9 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) 18m3.710832555s ago: executing program 0 (id=1769): r0 = syz_open_dev$cec(0x0, 0x0, 0x22581) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) 18m3.560433457s ago: executing program 0 (id=1770): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) 18m3.530839942s ago: executing program 3 (id=1771): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351050000001bf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001801", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() r9 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 18m2.183147454s ago: executing program 4 (id=1775): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback, 0xffffffffffffffff, 0x28, 0x2020}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file1\x00', 0x0, 0x652f759a) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) 18m2.182206463s ago: executing program 3 (id=1776): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000840) 18m2.116361181s ago: executing program 0 (id=1777): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1431089df9f0e1db588f40cd18e2fd00f718", @ANYRES32=r0, @ANYBLOB="010301000000000000004e000000"], 0x14}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 18m0.532238189s ago: executing program 3 (id=1778): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0xa1, 0x401}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x20000000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 17m59.259214755s ago: executing program 4 (id=1780): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) fcntl$getflags(r2, 0x40a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x4800) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 17m59.048431566s ago: executing program 0 (id=1781): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x600540, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x24040010) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) 17m59.048128975s ago: executing program 1 (id=1782): r0 = syz_open_dev$cec(0x0, 0x0, 0x22581) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) 17m58.916107451s ago: executing program 1 (id=1783): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0xffffffff, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 17m58.378610592s ago: executing program 0 (id=1784): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x40, 0x1, 0x4, "4d69f4ae"}, 0x0, 0x0}) 17m56.814632964s ago: executing program 1 (id=1785): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(&(0x7f00000009c0)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x1000080, 0x0) epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x20000002}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 17m55.694570347s ago: executing program 4 (id=1786): openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 17m54.983544256s ago: executing program 4 (id=1787): r0 = syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0xa4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "223d8da592"}, {0x5, 0x24, 0x0, 0x22e6}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x80, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x6c, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x78, 0xb8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x6, 0xdf}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5, 0x9, 0x88, 0x20}, 0x33, &(0x7f0000000100)={0x5, 0xf, 0x33, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x581f011328de362b, 0xd, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x9, 0xff0f, 0x1, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x40, 0xfb, 0xfff2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0x8}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xd8ec}}, {0xce, &(0x7f00000001c0)=@string={0xce, 0x3, "2b144a8a8ab888f61838e67e9252eeed0a635792d59f172cb54613cc35f2ec9896216ff84938ffebcc3e42cc36618db078ea5aa57cfc8bfe0fc499fb15cc5495a5547134944db1a581ec086a00223443f0675ca13341557db7c2a031f666acbce3f9a8d7a23b80e229d273531ac7f9883a3c25d75d1e392fc125ef2be2369c76b4cb602743d13e950cd23dd435f8ee9b82839f102ea22f155d479660bd727c2cb749ccba01d2b1e64c29e21f093dd05780474009ae1230aaa4bfbbb7cd982198e0c6ce64dac45357cfa04913"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x20, 0x0, 0x1c, {0x1c, 0xc, "c68ed9b7ad51d505041d07c9cbcfb9ba9376e37f68fdd6394772"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000780)={0x40, 0xf, 0xbf, "cb0e54757c7be315ffb9a891f6b0f4202319dac7ccdc0e00d422a0ae561b7bb9a62432c7f8e11df9738db047c8c7b6bcbf10e1f322f400d46a5e756f397030598c5539a07aa01b8e24c17dc00508e03f8f0153a59ddf9b6724909f17c11e65ee3f38428ab6ecca9ce4ac3816e4a9e9d7915561814cf797efcf7bc9d2ca9aa3ca6e4e92ea343d5b39e0139a26861fc8e7fccd265688ddc937da7ff70bee62be916ea2871f523d030d664a55b1d3fabc0ce44f78e6d1874f0e29fa4bb7ccf613"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x53, 0xfff, 0x4, 0xfffb, 0x8c3, 0x7, 0x200, 0x7fff, 0x6, 0x802, 0x9, 0x80}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) 17m54.506593488s ago: executing program 1 (id=1788): r0 = socket(0x28, 0x80000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x6a, 0x2, 0x0, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6261, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0xfffffffe, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 17m54.343536618s ago: executing program 1 (id=1789): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1431089df9f0e1db588f40cd18e2fd00f718", @ANYRES32=r0, @ANYBLOB="010301000000000000004e000000"], 0x14}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 17m54.19255363s ago: executing program 1 (id=1790): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x35, &(0x7f00000000c0)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@arp={0x806, @generic={0x18, 0x1b, 0x6, 0x3, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, "cfe455", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, "5d3eee871c77c3fe819f13d0"}}}}, &(0x7f0000000240)={0x1, 0x1, [0x318, 0x987, 0xcf8, 0xdbf]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) sendmsg$rds(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000001440)=""/228, 0xe4}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5, 0x0, 0x0, 0x4000000}, 0x4008100) 17m53.922737581s ago: executing program 3 (id=1791): r0 = socket$inet(0x2, 0x80001, 0xffffffff) listen(r0, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000103000000092100000001220200090581"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x21c484ba4cb434ef}}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000240)={&(0x7f0000000500)=[{0x6, 0x801, 0x0, 0x0}], 0x1}) 17m53.833967844s ago: executing program 4 (id=1792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) 17m6.348267568s ago: executing program 33 (id=1784): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x40, 0x1, 0x4, "4d69f4ae"}, 0x0, 0x0}) 17m6.143044881s ago: executing program 34 (id=1790): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x35, &(0x7f00000000c0)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@arp={0x806, @generic={0x18, 0x1b, 0x6, 0x3, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, "cfe455", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, "5d3eee871c77c3fe819f13d0"}}}}, &(0x7f0000000240)={0x1, 0x1, [0x318, 0x987, 0xcf8, 0xdbf]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) sendmsg$rds(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000001440)=""/228, 0xe4}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5, 0x0, 0x0, 0x4000000}, 0x4008100) 17m6.089166501s ago: executing program 35 (id=1792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) 17m5.966088348s ago: executing program 36 (id=1791): r0 = socket$inet(0x2, 0x80001, 0xffffffff) listen(r0, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000103000000092100000001220200090581"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x21c484ba4cb434ef}}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000240)={&(0x7f0000000500)=[{0x6, 0x801, 0x0, 0x0}], 0x1}) 18.705814082s ago: executing program 6 (id=3752): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r6, 0x10000201, 0x7, 0x81, 0x1, [], [0x3fd86826, 0xfffffffd, 0xfffffffe], [0x7f, 0x7, 0x109], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x41) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) 17.406366592s ago: executing program 6 (id=3755): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351050000001bf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() r9 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 15.079240203s ago: executing program 8 (id=3759): syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) 13.732648084s ago: executing program 7 (id=3761): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b80)={'dummy0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x20) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0x20000002}) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@link_local, @random="dbde00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x1, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600}, {@private}, {@broadcast}, {@rand_addr=0x64010101, 0x400}, {@private, 0x6}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private}]}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 12.060380526s ago: executing program 8 (id=3763): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r6, 0x10000201, 0x7, 0x81, 0x1, [], [0x3fd86826, 0xfffffffd, 0xfffffffe], [0x7f, 0x7, 0x109], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x41) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) 12.039051822s ago: executing program 6 (id=3764): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb5954dae45976c5d7843330ecc0d", 0x14}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) shutdown(r7, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) 10.730157341s ago: executing program 6 (id=3766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0xc090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rxrpc(0x21, 0x2, 0xa) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 9.460152286s ago: executing program 8 (id=3767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x30e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 6.753601207s ago: executing program 7 (id=3771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) unshare(0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 5.584211861s ago: executing program 8 (id=3772): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b40)="7ea229968456cc1d273939b7eaaaf05b3e95c220a05dfec9deedcff57f4337977785bc5532e5d07a8ccd0bbe9ca7c342b821efd28821b4b3993cc7a9cfa514552e371060b3c74d9ad72ddd7c8d0a2ad86262c6582d5da2894f9cbeef46b8a4017be35490301c70b310c1fa63a9c4770e7ce7163b13f9cdd81ae4009a071d0209e3a41890d2943d15ad4a8fefc21f74de71", 0x91}, {&(0x7f0000000c00)="c45d5115e5374f6fef7f2f36aa65c7d43d1a282d095234e7c7387a3fa4a89cf1ee7228bb05d139383ce8a2197e705c9fb3cbbe69978007e76b108b6833b9cb03672f82956f192da9f131d69c127412277674ff4b96ddc3e62b1da4558352a61e636903a6d5c779c89f12b18a0ebec4bb4fcba25ba5f39e411b76c23f2f1ab9f7ca0c38a061b69e5a170a679b49d3d2029a1ebcf22212cd34a8d72d5a149b0955f354a9a9218d4ed1e3fdf02ed0d4f965f3d4a3fcc8a40bc604", 0xb9}, {&(0x7f0000000cc0)="3d044f36f5552e866c3e5bb625333ef189fed6d8891dcfb57a8af0678117c5669c82577417732f234f36a56f0d93d87af4c5fc3ab6cee7349ad7727eb4a3c5112fe13630c22e2455ea850820fbcbf233c0313409a9988cdff271cee9ed03d0d21e5ce72041046a8f77a63ff19fc8b050c522430571530885a968f466dca589223abdb0d2ef3d65ae3d3330e20d2b0a65514313c8a11f2aabb1a771b5704198da9cf8c4650ca654d2fa047c4b8800efa103147f9d2a94c6d1b4e21b3c9dbd8cb8d2aaaef558253cfc76e7b5541cf74c26d20a3ac061f8cb7a92b4c4e38f5db671b3b065a358d76662135ddd869b42e4dc2e9ed3b4b232a4215e30f688caef66ebac74f58ef34139266bcfb7055a838fe80dc25a1b541c8e673e56e94b1263c900122a5bd4a1670b9fabface28fef99d81bcce6727eea3403ae2ecdd69b1c6b5c84c7ce6b0ee500aafde6a7c87d3e2dad571e2a983cb9a5b02d2779033f95e2eb88cee8fd792f8354acf392a73ea69e724634f7858d351c564f2206ab6001cafc78bd91c10de8b370920b085f76fbf49a1b30c52ede89d87f59dff53a4c17fa2450904fdd726f33510e200166034a078434064cc018035d45e242feb43840240944a9f056d105350cca3ed1a58253fd70b292e4a61c0178ed37d7dce2164a7607fdf9e0ea2f0e48d3b94c05db51566f9c9e6c5d8db185723fc3fd74408a33f98682fd5bd371db5d87ae8d7f9969a7b7975a97030445a959cde1a0910d37b1cc2be02c7b924288dbdef1edcb1005679ff13d3e42df5f35e5a2db1782e76ff2b54b11dc6245b7c974d61c730bec067a2f4869c45e1d984914dd253e9318173925918dac1199fd8f920c8412d2db567374fb8b662c718f462aeafd5bfa0ac8ab0d084a6bac390cb0375159a988f784ad996a48c8813d3dec5c0d1e0922f3a9a35d17883e93d141b0df2727aa61f4e6fb3b363773e0ea670b2d22781b1ea0464047397a028840d05eac44c0463218b0b345306b68da577c019d8f9349854f7feae6211c8d901399f26c5cb06ad60dc4d6e0db1c3f266b0c11a8f3fe30575cef7ae4195c1aa2be4816d2a1e00bb22cc0992e19b7cae73e8cce4878c5d0413965426344b1f58668869969113c5cf5d2dcbc74395c93d871b1df40750a3e2bf415d0cebb2c4398885cd59c06e8a8efecab9e4088350f17ad68d21b9ab92beb888b0cd8ea0fa91d4d41bbdb7b8a10bef8b04027a66db34dd6dbc67615e1f2b794019303861e312366980ff015aaaa3e89ea627318c530ee2b2340b3d57027701413e00a2e22072380123e8749e3b5d19021d750b435b2c6c08ae7710c5e90bd918ad9e6c3f520616a19fa5fda161ab24d56d4b29d6e71880575fcb4fb66c6f1a22a7bbfcdfdfd39d8302f722f9aab98fc4b7474f151e1bc7ead7271b63ca5a51215cf0b417b6c0ca8ca3f72b723ffa66a96f70f281f98dabab1956cb4e4decffa7cf4a272b3b811b833b1db02a7a785d39d62c315d7a6aba26a0f86a0e9194f1c2d42b472333d8e077ffaa2f9c100198d5a857d5d1789c14a0ddf0560045ce96a109514c38580e29988c669ca2838b555304294338112ad52e6ab89cd2c1b2de6aa8c7c07d2d955905fa79577f3ad12bcfb919440c4610082ac7da2cb2d2d81ae8cafad94f53776a5f49816d0588c03868e432863e28024cbc9270bac8886cdf8c95768ee50475cc4502cf3f51f217c04050fc5623a21a1e0b034e55d3610158af853ed0d091aaa94b5ad4e1ea4ffce865fb3d5f8867f3a67b48c2c8028bd9f42afa88c0d3fe5c2fe3f7c99a9609eaa8c1d50f542b55c5673a3f761fad232afecaaee20792a97e9bb196dda2cfb26f770adc2250deb8e0f8db9c1416e5c2cf6f5be7383efa377ca4594d65c370bbf1713e30e2dd0b159a88a2928eea13a285d08f83eaed977ca380960e070e57bb689aa034ebedc9e6cbf6f57d13f3f9a79722a97a3875629077b33fc5fbcb62a11fdfa932ec5d89bab5b076f902c9fb62fa1289dca4cb0845cf95d6838748b741d1a3d4ccd37d2a40ce4ef881032dffc44148e93672d380d0fdd7677a4a295cd377f8e48f10dd691ae2e288ad632d5e7c6c57da71885e3935d8839e0a05a8ff7749a0fed7b7cb23de745cde57982ce362503d26659e2080fb9ff5ca63bd610460a5dc119f05cb1b006b64de5a078f84a1e302565f414fa6316b6607e03c18805948ff6c16d8b8eeab2ad5fa7ce5940f3fcd911ec6d80230b15563fbd2be0dc09e529327a2374d5c15fe667b8168c88ecb0d13cd2ee4f994cce0272c99be012a0d092f4000756be625284f9aecd9565c43bb0f69ea5b16284b024f31122e3e6e7104d0f8d5ac96f0cd4a9e53372f0a5df793e1b4d57a0f91619b2daf21299fd9fcfacfbbe0b27643a4597073c6da888d85d873ac26190bd6386967da5f1da6b18b19944d1279aae4aba62c4120171deb0eb1e1a1ac4f8d0bfe73e7dd0204e3682fa83c11f3b695a54a3e024a7937b87bd891326bf8b1061e9a49d3a660c49eb4a39bb92259ebdc4982475c873b1d85e9713f3271882eebd090ccb167ae9a59829b62235352b664f1c050766a55350f7981b1f885aae6a84a99547530cf5dcfe30b27328d5c2561692358d1acbe9bc1999a927c8daf630a4cb945e15d441cfed27874cee9dd820f4f59331b66a3b86b24540bd3dd2207081564c0d9e5788fa908cbbbc5eb8b3b39cf0944ddeb452913013de160b83013a6ce6c71a4ebb9fba0c64e69d11296b386252bea3dc03e0b3c415fcd8a53a5cd49f3e725ef7e7bd43144f51f78a79713e3f2a12f5fe4ee52164d48aec30e8688dc3b5b5fe5f23dec7abf0aee5b148d09d948c1afeae1e0cbff4563423118b5bfbedb74e01486d2c1eef94c7b66ff3e76db46ece84154aa8ec462f6ec84f0942c6cad475aafd7d2647a58606a24c182669705b273545ecadcf9d6eef33c95dcb1f09ac944ef816ffe3586c322afcf3d750a87bef633cdc9fb413134494e972b7ca65c091822346a1fa0223e77a41c937b7e0ab71d243c65d3a09fb57bca2e2a2c2941bac03bfba3bb38c56d5478eab5dbf6b33f3aba56cb0d9ee8d55dd98bc48d6beb246d3fb0aa52eab253d10802ef7e70bccdd3ec265381896bd3623600f7904752055317d67e3f36494a8e0d8ac911b46e1b36c0dc57d13174ff05886303ae3c2ef4f06071132cc1885219a699ba1d79a985f9b21d2147497152eca2308e9c9a3be3ee5e0c0b7fa5fc3f33fe12cb2c026334e453db615b4f74d1c0288c184a4c14b053c3a071513f4f7c8a3997693f111753739bd0eeef4f890a420bd0110f7296799a505762ae44297f2a04304b71563ad9cc8f68b927790d18f58da8804394a4d0919d939167b0e4cdee6ba88208c628a466a05d52ef09126271e82c4a7e4b0fd66885d2d6bf563b01d9ce1ce58f1dea91312a9031b335ba7665da23d15e259008b56b89b49bf1aa1007ea35b125f78f43f619fe4c6ceb8445cf5fb866faca2902ae303142525401dfa24b148307e0a18620baba8fea648b551e6c3092d126192ff51b396b00dafc2fc4f1149e3d7d4572d2dca69b262dfe69b2d1d7ac61ebe61a2ae46b18c20e98db24ff39e314c1c62520af9d1847c104caca86a3df151fea892463ceb0929f44934a67c09ffc3ced430f38b1f3889e87fd3f99bf1f467a6c763965d8bc69ae5a77655798daea573345647c312362f3a86cb043baef0a4ccb1aee536229a821c6897ff5cb1e5b8a818d12e6482155caa6d151de00d5eeb50d83543d73c2cc486a7c86326a92e184fd822bc750aed095442f3e6eaaced52ae72e80b39a8e663af9dc26341798dbe5e4863b823485f5cd25f35f9f16b2578201a7662a831ded8f2afbe9ebf233e504824727eb9605e2f1097ca9d17640ac489a61c11c5d76c7afd1dfcd09210c89856654ea4be6460ae9af5a0950b5a20a28a2b2b28387f985d981d072b5c0561d1eb8b9075038eda12ee2fa1224f6ca2b67c7193df72ddc4e910c93d7544fb594833b204a01baa0e1079e4a1cad6b6edb2a31dea3814bdeb411f1a1a4d854dc99f000662957872005db01471a95e53475263b22a47087b0c85e33db6ac30ee6f26e81b06ec9b5bd781cf386b10b0d156a703ad451b3589960a546310ae8483fe60609801e242c63125652ac8857447a0478fd98d3822afef3f9146e336eba1b241004b4bee86cc1087453ef6aceb55a2d80b57624cf149b35da9a145f08211e7880276748c37d7326fff19be41535707ef4dbeaccf9c2555b1ef3e24ac6b6065e97dacc8c514e11ab822537baf0da7f32198d1bbf74008138b4fab7453f02db9a996c98ccb0cff4e40a1e502f2a1bba20462067ea38928a42a30d844626a7feaaccede8d3f7861741d9e62bff08e621dcadb3303c836dbb7ade37633b314ca8ec219c03ba4a1c720bb37ba3727c85b6c87f0b2a4a956f4a2e9db625465479faf63b4c5cd14188ce71cd28fd610ea32306dcf7a6133d79475cbdb03dee71ab095258b34a0d02a6e138e8a386caca078eba537c42e6f7e095116dcdb70321312ed238be621404a58cf29b65c5b2ee5dc568f02bf208201215e3cefdd2e435ed11e5ae0dc85c6cf06965dcabebf25fdd10d485037ca4bb864abb907c77ce4fa817f57c7707b21ca892eb9f4d3251f4948c3145c55a7f26e0b54ca45e4c6cd189b56516a0c99ef3f9f54e5ea859565bf2595e9b41d2c350cebc830f06073c215e00bfa38e4852803d757c4b1fb756bd675446452eae04316d4dc613b9b43421156fa642019d7c23ca77a52a3841b3f0d356d18ed34f864243a14b8c84ed5933d2a3d48038127b838311781198c8493d1fa462bd558953ff1ed6607e610051b1c337a741fc42a7cedd5a4ffa08cdeb59e08734833657cb59e05bf22989475f1fa7a17fbbb9a6996e17e67012b4e84de956a6540d5b62d29bb56eeb2576d088c0d45033e9a099bbbddd8b32d655afdef24b57811f835f7bb506510fac0db6d33b9ec416dd0622a0d11e98a00e3d05cf12caad90f2154b89dc1b9c8b000e81a00c10b99c35fa8443ece8e92a9f94c81b212cb6351a8cc598b28f2fcfe9720762787a6ada8502899640c3f5bc74aaea1c7292ddf59a8d5b4114d698936f2e6a7e0cc3c5eb2112ba00534319d0ec4a73a40ea04789345ec1117ca5022b9fe27d80b6cc6ef03e27a0ff563627ac69ddb31875eef3eaf5e8224a0e0dc5b48596deeef13bc9714fa52981d9165faf47a9600938d3a0e55a7238c5148a5738865e43fe3702cca8d186f1a1e8cbec0f6dcdfcc4e4d570208ae6043b09b846842737fa3cc6e44ce2a0692da45a6a273c1323d8de2ce4da2c2b8fb4d634053949e213442089fc9eb0346a906122963e3ab232d880dbca59189220ed19816630056ec6412600419ce54e54294f2f680d37f1c6c06ffed178aac72702a45602cbb8277278fe0833116543e3e931891cf40b7ad4656640884ef0dd01a7451d8a7f8639ec793ac58a87596ca14077eaa7c138e1a17f5f1398f40bb17b92e0e1088fbe2e39b6442ec3055d29fdfcb40a72f460d3f938d8720f2a093110eaf0cd12b937b2711ad57675ae96783d3aa388838910d43dec9c5546810f9ffeaa5aef27dd7268fbdd811ea879e2e7f7ee5b908b2f8171c71233d18ed45a7c200d34e4891779935b27309787aaf0599c6187be1b30571cef81385c6b460a372abd2cc330cba59e14758aa2638c1c286d3682b48f543451afff9d00113021e78b", 0x1000}, {&(0x7f0000001cc0)="7e8868c4fa91f7287c4914d238ba5b3168d743ba56132b7ca796aa41b127c5059e5332aec14e81434e04624a61e2c081e134a10dd7506a4a5fb431e9a25e9e37da2ba01830a7a005049e2cf7ffa27863b52a8ec33ebb8c04721a7a6eb72b1c928632c24762428c6fcd35290535bf7ec8ca332f52f754d870e5f820eaee95af433941ddd2db5bb153dde9b00bbba72bb4c2cf2ee29c8e8d67536b4824d37f4f7a2117f93f3ebbf95f1b31a22159fefe9e08f7cabddca0eb226531ae41a8096b0092b7ce63ee48c8ff3f7e12821d20636a0c36815747739c1e8a719fd97ce76f9583cfb6eefbde737325dd96b060ab964323e0124efe1dad5e4249e78e61334b0c0cc7db9294ad36a0cdba01a8d92d1db52f8df635c0bf76cd999dd3fad774c41477ecfe7bb593da0fc98937146e55812f2cdb675587a07b661e7b30f1fe3817c5bb2a16b551f8da66e810e99b790380357614ded3f0b1826a5e1d314de41924df94bb98540564bccda15868cf98075b859fbe248807d1415de877fc5108da158194825ba2caf65c0b824b3b03d3201fcb3844bcb137419b3aa2cec7b2b300c4b53348081a5bd75317efadd7ea644b69f63b59f89abf9dcf915426e31eb33ae0072ec726047420cfae28c35bab3d5d13ddf4f38bc89cc7bbd72a49b0236c0ded762443e8f2711dea12cc21eadd13206ff31e94a4f4da9733b9f4357c945abb9abd2196490e2c803c56d72530df7cbdc4d63b8e39a3a4c87fc574283722b60d11a7cda821515cf156fd778af6705c5e32df44cf08eefcedef4656d3c162d19a19b2fad2797ccb1242def23ba39e2881eca61aef7cc6b4eff9eb960af775d16446ffbeded9d964e8daffb373ef6a07404a8cb6d775ef6730e163644b991af65d0dfad9d26de5d7891590624ac25d33c85bf6b5358f32f23540bcc0b434dd627258f9f7d95ded58d847a0d9cec5c7542b647ae0c10c46d6e7dcc632691c8f1681def029fea05add4b0d9cc77e2b19de3203aa3a5e191e584c91b4a749ae4941eca04d1fd1c566244e1a99c1da556bca97c1b04652258580ff843e7d1546be5c639a910a17d3e2afd3f74eeb9757d693595aa3b5eb5325ae17a2a2878666d8e8e8be568e0af227eb6cc8bf4486aa54421a781ddd4e0069c5f80fe06f17637258ccf3b5affbbe04cc6f601523ec83210d67dd3c930d21789978708427dac905d2738ef86ef5821074eb8fc6a698b3d0a2ef1a758cb4139998dab5739c876ec6decb54c278b5522a834240aaec9c5f086f788d39d64128f58552f0340b933cc1954b8d1621ccebe12acd9b29cca94faee1e3a7ce0ed5ac4d9fdb42a6be0a1baae0790af835791611ab92b57d1e9b39b49772077eaf4d86a82b1ea8f513c3cf33f3f3b3972c9500e414b45814ffe34d826a60b8d992dc83fda8bf88bc67888c086b8f4df5f94e6d815cd31774ec5500ab09c659d6ea02b292807f654b74ceb60b117360886adbefc7467dc6cb65e231a435fcc6b24919d38eeea744f209f4aa176130919c61c6417186b00bdc025af47692c7bf124953ef989bff29554aa081dedda825fed2dc1b4df8d6ce48aa57b946c2964aca86a79926d9f4b004eeddba69deb496e71eae06708beed82cfd92f7ca2511ab999281a34f177288967daefe30a2882a880b4fbdf308c830e26fae31644282f1a8069e929fd023b93233c31f211228e265ace7ae10367adaf519ad7523ea2a05c1d0ab697d428cf51ac9b8b52f12a46ce0511d325d3241ae0b3fd62103fb4eea69cdbcc7f319557019c834c1aff4c25aafb2efc9dbd5ef60618b2d4fe134cf092eb706954369399a49de08e4162de8b782d48b5d8fdd8d1b2cc9a0e7943e141e9ae684f94814d7326e14142c7291d649e5840f80f7dd094005cc5e5f74af23e0d7ef864bc1710bef88f2491851d92c59ca291d359f6c934e14eca2771437374cdaea2602c9659b7856ce1030a12e80ecd9d578cf8492a1b4f48b9931fd8356d174361e18cc699acf484360054f9719c75a9450856fbf7788ac8301cf0b9880c5bd952dc8576c794d58bd38b403d8d07b5f9d88af078a60e95fcbe694c1102c9e6f1ac08147ebebed767c887454ee3eec7d7623d5ecc08237e2b628c025a89fde43217913b8af2275b99e7b97b74e89650c35b89ef1c0b57e3dc218e2a3929c9169855f3d69b717951e6ca6d72f5a3ec73fa7cd1741d51fb6b8e517bd7c89346767d05a3389ae86822ff099d3db88f1ac4a2fe7680efc6dec3252619696d349b0dcc1070d28b766c5a88e5967ca04fc18da265c08a895887fdcddf2f42217330343cddbafb51ed1dec3e3a3ad888897c0b7b6daed48472c66de3900b5669df43336f2a807bd2cd793bde835b0922d14f3333a77909e7d7477d2a237d79817562b11ad83e9216fe8ccd34c04dfadb4bd7f979ab07ac02d3bc1f7b0767f7799239a010736af88fb3b65d83c86507275a613bc1e20310c35c317eb0974529a6599d77fff1972ed5e4819b490b45963aed228ea92df6d1b80e005e568d0e0da393f326caac7586f157ae8b200e239f4cb75023d50337073e3910dafcce1c9c15a5fff98eb104b5acecb397f719a47cf21f514b88402b766ca5d91c205129ccf2a725b7907f7da82636d86b46613118b592ef962cb8be3e31718c750d5de3a9b9a0e2acfe0bc9f71e12fd25ee5c209210acfb6d7cf2a6b8d4339fea864cb37eb9da632a73bb02202207a9a7bf26573463ce7dab846739fe5c66ddd601c47aa5fb50eebe2b9853901a96cfc691bba89b1c57021552ee32255b4befdb975c41917e5009869bd9c7ae05ca5919008e117aef886fd6f7ad6bb4129b030f1716d83d3c8471b4adb36ed9aa7050b5b4c0ec3e9b32cf36ccf84893265e6f59db560c0f1e47390bd175b36d994ce38c21e1dd3b9abb49fcff559cfe2d0ffdab49995a349206ae41cfed27b5b5ed0088a374036b80047dd75bbc1fc0bdd05aeefa832c0ef6fff38363297bb67884016303e9dc9ea59907e9032a5e99b38e2ab49cc49b6a428ea977ec209f49afbad3634f7ac0e94d9614ed29df8fd759097e8b775a33f92557136863203b31a13c569ef4238a6bfdd49f0628ea4be1f700cadecdd89fc4690ecc39cc0539b574b8c156bb98312af5ccee8123ec12ecf8a2949da5c0fdca0e4c8b4ee31dd9940279381e05d224ca1afa5b84f44abe4c20cc383ca90bd47b5a22bbdf0188294e819bd6e18262200b0e8bc7a56c26cd46a0e1fd7ae9323a6db40df3da1efb8a6f81b32b942a2950e75af630a2a6e921c641456c5e9389d946ddd45b6a706a4e2ca1e35d7163aea0719f03427023d2fdfb11f76bc11fe8adb9b52d8c6dc8f2dae5b53f6ba3ea402966ec297eacb159fb33c478d257f001e77032a8bfc29588a15fe152095ac2b063d82192a28e7b2327cd72b085c0315c16e69f3d9f939e3e852cc40c9175a52bd7260886a2abb88ea697e77a5876e01de07d03238c3f8596826228df7c01400ee145674894f8f27a336b36f12ddeb4af31facbd879ec8cede330fff5c872e9c6531e7709a9f83199d6adc7a263ce5ab940dea47e14df3ff66ae043da73e76300404849d7de40363b8675b55f61d8a60d182b6bed49e34dcfb6e7dd60b89f2681cd56b4b62356b84120e5ab618eb2e06bbacf37548cdc8c7e972780aa5e7cdca504b8cf3dab5317dc2e60c7b4e264984bdbdd0610c7f02382aca87b62ad20820c2748ec846449661186014424994709f65f47ae1525501274c78480a804f439dd4d822b8ca5bf183276de5feefd52f41cf4f5eecfe4726ba2d8ddba8349293444b796eb0d14fb4fae0f32fd1eeb9c08c12ace260c1a05c524451f1be8ed5c50ccac96160b1c8f69e42045f0438408d5db7923c410b0711981b3e3160a646d5975887f80e0b5a3bc1cc53c3a7e714fdd1dcf88759a620d186cdb77ea1e3157e1d5154ea343843db98be861e10eb941cff2d4b95716019a456fe0fb2e76a62d60e7380de85a6e6ddf60acaf8a720e6e50245bdb933005166491e5235ee38f94851535c5c992e971274abac7f3b8d70788b1105eeb8b0caceb312abffc9e9674d6b856ea68cdc62416e0d95d9a68dd9652cc69db56e05e7334e07117b46fc8b3605addaa3deec7dc49443b08d9ecf6a88e03141b6686f71629665f28b1bd5060f1948e940931300855699deac526445911e1fe7cc4676addee2a93b47268b2d5ec323806f7a4a8cb6fb0680997ee30dd6e483cef3ed5dda2080b34119809ae46c939b39ac6769f3b94315f36a3abda95c9606c27bd208453d231398948dbf4266ba443c80f18361a9", 0xc00}, {&(0x7f0000002cc0)}, {&(0x7f0000002d80)="ae7699a27663725e496a1d4477a33f7192b4f8e619e529bd414590fedcedebd3a74ae4f3ecb6aa6866c924ab79cfdf3e941ed1ddfdcd66fda02c78f37d6d9b719769616417f76edd2db964ff309cd95275033746f1120afcb4230f790de61e7713e1181c041cebdcdc8fd423a2e88d598e714e94c8a03438fad42ffecf0b8438fcdbdf2621f8fd9fd57ea9971c4e0b099bd2f5e1f5b7f7a716f59d33ac5c4af92c6e84694ffeb550ec8708c4c12638776c342bc5ab188a", 0xb7}, {&(0x7f0000002e40)="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", 0x999}], 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x0, 0xffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r4, 0x8b22, &(0x7f0000000040)) r5 = socket(0x28, 0x801, 0x0) shutdown(r5, 0x2) epoll_create(0x628) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.58350994s ago: executing program 7 (id=3773): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351050000001bf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001801", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() r9 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 4.432485778s ago: executing program 5 (id=3774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fanotify_init(0x1a, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.306254905s ago: executing program 7 (id=3775): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x10000201, 0x7, 0x81, 0x1, [], [0x3fd86826, 0xfffffffd, 0xfffffffe], [0x7f, 0x7, 0x109], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) bind$can_raw(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x41) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) 3.505733187s ago: executing program 5 (id=3776): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xa) 3.441549995s ago: executing program 7 (id=3777): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b80)={'dummy0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x1, [{0x178f705e, 0x64ef}]}}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x20) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0x20000002}) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@link_local, @random="dbde00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x1, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600}, {@private}, {@broadcast}, {@rand_addr=0x64010101, 0x400}, {@private, 0x6}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private}]}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.30316128s ago: executing program 5 (id=3778): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x750, &(0x7f0000000340)={0x0, 0x7e86, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000200), &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000000c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/10, @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x6f15fbd7d86dd7cb}, 0x804) socket$packet(0x11, 0x2, 0x300) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(r5) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/225, 0xe1}], 0x1) mkdirat(r5, 0x0, 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000540)={[{@redirect_dir_follow}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsdef}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2c}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) 3.302234919s ago: executing program 6 (id=3779): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 2.76259067s ago: executing program 6 (id=3780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) r1 = socket(0x10, 0x80002, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000b40)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0xfffc, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x7, 0x8, [@empty]}, @timestamp={0x44, 0x4, 0xdf}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_open_dev$sndmidi(&(0x7f0000000180), 0x11d, 0x200400) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x804) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r7) setuid(0xee01) keyctl$KEYCTL_MOVE(0x1e, r8, r7, r9, 0x0) 2.557519782s ago: executing program 5 (id=3781): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.284419201s ago: executing program 5 (id=3782): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) link(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 955.308106ms ago: executing program 5 (id=3783): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) unshare(0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 243.488345ms ago: executing program 8 (id=3784): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa101000100000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3f, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @exit, @alu={0x7, 0x0, 0x8, 0x3, 0x3, 0x6, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) 7.499391ms ago: executing program 7 (id=3785): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x10000201, 0x7, 0x81, 0x1, [], [0x3fd86826, 0xfffffffd, 0xfffffffe], [0x7f, 0x7, 0x109], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) bind$can_raw(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x41) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) 0s ago: executing program 8 (id=3786): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) unshare(0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2, {0xa, 0x4e22, 0x403, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x3a) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) kernel console output (not intermixed with test programs): ] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.468762][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.481018][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.490566][T12491] bridge_slave_1: entered allmulticast mode [ 1054.502418][T12491] bridge_slave_1: entered promiscuous mode [ 1054.565949][T12492] Bluetooth: hci2: command tx timeout [ 1054.583545][T12488] chnl_net:caif_netlink_parms(): no params data found [ 1054.641004][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.649873][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.693360][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.743436][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.798810][T12489] team0: Port device team_slave_0 added [ 1054.806113][T12492] Bluetooth: hci4: command tx timeout [ 1054.806137][ T5085] Bluetooth: hci3: command tx timeout [ 1054.821885][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.841228][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.884162][T12492] Bluetooth: hci0: command tx timeout [ 1054.891946][T12489] team0: Port device team_slave_1 added [ 1055.040590][T12491] team0: Port device team_slave_0 added [ 1055.069963][T12486] team0: Port device team_slave_0 added [ 1055.101334][T12491] team0: Port device team_slave_1 added [ 1055.135566][T12486] team0: Port device team_slave_1 added [ 1055.142465][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.149965][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.177425][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.192634][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.203042][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.230470][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.321069][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.328972][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.336800][T12488] bridge_slave_0: entered allmulticast mode [ 1055.343587][T12488] bridge_slave_0: entered promiscuous mode [ 1055.358056][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.367060][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.393387][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.408834][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.417118][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.444039][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.466674][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.473664][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.500066][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.518869][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.533593][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.545326][T12488] bridge_slave_1: entered allmulticast mode [ 1055.552145][T12488] bridge_slave_1: entered promiscuous mode [ 1055.589104][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.596877][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.624149][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.726768][T12491] hsr_slave_0: entered promiscuous mode [ 1055.735319][T12491] hsr_slave_1: entered promiscuous mode [ 1055.747461][T12489] hsr_slave_0: entered promiscuous mode [ 1055.754551][T12489] hsr_slave_1: entered promiscuous mode [ 1055.761178][T12489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.769358][T12489] Cannot create hsr debugfs directory [ 1055.778810][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.826181][ T6379] hsr_slave_0: left promiscuous mode [ 1055.835899][ T6379] hsr_slave_1: left promiscuous mode [ 1055.842082][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.850205][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.860005][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.869640][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.877805][ T6379] bridge_slave_1: left allmulticast mode [ 1055.883471][ T6379] bridge_slave_1: left promiscuous mode [ 1055.890276][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.898713][ T6379] bridge_slave_0: left allmulticast mode [ 1055.904894][ T6379] bridge_slave_0: left promiscuous mode [ 1055.910681][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.939396][ T6379] veth1_macvtap: left promiscuous mode [ 1055.946155][ T6379] veth0_macvtap: left promiscuous mode [ 1055.951795][ T6379] veth1_vlan: left promiscuous mode [ 1055.959026][ T6379] veth0_vlan: left promiscuous mode [ 1056.638532][T12492] Bluetooth: hci2: command tx timeout [ 1056.697018][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 1056.761500][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 1056.820292][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.885391][T12492] Bluetooth: hci3: command tx timeout [ 1056.885427][ T5085] Bluetooth: hci4: command tx timeout [ 1056.885914][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.957987][T12492] Bluetooth: hci0: command tx timeout [ 1057.365519][ T6379] bond0 (unregistering): Released all slaves [ 1057.466008][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.600800][T12486] hsr_slave_0: entered promiscuous mode [ 1057.612617][T12486] hsr_slave_1: entered promiscuous mode [ 1057.619789][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.627937][T12486] Cannot create hsr debugfs directory [ 1057.662305][T12488] team0: Port device team_slave_0 added [ 1057.781600][T12488] team0: Port device team_slave_1 added [ 1057.984991][T12488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.007645][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.038079][T12488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.052850][T12488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.076703][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.104162][T12488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.282530][ T6379] IPVS: stop unused estimator thread 0... [ 1058.379224][T12488] hsr_slave_0: entered promiscuous mode [ 1058.386776][T12488] hsr_slave_1: entered promiscuous mode [ 1058.392884][T12488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.400770][T12488] Cannot create hsr debugfs directory [ 1058.569666][T12491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1058.580471][T12491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1058.593213][T12491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1058.686613][ T6379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.724353][T12492] Bluetooth: hci2: command tx timeout [ 1058.743713][T12491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1058.839834][ T6379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.946834][ T6379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.960361][T12492] Bluetooth: hci4: command tx timeout [ 1058.960368][ T5085] Bluetooth: hci3: command tx timeout [ 1059.034134][T12492] Bluetooth: hci0: command tx timeout [ 1059.077721][ T6379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.123792][T12489] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1059.164008][T12489] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1059.179260][T12489] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1059.206326][T12489] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1059.422903][T12488] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1059.478168][T12488] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1059.493281][T12488] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1059.544722][T12488] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1059.597475][ T6379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.627419][T12491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.696405][ T6379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.812962][T12491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.858148][ T6379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.891838][T12486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1059.917706][T12486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1059.957710][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.965038][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.046317][ T6379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.084376][T12486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1060.112115][T12486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1060.180267][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.226781][T12488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.238218][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.245416][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.431020][T12488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.555190][T12489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.578871][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.587033][ T7966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.603294][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.610567][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.665447][ T6379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.763671][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.770853][ T7966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.814067][T12492] Bluetooth: hci2: command tx timeout [ 1060.838841][ T6379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.911414][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.918671][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.988557][ T6379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.036331][T12492] Bluetooth: hci3: command tx timeout [ 1061.036651][ T5085] Bluetooth: hci4: command tx timeout [ 1061.080618][ T6379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.114573][ T5085] Bluetooth: hci0: command tx timeout [ 1061.193089][T12488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.282682][T12489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.326049][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.563592][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.662880][T12491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.693226][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.700739][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.786710][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.793958][ T7966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.942290][T12488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.975676][T12489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.259876][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.371893][T12491] veth0_vlan: entered promiscuous mode [ 1063.393496][T12489] veth0_vlan: entered promiscuous mode [ 1063.428145][T12491] veth1_vlan: entered promiscuous mode [ 1063.443449][T12488] veth0_vlan: entered promiscuous mode [ 1063.583677][T12489] veth1_vlan: entered promiscuous mode [ 1063.600975][T12488] veth1_vlan: entered promiscuous mode [ 1063.635845][ T6379] batman_adv: batadv0: Interface deactivated: gretap0 [ 1063.686164][ T6379] batman_adv: batadv0: Removing interface: gretap0 [ 1064.030128][T12489] veth0_macvtap: entered promiscuous mode [ 1064.057372][T12491] veth0_macvtap: entered promiscuous mode [ 1064.086536][T12489] veth1_macvtap: entered promiscuous mode [ 1064.161234][T12491] veth1_macvtap: entered promiscuous mode [ 1064.203062][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.224822][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.235776][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.247439][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.258615][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.269744][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.282096][T12489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.309695][T12486] veth0_vlan: entered promiscuous mode [ 1064.351324][T12488] veth0_macvtap: entered promiscuous mode [ 1064.389641][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.416558][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.426941][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.437593][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.447724][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.458220][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.469391][T12489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.505067][T12488] veth1_macvtap: entered promiscuous mode [ 1064.524895][T12486] veth1_vlan: entered promiscuous mode [ 1064.542716][T12489] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.552155][T12489] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.566239][T12489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.575582][T12489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.593070][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.605288][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.615716][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.626730][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.637943][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.648585][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.658639][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.669203][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.680645][T12491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.771429][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.782096][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.794310][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.805629][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.816390][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.827287][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.837497][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.848083][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.859563][T12491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.867890][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.883339][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.894290][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.904780][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.914646][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.925369][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.935472][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.945978][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.956731][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.967270][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.978243][T12488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.023588][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.038973][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.049723][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.060354][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.070272][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.080984][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.092396][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.103154][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.113126][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.125194][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.137081][T12488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.148669][T12488] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.159648][T12488] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.169231][T12488] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.178241][T12488] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.215099][T12491] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.223835][T12491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.235110][T12491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.243842][T12491] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.407796][T12486] veth0_macvtap: entered promiscuous mode [ 1065.483811][T12486] veth1_macvtap: entered promiscuous mode [ 1065.536232][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.552215][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.676923][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.704175][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.718819][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.733217][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.746619][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.762212][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.772977][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.789430][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.801937][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.821369][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.831572][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.854113][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.873847][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.951835][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.970845][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.982342][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.996197][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.007978][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.019239][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.033719][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.053770][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.066890][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.079786][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.094388][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.105305][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.119638][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.138296][ T6379] hsr_slave_0: left promiscuous mode [ 1066.145184][ T6379] hsr_slave_1: left promiscuous mode [ 1066.151257][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.163136][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.173387][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.181142][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.189479][ T6379] bridge_slave_1: left allmulticast mode [ 1066.195372][ T6379] bridge_slave_1: left promiscuous mode [ 1066.201145][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.209477][ T6379] bridge_slave_0: left allmulticast mode [ 1066.215534][ T6379] bridge_slave_0: left promiscuous mode [ 1066.221240][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.237200][ T6379] hsr_slave_0: left promiscuous mode [ 1066.243278][ T6379] hsr_slave_1: left promiscuous mode [ 1066.249492][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.258180][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.267837][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.275469][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.283200][ T6379] bridge_slave_1: left allmulticast mode [ 1066.289077][ T6379] bridge_slave_1: left promiscuous mode [ 1066.294918][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.304113][ T6379] bridge_slave_0: left allmulticast mode [ 1066.309804][ T6379] bridge_slave_0: left promiscuous mode [ 1066.316258][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.331631][ T6379] hsr_slave_0: left promiscuous mode [ 1066.339036][ T6379] hsr_slave_1: left promiscuous mode [ 1066.345410][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.352841][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.361978][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.370498][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.378556][ T6379] bridge_slave_1: left allmulticast mode [ 1066.384503][ T6379] bridge_slave_1: left promiscuous mode [ 1066.390184][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.401126][ T6379] bridge_slave_0: left allmulticast mode [ 1066.407057][ T6379] bridge_slave_0: left promiscuous mode [ 1066.412705][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.464521][ T6379] veth1_macvtap: left promiscuous mode [ 1066.470117][ T6379] veth0_macvtap: left promiscuous mode [ 1066.476874][ T6379] veth1_vlan: left promiscuous mode [ 1066.482494][ T6379] veth0_vlan: left promiscuous mode [ 1066.490725][ T6379] veth1_macvtap: left promiscuous mode [ 1066.496446][ T6379] veth0_macvtap: left promiscuous mode [ 1066.502035][ T6379] veth1_vlan: left promiscuous mode [ 1066.507468][ T6379] veth0_vlan: left promiscuous mode [ 1066.516725][ T6379] veth1_macvtap: left promiscuous mode [ 1066.522254][ T6379] veth0_macvtap: left promiscuous mode [ 1066.527993][ T6379] veth1_vlan: left promiscuous mode [ 1066.533293][ T6379] veth0_vlan: left promiscuous mode [ 1067.581169][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 1067.652156][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 1067.711914][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.781025][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.252614][ T6379] bond0 (unregistering): Released all slaves [ 1069.029174][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 1069.089549][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 1069.158818][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.219831][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.712190][ T6379] bond0 (unregistering): Released all slaves [ 1070.452413][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 1070.513444][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 1070.574643][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.638239][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.140398][ T6379] bond0 (unregistering): Released all slaves [ 1071.280599][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.301264][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.350524][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.375267][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.401224][T12486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.427081][T12486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.438115][T12486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.447473][T12486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.515147][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.538289][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.704950][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.734933][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.742825][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.774722][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.900007][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.932345][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.291635][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.307252][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.750833][T12675] bridge0: port 3(syz_tun) entered blocking state [ 1072.758222][T12675] bridge0: port 3(syz_tun) entered disabled state [ 1072.764877][T12675] syz_tun: entered allmulticast mode [ 1072.770880][T12675] syz_tun: entered promiscuous mode [ 1072.776463][T12675] bridge0: port 3(syz_tun) entered blocking state [ 1072.782922][T12675] bridge0: port 3(syz_tun) entered forwarding state [ 1074.003689][T12702] binder: 12695:12702 unknown command 1472 [ 1074.009962][T12702] binder: 12695:12702 ioctl c0306201 200000000080 returned -22 [ 1074.413138][ T7898] IPVS: starting estimator thread 0... [ 1074.484798][T12706] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1074.504193][T12707] IPVS: using max 26 ests per chain, 62400 per kthread [ 1074.944185][ T5768] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1075.227947][ T6379] IPVS: stop unused estimator thread 0... [ 1075.246742][ T6379] IPVS: stop unused estimator thread 0... [ 1075.294293][ T5768] usb 8-1: Using ep0 maxpacket: 32 [ 1075.315689][ T5768] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1075.332127][ T5768] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1075.344021][ T5768] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1075.379598][ T5768] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1075.396068][ T6379] IPVS: stop unused estimator thread 0... [ 1075.399520][ T5768] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.447501][ T5768] usb 8-1: config 0 descriptor?? [ 1076.002546][ T5768] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.7-1/input0 [ 1076.224182][ T5768] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-90) [ 1076.255081][ T5768] corsair-psu: probe of 0003:1B1C:1C09.000C failed with error -90 [ 1076.850420][ T786] usb 8-1: USB disconnect, device number 2 [ 1077.117157][T12730] fido_id[12730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1078.490346][T12751] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1079.554033][T12751] Cannot find add_set index 0 as target [ 1079.784403][T12766] tmpfs: Bad value for 'mpol' [ 1080.254765][T12769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.262908][T12769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.193163][T12782] binder: 12780:12782 unknown command 1472 [ 1082.205526][T12782] binder: 12780:12782 ioctl c0306201 200000000080 returned -22 [ 1085.466745][T12812] bridge0: port 3(syz_tun) entered blocking state [ 1085.474844][T12812] bridge0: port 3(syz_tun) entered disabled state [ 1085.483702][T12812] syz_tun: entered allmulticast mode [ 1085.506572][T12812] syz_tun: entered promiscuous mode [ 1085.518823][T12812] bridge0: port 3(syz_tun) entered blocking state [ 1085.525912][T12812] bridge0: port 3(syz_tun) entered forwarding state [ 1085.907680][ T59] Bluetooth: hci1: Frame reassembly failed (-84) [ 1086.216492][T12820] binder: 12817:12820 unknown command 1472 [ 1086.222833][T12820] binder: 12817:12820 ioctl c0306201 200000000080 returned -22 [ 1086.716988][T12821] Cannot find add_set index 0 as target [ 1087.927490][ T5085] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1087.934376][T12492] Bluetooth: hci1: command 0x1003 tx timeout [ 1088.295050][T12843] overlayfs: failed to resolve './file1': -2 [ 1089.235621][ T786] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1089.524751][ T786] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1089.538881][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.569762][ T786] usb 8-1: Product: syz [ 1089.926619][ T786] usb 8-1: Manufacturer: syz [ 1089.970446][ T786] usb 8-1: SerialNumber: syz [ 1090.253557][ T786] usb 8-1: can't set config #1, error -71 [ 1090.292235][ T786] usb 8-1: USB disconnect, device number 3 [ 1091.403321][T12860] hub 9-0:1.0: USB hub found [ 1091.411478][T12860] hub 9-0:1.0: 1 port detected [ 1092.470855][T12877] binder: 12872:12877 unknown command 1472 [ 1092.479115][T12877] binder: 12872:12877 ioctl c0306201 200000000080 returned -22 [ 1093.547547][ T7897] libceph: connect (1)[c::]:6789 error -101 [ 1093.981809][ T7897] libceph: mon0 (1)[c::]:6789 connect error [ 1094.136428][T12885] ceph: No mds server is up or the cluster is laggy [ 1094.425434][T12676] libceph: connect (1)[c::]:6789 error -101 [ 1094.431522][T12676] libceph: mon0 (1)[c::]:6789 connect error [ 1100.727168][T12949] Cannot find add_set index 0 as target [ 1103.775136][ T5768] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1104.002076][ T5768] usb 9-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1104.019411][ T5768] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1104.078465][ T5768] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.127615][ T5768] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1104.184007][ T5768] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1104.191682][ T5768] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1104.200971][ T5768] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.294672][ T5768] usb 9-1: config 0 descriptor?? [ 1105.065838][ T5768] ryos 0003:1E7D:3138.000D: unknown main item tag 0x6 [ 1105.088569][T13009] autofs4:pid:13009:autofs_fill_super: called with bogus options [ 1105.108384][ T5768] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 1105.140890][ T5768] ryos 0003:1E7D:3138.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.8-1/input0 [ 1105.382754][ T7897] usb 9-1: USB disconnect, device number 2 [ 1107.250871][T13028] bridge0: port 3(syz_tun) entered blocking state [ 1107.257625][T13028] bridge0: port 3(syz_tun) entered disabled state [ 1107.264195][T13028] syz_tun: entered allmulticast mode [ 1107.270318][T13028] syz_tun: entered promiscuous mode [ 1108.860796][T13055] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1109.531788][T12676] IPVS: starting estimator thread 0... [ 1109.639059][T13060] IPVS: using max 24 ests per chain, 57600 per kthread [ 1112.979494][T13092] geneve2: entered promiscuous mode [ 1112.984929][T13092] geneve2: entered allmulticast mode [ 1113.898480][T13112] fuse: Bad value for 'group_id' [ 1114.039419][T13113] loop6: detected capacity change from 0 to 7 [ 1114.108671][T13113] Dev loop6: unable to read RDB block 7 [ 1114.115055][T13113] loop6: unable to read partition table [ 1114.121625][T13113] loop6: partition table beyond EOD, truncated [ 1114.128085][T13113] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1115.240488][ T7897] IPVS: starting estimator thread 0... [ 1115.334348][T13121] IPVS: using max 20 ests per chain, 48000 per kthread [ 1115.334839][T13122] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1116.314560][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.320929][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.016669][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 1117.096372][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 1117.256501][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 1117.274040][T13134] ceph: No mds server is up or the cluster is laggy [ 1117.281233][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 1117.763450][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 1117.954306][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 1120.038463][T13169] netlink: 'syz.8.1891': attribute type 3 has an invalid length. [ 1120.141682][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1891'. [ 1123.562119][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 1123.574103][T13199] ceph: No mds server is up or the cluster is laggy [ 1123.624242][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 1124.284325][T13209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1125.496248][T13218] syzkaller0: entered promiscuous mode [ 1125.517459][T13218] syzkaller0: entered allmulticast mode [ 1125.890695][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.909062][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.220692][T13269] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1136.203670][ T5768] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1136.350590][T13303] netlink: 'syz.5.1917': attribute type 3 has an invalid length. [ 1136.883385][ T7898] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1136.917431][ T5768] usb 7-1: Using ep0 maxpacket: 8 [ 1136.961625][ T5768] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1137.057610][T13310] syzkaller0: entered promiscuous mode [ 1137.063399][ T7898] usb 9-1: Using ep0 maxpacket: 8 [ 1137.073799][ T7898] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.099143][ T7898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.099148][ T5768] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1137.099169][ T5768] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1137.127016][ T7898] usb 9-1: Product: syz [ 1137.136543][ T7898] usb 9-1: Manufacturer: syz [ 1137.141154][ T7898] usb 9-1: SerialNumber: syz [ 1137.150445][T13310] syzkaller0: entered allmulticast mode [ 1137.155255][ T7898] usb 9-1: config 0 descriptor?? [ 1137.242939][ T5768] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1137.291546][ T5768] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.360309][ T5768] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1137.423121][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.473587][ T7898] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1139.582041][ T7898] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1139.629759][ T7898] usb 9-1: USB disconnect, device number 3 [ 1139.818821][ T5768] usb 7-1: can't set config #16, error -71 [ 1139.846772][ T5768] usb 7-1: USB disconnect, device number 2 [ 1140.728527][T13338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.748637][T13338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.333395][ T5871] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1148.607473][ T5871] usb 8-1: Using ep0 maxpacket: 8 [ 1148.646226][ T5871] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1148.668722][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.679493][ T5871] usb 8-1: Product: syz [ 1148.683990][ T5871] usb 8-1: Manufacturer: syz [ 1148.705227][ T5871] usb 8-1: SerialNumber: syz [ 1148.737829][ T5871] usb 8-1: config 0 descriptor?? [ 1148.768239][T13416] netlink: 'syz.5.1935': attribute type 10 has an invalid length. [ 1148.884238][T13416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.922518][T13416] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1149.012214][ T5871] dvb_usb_rtl28xxu 8-1:0.0: chip type detection failed -71 [ 1149.032786][ T5871] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1149.101061][ T5871] usb 8-1: USB disconnect, device number 4 [ 1152.445770][ T7897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1152.635722][ T7897] usb 6-1: Using ep0 maxpacket: 8 [ 1152.654839][ T7897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1152.674546][ T7897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.720002][ T7897] usb 6-1: Product: syz [ 1152.747371][ T7897] usb 6-1: Manufacturer: syz [ 1152.771247][ T7897] usb 6-1: SerialNumber: syz [ 1152.809824][ T7897] usb 6-1: config 0 descriptor?? [ 1153.440497][ T7897] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1156.224552][ T7897] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1156.243971][ T7897] usb 6-1: USB disconnect, device number 2 [ 1158.522672][ T786] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1159.208539][ T786] usb 9-1: Using ep0 maxpacket: 8 [ 1159.281221][ T786] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1159.352801][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.361415][ T786] usb 9-1: Product: syz [ 1159.371360][ T786] usb 9-1: Manufacturer: syz [ 1159.376639][ T786] usb 9-1: SerialNumber: syz [ 1159.410950][ T786] usb 9-1: config 0 descriptor?? [ 1159.647632][ T786] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1160.879856][ T786] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1160.914303][ T786] usb 9-1: USB disconnect, device number 4 [ 1169.388640][T13706] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1987'. [ 1174.360749][T13766] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1174.967375][T13775] mkiss: ax0: crc mode is auto. [ 1177.153176][ T786] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1177.347322][ T786] usb 8-1: Using ep0 maxpacket: 16 [ 1177.368897][ T786] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1177.389839][ T786] usb 8-1: config 6 has an invalid interface number: 201 but max is 0 [ 1177.413346][ T786] usb 8-1: config 6 has no interface number 0 [ 1177.612617][ T786] usb 8-1: config 6 interface 201 has no altsetting 0 [ 1177.668434][ T786] usb 8-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=73.32 [ 1177.679072][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.687431][ T786] usb 8-1: Product: syz [ 1177.692039][ T786] usb 8-1: Manufacturer: syz [ 1177.697045][ T786] usb 8-1: SerialNumber: syz [ 1177.720372][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.802946][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.044390][ T786] usb 8-1: USB disconnect, device number 5 [ 1180.191407][T12108] Bluetooth: hci0: command 0x0406 tx timeout [ 1180.197999][T12108] Bluetooth: hci3: command 0x0406 tx timeout [ 1180.204054][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 1182.512459][T13842] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1184.351913][T13893] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1187.048588][ T786] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1187.248136][ T786] usb 8-1: Using ep0 maxpacket: 8 [ 1187.280431][ T786] usb 8-1: config index 0 descriptor too short (expected 2075, got 27) [ 1187.328376][ T786] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 1187.355258][ T786] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.369387][ T786] usb 8-1: config 0 has no interface number 0 [ 1187.375550][ T786] usb 8-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1187.391760][ T786] usb 8-1: config 0 interface 200 has no altsetting 0 [ 1187.415240][ T786] usb 8-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1187.426110][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.465498][ T786] usb 8-1: Product: syz [ 1187.471264][ T786] usb 8-1: Manufacturer: syz [ 1187.507044][ T786] usb 8-1: SerialNumber: syz [ 1187.561566][ T786] usb 8-1: config 0 descriptor?? [ 1188.328852][T13917] comedi comedi1: no devices specified [ 1188.559787][T13936] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1188.735269][ T3424] Bluetooth: hci1: Frame reassembly failed (-84) [ 1188.780326][ T786] usbhid 8-1:0.200: couldn't find an input interrupt endpoint [ 1188.837885][ T786] usb 8-1: USB disconnect, device number 6 [ 1190.096917][ T5806] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1190.312720][ T5806] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1190.343384][ T5806] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.384385][ T5806] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.419358][ T5806] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1190.436939][ T5806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.465562][ T5806] usb 9-1: Product: syz [ 1190.485877][ T5806] usb 9-1: Manufacturer: syz [ 1190.495045][ T5806] usb 9-1: SerialNumber: syz [ 1190.762189][ T5806] usb 9-1: 0:1 : does not exist [ 1190.767987][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1190.810532][ T5806] usb 9-1: unit 0 not found! [ 1190.869249][ T5806] usb 9-1: USB disconnect, device number 5 [ 1191.003750][T13257] udevd[13257]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.530764][T14011] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1193.621115][T14015] input: syz0 as /devices/virtual/input/input50 [ 1193.986811][T14021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.004322][T14021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.782931][T14038] Driver unsupported XDP return value 0 on prog (id 99) dev N/A, expect packet loss! [ 1199.236426][T14072] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1199.522842][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1199.543552][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.274646][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1203.256670][T14123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.274820][T14123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1205.596687][T14153] Cannot find add_set index 0 as target [ 1206.804236][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1206.804248][ T27] audit: type=1800 audit(1773283381.225:171): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2076" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1206.835559][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1206.846183][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1206.907258][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1206.929355][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1206.938076][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1206.958722][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1206.997241][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1207.042267][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1207.051207][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1207.060284][T14175] netlink: 'syz.8.2077': attribute type 3 has an invalid length. [ 1208.413508][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.432805][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.968327][ T7897] libceph: connect (1)[c::]:6789 error -101 [ 1209.974348][ T7897] libceph: mon0 (1)[c::]:6789 connect error [ 1210.597770][ T7898] libceph: connect (1)[c::]:6789 error -101 [ 1210.613752][ T7898] libceph: mon0 (1)[c::]:6789 connect error [ 1210.641988][T14193] ceph: No mds server is up or the cluster is laggy [ 1210.858485][T14203] CIFS: iocharset name too long [ 1213.202741][T14240] Cannot find add_set index 0 as target [ 1218.414778][T14298] Cannot find add_set index 0 as target [ 1219.392143][T12676] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1219.609477][T12676] usb 7-1: Using ep0 maxpacket: 8 [ 1219.630802][T12676] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1219.641357][T12676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.669062][T12676] usb 7-1: Product: syz [ 1219.696158][T12676] usb 7-1: Manufacturer: syz [ 1219.700826][T12676] usb 7-1: SerialNumber: syz [ 1219.733920][T12676] usb 7-1: config 0 descriptor?? [ 1219.995636][T12676] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1221.415459][T12676] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1221.474497][T12676] usb 7-1: USB disconnect, device number 3 [ 1223.407334][T14354] Cannot find add_set index 0 as target [ 1225.630893][T14383] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1227.582135][T14403] ALSA: mixer_oss: invalid OSS volume '' [ 1228.545595][T12499] libceph: connect (1)[c::]:6789 error -101 [ 1228.558681][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 1228.827707][T12499] libceph: connect (1)[c::]:6789 error -101 [ 1230.047428][T14410] ceph: No mds server is up or the cluster is laggy [ 1230.107306][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 1232.643491][ T27] audit: type=1800 audit(1773283407.078:172): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2124" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1233.620013][ T27] audit: type=1326 audit(1773283408.059:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.5.2125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f753699c799 code=0x0 [ 1234.564745][T14469] ALSA: mixer_oss: invalid OSS volume '' [ 1237.904700][T14503] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1240.012693][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.019173][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.429727][T14510] Cannot find add_set index 0 as target [ 1243.763729][T14563] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1244.413025][T14564] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1251.238949][T14631] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1252.257278][T14640] Cannot find add_set index 0 as target [ 1253.965059][ T5829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1254.156201][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 1254.173359][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1254.200188][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.219222][ T5829] usb 7-1: Product: syz [ 1254.223515][ T5829] usb 7-1: Manufacturer: syz [ 1254.234794][ T5829] usb 7-1: SerialNumber: syz [ 1254.255698][ T5829] usb 7-1: config 0 descriptor?? [ 1254.476556][ T5829] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.096433][ T5829] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1256.153410][ T5829] usb 7-1: USB disconnect, device number 4 [ 1257.640784][T14699] Cannot find add_set index 0 as target [ 1257.779737][T14706] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1258.489005][T14704] tmpfs: Bad value for 'mpol' [ 1259.372208][T14715] Cannot find add_set index 0 as target [ 1264.240861][T14752] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1264.985661][T14762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.676514][T14799] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1275.368532][T14852] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1280.800465][T14916] Cannot find add_set index 0 as target [ 1281.599142][T14919] vivid-007: ================= START STATUS ================= [ 1281.610915][T14919] vivid-007: Enable Output Cropping: true [ 1281.621853][T14919] vivid-007: Enable Output Composing: true [ 1281.633862][T14919] vivid-007: Enable Output Scaler: true [ 1281.673891][T14919] vivid-007: Tx RGB Quantization Range: Automatic [ 1281.680375][T14919] vivid-007: Transmit Mode: HDMI [ 1281.686204][T14919] vivid-007: Display Present: true inactive [ 1281.712882][T14919] vivid-007: Hotplug Present: 0x00000001 [ 1282.421723][T14928] ALSA: mixer_oss: invalid OSS volume '' [ 1283.118760][T14919] vivid-007: RxSense Present: 0x00000001 [ 1283.154223][T14919] vivid-007: EDID Present: 0x00000001 [ 1283.163256][T14919] vivid-007: ================== END STATUS ================== [ 1286.029640][T14990] Cannot find add_set index 0 as target [ 1286.881358][ T786] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1287.088245][ T786] usb 9-1: Using ep0 maxpacket: 8 [ 1287.138557][ T786] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.157911][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.178273][ T786] usb 9-1: Product: syz [ 1287.182471][ T786] usb 9-1: Manufacturer: syz [ 1287.197877][ T786] usb 9-1: SerialNumber: syz [ 1287.291017][ T786] usb 9-1: config 0 descriptor?? [ 1287.966740][ T786] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1289.845494][ T786] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1289.999092][ T786] usb 9-1: USB disconnect, device number 6 [ 1290.358891][T15026] syzkaller0: entered promiscuous mode [ 1290.384871][T15026] syzkaller0: entered allmulticast mode [ 1290.780154][T15038] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1291.464253][ T786] IPVS: starting estimator thread 0... [ 1291.556196][T15039] IPVS: using max 34 ests per chain, 81600 per kthread [ 1292.524649][T15060] Cannot find add_set index 0 as target [ 1296.159592][T15076] autofs4:pid:15076:autofs_fill_super: called with bogus options [ 1297.774986][T15084] ALSA: mixer_oss: invalid OSS volume '' [ 1299.466792][ T3437] Bluetooth: hci1: Frame reassembly failed (-84) [ 1299.529808][T15094] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1300.327890][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.348329][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.511478][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1306.071339][T15137] Cannot find add_set index 0 as target [ 1309.807348][T15157] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1310.201564][T15170] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1313.945072][T15215] fuse: Bad value for 'group_id' [ 1314.063519][T15219] binder: 15210:15219 unknown command 1472 [ 1314.069751][T15219] binder: 15210:15219 ioctl c0306201 200000000080 returned -22 [ 1314.674779][T15220] loop6: detected capacity change from 0 to 7 [ 1315.211264][T13260] Dev loop6: unable to read RDB block 7 [ 1315.217160][T13260] loop6: unable to read partition table [ 1315.228374][T13260] loop6: partition table beyond EOD, truncated [ 1318.001594][T15257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2279'. [ 1320.600463][T15288] syzkaller0: entered promiscuous mode [ 1320.643130][T15288] syzkaller0: entered allmulticast mode [ 1321.142198][T15277] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1321.630046][T15298] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1329.099465][T15320] validate_nla: 43 callbacks suppressed [ 1329.099479][T15320] netlink: 'syz.8.2284': attribute type 3 has an invalid length. [ 1334.494064][T15372] Cannot find add_set index 0 as target [ 1335.939762][T15388] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1338.212841][T12497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1339.404423][T15421] overlayfs: failed to resolve './file0': -2 [ 1341.283121][T15434] Cannot find add_set index 0 as target [ 1343.330215][T12497] Bluetooth: hci4: command 0x0406 tx timeout [ 1344.710045][T15465] binder: 15463:15465 unknown command 1472 [ 1344.723760][T15465] binder: 15463:15465 ioctl c0306201 200000000080 returned -22 [ 1347.024671][T15480] Cannot find add_set index 0 as target [ 1351.928286][T15525] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2317'. [ 1352.522582][T15534] Cannot find add_set index 0 as target [ 1358.354786][T15589] Cannot find add_set index 0 as target [ 1362.335716][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.347058][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.955121][T15620] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1363.620926][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2347'. [ 1364.467042][T15638] Cannot find add_set index 0 as target [ 1365.299417][ T5768] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1365.530410][ T5768] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1365.542884][ T5768] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1365.552946][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.860731][ T5768] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1365.884597][ T5768] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input51 [ 1365.954109][ T5768] usb 7-1: USB disconnect, device number 5 [ 1365.960333][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1369.375665][T15670] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1369.934079][T15678] syzkaller0: entered promiscuous mode [ 1369.975986][T15678] syzkaller0: entered allmulticast mode [ 1370.183598][T15686] binder: 15682:15686 unknown command 0 [ 1370.191246][T15686] binder: 15682:15686 ioctl c0306201 200000000080 returned -22 [ 1370.584912][T15688] Cannot find add_set index 0 as target [ 1378.822587][ T5768] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1379.059279][ T5768] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1379.071450][ T5768] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1379.192693][ T5768] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.321365][T15740] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1379.981785][ T5768] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1380.002057][ T5768] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input52 [ 1380.046437][ T5768] usb 9-1: USB disconnect, device number 7 [ 1380.046496][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1383.597745][T15768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2374'. [ 1384.039906][T15777] syzkaller0: entered promiscuous mode [ 1384.045654][T15777] syzkaller0: entered allmulticast mode [ 1384.775937][ T3429] Bluetooth: hci1: Frame reassembly failed (-84) [ 1384.788257][T15782] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1385.756418][T15794] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2380'. [ 1385.781755][T15789] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1386.831029][T12497] Bluetooth: hci1: command 0x1003 tx timeout [ 1386.838904][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1387.795164][T15809] Cannot find add_set index 0 as target [ 1392.405620][ T7897] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1392.647671][T15831] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1392.666268][ T7897] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1392.685489][ T7897] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.705342][ T7897] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1392.717800][ T7897] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1393.367109][ T7897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.417829][ T7897] usb 8-1: Product: syz [ 1393.422047][ T7897] usb 8-1: Manufacturer: syz [ 1393.427774][ T7897] usb 8-1: SerialNumber: syz [ 1393.695915][ T7897] usb 8-1: 0:1 : does not exist [ 1393.701756][ T7897] usb 8-1: unit 0 not found! [ 1393.785215][ T7897] usb 8-1: USB disconnect, device number 7 [ 1393.911670][T15735] udevd[15735]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.423080][T15839] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1394.805518][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2387'. [ 1395.916887][T15871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.944014][T15871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.254793][T12497] Bluetooth: hci1: command 0x1003 tx timeout [ 1397.276147][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1400.974533][T15901] Cannot find add_set index 0 as target [ 1400.999680][T15899] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1403.521261][T15924] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1403.703408][ T7966] Bluetooth: hci1: Frame reassembly failed (-84) [ 1404.313158][T15935] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2405'. [ 1404.360842][T15931] syzkaller0: entered promiscuous mode [ 1404.376104][T15931] syzkaller0: entered allmulticast mode [ 1405.478994][ T5085] Bluetooth: hci1: command 0x1003 tx timeout [ 1405.487062][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1406.192623][T15962] binder: 15960:15962 unknown command 1472 [ 1406.198458][T15962] binder: 15960:15962 ioctl c0306201 200000000080 returned -22 [ 1408.366428][T15986] Cannot find add_set index 0 as target [ 1413.405727][T15995] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2416'. [ 1414.619053][T16001] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1414.725087][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 1416.573483][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1416.588909][T16019] binder: 16016:16019 unknown command 1472 [ 1416.595239][T16019] binder: 16016:16019 ioctl c0306201 200000000080 returned -22 [ 1419.145080][T16044] syzkaller0: entered promiscuous mode [ 1419.150621][T16044] syzkaller0: entered allmulticast mode [ 1423.146864][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.157940][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.064438][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 1425.127283][T16077] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1426.695892][T16089] Cannot find add_set index 0 as target [ 1426.968847][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1427.788208][ T5806] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1427.967904][ T5806] usb 8-1: Using ep0 maxpacket: 8 [ 1428.033416][ T5806] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1428.303439][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.333853][ T5806] usb 8-1: Product: syz [ 1428.347622][ T5806] usb 8-1: Manufacturer: syz [ 1428.361727][ T5806] usb 8-1: SerialNumber: syz [ 1428.386381][ T5806] usb 8-1: config 0 descriptor?? [ 1428.626962][ T5806] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1428.764699][T16111] binder: 16109:16111 unknown command 1472 [ 1428.770980][T16111] binder: 16109:16111 ioctl c0306201 200000000080 returned -22 [ 1429.564711][ T5806] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1430.648389][ T5806] usb 8-1: USB disconnect, device number 8 [ 1432.979530][T16138] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2452'. [ 1433.317908][T16146] Cannot find add_set index 0 as target [ 1436.179561][T16167] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2461'. [ 1439.455502][T16197] syzkaller0: entered promiscuous mode [ 1439.461011][T16197] syzkaller0: entered allmulticast mode [ 1440.677575][T16205] Cannot find add_set index 0 as target [ 1442.262809][T16217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2476'. [ 1443.927355][T16227] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1443.936972][T16227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1445.925591][T16241] Cannot find add_set index 0 as target [ 1446.152320][T16243] syzkaller0: entered promiscuous mode [ 1446.157847][T16243] syzkaller0: entered allmulticast mode [ 1447.465708][T16261] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2487'. [ 1448.044319][T16265] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1448.053959][T16265] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1449.152008][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.169767][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.483015][T16284] syzkaller0: entered promiscuous mode [ 1451.507919][T16284] syzkaller0: entered allmulticast mode [ 1453.111810][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2499'. [ 1453.254541][T16307] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2502'. [ 1457.586119][T16343] binder: 16340:16343 unknown command 1472 [ 1457.598480][T16343] binder: 16340:16343 ioctl c0306201 200000000080 returned -22 [ 1457.925119][T16345] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2512'. [ 1459.388780][T16355] overlayfs: missing 'lowerdir' [ 1463.230885][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2517'. [ 1464.255168][T16394] overlayfs: missing 'lowerdir' [ 1470.316644][ T5806] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1470.848410][ T5806] usb 9-1: Using ep0 maxpacket: 8 [ 1470.944936][ T5806] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1470.956386][ T5806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.981535][ T5806] usb 9-1: Product: syz [ 1471.026473][ T5806] usb 9-1: Manufacturer: syz [ 1471.065272][ T5806] usb 9-1: SerialNumber: syz [ 1471.077233][ T5806] usb 9-1: config 0 descriptor?? [ 1471.330946][ T5806] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1471.851952][T12492] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 1472.367910][ T5806] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32 [ 1473.447831][ T5806] usb 9-1: USB disconnect, device number 8 [ 1477.383183][ T5829] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1477.603091][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 1477.869211][ T5829] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1477.892381][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.914066][ T5829] usb 6-1: Product: syz [ 1477.918321][ T5829] usb 6-1: Manufacturer: syz [ 1477.937846][ T5829] usb 6-1: SerialNumber: syz [ 1477.957613][ T5829] usb 6-1: config 0 descriptor?? [ 1478.187385][ T5829] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1480.341986][ T5829] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1480.483078][ T7823] usb 6-1: USB disconnect, device number 3 [ 1484.624569][T16558] Cannot find add_set index 0 as target [ 1484.666823][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.677826][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.609984][T16567] Cannot find add_set index 0 as target [ 1486.936334][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1486.961779][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.630239][T16614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.648465][T16614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.558057][T16639] Cannot find add_set index 0 as target [ 1501.532799][T16653] geneve2: entered promiscuous mode [ 1501.561680][T16653] geneve2: entered allmulticast mode [ 1504.160101][T16679] Cannot find add_set index 0 as target [ 1511.038974][T16722] Cannot find add_set index 0 as target [ 1512.598828][T16725] Cannot find add_set index 0 as target [ 1514.658047][T16755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.669983][T16755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.831571][T16759] binder: 16757:16759 unknown command 1472 [ 1514.847913][T16759] binder: 16757:16759 ioctl c0306201 200000000080 returned -22 [ 1518.003481][T16782] Cannot find add_set index 0 as target [ 1521.789586][T16814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.803783][T16814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.596387][T16824] Cannot find add_set index 0 as target [ 1522.633030][T16827] fuse: Bad value for 'fd' [ 1526.469030][ T7897] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1526.730878][ T7897] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1526.758729][ T7897] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1526.769547][ T7897] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1526.779421][ T7897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.889569][T16854] Cannot find add_set index 0 as target [ 1527.983811][T16856] ALSA: mixer_oss: invalid OSS volume '' [ 1528.694101][ T7897] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1528.718079][ T7897] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input53 [ 1528.768373][ T7897] input: failed to attach handler kbd to device input53, error: -5 [ 1528.795826][ T7897] usb 7-1: USB disconnect, device number 6 [ 1529.141604][T16864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1529.153819][T16864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.977412][T16884] binder: 16882:16884 unknown command 1472 [ 1530.983315][T16884] binder: 16882:16884 ioctl c0306201 200000000080 returned -22 [ 1531.156770][T16891] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1532.527930][T16908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1532.549713][T16908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.165939][T16911] binder: 16910:16911 unknown command 1472 [ 1533.171792][T16911] binder: 16910:16911 ioctl c0306201 200000000080 returned -22 [ 1533.419408][T16914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.440519][T16914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.977558][T16936] binder: 16935:16936 unknown command 1472 [ 1536.983615][T16936] binder: 16935:16936 ioctl c0306201 200000000080 returned -22 [ 1537.366599][T16946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.388597][T16946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1545.280857][T16996] ALSA: mixer_oss: invalid OSS volume '' [ 1545.955112][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.961580][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.138040][ T2129] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1548.345730][ T2129] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1548.358136][ T2129] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1548.385754][ T2129] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1548.413930][ T2129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.797494][ T2129] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1548.828784][ T2129] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input54 [ 1548.864481][ T2129] input: failed to attach handler kbd to device input54, error: -5 [ 1550.045258][ T2129] usb 8-1: USB disconnect, device number 9 [ 1550.214386][T17030] fuse: Bad value for 'fd' [ 1552.603520][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2717'. [ 1553.915002][T15508] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1554.474492][T15508] usb 7-1: Using ep0 maxpacket: 32 [ 1554.481445][T15508] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1554.544662][T15508] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1554.553723][T15508] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.612845][T15508] usb 7-1: Product: syz [ 1554.623284][T15508] usb 7-1: Manufacturer: syz [ 1554.637576][T15508] usb 7-1: SerialNumber: syz [ 1554.654466][T15508] usb 7-1: config 0 descriptor?? [ 1555.454445][T15508] usb 7-1: USB disconnect, device number 7 [ 1563.240604][ T7823] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1563.472562][ T7823] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1563.490095][ T7823] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1563.501132][ T7823] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1563.513064][ T7823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.749634][ T7823] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1563.794381][ T7823] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input55 [ 1563.840167][ T7823] input: failed to attach handler kbd to device input55, error: -5 [ 1563.868356][ T7823] usb 9-1: USB disconnect, device number 9 [ 1565.126727][T17184] fuse: Bad value for 'fd' [ 1565.300655][T17185] Cannot find add_set index 0 as target [ 1569.077585][T12676] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1569.226214][T17219] Cannot find add_set index 0 as target [ 1569.344971][T12676] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1569.617870][T12676] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1569.635602][T12676] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1569.649753][T12676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.117569][T17223] ALSA: mixer_oss: invalid OSS volume '' [ 1570.778927][T12676] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1570.808272][T12676] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input56 [ 1570.850139][T12676] input: failed to attach handler kbd to device input56, error: -5 [ 1571.103959][T12676] usb 7-1: USB disconnect, device number 8 [ 1574.475931][T17254] ALSA: mixer_oss: invalid OSS volume '' [ 1576.544101][ T2129] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1576.901875][ T2129] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1576.936334][ T2129] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1576.947168][ T2129] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1576.958706][ T2129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.231106][ T2129] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1577.262330][ T2129] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input57 [ 1577.311305][ T2129] input: failed to attach handler kbd to device input57, error: -5 [ 1577.377300][ T2129] usb 9-1: USB disconnect, device number 10 [ 1581.157548][T17306] binder: 17303:17306 unknown command 1472 [ 1581.163630][T17306] binder: 17303:17306 ioctl c0306201 200000000080 returned -22 [ 1584.292309][T12676] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1584.460804][T12676] usb 6-1: device descriptor read/64, error -71 [ 1584.717971][T17343] ALSA: mixer_oss: invalid OSS volume '' [ 1585.584000][T12676] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1585.807295][T17352] binder: 17350:17352 unknown command 1472 [ 1585.813544][T17352] binder: 17350:17352 ioctl c0306201 200000000080 returned -22 [ 1586.102811][T12676] usb 6-1: device descriptor read/64, error -71 [ 1586.239989][T12676] usb usb6-port1: attempt power cycle [ 1591.327072][T17382] binder: 17379:17382 unknown command 1472 [ 1591.332963][T17382] binder: 17379:17382 ioctl c0306201 200000000080 returned -22 [ 1591.550234][T17386] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1591.578188][ T3429] Bluetooth: hci1: Frame reassembly failed (-84) [ 1593.615195][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1598.924887][T17431] binder: 17424:17431 unknown command 1472 [ 1598.931017][T17431] binder: 17424:17431 ioctl c0306201 200000000080 returned -22 [ 1600.383145][T17448] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1600.760297][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 1602.401727][T12492] Bluetooth: hci1: command 0x1003 tx timeout [ 1602.408820][T12497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1605.146837][T17495] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1605.425402][ T7966] Bluetooth: hci1: Frame reassembly failed (-84) [ 1607.365361][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.373017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.438064][T12497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1607.438096][T12492] Bluetooth: hci1: command 0x1003 tx timeout [ 1613.990999][T17547] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1614.313423][ T7966] Bluetooth: hci1: Frame reassembly failed (-84) [ 1614.997535][T17550] ALSA: mixer_oss: invalid OSS volume '' [ 1616.313866][T12497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1617.507822][T17574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.708436][T17574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.885248][T17580] Cannot find add_set index 0 as target [ 1619.097384][T17591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.115257][T17591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.370920][T17611] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1622.645339][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 1623.106507][T17618] Cannot find add_set index 0 as target [ 1624.267514][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1624.549482][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1624.549515][T12497] Bluetooth: hci1: command 0x1003 tx timeout [ 1624.735254][T17636] Cannot find add_set index 0 as target [ 1627.483253][T17662] fuse: Bad value for 'group_id' [ 1627.600233][T17664] Cannot find add_set index 0 as target [ 1629.098550][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2885'. [ 1632.608810][T17701] fuse: Bad value for 'group_id' [ 1639.768707][T17738] ALSA: mixer_oss: invalid OSS volume '' [ 1651.215259][T17823] ALSA: mixer_oss: invalid OSS volume '' [ 1655.529937][ T7897] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1656.263631][ T7897] usb 7-1: Using ep0 maxpacket: 8 [ 1656.270695][ T7897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.281393][ T7897] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1656.318510][T17864] ALSA: mixer_oss: invalid OSS volume '' [ 1656.326221][ T7897] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1656.335788][ T7897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.349759][ T7897] usb 7-1: Product: syz [ 1656.354350][ T7897] usb 7-1: Manufacturer: syz [ 1656.367990][ T7897] usb 7-1: SerialNumber: syz [ 1656.381035][ T7897] usb 7-1: config 0 descriptor?? [ 1657.439706][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2938'. [ 1658.299642][T12499] usb 7-1: USB disconnect, device number 9 [ 1659.359926][T17897] Cannot find add_set index 0 as target [ 1660.673397][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2947'. [ 1661.617038][T17905] ALSA: mixer_oss: invalid OSS volume '' [ 1662.941005][ T5829] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1663.550322][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 1663.564997][ T5829] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1663.576339][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1663.589922][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.395728][ T5829] usb 7-1: Product: syz [ 1664.474718][ T5829] usb 7-1: Manufacturer: syz [ 1664.511670][ T5829] usb 7-1: SerialNumber: syz [ 1664.550539][ T5829] usb 7-1: config 0 descriptor?? [ 1665.900446][T12499] usb 7-1: USB disconnect, device number 10 [ 1669.194487][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.201786][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.766618][T15508] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1670.976421][T15508] usb 6-1: Using ep0 maxpacket: 8 [ 1671.016774][T15508] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1671.048613][T15508] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1671.084235][T15508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.137100][T15508] usb 6-1: Product: syz [ 1671.165067][T15508] usb 6-1: Manufacturer: syz [ 1671.195394][T15508] usb 6-1: SerialNumber: syz [ 1671.317769][T15508] usb 6-1: config 0 descriptor?? [ 1674.378120][T15508] usb 6-1: USB disconnect, device number 7 [ 1675.956814][T18046] Cannot find add_set index 0 as target [ 1676.862318][T18051] fuse: Unknown parameter 'grou00000000000000000000' [ 1679.952408][T18078] Cannot find add_set index 0 as target [ 1687.986035][T18147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1688.062653][T18147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1688.083661][T18149] fuse: Unknown parameter 'group_i00000000000000000000' [ 1692.287936][T18186] fuse: Unknown parameter 'group_i00000000000000000000' [ 1693.259162][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1693.769026][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.839735][T18228] Cannot find add_set index 0 as target [ 1702.821204][T18253] fuse: Unknown parameter 'grou00000000000000000000' [ 1707.417040][T12497] Bluetooth: hci1: command 0x1003 tx timeout [ 1707.424727][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1708.212786][T18276] ALSA: mixer_oss: invalid OSS volume '' [ 1709.167364][T12676] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1709.349072][T12676] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1709.377289][T12676] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1709.409514][T12676] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1709.437172][T12676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.673257][T12676] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1709.693594][T12676] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input58 [ 1709.732620][T12676] input: failed to attach handler kbd to device input58, error: -5 [ 1709.910258][T12676] usb 8-1: USB disconnect, device number 10 [ 1715.438408][T18341] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1715.494628][T18040] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1715.815676][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 1715.965803][T18040] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1715.983939][T18040] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1715.996817][T18040] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1716.085434][T18040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.370625][T18040] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1716.405657][T18040] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input59 [ 1716.426171][T18040] input: failed to attach handler kbd to device input59, error: -5 [ 1716.483197][T18040] usb 7-1: USB disconnect, device number 11 [ 1717.178256][T18350] vivid-007: ================= START STATUS ================= [ 1717.186429][T18350] vivid-007: Enable Output Cropping: true [ 1717.193073][T18350] vivid-007: Enable Output Composing: true [ 1717.203941][T18350] vivid-007: Enable Output Scaler: true [ 1717.210634][T18350] vivid-007: Tx RGB Quantization Range: Automatic [ 1717.217473][T18350] vivid-007: Transmit Mode: HDMI [ 1717.223253][T18350] vivid-007: Display Present: true inactive [ 1717.229689][T18350] vivid-007: Hotplug Present: 0x00000001 [ 1717.236456][T18350] vivid-007: RxSense Present: 0x00000001 [ 1717.243046][T18350] vivid-007: EDID Present: 0x00000001 [ 1717.248567][T18350] vivid-007: ================== END STATUS ================== [ 1717.554262][T12497] Bluetooth: hci1: command 0x1003 tx timeout [ 1717.562256][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1718.219333][T18353] fuse: Bad value for 'user_id' [ 1721.163755][T18379] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1721.486727][ T3424] Bluetooth: hci1: Frame reassembly failed (-84) [ 1721.848114][T18385] fuse: Bad value for 'user_id' [ 1722.097562][T18389] fuse: Unknown parameter 'group_id00000000000000000000' [ 1723.220150][T12497] Bluetooth: hci1: command 0x1003 tx timeout [ 1723.227254][T12492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1723.933040][T18412] binder: 18409:18412 unknown command 0 [ 1723.938800][T18412] binder: 18409:18412 ioctl c0306201 200000000080 returned -22 [ 1724.604526][T18417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.623082][T18417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.730134][T18429] syzkaller0: entered promiscuous mode [ 1726.735721][T18429] syzkaller0: entered allmulticast mode [ 1727.038637][T12676] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1727.536822][T18440] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 1727.557276][T12676] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.579716][T12676] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.597946][T12676] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1727.601689][T18440] ftl_cs: FTL header not found. [ 1727.618755][T12676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.644280][T12676] usb 9-1: config 0 descriptor?? [ 1728.295060][T18453] fuse: Bad value for 'fd' [ 1728.350735][T18455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.364285][T18455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.518471][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.525489][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.648842][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.658299][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.665382][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.674640][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.682658][T12676] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1728.759406][T12676] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1730.047488][T12676] cp2112 0003:10C4:EA90.000E: error requesting version [ 1730.065749][T12676] cp2112: probe of 0003:10C4:EA90.000E failed with error -71 [ 1730.105266][T12676] usb 9-1: USB disconnect, device number 11 [ 1730.183820][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.191227][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.273313][T18481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1731.300430][T18481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1732.747098][T18493] fuse: Bad value for 'fd' [ 1734.843509][T18507] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3111'. [ 1736.492099][T18515] Cannot find add_set index 0 as target [ 1737.350455][T18519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1737.377781][T18519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1739.082213][ T5806] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1739.302296][ T5806] usb 9-1: Using ep0 maxpacket: 8 [ 1739.315496][ T5806] usb 9-1: config 0 has no interfaces? [ 1739.349143][ T5806] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1739.449511][ T5806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.478339][ T5806] usb 9-1: config 0 descriptor?? [ 1739.572649][T18539] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1739.756682][T18540] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3118'. [ 1741.317288][T18540] syzkaller1: entered promiscuous mode [ 1741.326740][T18540] syzkaller1: entered allmulticast mode [ 1741.469935][ T5806] usb 9-1: USB disconnect, device number 12 [ 1741.641015][T18040] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1741.861709][T18040] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1741.871203][T18040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.879520][T18040] usb 6-1: Product: syz [ 1741.883957][T18040] usb 6-1: Manufacturer: syz [ 1741.894363][T18040] usb 6-1: SerialNumber: syz [ 1741.952969][T18040] usb 6-1: config 0 descriptor?? [ 1742.239083][T18040] usb 6-1: ignoring: probably an ADSL modem [ 1742.598626][T18567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.616575][T18567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.002686][T18040] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1744.023831][T18040] usb 6-1: USB disconnect, device number 8 [ 1745.497963][T18566] nbd0: detected capacity change from 0 to 63 [ 1745.718956][T12492] block nbd0: Receive control failed (result -104) [ 1746.048689][ T5806] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1746.250431][ T5806] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1746.264709][ T5806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.307847][ T5806] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1746.507521][ T5806] usb 9-1: USB disconnect, device number 13 [ 1748.114247][T18588] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3132'. [ 1753.155171][ T7823] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1754.666359][ T7823] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1754.687989][ T7823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.757542][ T7823] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1755.352182][ T7898] usb 6-1: USB disconnect, device number 9 [ 1756.167478][T18633] Cannot find add_set index 0 as target [ 1756.271318][T18643] fuse: Invalid rootmode [ 1756.634639][T18647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1756.784057][T18647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.022460][ T5768] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1759.224162][ T5768] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1759.237186][ T5768] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.292138][ T5768] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1759.526929][ T5768] usb 8-1: USB disconnect, device number 11 [ 1761.847122][T18681] fuse: Invalid rootmode [ 1764.983829][ T5806] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1766.378673][ T5806] usb 6-1: device descriptor read/64, error -71 [ 1767.898677][ T5806] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1769.875136][T18729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3172'. [ 1773.254473][T18744] fuse: Invalid rootmode [ 1773.603238][T18752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1773.622082][T18752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1774.967953][T18754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1774.980165][T18754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1775.602034][T18382] block nbd0: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 30 seconds [ 1775.615101][T18382] block nbd0: Possible stuck request ffff888021df8000: control (read@1024,3072B). Runtime 30 seconds [ 1778.106474][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1781.885813][T18800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.897813][T18800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.703536][T18824] fuse: Bad value for 'rootmode' [ 1789.376655][T18835] Cannot find add_set index 0 as target [ 1790.315595][T18840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1790.328176][T18840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.968810][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.975256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.860558][T18867] fuse: Bad value for 'rootmode' [ 1797.160054][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.334355][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1800.871969][ T7898] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1800.892341][T18914] Cannot find add_set index 0 as target [ 1801.152525][ T7898] usb 8-1: Using ep0 maxpacket: 32 [ 1801.175631][ T7898] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1801.201240][ T7898] usb 8-1: config 0 has no interface number 0 [ 1801.207481][ T7898] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1801.230604][ T7898] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1801.240655][ T7898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.249424][ T7898] usb 8-1: Product: syz [ 1801.447486][ T7898] usb 8-1: Manufacturer: syz [ 1801.495714][ T7898] usb 8-1: SerialNumber: syz [ 1801.599055][ T7898] usb 8-1: config 0 descriptor?? [ 1801.765656][ T7898] smsc75xx v1.0.0 [ 1802.074124][T18929] binder: 18924:18929 unknown command 1472 [ 1802.080163][T18929] binder: 18924:18929 ioctl c0306201 200000000080 returned -22 [ 1802.603218][ T7898] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1802.640648][ T7898] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1804.236040][ T7898] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1804.278719][ T7898] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1804.319701][ T7898] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1804.346311][ T7898] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 1804.390499][ T7898] usb 8-1: USB disconnect, device number 12 [ 1804.492880][T18948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.516748][T18948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.769724][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3240'. [ 1805.659400][T18382] block nbd0: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 60 seconds [ 1805.670342][T18382] block nbd0: Possible stuck request ffff888021df8000: control (read@1024,3072B). Runtime 60 seconds [ 1808.883260][T18984] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1809.537021][T18994] binder: 18993:18994 unknown command 1472 [ 1809.543074][T18994] binder: 18993:18994 ioctl c0306201 200000000080 returned -22 [ 1811.427069][T19000] ALSA: mixer_oss: invalid OSS volume '' [ 1812.980529][T19032] binder: 19031:19032 unknown command 1472 [ 1812.986455][T19032] binder: 19031:19032 ioctl c0306201 200000000080 returned -22 [ 1814.926322][T19050] syzkaller0: entered promiscuous mode [ 1814.931847][T19050] syzkaller0: entered allmulticast mode [ 1814.940657][T19050] 0: reclassify loop, rule prio 0, protocol 800 [ 1815.121625][T19057] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3270'. [ 1815.888496][T19065] binder: 19062:19065 unknown command 1472 [ 1815.895054][T19065] binder: 19062:19065 ioctl c0306201 200000000080 returned -22 [ 1817.505305][T19076] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3278'. [ 1817.890077][T19080] syzkaller0: entered promiscuous mode [ 1818.021536][T19080] syzkaller0: entered allmulticast mode [ 1819.671125][T19095] binder: 19094:19095 unknown command 1472 [ 1819.677236][T19095] binder: 19094:19095 ioctl c0306201 200000000080 returned -22 [ 1821.094501][T19109] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3289'. [ 1821.944641][T19121] syzkaller0: entered promiscuous mode [ 1821.950234][T19121] syzkaller0: entered allmulticast mode [ 1822.140275][T19105] ALSA: mixer_oss: invalid OSS volume '' [ 1822.874004][T19131] binder: 19130:19131 unknown command 1472 [ 1822.879840][T19131] binder: 19130:19131 ioctl c0306201 200000000080 returned -22 [ 1824.829453][T19152] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3302'. [ 1825.474494][T19158] syzkaller0: entered promiscuous mode [ 1825.513750][T19158] syzkaller0: entered allmulticast mode [ 1826.242806][T19168] binder: 19164:19168 unknown command 1472 [ 1826.248834][T19168] binder: 19164:19168 ioctl c0306201 200000000080 returned -22 [ 1829.872834][T19187] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3313'. [ 1829.960312][T19187] syzkaller1: entered promiscuous mode [ 1829.976589][T19187] syzkaller1: entered allmulticast mode [ 1830.753371][T19195] syzkaller0: entered promiscuous mode [ 1830.776601][T19195] syzkaller0: entered allmulticast mode [ 1830.968486][T19198] binder: 19196:19198 unknown command 1472 [ 1830.974518][T19198] binder: 19196:19198 ioctl c0306201 200000000080 returned -22 [ 1832.415512][T12566] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1832.686271][T12566] usb 9-1: Using ep0 maxpacket: 16 [ 1833.079070][T12566] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1833.094812][T12566] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1833.104023][T12566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.114701][T12566] usb 9-1: Product: syz [ 1833.133774][T12566] usb 9-1: Manufacturer: syz [ 1833.143995][T12566] usb 9-1: SerialNumber: syz [ 1833.171909][T12566] usb 9-1: config 0 descriptor?? [ 1833.188086][T12566] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1833.664934][T12566] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1833.710928][T19202] ALSA: mixer_oss: invalid OSS volume '' [ 1833.771134][T19224] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3324'. [ 1833.865691][T19224] syzkaller1: entered promiscuous mode [ 1833.904220][T19224] syzkaller1: entered allmulticast mode [ 1834.169054][T12566] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1835.410569][T12566] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1835.422173][T12566] em28xx 9-1:0.0: board has no eeprom [ 1835.641557][T19238] binder: 19236:19238 unknown command 1472 [ 1835.648230][T19238] binder: 19236:19238 ioctl c0306201 200000000080 returned -22 [ 1836.121586][T18382] block nbd0: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 90 seconds [ 1836.134032][T18382] block nbd0: Possible stuck request ffff888021df8000: control (read@1024,3072B). Runtime 90 seconds [ 1836.279483][T19240] fuse: Unknown parameter 'user_i00000000000000000000' [ 1836.941568][T19207] em28xx 9-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 1836.983419][T12566] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1836.991372][T12566] em28xx 9-1:0.0: dvb set to bulk mode. [ 1837.013918][T12676] em28xx 9-1:0.0: Binding DVB extension [ 1837.123391][ T5768] usb 9-1: USB disconnect, device number 14 [ 1837.152178][ T5768] em28xx 9-1:0.0: Disconnecting em28xx [ 1837.213832][T12676] em28xx 9-1:0.0: Registering input extension [ 1837.255113][ T5768] em28xx 9-1:0.0: Closing input extension [ 1837.382756][ T5768] em28xx 9-1:0.0: Freeing device [ 1837.780923][T19255] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3334'. [ 1841.719701][ T5139] udevd[5139]: worker [18505] /devices/virtual/block/nbd0 is taking a long time [ 1842.894083][T19280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1842.930454][T19280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.609011][T19309] binder: 19306:19309 unknown command 1472 [ 1847.617520][T19309] binder: 19306:19309 ioctl c0306201 200000000080 returned -22 [ 1850.442693][T19323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.287916][T19323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.296250][T19329] ALSA: mixer_oss: invalid OSS volume '' [ 1852.999169][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.008849][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.352773][ T5768] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1858.585105][ T5768] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.595776][ T5768] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1858.652421][ T5768] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1858.692529][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.890497][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1858.940016][ T5768] usb 7-1: string descriptor 0 read error: -71 [ 1858.959479][ T5768] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1858.989594][ T5768] usb 7-1: USB disconnect, device number 12 [ 1859.006029][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1860.126497][T19381] ALSA: mixer_oss: invalid OSS volume '' [ 1861.759731][T19398] binder: 19396:19398 unknown command 1472 [ 1861.765697][T19398] binder: 19396:19398 ioctl c0306201 200000000080 returned -22 [ 1863.480179][T15508] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1864.116439][T15508] usb 8-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.136614][T15508] usb 8-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1864.180741][T15508] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1864.202751][T15508] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.456891][T15508] usb 8-1: string descriptor 0 read error: -71 [ 1864.490570][T15508] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1864.553857][T15508] usb 8-1: USB disconnect, device number 13 [ 1866.468530][T18382] block nbd0: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 120 seconds [ 1866.479462][T18382] block nbd0: Possible stuck request ffff888021df8000: control (read@1024,3072B). Runtime 120 seconds [ 1873.425221][T19484] fuse: Unknown parameter '0x0000000000000003' [ 1873.453696][T19472] ALSA: mixer_oss: invalid OSS volume '' [ 1873.459615][T19472] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 1873.556623][T19472] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹ /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.739261][ T29] task:udevd state:D stack:25680 pid:18505 ppid:5139 flags:0x00004006 [ 2077.992943][ T29] Call Trace: [ 2078.033008][ T29] [ 2078.073629][ T29] __schedule+0x1553/0x45a0 [ 2078.164606][ T29] ? asan.module_dtor+0x20/0x20 [ 2078.322872][ T29] ? mark_lock+0x94/0x320 [ 2078.327265][ T29] ? lock_chain_count+0x20/0x20 [ 2078.332112][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2078.337296][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2078.342933][ T29] schedule+0xbd/0x170 [ 2078.347128][ T29] io_schedule+0x80/0xd0 [ 2078.351523][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2078.372585][ T29] ? folio_wait_bit+0x30/0x30 [ 2078.377345][ T29] ? _compound_head+0x120/0x120 [ 2078.382221][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2078.437122][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 2078.457215][ T29] ? blkdev_writepage+0x30/0x30 [ 2078.471421][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 2078.476717][ T29] ? blkdev_writepage+0x30/0x30 [ 2078.481709][ T29] read_part_sector+0xd2/0x340 [ 2078.486603][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2078.492081][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2078.497483][ T29] ? put_partition+0x370/0x370 [ 2078.510092][ T29] ? alloc_pages+0x4dc/0x740 [ 2078.514954][ T29] bdev_disk_changed+0x740/0x1420 [ 2078.520039][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2078.525577][ T29] ? iput+0x343/0x920 [ 2078.529608][ T29] blkdev_get_whole+0x30d/0x390 [ 2078.535711][ T29] blkdev_get_by_dev+0x279/0x600 [ 2078.540709][ T29] blkdev_open+0x152/0x360 [ 2078.545262][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2078.549901][ T29] do_dentry_open+0x8c6/0x1500 [ 2078.554764][ T29] path_openat+0x27f1/0x3230 [ 2078.559471][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2078.564425][ T29] ? verify_lock_unused+0x140/0x140 [ 2078.569724][ T29] ? do_filp_open+0x430/0x430 [ 2078.574486][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2078.579634][ T29] do_filp_open+0x1f5/0x430 [ 2078.584289][ T29] ? vfs_tmpfile+0x490/0x490 [ 2078.588923][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2078.597900][ T29] ? alloc_fd+0x58f/0x630 [ 2078.604138][ T29] do_sys_openat2+0x134/0x1d0 [ 2078.608946][ T29] ? do_sys_open+0xe0/0xe0 [ 2078.614034][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2078.620160][ T29] ? lock_chain_count+0x20/0x20 [ 2078.627329][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2078.635471][ T29] __x64_sys_openat+0x139/0x160 [ 2078.640386][ T29] do_syscall_64+0x55/0xa0 [ 2078.648422][ T29] ? clear_bhb_loop+0x40/0x90 [ 2078.654563][ T29] ? clear_bhb_loop+0x40/0x90 [ 2078.659374][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2078.668769][ T29] RIP: 0033:0x7ff2ecea7407 [ 2078.674568][ T29] RSP: 002b:00007ffcb2ecfe50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2078.689420][ T29] RAX: ffffffffffffffda RBX: 00007ff2ed621880 RCX: 00007ff2ecea7407 [ 2078.697720][ T29] RDX: 00000000000a0800 RSI: 000055801ce19520 RDI: ffffffffffffff9c [ 2078.710299][ T29] RBP: 000055801ce18910 R08: 0000000000000000 R09: 0000000000000000 [ 2078.721444][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055801ce30e00 [ 2078.737413][ T29] R13: 000055801ce30410 R14: 0000000000000000 R15: 000055801ce30e00 [ 2078.746835][ T29] [ 2078.758201][ T29] [ 2078.758201][ T29] Showing all locks held in the system: [ 2078.767279][ T29] 1 lock held by khungtaskd/29: [ 2078.785609][ T29] #0: ffffffff8d132060 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2078.798843][ T29] 2 locks held by getty/5526: [ 2078.805684][ T29] #0: ffff88802d1660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2078.818893][ T29] #1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2078.836927][ T29] 1 lock held by syz-executor/12488: [ 2078.845960][ T29] 1 lock held by udevd/18505: [ 2078.850717][ T29] #0: ffff888021cbd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2078.867703][ T29] 1 lock held by syz.6.3780/20856: [ 2078.873105][ T29] #0: ffffffff8d137900 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 2078.883704][ T29] [ 2078.886055][ T29] ============================================= [ 2078.886055][ T29] [ 2078.901170][ T29] NMI backtrace for cpu 1 [ 2078.905561][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2078.912773][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2078.922848][ T29] Call Trace: [ 2078.926145][ T29] [ 2078.929095][ T29] dump_stack_lvl+0x18c/0x250 [ 2078.933810][ T29] ? show_regs_print_info+0x20/0x20 [ 2078.939120][ T29] ? load_image+0x400/0x400 [ 2078.943654][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2078.948610][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2078.954802][ T29] ? _printk+0xde/0x130 [ 2078.958976][ T29] ? load_image+0x400/0x400 [ 2078.963506][ T29] ? load_image+0x400/0x400 [ 2078.968033][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2078.974136][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2078.980135][ T29] watchdog+0xf3d/0xf80 [ 2078.984287][ T29] ? watchdog+0x1e1/0xf80 [ 2078.988624][ T29] kthread+0x2fa/0x390 [ 2078.992686][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2078.997724][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2079.002328][ T29] ret_from_fork+0x48/0x80 [ 2079.006760][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2079.011365][ T29] ret_from_fork_asm+0x11/0x20 [ 2079.016144][ T29] [ 2079.019911][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2079.025598][ C0] NMI backtrace for cpu 0 [ 2079.025608][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2079.025623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2079.025632][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2079.025653][ C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 2079.025674][ C0] Code: 48 89 da e8 42 62 f4 ff 48 8b 74 24 30 48 c7 c7 20 86 1c 8b e8 31 62 f4 ff e8 4c 80 ff ff eb a8 e8 e5 e8 ff ff 0f 1f 44 00 00 0f 1e fa 48 89 fe 48 c7 c7 a0 85 1c 8b e9 dd fe ff ff cc cc cc [ 2079.025687][ C0] RSP: 0018:ffffc900001077d8 EFLAGS: 00000046 [ 2079.025699][ C0] RAX: 0000000000000046 RBX: ffff88801a2746dc RCX: 9f7ec3bbf2571a00 [ 2079.025710][ C0] RDX: 0000000000000000 RSI: ffffffff8b1c8580 RDI: ffffffff8acad640 [ 2079.025720][ C0] RBP: ffffc900001078f0 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 2079.025731][ C0] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffffffff8430d91f [ 2079.025742][ C0] R13: dffffc0000000000 R14: ffff88801a273c00 R15: 1ffff92000020f08 [ 2079.025753][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2079.025766][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2079.025776][ C0] CR2: 00007f3e93de92f8 CR3: 0000000078a02000 CR4: 00000000003526f0 [ 2079.025789][ C0] Call Trace: [ 2079.025794][ C0] [ 2079.025799][ C0] lock_release+0x15c/0x8c0 [ 2079.025821][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 2079.025839][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 2079.025855][ C0] ? __rwlock_init+0x150/0x150 [ 2079.025872][ C0] ? lock_chain_count+0x20/0x20 [ 2079.025891][ C0] _raw_spin_unlock_irqrestore+0x71/0x120 [ 2079.025908][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2079.025928][ C0] debug_check_no_obj_freed+0x51f/0x540 [ 2079.025955][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 2079.025972][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 2079.025986][ C0] kmem_cache_free+0xf8/0x270 [ 2079.026008][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 2079.026031][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 2079.026049][ C0] process_scheduled_works+0xa5d/0x15d0 [ 2079.026079][ C0] ? worker_attach_to_pool+0x380/0x380 [ 2079.026099][ C0] ? assign_work+0x3d2/0x5d0 [ 2079.026118][ C0] worker_thread+0xa55/0xfc0 [ 2079.026147][ C0] kthread+0x2fa/0x390 [ 2079.026160][ C0] ? pr_cont_work+0x560/0x560 [ 2079.026177][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2079.026193][ C0] ret_from_fork+0x48/0x80 [ 2079.026210][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2079.026223][ C0] ret_from_fork_asm+0x11/0x20 [ 2079.026254][ C0] [ 2079.044721][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2079.044736][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2079.044752][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2079.044762][ T29] Call Trace: [ 2079.044769][ T29] [ 2079.044776][ T29] dump_stack_lvl+0x18c/0x250 [ 2079.044806][ T29] ? show_regs_print_info+0x20/0x20 [ 2079.044827][ T29] ? load_image+0x400/0x400 [ 2079.044856][ T29] panic+0x2dc/0x730 [ 2079.044872][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2079.044897][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2079.044913][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2079.044935][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2079.044956][ T29] watchdog+0xf7c/0xf80 [ 2079.044977][ T29] ? watchdog+0x1e1/0xf80 [ 2079.045000][ T29] kthread+0x2fa/0x390 [ 2079.045016][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2079.045035][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2079.045050][ T29] ret_from_fork+0x48/0x80 [ 2079.045068][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2079.045083][ T29] ret_from_fork_asm+0x11/0x20 [ 2079.045118][ T29] [ 2079.054363][ T29] Kernel Offset: disabled [ 2079.393340][ T29] Rebooting in 86400 seconds..