last executing test programs: 4m1.785108754s ago: executing program 1 (id=2477): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000b40)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgget(0x1, 0x205) setresuid(0xee01, 0xee01, 0x0) msgget(0x1, 0x280) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0xff97) recvmmsg(r2, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x8000, 0xfffffffffffffebc) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 4m1.643240802s ago: executing program 1 (id=2478): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x56, 0x3, 0x4, 0x5df, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x800e, 0xe3a5, 0x1001000}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x82) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000240)=""/91, 0x47, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0xfffffc00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x2f, 0x9, 0x3, 0x7, 0xe, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x5b, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f0000000000040000002400118031f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b5"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x24000019) 4m1.405909668s ago: executing program 0 (id=2481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000800)={{}, 0xfd}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpgid(0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r5, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x1000, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000100fcf1fffffcdbdf250f0000005c8d3a187539aaaada40347c77f635752ce089a07d3643ac93b4e3560debcf2781c9519f14f760026b"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 4m1.175947316s ago: executing program 1 (id=2482): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x22, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000094) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x0, 0x9}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4m1.056090997s ago: executing program 0 (id=2483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x24) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @short={0x2, 0x3}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f80)={0x20, 0x35, 0x801, 0x70bd25, 0x25dfdbfd, {0x7}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x8c8}]}, @nested={0x4, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x4, {{0xa, 0x4e22, 0x7a, @local, 0x6}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x4e20, 0x5, @local, 0x2}}, {{0xa, 0x9, 0xb5, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}]}, 0x20c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x2b, @rand_addr=0x64010102, 0x4e24, 0x4, 'none\x00', 0x20, 0xb71, 0x3e}, 0x2c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r5, 0x4}, 0x38) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xb33c, r2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x10}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 4m0.995839776s ago: executing program 0 (id=2484): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xfff, 0x5f91, 0x5, 0x7}) 4m0.995659733s ago: executing program 2 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xe000, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xe, 0x100, @void}}}}}, 0x2e) 4m0.995091305s ago: executing program 0 (id=2486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = openat$qrtrtun(0xffffff9c, 0x0, 0x801) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000030000000800", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_smc(0x2b, 0x1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x57b2, &(0x7f00000002c0)={0x0, 0x98d2, 0x800, 0x3, 0x321}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x25, r0, 'id1\x00'}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) 4m0.665895699s ago: executing program 2 (id=2487): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x100082, 0x0) socket$kcm(0x28, 0x7, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xe401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc, 0x4f, 0x0, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0x4, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x201, 0x7, 0xd, 0x10, 0x25, 0xbc, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m0.167693683s ago: executing program 2 (id=2489): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x10000) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200004010e3d0706bf66a4505e430cd4a0edaf9e9a393b8ce789d5e465a5ed7a3a185251208e9652a3bf726261c0d15973bf89dd09aa531f59a39c317d9ae06", 0x42}], 0x1, 0x0, 0x5) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x7, 0x10000, 0xffff, 0xb78c, 0x8}) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f536", 0x99, 0x6000000000000000, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 3m59.935971923s ago: executing program 0 (id=2490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={{{}, {0x1}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0xb, 0x1}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x9c, 0x52, 0x81, 0x2}}, @val={0x6, 0x2}, @void, @void, @void}, 0x41) getsockname(r3, 0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0xd8) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x451, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x420, 0x1b, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x4, 0x2}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0xb, 0x5, 0xff, 0x5}, 0x3b, &(0x7f00000001c0)={0x5, 0xf, 0x3b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x34, 0x8000}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "d3e88df92c84501e69af9bc2ae9b1258"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x7, 0x800}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x8, 0xe, 0xb627, 0xbe}, @ptm_cap={0x3}]}, 0x1, [{0xeb, &(0x7f0000000240)=@string={0xeb, 0x3, "bafca07debed69b150072263f80e28448bb77984b79cf169c0e82498f9ffd4370d5bbdf0555f4652ad5341c20b4f4ce1610b603ad6023921380766607dacbf0afc4845f5d5d0cfdd04e72d5a82c5e31f72d8e7a79e94590de84947a5fed8f08ab83e8a3ee7f4e3d600ee1bb646342d3d106368b609557cbc4f697c08f1c24daa3d8297295abb829a2598dda9f125cf1668d690116fb9de209dc7e40092f3123554501517860a429455443837df7156fe46667d9a79e71815bfb5e49674db3a54476ca6333bcb7d3d3bb4339f919f43e166718ea8aa9451256ade4e507a41e09f3cd006a3f4c5719598"}}]}) 3m58.94560012s ago: executing program 2 (id=2492): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xeb5821e8c013de62, 0x0, 0x38}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x120, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x4}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x2, 'vlan1\x00', {}, 0xa}) 3m58.833755001s ago: executing program 2 (id=2494): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040010000900000022000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r3, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@kprobe_multi=@syms={0x0, 0x7, &(0x7f0000000600)=[&(0x7f0000000280)='\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f00000003c0)='GPL\x00', &(0x7f0000000400)='bridge0\x00', &(0x7f0000000480)='#$#{\xab\'\x00', &(0x7f00000005c0)='\x00'], 0x0, 0x7}}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 3m58.635954437s ago: executing program 0 (id=2495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000004c6aec11cf3e683bf5f2361feb3891e83b6deed04723b3e7059b44ea4bbfe006981609e81a6cbe808a4575593421895bd63def7ba7d3b63618ddd1aa866b83a167f931aa8134b85ad23188da4ab6e289106bd8f48f091610d85296e57a856c9d51d7c97684d63c3b2eaa24920aee9837de32cb8c2de6098bec974d59539fa4d80e94af94617313206f20ec15c5d38b650d0b8b20ca4313d36acc961bb13aeb223576656455f7d7340b5dc9f632cafb381869947458613fd5cef7e3dc4f55561b70f96049b709285f391332644be27334eddce3660a309b2bddcf8a9969b2ea4e8f5a29b2e93bf7b8", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250e0000000800010001000000"], 0x1c}}, 0x80) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @mcast1, 0x5}, 0x1c) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x5e23, @multicast1=0xe0000201}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44880) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmmsg$sock(r6, &(0x7f0000000900)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)="339c3592ba5dfb548b119fbd0d4b76b38c06e551aa509ca74ebf1f5de55092a4c6da1c14557d8d52c08382a1005d5a90f42fa9a6792c240cdba9a4ae9341e4ef457f3db67aae17a3f9b9716b4ea2cabf1bd96c112b80c86fe1cddd6df23928c629a01088c50236bb5c8fcfc9676107b73c66d42e3142bbac9593a765409ea84ccca3fcb3c638f4fce85258922c4238a0238fa7a5136a1cb602a6be781fa555fce852ef7d129315e86e9ea5799e2c3348f574d2a6f9d6ee4791ef523c573782713fb87902dcec7feaddb58070b77e2fb3b690287d16066dc6016f", 0xda}, {&(0x7f0000000540)="40fa157358c3017557d2eba6d8a9817e3c93243b045ec68ebaed2b65751b4cb05a2403c66c63a42eaa403e0aa5c14d8ea08474fa66951926fa45a8aa8fd5e10e32c1478e95725431ba974fcc93c364abaa26fbfca1dc3301c794239eff936849b236f44e9753d572533794", 0x6b}, {&(0x7f00000005c0)="5e4ae9e658f6bda5917c8940eebc233a9a1574149fa34e459e7f0fbfe475271b0aa616f21be272bd3806f1c9f980ed41fbbb378455d37d1815ccd96aa9d4d0f95c9856380adcf18d1ce8381aea274ac8767da621cd8cbc1d13f2bfcf26ac9b8a352f6a8411d75e5efaa34e1c3c400681709a4c7a8c73ceeb86657ad28b6596dd81ae16169cde46ddfb7632e8552950765303fb7e8c579a92119f1095bce93bdce0c8c7e52be56938ba60c0d96f4415c7427b3cf415435bbf5c96c5c0bb3f084d21d87a78533657191129caad9e6f9f206d118bca8effcefb994db5285298fa5edbf26c65a362525983882a8580a3e86ed53c1a2d36962ca765fd0d2b721f", 0xfe}], 0x3, &(0x7f0000000700)=[@timestamping={{0x10, 0x1, 0x25, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x48}}, {{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x80, @empty, 0x1ff}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="9d7d467d8919a808caffdc13a498b6171947653da6f8ce4994bb2eb0f38a097d6e5830aeb1e7e624fcd90a78cb10cfe8d1a203b6f247fd1dc82026681f0cfc1e1f5762e340dafaa3346b2fd0a882e3a3953c9ba21bff3fa57cbbc69862a7b3fb851ec3cd7ed5e74a4d75a9480eea8e656faf84ea8a1602b832850d52aa9245a5595becb80bb05af5fea9b58b", 0x8c}], 0x1}}], 0x2, 0x20040811) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m57.975333851s ago: executing program 1 (id=2498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x30, r1, 0x400, 0xfff7ffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac04]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 3m57.77557479s ago: executing program 1 (id=2499): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x7, 0xfa, 0xa4, 0x2, 0x401, 0x5, 0x1, 0x5, 0x5, 0x2, 0xb7, 0x0, 0x3, 0x7, 0x7ff, 0x7fff, 0x1, 0x7ff, 0x2, 0x3, 0x8, 0xffffcb2a}}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000014c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="9bf8ffb5da9d8edbe350e61f1e7211e84b34cb3857a260ddb53ae517462426c4d92b3b4909ca4d61391798a98e400a5fba4f07241282", @ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000340)='GPL\x00', 0x6, 0xbb, &(0x7f00000003c0)=""/187, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0xfffffffffffffe07) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket(0x23, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1068, 0x0) 3m57.325093561s ago: executing program 2 (id=2500): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x10000) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200004010e3d0706bf66a4505e430cd4a0edaf9e9a393b8ce789d5e465a5ed7a3a185251208e9652a3bf726261c0d15973bf89dd09aa531f59a39c317d9ae06", 0x42}], 0x1, 0x0, 0x5) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x7, 0x10000, 0xffff, 0xb78c, 0x8}) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f536", 0x99, 0x6000000000000000, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 3m56.561917222s ago: executing program 1 (id=2501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0xfff, 0x226501) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r7, 0x2f, 0x10, 0x4, @void, @value=r7, @void, @void, r8}, 0x20) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='8\x00\x00\x00(\x00\x00\x00', @ANYRES32, @ANYBLOB="020000003e337863b0f6035b80e23381942b593a08fd0000010000000000a66873d30635cb8604ef9a0385d4e24aef69ff8795ab9bdbf76b6a94ba9ddc1175c7fa76", @ANYRES32=r10, @ANYRES64=r8], 0x20) r11 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r12 = dup(r5) write$UHID_INPUT(r12, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x4, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0], 0x20}}], 0x1, 0x1000) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 3m43.247964792s ago: executing program 32 (id=2495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000004c6aec11cf3e683bf5f2361feb3891e83b6deed04723b3e7059b44ea4bbfe006981609e81a6cbe808a4575593421895bd63def7ba7d3b63618ddd1aa866b83a167f931aa8134b85ad23188da4ab6e289106bd8f48f091610d85296e57a856c9d51d7c97684d63c3b2eaa24920aee9837de32cb8c2de6098bec974d59539fa4d80e94af94617313206f20ec15c5d38b650d0b8b20ca4313d36acc961bb13aeb223576656455f7d7340b5dc9f632cafb381869947458613fd5cef7e3dc4f55561b70f96049b709285f391332644be27334eddce3660a309b2bddcf8a9969b2ea4e8f5a29b2e93bf7b8", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250e0000000800010001000000"], 0x1c}}, 0x80) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @mcast1, 0x5}, 0x1c) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x5e23, @multicast1=0xe0000201}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44880) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmmsg$sock(r6, &(0x7f0000000900)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)="339c3592ba5dfb548b119fbd0d4b76b38c06e551aa509ca74ebf1f5de55092a4c6da1c14557d8d52c08382a1005d5a90f42fa9a6792c240cdba9a4ae9341e4ef457f3db67aae17a3f9b9716b4ea2cabf1bd96c112b80c86fe1cddd6df23928c629a01088c50236bb5c8fcfc9676107b73c66d42e3142bbac9593a765409ea84ccca3fcb3c638f4fce85258922c4238a0238fa7a5136a1cb602a6be781fa555fce852ef7d129315e86e9ea5799e2c3348f574d2a6f9d6ee4791ef523c573782713fb87902dcec7feaddb58070b77e2fb3b690287d16066dc6016f", 0xda}, {&(0x7f0000000540)="40fa157358c3017557d2eba6d8a9817e3c93243b045ec68ebaed2b65751b4cb05a2403c66c63a42eaa403e0aa5c14d8ea08474fa66951926fa45a8aa8fd5e10e32c1478e95725431ba974fcc93c364abaa26fbfca1dc3301c794239eff936849b236f44e9753d572533794", 0x6b}, {&(0x7f00000005c0)="5e4ae9e658f6bda5917c8940eebc233a9a1574149fa34e459e7f0fbfe475271b0aa616f21be272bd3806f1c9f980ed41fbbb378455d37d1815ccd96aa9d4d0f95c9856380adcf18d1ce8381aea274ac8767da621cd8cbc1d13f2bfcf26ac9b8a352f6a8411d75e5efaa34e1c3c400681709a4c7a8c73ceeb86657ad28b6596dd81ae16169cde46ddfb7632e8552950765303fb7e8c579a92119f1095bce93bdce0c8c7e52be56938ba60c0d96f4415c7427b3cf415435bbf5c96c5c0bb3f084d21d87a78533657191129caad9e6f9f206d118bca8effcefb994db5285298fa5edbf26c65a362525983882a8580a3e86ed53c1a2d36962ca765fd0d2b721f", 0xfe}], 0x3, &(0x7f0000000700)=[@timestamping={{0x10, 0x1, 0x25, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x48}}, {{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x80, @empty, 0x1ff}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="9d7d467d8919a808caffdc13a498b6171947653da6f8ce4994bb2eb0f38a097d6e5830aeb1e7e624fcd90a78cb10cfe8d1a203b6f247fd1dc82026681f0cfc1e1f5762e340dafaa3346b2fd0a882e3a3953c9ba21bff3fa57cbbc69862a7b3fb851ec3cd7ed5e74a4d75a9480eea8e656faf84ea8a1602b832850d52aa9245a5595becb80bb05af5fea9b58b", 0x8c}], 0x1}}], 0x2, 0x20040811) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m42.229523953s ago: executing program 33 (id=2500): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x10000) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200004010e3d0706bf66a4505e430cd4a0edaf9e9a393b8ce789d5e465a5ed7a3a185251208e9652a3bf726261c0d15973bf89dd09aa531f59a39c317d9ae06", 0x42}], 0x1, 0x0, 0x5) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x7, 0x10000, 0xffff, 0xb78c, 0x8}) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f536", 0x99, 0x6000000000000000, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 3m40.721499117s ago: executing program 34 (id=2501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0xfff, 0x226501) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r7, 0x2f, 0x10, 0x4, @void, @value=r7, @void, @void, r8}, 0x20) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='8\x00\x00\x00(\x00\x00\x00', @ANYRES32, @ANYBLOB="020000003e337863b0f6035b80e23381942b593a08fd0000010000000000a66873d30635cb8604ef9a0385d4e24aef69ff8795ab9bdbf76b6a94ba9ddc1175c7fa76", @ANYRES32=r10, @ANYRES64=r8], 0x20) r11 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r12 = dup(r5) write$UHID_INPUT(r12, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x4, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0], 0x20}}], 0x1, 0x1000) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 2m23.563023157s ago: executing program 6 (id=2646): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x56, 0x3, 0x4, 0x5df, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x800e, 0xe3a5, 0x1001000}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000240)=""/91, 0x47, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0xfffffc00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x24000019) 2m22.713749434s ago: executing program 6 (id=2649): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r6, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000140)={0xe000001b}) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 2m20.773192458s ago: executing program 3 (id=2655): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x11, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r2, 0x3, {0x100000001, 0x407}}, 0x1) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r7, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, 0x0, &(0x7f00000001c0)) getitimer(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/104, 0x68}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/130, 0x82}], 0x6, 0x1, 0x2) 2m19.835665425s ago: executing program 6 (id=2656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40002, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='vegas', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x14201, 0x0) 2m19.095885618s ago: executing program 3 (id=2660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffd, 0x8, &(0x7f0000006680)) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r8, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}}, 0x4001844) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, 0x0) epoll_create1(0x0) 2m18.87434411s ago: executing program 6 (id=2662): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x30, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000940)=""/251, 0xfb}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x6b7b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, [0x1200000000000, 0x1, 0x3, 0xffffffffffffffff, 0xec, 0x2, 0x5, 0x1578, 0x6, 0x100000009, 0x2001, 0x5, 0x9, 0x4f, 0x4492]}, &(0x7f0000000300)=0xfc) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x0, 0x4000, 0x0, 0xb45, 0x100000000006, 0xa, 0x0, 0x80000003}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r5, 0x0, &(0x7f00000001c0), 0x100000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd16e, 0x48021) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f00000001c0)={0xd55, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000240)={r9, 0x2, 0x20, 0xe8, 0x6}, &(0x7f0000000080)=0x18) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2m18.004027326s ago: executing program 6 (id=2663): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000818000001"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@ax25={{0x3, @bcast, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0, 0x0, 0x0, 0xff7f}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffe6c, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x4004000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x3, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYRES16=r0]) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x60000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x7f, 0x9}, {0x80a6000, 0xdddd0000, 0x0, 0x0, 0x2, 0x0, 0xfd, 0x1, 0x7, 0xbf, 0x76}, {0xb000, 0x54000, 0xf, 0x0, 0x28, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x1, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x5, 0x9, 0x9, 0x2, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xa, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x2f, 0x3}, {0x200000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6, 0x80}, {0xeeee8000, 0x6000, 0xe, 0x4, 0x80, 0x0, 0xa1, 0x20, 0x2, 0x8, 0x4}, {0x2, 0x50000, 0x8, 0x5, 0xff, 0x2, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x40000, 0x8cc}, {0x40000, 0x80f3}, 0x5df8ffd3, 0x0, 0x80a0000, 0x110, 0xb, 0x1, 0xd000, [0x8001, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m16.532940789s ago: executing program 6 (id=2665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d09010000000000950000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r7) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x40085503, &(0x7f0000000540)=0x800018) write(r0, &(0x7f0000000340)="41000000010007", 0x7) fchdir(r0) 2m16.164720705s ago: executing program 3 (id=2666): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m16.16431307s ago: executing program 3 (id=2667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x8, 0x6, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec0}, 0x0) 2m16.08378525s ago: executing program 3 (id=2669): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote, 0xfffffffb}, 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0xc0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000480)=0x2, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m15.220026452s ago: executing program 3 (id=2670): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x3, 0x5, 0x9, 0x7, 0x9, 0x10, 0x0, 0x1, {0xffff1c72, 0x5, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000814788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m0.5920307s ago: executing program 35 (id=2665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d09010000000000950000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r7) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x40085503, &(0x7f0000000540)=0x800018) write(r0, &(0x7f0000000340)="41000000010007", 0x7) fchdir(r0) 2m0.104135964s ago: executing program 36 (id=2670): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x3, 0x5, 0x9, 0x7, 0x9, 0x10, 0x0, 0x1, {0xffff1c72, 0x5, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000814788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.602784281s ago: executing program 4 (id=3053): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) pipe(&(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @remote}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 6.072277167s ago: executing program 8 (id=3063): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff, 0x9}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0x9, 0xa, 0x1, 0x8}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x84, "ab5b284d16dd8b0c16d5fb0dbe61cb29919c88924b486703eff7011a9f82f0c3ef23c6b199a6e5d9e8a2ab24ca73219c380b354f610e84e809f103064b25252a48dcebe698d891d6417956e1c888efcb09435f7efd96ea42ae9d3b47ab815132998aa655a9e5f5aa2116fa38ccc18c218c9e1a7f334e69df4a6e1cbb52fc4fea48f15ed8"}, &(0x7f00000001c0)=0x8c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}]}, &(0x7f00000002c0)=0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, &(0x7f0000000400)={r3, &(0x7f0000000300)='\x00', 0x12202, &(0x7f0000000340)={@_ha_fsid={[0x9, 0xe0]}, {0x81, 0xbfc, 0xa0, 0x8000000000000000}}, 0xa1a, &(0x7f0000000380), &(0x7f00000003c0)}) r5 = openat$vnet(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000480)={{r5}, 0x7, 0x2, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r6, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bb60220ef35040ee74afcc64df"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x4000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0xfffffff7, 0x2, 0x41, r4, 0xb4, '\x00', 0x0, r4, 0x5, 0x0, 0x3, 0xa}, 0x50) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000680)={0xe, 0x6, 0x7, 0x9, 0x2, 0x0, [{0x7, 0x6, 0x3fcc999d, '\x00', 0x300}, {0x0, 0xa, 0x7, '\x00', 0x40}]}) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000740)) r8 = openat$dir(0xffffff9c, &(0x7f0000000780)='./file0\x00', 0x244002, 0x8) file_getattr(r8, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x18, 0x1000) openat$tun(0xffffff9c, &(0x7f0000000840), 0x7b991a420f33c468, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x3) mkdirat(r8, &(0x7f0000000880)='./file0\x00', 0x8) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000900)=@attr_other={0x0, 0x80000000, 0x9, &(0x7f00000008c0)=0x1}) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x19) socket$nl_route(0x10, 0x3, 0x0) dup(r4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x40, 0xffffffff, {{0x3a, 0x4, 0x1, 0x9, 0xe8, 0x65, 0x0, 0x81, 0x29, 0x0, @loopback, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0x2a, 0x3, 0x2, [{@multicast2, 0x8}, {@loopback, 0x10001}]}, @rr={0x7, 0xf, 0xf0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x9, [0xffff, 0x80000000, 0xfff]}, @timestamp={0x44, 0x24, 0x80, 0x0, 0x3, [0x7, 0x2, 0xb99, 0x4, 0xffffffff, 0x40, 0x0, 0x2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x9d, [@private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x2, 0x7, "cd89e423b7"}, {0x0, 0xb, "8d4505e38090038d9b"}, {0x7, 0xb, "8bc970c4cd64700e16"}, {0x6, 0xf, "ab022ffe089c682577b1d35a66"}, {0x6, 0x7, "b419d29333"}, {0x6, 0x2}, {0x0, 0x6, "541eecb2"}, {0x0, 0xb, "48a387644847fc9418"}, {0x1, 0x6, "8ac820b9"}]}, @lsrr={0x83, 0x7, 0x4d, [@empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000ac0)={'erspan0\x00', r10, 0x7, 0x7, 0x8, 0x80000000, {{0x2a, 0x4, 0x3, 0x38, 0xa8, 0x67, 0x0, 0xe6, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x44, 0xc9, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x5}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3e}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xba}, {@local, 0x6}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x24, 0x19, 0x1, 0xa, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x54846688}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x9}]}, @lsrr={0x83, 0x2b, 0x99, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2, @multicast2, @private=0xa010102, @private=0xa010101, @loopback, @multicast2]}]}}}}}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000c00), 0x4) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000c40)={0x2, 0x2}) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) 6.022679644s ago: executing program 4 (id=3064): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 5.921021181s ago: executing program 4 (id=3066): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_setup(0x30aa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r3, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="8dad12e6bce8a126a41242c03a697451a6dd9191cea4980cba8e931cf69d6720b67465d4"], 0xb4}, 0x1, 0x0, 0x0, 0x40488f0}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000f500003e6dbbe219572f9d7ffae2f9ed058d4f62a77b2ce136303bdbdfc16bd1d92235040000000000000047f6d51b967b069ad210c5256e0aa828482da8ed076e32a00a04749759c526ee15154cdcbab92342a8d86b1a020b10fe32b9b6a280ea273c688da369242a0d46860dec71116d053f5939fc1d09dafb4a4b2e00a7201165c8df3f69e042adff552699ab1acb9b0954950967e1eb503ffe55617826a12acc0e5daafb0281d98f7b635268179d86744ca0f2c5c0ad151665c8a79c98290d035d", @ANYBLOB='MI', @ANYBLOB="0300000000000000280012800a00010076786c616e00a3a6facc809bbc5a8cc2de7f65444a145cc73a72bccae44d2ea069656ca8b0417f"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c15}, 0xdfa8fd3a2ac9bbc8) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x48}) 5.920590213s ago: executing program 8 (id=3067): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f00000007c0)={{&(0x7f00000002c0)=[{0x2, 0x8, 0x7, {0x1, 0x8000000000000001}, 0x93e5, 0xfff, 0x7}, {0x3, 0x953b, 0x8000000000000000, {0x5, 0xce}, 0x49, 0x6, 0x1}], 0x2, 0x40, 0x244e, 0x7fff}, {&(0x7f0000000380)=[{0x2, 0x7}, {0x0, 0x200}], 0x2, 0x10, 0x4, 0x14b}, {&(0x7f00000003c0)=[0x0, 0x180, 0x6], 0x3, 0x8, 0x8020, 0x2}, {&(0x7f00000005c0)=[{0xb81, 0x9, 0x2, 0x100000001, 0x6}, {0x3, 0x5, 0x9, 0xfffffffffffffffd, 0x8}, {0x0, 0x2040000, 0x6a13, 0xf, 0x9}, {0x7fffffff, 0x0, 0x10, 0x5}, {0x5, 0x5, 0x4, 0xec39}, {0x7, 0x1, 0xa5, 0x401, 0xd793}, {0xc, 0xfff, 0x537, 0x6, 0x7ea}, {0x7, 0x6, 0xfffffffffffffc01, 0x7, 0x2}, {0xf, 0x2, 0x0, 0xffffffff80000001, 0x1ff}], 0x9, 0x28, 0x1, 0x3}, {&(0x7f0000000780)=[0x6, 0xe, 0x5], 0x3, 0x8, 0x3ff, 0x5}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xd89c, 0xc000, 0x1, 0x20002f7}) syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b4, 0x40, 0x1, 0x6, 0x0, r5}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) (async) syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b4, 0x40, 0x1, 0x6, 0x0, r5}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) r6 = socket(0xa, 0x3, 0xff) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r7, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r6, 0x0, 0x300, 0x0, 0x0, 0x2}]) (async) io_submit(r7, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r6, 0x0, 0x300, 0x0, 0x0, 0x2}]) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000280)=[{}, {}], 0x0, 0x0) (async) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000280)=[{}, {}], 0x0, 0x0) close(r2) (async) close(r2) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x48000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000180)=0x7) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 5.832053474s ago: executing program 8 (id=3068): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xc0200, 0x0) 5.772401411s ago: executing program 8 (id=3069): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x800002, 0x5016c0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x14, &(0x7f0000000100)={0x0, 0x11, 0xda, {0xda, 0x5, "48c10a8573bcf0f7c91f7eeda290f26da2d5c8f5437615a3e5605e11861a9025ff93ff52982367e7ca9fbc4a7d432c0275252791f145e95bf1f523c3625ca31e263e89d8efaa9062d2db52765870db7716963bea8e5a4201e2920ca40adb418a70c2f26dfc1d21109b43900d10d347f1b08d043782cfe1b702bb560e39d9b36104ebcffb58c7539f38c425a26c87dd94d61cc40f196b490415a3329e1064fbbac5f5376900c0b34a5a82912fd27d16ded55805ec8b7b2ec28d7de93b7743f9f64578fa6a146c23d4146a0a56a3ec20c3887ebef34e77fb16"}}, &(0x7f0000000200)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "02c43a6b66a81d77927a0b6d6c43e585637b983c4f3161830674bb47eb5abbd2c4f3623b6a3525278f099728c52481e992c5934ff92bec36c090f83334436c22259bdf323db62c85bc136a0503a0c136f3880779ca0cf9c43e0431c55aae4649005473fa04fd69b4129a2f"}}, &(0x7f0000000280)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x1a, "c092cebf"}, @local=@item_4={0x3, 0x2, 0x5, "d9819436"}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc5c, 0x4a, 0x1, {0x22, 0xb26}}}}, &(0x7f0000000580)={0x18, &(0x7f0000000380)={0x40, 0xf, 0xb6, "8e946d3f2eb58eecd67fd3029c91bd14779f4aeccedd02b3b2640c59f0043d086a8121ca2bdc9c3e6cfe20f885d25e1ff81856992fb72454a4a0897f3120be7c102791cb439d4ca7f70f1b2bae56abe66231dedb6d4d8b7f2426397b177c003c5575512d2a1961c0fdc6ecc8f5441d25eedee0d09fa21c8c4d5db2e9e40acccf8be2ffc14c92bc143b136623ec64e765255e2667ae107307e3f1308f007ea4456c121b7f20830bf5d62c7783bb51c356a98bf3f59a80"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x1, 0x42, "8e12628fd0aeb1d98d2d04260020f1e04652f99d3ad7880f0e1840685fd5829989d97729ef91aea3ece3563c46b4ff3aef8eb0417b092a004543240d415ca2cafa00"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x3}}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x8, &(0x7f0000000040)={0x18, "00001bce000400010100000000ffffffffffffffff00"}}) 4.949468363s ago: executing program 4 (id=3072): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x32d) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000200)={{r0, &(0x7f0000000080)='-\x00', 0x42000, &(0x7f00000000c0)={@align=0x2, {0x7, 0x0, 0x3, 0x6807}}, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x1}, {[0xffffa921, 0x5, 0x0, 0x3]}, 0x2a, 0x16, &(0x7f00000001c0)=""/22}) write$char_usb(r1, &(0x7f00000002c0)="732ceda1a01fab4dbc357ffcc2ce5ce82c40d178422302556f998f983cae43c75baa206b4eae4ece687646ea3942414946c0103fe545b05cd94a36fe13009d5df95794e22ae504b3decbc840603f4be9d8de7621bbf69705c6cd307d5a0830c553555c849c772c7aec20763f312d7a87a536cab1ec31b1a34bf527bf249e440f30470fef834742175abb117290eb57b49b9b11548cabc60fff20b6abbd4415b687021421b1df5cc4491c8d4b824854c2d859e9", 0xb3) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd7000fedbdf25037c00000400c280100001800c001080080002000a010102040008"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 4.811939859s ago: executing program 5 (id=3073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x6, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000280)=""/93, 0x5d, 0x40002040, &(0x7f0000000300)={0xa, 0x4e22, 0x3f, @empty, 0x80010000}, 0x1c) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x27}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}, 0x4) 4.464740992s ago: executing program 5 (id=3074): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4.419790693s ago: executing program 5 (id=3075): openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x3c5c00, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x52}, 0x28) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="4c715433040d3bc162304990f8999928934b1c16aa580ce3761d6c3a82e70a70e87075e183d501e5864561a34eda5f3594a64cfa429dc48ed384cffcd06775db74308e2381975d0bcc631f4f101c412c938290516d2c42aac653dda0bc8801467aec6e5413d052d5077ec75d460ac7314fdd07e7b5175c4e48bca4cb29", 0x7d}, {&(0x7f0000000180)="a4e24e825a4bf03d5ec02843ef86e3f69c1d09beb7f2a5f135917aeea10ec9d784081b7b225ecd5a410980de14a9102d1065dacdf688d088b1a8033b2a4fb870854f27986ef7c6b6773b69cae52a2b3d99", 0x51}], 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) 4.391405705s ago: executing program 7 (id=3076): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x8}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x45}, 0x28) (async, rerun: 32) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (rerun: 32) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0xc6f8, 0x413, &(0x7f0000000000)="42fa87ef0ba66ec0357e85b4b78429ef77f5efe48ef6ffd4c45fca257f17b6e027b6301e50d3caddf705f411a86d10043a552e4f23a82fb6448ff55322f0bcf755c0352f62f34cb78ba9d61f77d227718648c7b8d00a499da58a272f6af76438314b4fc2946525a0412af8624637fa8126de73b81a71041325288a55162105239960000fffe163df5fead134065a09a64736b68808395679d14def8d0bba840baeb3e2226fe7b6964c16700f0e1ad10b990fc3c5ce330ddd9c618bac3da90dcbce5a6795f6f9e225ec48cfe743266a0101f31033222363deb7ea6bbfe1f3634c40", &(0x7f0000000100)="85a91d11830ea1ac45b9591cb0cce97703821af68fa881a9ea9502099b3792d2aa2da74b1197", 0xe1, 0x26}) 4.332424351s ago: executing program 7 (id=3077): r0 = socket(0x840000000002, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060108000000000000000000000040050001000600000000000900020073797a31000000000c00078008000840000000d811000300686173683a69702c6d61726b00000000000000000000000000000000000071e2e56c0713b4355ee39b91ae09016b28f9d0823f39b201e49edc470a66be970ee4a185d664d0e76a45805f3201d9aafca583cfe05b16181a7fd63bd24a83eba15fcb1a4a56185a7c7a5f994040781808d7cb17ef641e5ce8a1d37de561217fbb"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x4ea15a81ba351fdd, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x4000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmctl$SHM_INFO(0x0, 0xe, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xc}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8a}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) 4.278735433s ago: executing program 5 (id=3078): socket(0x840000000002, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x1400000, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4.276710608s ago: executing program 5 (id=3079): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000580)=[0x0], 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x25, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x8, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x26], 0x0, 0x2}) r6 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x40700, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000100)) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xd, 0x4}, 0x4, 0x101, 0x0, 0x6, 0x0, 0x8}}) dup2(r6, r6) 4.152760125s ago: executing program 7 (id=3080): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) eventfd2(0x9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r5, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r8 = dup(r1) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x9c, r9, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x9c}}, 0x4) 3.242246511s ago: executing program 8 (id=3081): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x31, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000080)={0xa, 0x4}, 0x34000) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000540)={0x0, 0x0, 0x20, 0xff, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.292714709s ago: executing program 8 (id=3082): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.679736395s ago: executing program 7 (id=3083): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.679515306s ago: executing program 4 (id=3084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500"], 0x88}}, 0x0) 1.587700305s ago: executing program 4 (id=3085): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x17, 0x1, {0x8, './cgroup'}}, 0x11) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)='|') ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f00000004c0)="8059186178a6acfacb9e677cf53b7c7bd756aaf47769ca9fe3805cdb765bc39e1e776f0516cc8c5cf6d8f17f387551b50f8785654842e6edc20210becb3d1db535f7d4f00800f619215af92162c80fdeaafccd598248785fbd84ed8b506c22979fc92daea0c03dea525d67f2fad484ba2782209b52a5bcc6bf6219b6693486a3fe109f5188ae77edda74cff7c79f370023bc32c1923512af2dfae3890a38a7eb5960") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac01, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x48020}, 0x0) 1.451972964s ago: executing program 7 (id=3086): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f0, 0x0, 0x0, 0x4000000, 0x7}) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}}, 0xc000) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40", 0x9c}, {&(0x7f0000000180)}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f", 0x11}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xc96}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private, @private=0xa010100}}}], 0x18}, 0x0) 91.962354ms ago: executing program 5 (id=3087): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000037}, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_create_resource$binfmt(0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20041040) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000001000/0x2000)=nil}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) sendto$unix(r5, &(0x7f0000000440)="36d9a30300c131d730b1abaedb511987926923474db54897e9c2fd59e6998f09b236349faf77fe06a0ee70386c198850d04b7cb0fc69253ae8806a53f866025b99844a7a5696", 0x46, 0x4008801, 0x0, 0x0) 0s ago: executing program 7 (id=3088): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c00)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c00)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000180)) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000180)=0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000200)=@polexpire={0x11c, 0x1b, 0x4, 0x70bd27, 0x25dfdbff, {{{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e22, 0x80, 0xa, 0x60, 0xa0, 0xe, r9, r10}, {0x8fa, 0x7, 0xffffffffffff7fff, 0x0, 0x1, 0x9, 0x1, 0xfffffffffffffff7}, {0x1, 0x3, 0x6, 0x100000001}, 0x80000001, 0x6e6bb1, 0x2, 0x1, 0x1, 0x1}, 0x1}, [@lifetime_val={0x24, 0x9, {0x9, 0x8001, 0x7fff, 0x5e7}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in=@loopback, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 727.626110][T15468] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 727.626138][T15468] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 727.626170][T15468] genl_family_rcv_msg_doit+0x214/0x300 [ 727.626198][T15468] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 727.626223][T15468] ? genl_get_cmd+0x3e7/0x760 [ 727.626253][T15468] ? bpf_lsm_capable+0x9/0x10 [ 727.626272][T15468] ? security_capable+0x80/0x260 [ 727.626299][T15468] ? ns_capable+0xd2/0xf0 [ 727.626348][T15468] genl_rcv_msg+0x560/0x800 [ 727.626380][T15468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 727.626408][T15468] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 727.626435][T15468] netlink_rcv_skb+0x159/0x420 [ 727.626459][T15468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 727.626486][T15468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 727.626519][T15468] ? rcu_is_watching+0x12/0xc0 [ 727.626546][T15468] genl_rcv+0x28/0x40 [ 727.626575][T15468] netlink_unicast+0x585/0x850 [ 727.626604][T15468] ? __pfx_netlink_unicast+0x10/0x10 [ 727.626638][T15468] netlink_sendmsg+0x8b0/0xda0 [ 727.626667][T15468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.626694][T15468] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 727.626725][T15468] ____sys_sendmsg+0x9e1/0xb70 [ 727.626747][T15468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.626773][T15468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.626794][T15468] ? __pfx___futex_wait+0x10/0x10 [ 727.626821][T15468] ? __pfx_futex_wake_mark+0x10/0x10 [ 727.626864][T15468] ___sys_sendmsg+0x190/0x1e0 [ 727.626893][T15468] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.626930][T15468] ? find_held_lock+0x2b/0x80 [ 727.626967][T15468] __sys_sendmsg+0x170/0x220 [ 727.626988][T15468] ? __pfx___sys_sendmsg+0x10/0x10 [ 727.627018][T15468] ? rcu_is_watching+0x12/0xc0 [ 727.627042][T15468] __do_fast_syscall_32+0xe7/0x950 [ 727.627072][T15468] do_fast_syscall_32+0x32/0x70 [ 727.627098][T15468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 727.627119][T15468] RIP: 0023:0xf706efcc [ 727.627134][T15468] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 727.627151][T15468] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 727.627170][T15468] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000100 [ 727.627182][T15468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.627194][T15468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 727.627204][T15468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 727.627214][T15468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 727.627238][T15468] [ 728.301331][ T5972] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 728.335197][ T5972] usb 10-1: device descriptor read/8, error -71 [ 728.571638][ T5972] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 728.592236][ T5972] usb 10-1: device descriptor read/8, error -71 [ 728.656677][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 728.701495][ T5972] usb usb10-port1: unable to enumerate USB device [ 728.916999][T15487] input: syz1 as /devices/virtual/input/input43 [ 729.128671][T15490] : renamed from gre0 (while UP) [ 730.019090][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2596'. [ 730.983578][T15513] IPv6: addrconf: prefix option has invalid lifetime [ 731.238543][T15516] bridge0: port 3(syz_tun) entered blocking state [ 731.242202][T15516] bridge0: port 3(syz_tun) entered disabled state [ 731.245485][T15516] syz_tun: entered allmulticast mode [ 731.256726][T15516] syz_tun: entered promiscuous mode [ 731.259150][T15516] bridge0: port 3(syz_tun) entered blocking state [ 731.262498][T15516] bridge0: port 3(syz_tun) entered forwarding state [ 731.329097][T15523] : renamed from gre0 (while UP) [ 731.511079][ T24] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 731.621000][ T5958] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 731.648387][T15526] Invalid logical block size (2571) [ 731.661031][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 731.666474][ T24] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 731.670437][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.674140][ T24] usb 10-1: Product: syz [ 731.676542][ T24] usb 10-1: Manufacturer: syz [ 731.678650][ T24] usb 10-1: SerialNumber: syz [ 731.821009][ T5958] usb 11-1: device descriptor read/64, error -71 [ 732.000222][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2603'. [ 732.000670][ T6053] hid-generic 0003:0004:FFFFFFFE.0033: unknown main item tag 0x0 [ 732.003262][T15521] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2603'. [ 732.004567][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 732.010146][ T6053] hid-generic 0003:0004:FFFFFFFE.0033: unknown main item tag 0x0 [ 732.016343][ T6053] hid-generic 0003:0004:FFFFFFFE.0033: unknown main item tag 0x0 [ 732.021604][ T6053] hid-generic 0003:0004:FFFFFFFE.0033: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 732.024805][T15521] PKCS8: Unsupported PKCS#8 version [ 732.033797][T15521] fuse: Unknown parameter ' ' [ 732.081036][ T5958] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 732.206592][ T24] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 732.214509][ T24] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 732.218844][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 732.221977][ T24] usb 10-1: media controller created [ 732.228466][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.231072][ T5958] usb 11-1: device descriptor read/64, error -71 [ 732.239698][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 732.256604][ T24] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 732.263450][ T24] usb 10-1: USB disconnect, device number 12 [ 732.341647][ T5958] usb usb11-port1: attempt power cycle [ 732.591366][T15535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 732.593701][T15535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 732.659137][T15535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 732.700999][ T5958] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 732.731461][ T5958] usb 11-1: device descriptor read/8, error -71 [ 732.733512][T15535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 732.741051][T15535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 732.822882][T15535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 732.902824][T15535] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 732.905306][T15535] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 732.971803][T15535] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 732.981184][ T5958] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 733.011788][ T5958] usb 11-1: device descriptor read/8, error -71 [ 733.102523][T15548] bridge1: entered promiscuous mode [ 733.104360][T15548] bridge1: entered allmulticast mode [ 733.108283][T15548] team0: Port device bridge1 added [ 733.131590][ T5958] usb usb11-port1: unable to enumerate USB device [ 733.191137][ T1157] syzkaller0: tun_net_xmit 76 [ 733.194908][ T1157] syzkaller0: tun_net_xmit 48 [ 733.211145][ T5524] syzkaller0: tun_net_xmit 76 [ 733.216860][T15548] syzkaller0: create flow: hash 2751759257 index 1 [ 733.233404][T15548] bridge0: port 3(team0) entered blocking state [ 733.235646][T15548] bridge0: port 3(team0) entered disabled state [ 733.239876][T15548] team0: entered allmulticast mode [ 733.242059][T15548] team_slave_0: entered allmulticast mode [ 733.244292][T15548] team_slave_1: entered allmulticast mode [ 733.252534][T15548] team0: entered promiscuous mode [ 733.254698][T15548] team_slave_0: entered promiscuous mode [ 733.257222][T15548] team_slave_1: entered promiscuous mode [ 733.331232][ T5827] syzkaller0: tun_net_xmit 76 [ 733.401133][ T5958] syzkaller0: tun_net_xmit 76 [ 733.411149][ T5958] syzkaller0: tun_net_xmit 76 [ 733.521177][ T5958] syzkaller0: tun_net_xmit 76 [ 733.604026][T15547] syzkaller0: delete flow: hash 2751759257 index 1 [ 734.256915][ T5958] hid-generic 0003:0004:FFFFFFFE.0034: unknown main item tag 0x0 [ 734.259477][ T5958] hid-generic 0003:0004:FFFFFFFE.0034: unknown main item tag 0x0 [ 734.263348][ T5958] hid-generic 0003:0004:FFFFFFFE.0034: unknown main item tag 0x0 [ 734.270948][ T5958] hid-generic 0003:0004:FFFFFFFE.0034: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 734.307315][T15562] fido_id[15562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 734.661532][T15160] Bluetooth: hci2: command 0x0c1a tx timeout [ 734.741410][T15160] Bluetooth: hci1: command 0x0c1a tx timeout [ 734.926563][T15574] kvm: emulating exchange as write [ 734.981550][T15160] Bluetooth: hci6: command 0x0405 tx timeout [ 736.438911][ T5958] hid-generic 0003:0004:FFFFFFFE.0035: unknown main item tag 0x0 [ 736.442000][ T5958] hid-generic 0003:0004:FFFFFFFE.0035: unknown main item tag 0x0 [ 736.444551][ T5958] hid-generic 0003:0004:FFFFFFFE.0035: unknown main item tag 0x0 [ 736.448037][ T5958] hid-generic 0003:0004:FFFFFFFE.0035: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 736.741534][T15160] Bluetooth: hci2: command 0x0c1a tx timeout [ 736.821445][T15160] Bluetooth: hci1: command 0x0c1a tx timeout [ 737.061191][T15160] Bluetooth: hci6: command 0x0405 tx timeout [ 738.822023][T15160] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.901814][T15160] Bluetooth: hci1: command 0x0c1a tx timeout [ 739.141023][T15160] Bluetooth: hci6: command 0x0405 tx timeout [ 745.812026][T15570] team0: No ports can be present during mode change [ 745.944264][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2625'. [ 745.946931][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2625'. [ 745.951517][T15610] syzkaller0: entered promiscuous mode [ 745.953187][T15610] syzkaller0: entered allmulticast mode [ 745.971328][T15612] syzkaller0: entered promiscuous mode [ 745.972909][T15612] syzkaller0: entered allmulticast mode [ 746.041721][T15615] : renamed from gre0 (while UP) [ 746.270997][ T6053] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 746.410996][ T6053] usb 9-1: device descriptor read/64, error -71 [ 746.672957][ T6053] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 746.861434][ T6053] usb 9-1: device descriptor read/64, error -71 [ 746.974427][ T6053] usb usb9-port1: attempt power cycle [ 747.319764][ T24] hid-generic 0003:0004:FFFFFFFE.0036: unknown main item tag 0x0 [ 747.325192][ T24] hid-generic 0003:0004:FFFFFFFE.0036: unknown main item tag 0x0 [ 747.328540][ T24] hid-generic 0003:0004:FFFFFFFE.0036: unknown main item tag 0x0 [ 747.334284][ T24] hid-generic 0003:0004:FFFFFFFE.0036: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 747.362767][ T6053] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 747.377196][T15639] fido_id[15639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 747.385796][ T6053] usb 9-1: device descriptor read/8, error -71 [ 747.661069][ T6053] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 747.684637][ T6053] usb 9-1: device descriptor read/8, error -71 [ 747.755487][T15650] team0: No ports can be present during mode change [ 747.794267][ T6053] usb usb9-port1: unable to enumerate USB device [ 748.078392][T15656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.754672][T15664] overlayfs: statfs failed on './file0' [ 749.856330][T15681] team0: No ports can be present during mode change [ 750.148900][ T5841] hid-generic 0003:0004:FFFFFFFE.0037: unknown main item tag 0x0 [ 750.152016][ T5841] hid-generic 0003:0004:FFFFFFFE.0037: unknown main item tag 0x0 [ 750.174538][ T5841] hid-generic 0003:0004:FFFFFFFE.0037: unknown main item tag 0x0 [ 750.193878][ T5841] hid-generic 0003:0004:FFFFFFFE.0037: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 750.307954][T15688] fido_id[15688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 750.628795][T15697] fuse: Bad value for 'fd' [ 750.673841][T15699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2651'. [ 751.725551][T15699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.738668][T15699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.793686][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.863958][T15719] netlink: 'syz.3.2655': attribute type 16 has an invalid length. [ 751.866707][T15719] netlink: 'syz.3.2655': attribute type 17 has an invalid length. [ 753.102650][T15701] kthread_run failed with err -4 [ 753.188041][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2659'. [ 753.216851][T15253] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.224867][ T40] audit: type=1326 audit(1778425873.547:29374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2658" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x0 [ 753.233802][T15738] syz.5.2659 (15738): drop_caches: 2 [ 753.452222][T15253] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.454990][T15253] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.469995][T15253] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.694722][ T5827] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 754.599229][T15759] siw: device registration error -23 [ 754.652079][T15759] 9pnet_virtio: no channels available for device syz [ 754.687188][T15759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 755.854182][T15761] team0: No ports can be present during mode change [ 755.857250][ T5827] usb 9-1: config 0 has no interfaces? [ 755.861621][ T5827] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.866211][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.869416][ T5827] usb 9-1: Product: syz [ 755.870890][ T5827] usb 9-1: Manufacturer: syz [ 755.872765][ T5827] usb 9-1: SerialNumber: syz [ 755.876738][ T5827] usb 9-1: config 0 descriptor?? [ 756.136479][ T5841] usb 9-1: USB disconnect, device number 9 [ 768.951642][T15784] syzkaller0: entered promiscuous mode [ 768.953652][T15784] syzkaller0: entered allmulticast mode [ 768.957286][T15807] team0: No ports can be present during mode change [ 769.611016][ T6053] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 769.751092][ T6053] usb 9-1: device descriptor read/64, error -71 [ 770.001054][ T6053] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 770.131054][ T6053] usb 9-1: device descriptor read/64, error -71 [ 770.242025][ T6053] usb usb9-port1: attempt power cycle [ 770.591023][ T6053] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 770.611770][ T6053] usb 9-1: device descriptor read/8, error -71 [ 770.861121][ T6053] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 770.881426][ T6053] usb 9-1: device descriptor read/8, error -71 [ 770.991438][ T6053] usb usb9-port1: unable to enumerate USB device [ 771.995787][T15180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.007041][T15180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.010488][T15180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.016230][T15180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.019562][T15180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.526698][T15180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.538583][T15180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.541776][T15180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.551472][T15180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.556028][T15180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 774.111167][T15160] Bluetooth: hci0: command tx timeout [ 774.581241][T15160] Bluetooth: hci3: command tx timeout [ 776.191395][T15160] Bluetooth: hci0: command tx timeout [ 776.661081][T15160] Bluetooth: hci3: command tx timeout [ 778.261182][T15160] Bluetooth: hci0: command tx timeout [ 778.741066][T15160] Bluetooth: hci3: command tx timeout [ 780.342379][T15160] Bluetooth: hci0: command tx timeout [ 780.344659][T14904] bridge0: port 3(syz_tun) entered disabled state [ 780.423405][T14904] syz_tun (unregistering): left allmulticast mode [ 780.426085][T14904] syz_tun (unregistering): left promiscuous mode [ 780.428751][T14904] bridge0: port 3(syz_tun) entered disabled state [ 780.588126][T15847] netlink: 'syz.5.2681': attribute type 1 has an invalid length. [ 780.718758][T15849] usb usb7: usbfs: process 15849 (syz.4.2683) did not claim interface 0 before use [ 780.831283][T15160] Bluetooth: hci3: command tx timeout [ 780.922801][ T1157] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.986197][T15829] wg2 speed is unknown, defaulting to 1000 [ 781.103481][ T1157] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.189610][T15834] wg2 speed is unknown, defaulting to 1000 [ 781.293814][ T1157] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.625708][ T1157] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.849658][T15829] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.854072][T15829] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.857650][T15829] bridge_slave_0: entered allmulticast mode [ 781.864014][T15829] bridge_slave_0: entered promiscuous mode [ 781.872236][T15829] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.876324][T15829] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.879911][T15829] bridge_slave_1: entered allmulticast mode [ 781.886450][T15829] bridge_slave_1: entered promiscuous mode [ 781.965906][T15829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.005957][T15829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.212207][T15829] team0: Port device team_slave_0 added [ 782.270441][T15829] team0: Port device team_slave_1 added [ 782.291582][T15834] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.294205][T15834] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.296762][T15834] bridge_slave_0: entered allmulticast mode [ 782.301234][T15834] bridge_slave_0: entered promiscuous mode [ 782.306785][T15834] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.309292][T15834] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.312460][T15834] bridge_slave_1: entered allmulticast mode [ 782.317186][T15834] bridge_slave_1: entered promiscuous mode [ 782.346946][T15829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.349418][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.358853][T15829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.383361][T15829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.385985][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.394915][T15829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.414041][T15834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.921414][ T1157] bridge_slave_1: left allmulticast mode [ 782.923545][ T1157] bridge_slave_1: left promiscuous mode [ 782.925517][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.052135][ T1157] bridge_slave_0: left allmulticast mode [ 783.054076][ T1157] bridge_slave_0: left promiscuous mode [ 783.056240][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.223454][T15887] siw: device registration error -23 [ 783.292709][T15887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 783.705435][ T1157] bond1 (unregistering): (slave gretap1): Releasing active interface [ 783.871535][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.952445][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.973196][ T1157] bond0 (unregistering): Released all slaves [ 783.978532][ T1157] bond1 (unregistering): Released all slaves [ 784.082708][T15834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.538842][T15829] hsr_slave_0: entered promiscuous mode [ 784.542775][T15829] hsr_slave_1: entered promiscuous mode [ 784.545572][T15829] debugfs: 'hsr0' already exists in 'hsr' [ 784.547940][T15829] Cannot create hsr debugfs directory [ 784.551844][T15834] team0: Port device team_slave_0 added [ 784.556501][T15834] team0: Port device team_slave_1 added [ 784.590879][T15834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.593609][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.604002][T15834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.628088][T15834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.631738][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.658850][T15834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.746515][T15894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 784.856666][T15834] hsr_slave_0: entered promiscuous mode [ 784.861150][T15834] hsr_slave_1: entered promiscuous mode [ 784.863769][T15834] debugfs: 'hsr0' already exists in 'hsr' [ 784.866175][T15834] Cannot create hsr debugfs directory [ 784.873213][T15893] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 784.879448][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 784.970624][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2688'. [ 785.985289][T15911] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 785.994728][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 786.307962][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 786.444503][T15931] cgroup: Name too long [ 786.446370][T15924] overlayfs: failed lookup in lower (newroot/52, name='bus', err=-40): overlapping layers [ 786.487603][T15923] vxlan0: entered promiscuous mode [ 786.562080][ T237] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.569239][ T237] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.626948][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 786.761548][ T1157] hsr_slave_0: left promiscuous mode [ 786.781862][ T1157] hsr_slave_1: left promiscuous mode [ 786.791614][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.794323][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.824936][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.827266][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.900674][ T1157] veth1_macvtap: left promiscuous mode [ 786.903253][ T1157] veth0_macvtap: left promiscuous mode [ 787.291490][T15082] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 787.421457][T15082] usb 9-1: device descriptor read/64, error -71 [ 787.661609][T15082] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 787.801651][T15082] usb 9-1: device descriptor read/64, error -71 [ 787.849563][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2695'. [ 787.852382][T15941] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2695'. [ 787.861704][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 787.912496][T15082] usb usb9-port1: attempt power cycle [ 787.962838][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 788.091702][ T237] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.094916][ T237] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.148602][T15829] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 788.197413][T15829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.200436][T15829] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 788.234424][T15829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.238182][T15829] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 788.251555][T15082] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 788.272053][T15082] usb 9-1: device descriptor read/8, error -71 [ 788.272508][T15829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.277290][T15829] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 788.346762][T15829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.350990][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 788.432108][T15834] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 788.478061][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.481361][T15834] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 788.524762][T15082] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 788.525867][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.531925][T15834] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 788.541964][T15082] usb 9-1: device descriptor read/8, error -71 [ 788.585038][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.593159][T15834] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 788.634618][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.651596][T15082] usb usb9-port1: unable to enumerate USB device [ 788.694860][T15829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.720623][T15829] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.730194][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.733150][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.753766][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.756635][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.836583][T15834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.859735][T15834] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.876243][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.878579][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.888429][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.890804][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.934663][T15834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.213770][T16004] fuse: Bad value for 'user_id' [ 789.215799][T16004] fuse: Bad value for 'user_id' [ 789.225100][T15829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.314042][T15834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.431346][T15829] veth0_vlan: entered promiscuous mode [ 789.437287][T15829] veth1_vlan: entered promiscuous mode [ 789.457983][T15829] veth0_macvtap: entered promiscuous mode [ 789.465385][T15829] veth1_macvtap: entered promiscuous mode [ 789.480581][T15829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.495604][T15829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.505022][T15834] veth0_vlan: entered promiscuous mode [ 789.512059][ T237] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.515679][ T237] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.520540][ T237] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.525065][ T237] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.535731][T15834] veth1_vlan: entered promiscuous mode [ 789.677045][T15834] veth0_macvtap: entered promiscuous mode [ 789.687799][T15834] veth1_macvtap: entered promiscuous mode [ 789.690321][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.693013][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.711055][T15834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.712726][ T6545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.717197][ T6545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.753981][T15834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.765028][ T237] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.768496][ T237] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.776412][ T237] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.782436][ T237] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.933002][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.939510][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.982342][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.985070][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.344043][T12816] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 790.366349][T16052] block nbd4: Cannot use ioctl interface on a netlink controlled device. [ 790.374544][T16052] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 790.527930][T12816] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 790.539985][T12816] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 790.555643][T12816] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.596834][T12816] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 790.607509][T12816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 790.617093][T12816] usb 10-1: Product: syz [ 790.621899][T12816] usb 10-1: Manufacturer: syz [ 790.627372][T12816] usb 10-1: SerialNumber: syz [ 790.932009][T12816] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 791.105245][T16059] overlayfs: failed to resolve '/ile0': -2 [ 791.265402][ T6053] usb 10-1: USB disconnect, device number 13 [ 791.272037][ T6053] usblp0: removed [ 791.803820][T16072] team0: No ports can be present during mode change [ 792.944622][T16080] debugfs: '1^!l1*$pOc' already exists in 'ieee80211' [ 793.021751][T16081] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 793.023855][T16081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 793.037426][T16081] vhci_hcd vhci_hcd.0: Device attached [ 793.321211][ T6053] usb 52-1: SetAddress Request (2) to port 0 [ 793.325816][ T6053] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 794.167309][T16083] vhci_hcd: connection reset by peer [ 794.178988][ T6545] vhci_hcd vhci_hcd.7: stop threads [ 794.182556][ T6545] vhci_hcd vhci_hcd.7: release socket [ 794.184868][ T6545] vhci_hcd vhci_hcd.7: disconnect device [ 794.285939][T16106] team0: left allmulticast mode [ 794.287733][T16106] team_slave_0: left allmulticast mode [ 794.295161][T16106] team_slave_1: left allmulticast mode [ 794.310197][T16106] bridge1: left allmulticast mode [ 794.316079][T16106] team0: left promiscuous mode [ 794.327776][T16106] team_slave_0: left promiscuous mode [ 794.371020][T16106] team_slave_1: left promiscuous mode [ 794.413263][T16106] bridge1: left promiscuous mode [ 794.462011][T16106] bridge0: port 3(team0) entered disabled state [ 794.670410][T16106] bridge_slave_0: left allmulticast mode [ 794.679427][T16106] bridge_slave_0: left promiscuous mode [ 794.690809][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.152609][T16106] bridge_slave_1: left allmulticast mode [ 795.213757][T16106] bridge_slave_1: left promiscuous mode [ 795.239009][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.411620][T16106] bond0: (slave bond_slave_0): Releasing backup interface [ 795.553632][T16106] bond0: (slave bond_slave_1): Releasing backup interface [ 795.654165][T16106] team0: Port device team_slave_0 removed [ 795.701515][T16106] team0: Port device team_slave_1 removed [ 795.705722][T16106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.762027][T16106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.801859][T16106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 795.819175][T16088] wg2 speed is unknown, defaulting to 1000 [ 796.100788][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 796.104174][T16127] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 796.575412][T16131] netlink: 'syz.7.2715': attribute type 39 has an invalid length. [ 796.829236][ T40] audit: type=1804 audit(1778425917.147:29375): pid=16138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2717" name="/newroot/61/file0/file0" dev="9p" ino=85983385 res=1 errno=0 [ 796.891328][ T40] audit: type=1804 audit(1778425917.207:29376): pid=16139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2717" name="/newroot/61/file0/file0" dev="9p" ino=85983385 res=1 errno=0 [ 797.426876][ T5958] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 797.991216][T12816] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 798.141406][T12816] usb 13-1: Using ep0 maxpacket: 32 [ 798.149182][T12816] usb 13-1: unable to get BOS descriptor or descriptor too short [ 798.155380][T12816] usb 13-1: config 8 has an invalid interface number: 188 but max is 0 [ 798.159124][T12816] usb 13-1: config 8 has no interface number 0 [ 798.162253][T12816] usb 13-1: config 8 interface 188 has no altsetting 0 [ 798.169093][T12816] usb 13-1: string descriptor 0 read error: -22 [ 798.172006][T12816] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 798.176313][T12816] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.194167][T12816] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 798.198567][T12816] dw2102: su3000_power_ctrl: 1, initialized 0 [ 798.202973][T12816] dvb-usb: bulk message failed: -22 (2/0) [ 798.220649][T12816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 798.248737][T12816] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 798.267654][T12816] usb 13-1: media controller created [ 798.269984][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 798.274231][T12816] dw2102: i2c transfer failed. [ 798.276211][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 798.278624][T12816] dw2102: i2c transfer failed. [ 798.280674][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 798.284439][T12816] dw2102: i2c transfer failed. [ 798.286648][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 798.291896][T12816] dw2102: i2c transfer failed. [ 798.293952][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 798.296541][T12816] dw2102: i2c transfer failed. [ 798.298700][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 798.301868][T12816] dw2102: i2c transfer failed. [ 798.303978][T12816] dvb-usb: MAC address: 02:02:02:02:02:02 [ 798.315303][T12816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.329368][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 798.333719][T12816] dw2102: command 0x0e transfer failed. [ 798.336037][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 798.339703][T12816] dw2102: command 0x0e transfer failed. [ 798.381013][ T5958] usb 10-1: Using ep0 maxpacket: 32 [ 798.384003][ T5958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.387749][ T5958] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.392832][ T5958] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 798.396438][ T5958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.399984][ T5958] usb 10-1: Product: syz [ 798.401747][ T5958] usb 10-1: Manufacturer: syz [ 798.403257][ T5958] usb 10-1: SerialNumber: syz [ 798.406239][ T5958] usb 10-1: config 0 descriptor?? [ 798.431156][ T6053] usb 52-1: device descriptor read/8, error -110 [ 798.588432][T16166] netlink: 'syz.7.2726': attribute type 16 has an invalid length. [ 798.591484][T16166] netlink: 'syz.7.2726': attribute type 17 has an invalid length. [ 798.665215][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 798.667490][T12816] dw2102: command 0x0e transfer failed. [ 798.670077][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 798.672166][T12816] dw2102: command 0x0e transfer failed. [ 798.674554][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 798.676309][T12816] dw2102: command 0x51 transfer failed. [ 798.698111][T12816] DVB: Unable to find symbol ds3000_attach() [ 798.700270][T12816] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 798.739868][T16146] dvb-usb: bulk message failed: -22 (3/0) [ 798.742761][T16146] dw2102: i2c transfer failed. [ 798.745203][T16146] dvb-usb: bulk message failed: -22 (17/0) [ 798.747994][T16146] dw2102: i2c transfer failed. [ 798.852725][ T6053] usb usb52-port1: attempt power cycle [ 799.095703][T12816] rc_core: IR keymap rc-su3000 not found [ 799.135769][T12816] Registered IR keymap rc-empty [ 799.183155][T12816] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 799.221423][T12816] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input45 [ 799.371451][T12816] dvb-usb: schedule remote query interval to 150 msecs. [ 799.379165][T12816] dw2102: su3000_power_ctrl: 0, initialized 1 [ 799.388243][T12816] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 799.437443][T12816] usb 13-1: USB disconnect, device number 2 [ 799.493104][ T6053] usb usb52-port1: unable to enumerate USB device [ 799.539724][ T5813] dvb-usb: bulk message failed: -22 (1/0) [ 799.542881][ T5813] dw2102: i2c transfer failed. [ 800.000420][T16185] loop4: detected capacity change from 0 to 7 [ 800.019997][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 800.028970][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 800.032078][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.036416][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 800.039326][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.042377][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 800.045302][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.048861][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 800.051792][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.055659][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 800.058966][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.063967][T16187] 9p: Bad value for 'rfdno' [ 800.093454][T16185] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 800.151874][T16189] IPVS: set_ctl: invalid protocol: 29487 47.112.111.119:25970 [ 800.211953][T12816] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 800.218804][ T5813] usb 10-1: USB disconnect, device number 14 [ 800.993270][T16213] syzkaller0: entered promiscuous mode [ 800.995357][T16213] syzkaller0: entered allmulticast mode [ 801.852385][T16222] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2734'. [ 802.969764][T16232] overlayfs: missing 'lowerdir' [ 803.061968][ T5524] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 803.253962][ T5524] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 803.261066][T12816] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 803.263334][ T5524] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.269930][ T5524] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.273907][ T5524] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.281824][ T5524] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.290321][ T5524] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 803.293896][ T5524] usb 10-1: Product: syz [ 803.295716][ T5524] usb 10-1: Manufacturer: syz [ 803.308802][ T5524] cdc_wdm 10-1:1.0: skipping garbage [ 803.322616][ T5524] cdc_wdm 10-1:1.0: skipping garbage [ 803.326737][ T5524] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 803.331639][ T5524] cdc_wdm 10-1:1.0: Unknown control protocol [ 803.411064][T12816] usb 9-1: Using ep0 maxpacket: 32 [ 803.414412][T12816] usb 9-1: unable to get BOS descriptor or descriptor too short [ 803.417907][T12816] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 803.421398][T12816] usb 9-1: config 8 has no interface number 0 [ 803.423570][T12816] usb 9-1: config 8 interface 188 has no altsetting 0 [ 803.429487][T12816] usb 9-1: string descriptor 0 read error: -22 [ 803.432381][T12816] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 803.435381][T12816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.443524][T12816] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 803.446964][T12816] dw2102: su3000_power_ctrl: 1, initialized 0 [ 803.449854][T12816] dvb-usb: bulk message failed: -22 (2/0) [ 803.460827][T12816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 803.473898][T12816] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 803.477508][T12816] usb 9-1: media controller created [ 803.479755][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 803.482744][T12816] dw2102: i2c transfer failed. [ 803.484993][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 803.487489][T12816] dw2102: i2c transfer failed. [ 803.489495][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 803.492079][T12816] dw2102: i2c transfer failed. [ 803.494076][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 803.496498][T12816] dw2102: i2c transfer failed. [ 803.498439][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 803.500619][T12816] dw2102: i2c transfer failed. [ 803.503106][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 803.505336][T12816] dw2102: i2c transfer failed. [ 803.506958][T12816] dvb-usb: MAC address: 02:02:02:02:02:02 [ 803.513582][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.519284][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.528932][T12816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.535589][ T5813] usb 10-1: USB disconnect, device number 15 [ 803.549977][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 803.553070][T12816] dw2102: command 0x0e transfer failed. [ 803.557830][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 803.562034][T12816] dw2102: command 0x0e transfer failed. [ 803.594318][T16238] team0: No ports can be present during mode change [ 803.874385][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 803.876246][T12816] dw2102: command 0x0e transfer failed. [ 803.882784][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 803.884687][T12816] dw2102: command 0x0e transfer failed. [ 803.888501][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 803.890550][T12816] dw2102: command 0x51 transfer failed. [ 803.909785][T12816] DVB: Unable to find symbol ds3000_attach() [ 803.913410][T12816] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 803.961127][T12816] rc_core: IR keymap rc-su3000 not found [ 803.963523][T12816] Registered IR keymap rc-empty [ 803.966574][T12816] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 803.968491][T16250] netlink: 26 bytes leftover after parsing attributes in process `syz.7.2743'. [ 803.973971][T12816] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input46 [ 803.981525][T12816] dvb-usb: schedule remote query interval to 150 msecs. [ 803.984752][T12816] dw2102: su3000_power_ctrl: 0, initialized 1 [ 803.987077][T12816] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 803.995339][T12816] usb 9-1: USB disconnect, device number 18 [ 804.218096][T12816] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 804.490890][T16258] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 804.622782][T16261] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2747'. [ 804.630862][T16263] : renamed from gre0 (while UP) [ 804.923598][ T6053] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 805.081159][ T6053] usb 12-1: Using ep0 maxpacket: 32 [ 805.087577][ T6053] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 805.091186][ T6053] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.094483][ T6053] usb 12-1: Product: syz [ 805.097212][ T6053] usb 12-1: Manufacturer: syz [ 805.102123][ T6053] usb 12-1: SerialNumber: syz [ 805.110677][ T6053] usb 12-1: config 0 descriptor?? [ 805.121350][ T6053] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 805.131527][ T6053] dvb-usb: bulk message failed: -22 (4/0) [ 805.139279][ T6053] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 805.145918][ T6053] dvb-usb: bulk message failed: -22 (5/0) [ 805.148402][ T6053] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 805.158984][ T6053] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 805.168212][ T6053] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 805.170799][ T6053] usb 12-1: media controller created [ 805.179080][ T6053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 805.190671][ T6053] usb 12-1: selecting invalid altsetting 3 [ 805.193093][ T6053] ttusb2: set interface to alts=3 failed [ 805.218482][ T6053] DVB: Unable to find symbol tda10086_attach() [ 805.227032][ T6053] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 805.232741][ T6053] dvb-usb: bulk message failed: -22 (4/0) [ 805.234688][ T6053] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 805.242672][ T6053] dvb-usb: bulk message failed: -22 (5/0) [ 805.244731][ T6053] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 805.247920][ T6053] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 805.933363][ T6638] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 806.091391][ T6638] usb 9-1: Using ep0 maxpacket: 32 [ 806.100267][ T6638] usb 9-1: unable to get BOS descriptor or descriptor too short [ 806.105489][ T6638] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 806.110224][ T6638] usb 9-1: config 8 has no interface number 0 [ 806.116806][ T6638] usb 9-1: config 8 interface 188 has no altsetting 0 [ 806.125340][ T6638] usb 9-1: string descriptor 0 read error: -22 [ 806.127429][ T6638] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 806.133089][ T6638] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.144753][ T6638] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 806.152106][ T6638] dw2102: su3000_power_ctrl: 1, initialized 0 [ 806.154316][ T6638] dvb-usb: bulk message failed: -22 (2/0) [ 806.166118][ T6638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 806.175971][ T6638] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 806.182260][ T6638] usb 9-1: media controller created [ 806.184035][ T6638] dvb-usb: bulk message failed: -22 (6/0) [ 806.189857][ T6638] dw2102: i2c transfer failed. [ 806.194303][ T6638] dvb-usb: bulk message failed: -22 (6/0) [ 806.196171][ T6638] dw2102: i2c transfer failed. [ 806.200240][ T6638] dvb-usb: bulk message failed: -22 (6/0) [ 806.205646][ T6638] dw2102: i2c transfer failed. [ 806.207226][ T6638] dvb-usb: bulk message failed: -22 (6/0) [ 806.211367][ T6638] dw2102: i2c transfer failed. [ 806.213048][ T6638] dvb-usb: bulk message failed: -22 (6/0) [ 806.219407][ T6638] dw2102: i2c transfer failed. [ 806.222785][ T6638] dvb-usb: bulk message failed: -22 (6/0) [ 806.227572][ T6638] dw2102: i2c transfer failed. [ 806.229137][ T6638] dvb-usb: MAC address: 02:02:02:02:02:02 [ 806.244646][ T6638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 806.268140][ T6638] dvb-usb: bulk message failed: -22 (3/0) [ 806.270065][ T6638] dw2102: command 0x0e transfer failed. [ 806.335503][ T6638] dvb-usb: bulk message failed: -22 (3/0) [ 806.338171][ T6638] dw2102: command 0x0e transfer failed. [ 806.636148][T16299] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 806.641704][ T6638] dvb-usb: bulk message failed: -22 (3/0) [ 806.644493][ T6638] dw2102: command 0x0e transfer failed. [ 806.647135][ T6638] dvb-usb: bulk message failed: -22 (3/0) [ 806.649959][ T6638] dw2102: command 0x0e transfer failed. [ 806.657728][ T6638] dvb-usb: bulk message failed: -22 (1/0) [ 806.669088][ T6638] dw2102: command 0x51 transfer failed. [ 807.669961][ T6638] DVB: Unable to find symbol ds3000_attach() [ 807.682771][ T6638] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 807.801556][ T6638] rc_core: IR keymap rc-su3000 not found [ 807.803918][ T6638] Registered IR keymap rc-empty [ 807.806348][ T6638] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 807.810540][ T6638] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input47 [ 807.816008][ T6638] dvb-usb: schedule remote query interval to 150 msecs. [ 807.818661][ T6638] dw2102: su3000_power_ctrl: 0, initialized 1 [ 807.820677][ T6638] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 807.841738][ T6638] usb 9-1: USB disconnect, device number 19 [ 807.957863][T12816] usb 12-1: USB disconnect, device number 2 [ 807.996091][T12816] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 808.012016][ T6638] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 808.086357][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2759'. [ 808.406846][T16314] vxlan0: entered promiscuous mode [ 808.466175][ T169] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.491587][T16326] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 808.610252][T13964] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.979163][T13964] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.031033][T13964] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.233841][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2765'. [ 809.461478][ T5972] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 809.481192][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 809.491209][ T5524] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 809.591592][ T5972] usb 13-1: device descriptor read/64, error -71 [ 809.630989][ T5524] usb 12-1: device descriptor read/64, error -71 [ 809.651138][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 809.654580][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 809.658023][ T10] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 809.660835][ T10] usb 9-1: config 8 has no interface number 0 [ 809.663046][ T10] usb 9-1: config 8 interface 188 has no altsetting 0 [ 809.667623][ T10] usb 9-1: string descriptor 0 read error: -22 [ 809.669867][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 809.673081][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.680032][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 809.682790][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 809.684805][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 809.688871][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.692517][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 809.695409][ T10] usb 9-1: media controller created [ 809.697174][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 809.699089][ T10] dw2102: i2c transfer failed. [ 809.700771][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 809.702837][ T10] dw2102: i2c transfer failed. [ 809.704413][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 809.706365][ T10] dw2102: i2c transfer failed. [ 809.708029][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 809.710160][ T10] dw2102: i2c transfer failed. [ 809.712485][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 809.714920][ T10] dw2102: i2c transfer failed. [ 809.716994][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 809.719440][ T10] dw2102: i2c transfer failed. [ 809.721589][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 809.731130][T12816] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 809.733394][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.748242][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 809.751956][ T10] dw2102: command 0x0e transfer failed. [ 809.754389][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 809.756800][ T10] dw2102: command 0x0e transfer failed. [ 809.831522][ T5972] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 809.871011][ T5524] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 809.891054][T12816] usb 10-1: Using ep0 maxpacket: 32 [ 809.895512][T12816] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 809.898631][T12816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.901834][T12816] usb 10-1: Product: syz [ 809.903222][T12816] usb 10-1: Manufacturer: syz [ 809.904856][T12816] usb 10-1: SerialNumber: syz [ 809.907889][T12816] usb 10-1: config 0 descriptor?? [ 809.912367][T12816] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 809.914940][T12816] dvb-usb: bulk message failed: -22 (4/0) [ 809.916821][T12816] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 809.920289][T12816] dvb-usb: bulk message failed: -22 (5/0) [ 809.922508][T12816] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 809.928882][T12816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.933007][T12816] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 809.935640][T12816] usb 10-1: media controller created [ 809.943202][T12816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.952241][T12816] usb 10-1: selecting invalid altsetting 3 [ 809.954353][T12816] ttusb2: set interface to alts=3 failed [ 809.961726][ T5972] usb 13-1: device descriptor read/64, error -71 [ 809.989859][T12816] DVB: Unable to find symbol tda10086_attach() [ 809.992043][T12816] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 809.995501][T12816] dvb-usb: bulk message failed: -22 (4/0) [ 809.997673][T12816] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 810.001622][T12816] dvb-usb: bulk message failed: -22 (5/0) [ 810.003884][T12816] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 810.007080][T12816] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 810.011230][ T5524] usb 12-1: device descriptor read/64, error -71 [ 810.061592][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 810.064132][ T10] dw2102: command 0x0e transfer failed. [ 810.066474][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 810.068902][ T10] dw2102: command 0x0e transfer failed. [ 810.071410][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 810.073848][ T10] dw2102: command 0x51 transfer failed. [ 810.081724][ T5972] usb usb13-port1: attempt power cycle [ 810.092569][ T10] DVB: Unable to find symbol ds3000_attach() [ 810.095151][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 810.131323][ T5524] usb usb12-port1: attempt power cycle [ 810.154099][ T10] rc_core: IR keymap rc-su3000 not found [ 810.156585][ T10] Registered IR keymap rc-empty [ 810.161533][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 810.169466][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input48 [ 810.174768][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 810.177621][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 810.179707][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 810.186329][ T10] usb 9-1: USB disconnect, device number 20 [ 810.304883][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 810.471029][ T5524] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 810.492375][ T5524] usb 12-1: device descriptor read/8, error -71 [ 810.628988][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 810.731279][ T5524] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 810.753981][ T5524] usb 12-1: device descriptor read/8, error -71 [ 810.861898][ T5524] usb usb12-port1: unable to enumerate USB device [ 810.984966][ T5972] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 811.382957][ T5972] usb 13-1: device descriptor read/8, error -71 [ 812.031863][ T5972] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 812.519633][T15160] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 812.524962][T15160] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 812.557468][T15082] usb 10-1: USB disconnect, device number 16 [ 812.607628][T15082] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 812.651336][ T5972] usb 13-1: device not accepting address 6, error -71 [ 812.655004][ T5972] usb usb13-port1: unable to enumerate USB device [ 812.675501][T16378] fuse: Bad value for 'user_id' [ 812.677742][T16378] fuse: Bad value for 'user_id' [ 812.714350][T16377] netlink: 'syz.5.2775': attribute type 21 has an invalid length. [ 813.091153][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 813.147701][ T24] hid-generic 0003:0004:FFFFFFFE.0038: unknown main item tag 0x0 [ 813.154739][ T24] hid-generic 0003:0004:FFFFFFFE.0038: unknown main item tag 0x0 [ 813.159722][ T24] hid-generic 0003:0004:FFFFFFFE.0038: unknown main item tag 0x0 [ 813.164471][ T24] hid-generic 0003:0004:FFFFFFFE.0038: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 813.224523][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.260336][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 813.278697][T16397] fido_id[16397]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 813.316896][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2781'. [ 813.322088][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 813.329190][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2781'. [ 813.329386][ T10] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 813.333626][ T10] usb 9-1: config 8 has no interface number 0 [ 813.340725][ T10] usb 9-1: config 8 interface 188 has no altsetting 0 [ 813.364627][ T10] usb 9-1: string descriptor 0 read error: -22 [ 813.367451][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 813.371807][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.396492][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 813.399899][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 813.402010][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 813.407786][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 813.415000][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 813.418927][ T10] usb 9-1: media controller created [ 813.421599][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 813.424341][ T10] dw2102: i2c transfer failed. [ 813.426715][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 813.429377][ T10] dw2102: i2c transfer failed. [ 813.431705][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 813.545740][ T10] dw2102: i2c transfer failed. [ 813.547737][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 813.549948][ T10] dw2102: i2c transfer failed. [ 813.551902][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 813.554058][ T10] dw2102: i2c transfer failed. [ 813.556023][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 813.558358][ T10] dw2102: i2c transfer failed. [ 813.560282][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 813.571617][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.594199][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 813.597749][ T10] dw2102: command 0x0e transfer failed. [ 813.600404][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 813.603345][ T10] dw2102: command 0x0e transfer failed. [ 813.912036][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 813.919016][ T10] dw2102: command 0x0e transfer failed. [ 813.944907][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 813.956710][ T10] dw2102: command 0x0e transfer failed. [ 813.975367][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 813.977700][ T10] dw2102: command 0x51 transfer failed. [ 814.012864][ T10] DVB: Unable to find symbol ds3000_attach() [ 814.017458][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 814.213516][ T6053] hid-generic 0003:0004:FFFFFFFE.0039: unknown main item tag 0x0 [ 814.216726][ T6053] hid-generic 0003:0004:FFFFFFFE.0039: unknown main item tag 0x0 [ 814.220090][ T6053] hid-generic 0003:0004:FFFFFFFE.0039: unknown main item tag 0x0 [ 814.232877][ T6053] hid-generic 0003:0004:FFFFFFFE.0039: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 814.272828][ T10] rc_core: IR keymap rc-su3000 not found [ 814.274863][ T10] Registered IR keymap rc-empty [ 814.303616][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 814.304650][T16431] fido_id[16431]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 814.581190][T12816] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 814.721971][T12816] usb 13-1: device descriptor read/64, error -71 [ 814.981175][T12816] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 815.016725][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input49 [ 815.029990][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 815.037466][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 815.039435][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 815.047147][ T10] usb 9-1: USB disconnect, device number 21 [ 815.056519][T16437] team0: No ports can be present during mode change [ 815.122086][T12816] usb 13-1: device descriptor read/64, error -71 [ 815.133430][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 815.241363][T12816] usb usb13-port1: attempt power cycle [ 815.389214][T16447] comedi comedi0: Minor 257 is invalid! [ 815.581129][T12816] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 815.603701][T12816] usb 13-1: device descriptor read/8, error -71 [ 815.851028][ T6053] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 815.851347][T12816] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 815.881904][T12816] usb 13-1: device descriptor read/8, error -71 [ 815.886120][ T9] kernel write not supported for file /snd/midiC2D0 (pid: 9 comm: kworker/0:0) [ 815.991275][T12816] usb usb13-port1: unable to enumerate USB device [ 816.011101][ T6053] usb 12-1: Using ep0 maxpacket: 32 [ 816.015039][ T6053] usb 12-1: unable to get BOS descriptor or descriptor too short [ 816.018412][ T6053] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 816.021183][ T6053] usb 12-1: config 8 has no interface number 0 [ 816.023820][ T6053] usb 12-1: config 8 interface 188 has no altsetting 0 [ 816.028354][ T6053] usb 12-1: string descriptor 0 read error: -22 [ 816.030430][ T6053] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 816.034155][ T6053] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.043339][ T6053] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 816.050302][ T6053] dw2102: su3000_power_ctrl: 1, initialized 0 [ 816.052840][ T6053] dvb-usb: bulk message failed: -22 (2/0) [ 816.059085][ T6053] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 816.065063][ T6053] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 816.067822][ T6053] usb 12-1: media controller created [ 816.069620][ T6053] dvb-usb: bulk message failed: -22 (6/0) [ 816.071925][ T6053] dw2102: i2c transfer failed. [ 816.073778][ T6053] dvb-usb: bulk message failed: -22 (6/0) [ 816.075616][ T6053] dw2102: i2c transfer failed. [ 816.077198][ T6053] dvb-usb: bulk message failed: -22 (6/0) [ 816.079021][ T6053] dw2102: i2c transfer failed. [ 816.080562][ T6053] dvb-usb: bulk message failed: -22 (6/0) [ 816.082798][ T6053] dw2102: i2c transfer failed. [ 816.084608][ T6053] dvb-usb: bulk message failed: -22 (6/0) [ 816.086808][ T6053] dw2102: i2c transfer failed. [ 816.088654][ T6053] dvb-usb: bulk message failed: -22 (6/0) [ 816.090773][ T6053] dw2102: i2c transfer failed. [ 816.092627][ T6053] dvb-usb: MAC address: 02:02:02:02:02:02 [ 816.100503][ T6053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.115331][ T6053] dvb-usb: bulk message failed: -22 (3/0) [ 816.119393][ T6053] dw2102: command 0x0e transfer failed. [ 816.122485][ T6053] dvb-usb: bulk message failed: -22 (3/0) [ 816.124895][ T6053] dw2102: command 0x0e transfer failed. [ 816.401038][T13191] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 816.431323][ T6053] dvb-usb: bulk message failed: -22 (3/0) [ 816.433689][ T6053] dw2102: command 0x0e transfer failed. [ 816.436043][ T6053] dvb-usb: bulk message failed: -22 (3/0) [ 816.438536][ T6053] dw2102: command 0x0e transfer failed. [ 816.441127][ T6053] dvb-usb: bulk message failed: -22 (1/0) [ 816.443632][ T6053] dw2102: command 0x51 transfer failed. [ 816.464113][ T6053] DVB: Unable to find symbol ds3000_attach() [ 816.466793][ T6053] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 816.511045][ T6053] rc_core: IR keymap rc-su3000 not found [ 816.514246][ T6053] Registered IR keymap rc-empty [ 816.517260][ T6053] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 816.526637][ T6053] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input50 [ 816.535175][ T6053] dvb-usb: schedule remote query interval to 150 msecs. [ 816.537995][ T6053] dw2102: su3000_power_ctrl: 0, initialized 1 [ 816.540542][ T6053] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 816.549764][ T6053] usb 12-1: USB disconnect, device number 7 [ 816.563566][T13191] usb 10-1: Using ep0 maxpacket: 8 [ 816.570655][T13191] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.575639][T13191] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 816.580471][T13191] usb 10-1: config 0 interface 0 has no altsetting 0 [ 816.585385][T13191] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.589396][T13191] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.595556][T13191] usb 10-1: config 0 descriptor?? [ 816.598592][T16470] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 816.671734][ T6053] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 816.920529][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2804'. [ 817.006619][T13191] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 817.012984][T13191] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 817.015288][T13191] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 817.017551][T13191] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 817.020457][T13191] mcp2221 0003:04D8:00DD.003A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 817.232811][ T9] usb 10-1: USB disconnect, device number 17 [ 817.246464][T16494] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2809'. [ 817.249494][T16494] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2809'. [ 817.255420][T16494] syzkaller0: entered promiscuous mode [ 817.257318][T16494] syzkaller0: entered allmulticast mode [ 817.263756][T16496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2810'. [ 817.487265][T16503] x_tables: duplicate underflow at hook 1 [ 817.495619][T16503] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 817.681141][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 817.802370][T16505] netlink: 'syz.8.2814': attribute type 1 has an invalid length. [ 817.822687][T16505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.831011][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 817.838554][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 817.848000][ T9] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 817.851371][ T9] usb 10-1: config 8 has no interface number 0 [ 817.854056][ T9] usb 10-1: config 8 interface 188 has no altsetting 0 [ 817.862467][ T9] usb 10-1: string descriptor 0 read error: -22 [ 817.867476][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 817.871195][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.882910][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 817.888337][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 817.891125][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 817.895485][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 817.900018][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 817.903990][ T9] usb 10-1: media controller created [ 817.906245][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 817.908673][ T9] dw2102: i2c transfer failed. [ 817.910710][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 817.913220][ T9] dw2102: i2c transfer failed. [ 817.915241][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 817.917365][ T9] dw2102: i2c transfer failed. [ 817.919392][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 817.921898][ T9] dw2102: i2c transfer failed. [ 817.923937][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 817.926331][ T9] dw2102: i2c transfer failed. [ 817.928371][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 817.930761][ T9] dw2102: i2c transfer failed. [ 817.932945][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 817.946854][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.967613][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 817.970334][ T9] dw2102: command 0x0e transfer failed. [ 817.973087][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 817.975442][ T9] dw2102: command 0x0e transfer failed. [ 818.018414][T16509] wg2 speed is unknown, defaulting to 1000 [ 818.281705][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 818.286021][ T9] dw2102: command 0x0e transfer failed. [ 818.287910][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 818.291754][ T9] dw2102: command 0x0e transfer failed. [ 818.293518][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 818.298522][ T9] dw2102: command 0x51 transfer failed. [ 818.357599][ T9] DVB: Unable to find symbol ds3000_attach() [ 818.359601][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 818.421156][ T9] rc_core: IR keymap rc-su3000 not found [ 818.422986][ T9] Registered IR keymap rc-empty [ 818.433947][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 818.439660][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input51 [ 818.454406][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 818.459131][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 818.465161][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 818.476779][ T9] usb 10-1: USB disconnect, device number 18 [ 818.591287][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 818.615968][T16531] Bluetooth: MGMT ver 1.23 [ 819.375150][T16544] bridge1: entered promiscuous mode [ 819.392546][T16544] bridge1: entered allmulticast mode [ 819.686325][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2822'. [ 820.145691][ T10] hid_parser_main: 1 callbacks suppressed [ 820.145705][ T10] hid-generic 0003:0004:FFFFFFFE.003B: unknown main item tag 0x0 [ 820.162526][ T10] hid-generic 0003:0004:FFFFFFFE.003B: unknown main item tag 0x0 [ 820.167409][ T10] hid-generic 0003:0004:FFFFFFFE.003B: unknown main item tag 0x0 [ 820.174283][ T10] hid-generic 0003:0004:FFFFFFFE.003B: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 820.201301][T16566] fido_id[16566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 820.260502][T15082] IPVS: starting estimator thread 0... [ 820.353655][T16572] IPVS: using max 42 ests per chain, 100800 per kthread [ 820.461322][ T5972] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 820.520079][T16580] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 820.618055][T16581] team0: No ports can be present during mode change [ 821.041116][ T5972] usb 13-1: Using ep0 maxpacket: 32 [ 821.145885][ T5972] usb 13-1: unable to get BOS descriptor or descriptor too short [ 821.151869][ T5972] usb 13-1: config 8 has an invalid interface number: 188 but max is 0 [ 821.155563][ T5972] usb 13-1: config 8 has no interface number 0 [ 821.158772][ T5972] usb 13-1: config 8 interface 188 has no altsetting 0 [ 821.164364][ T5972] usb 13-1: string descriptor 0 read error: -22 [ 821.167101][ T5972] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 821.171692][ T5972] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.188131][ T5972] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 821.190793][ T5972] dw2102: su3000_power_ctrl: 1, initialized 0 [ 821.193993][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 821.199294][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.203911][ T5972] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 821.206601][ T5972] usb 13-1: media controller created [ 821.208319][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 821.210039][ T5972] dw2102: i2c transfer failed. [ 821.212182][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 821.214079][ T5972] dw2102: i2c transfer failed. [ 821.215645][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 821.217479][ T5972] dw2102: i2c transfer failed. [ 821.219002][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 821.220862][ T5972] dw2102: i2c transfer failed. [ 821.224455][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 821.226372][ T5972] dw2102: i2c transfer failed. [ 821.227970][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 821.229830][ T5972] dw2102: i2c transfer failed. [ 821.232013][ T5972] dvb-usb: MAC address: 02:02:02:02:02:02 [ 821.239489][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.313191][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 821.315044][ T5972] dw2102: command 0x0e transfer failed. [ 821.321400][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 821.323250][ T5972] dw2102: command 0x0e transfer failed. [ 821.438167][T16592] netlink: 'syz.7.2834': attribute type 1 has an invalid length. [ 821.448294][T16593] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2833'. [ 821.489073][T16592] gretap1: entered allmulticast mode [ 821.494042][T16592] bond1: (slave gretap1): making interface the new active one [ 821.497825][T16592] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 821.631916][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 821.634720][ T5972] dw2102: command 0x0e transfer failed. [ 821.636616][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 821.638810][ T5972] dw2102: command 0x0e transfer failed. [ 821.640586][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 821.643183][ T5972] dw2102: command 0x51 transfer failed. [ 821.662502][ T5972] DVB: Unable to find symbol ds3000_attach() [ 821.664901][ T5972] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 821.733753][T15082] hid-generic 0003:0004:FFFFFFFE.003C: unknown main item tag 0x0 [ 821.738493][T15082] hid-generic 0003:0004:FFFFFFFE.003C: unknown main item tag 0x0 [ 821.743863][ T5972] rc_core: IR keymap rc-su3000 not found [ 821.745892][ T5972] Registered IR keymap rc-empty [ 821.747599][T15082] hid-generic 0003:0004:FFFFFFFE.003C: unknown main item tag 0x0 [ 821.756889][ T5972] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 821.760329][T15082] hid-generic 0003:0004:FFFFFFFE.003C: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 821.770082][ T5972] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input53 [ 821.781555][ T5972] dvb-usb: schedule remote query interval to 150 msecs. [ 821.786819][ T5972] dw2102: su3000_power_ctrl: 0, initialized 1 [ 821.788781][ T5972] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 821.796028][ T5972] usb 13-1: USB disconnect, device number 11 [ 821.983760][T16602] fido_id[16602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 821.987493][ T5972] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 822.119354][T16618] netlink: 'syz.7.2841': attribute type 1 has an invalid length. [ 822.244518][T16625] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2843'. [ 822.287268][ T5972] hid-generic 0003:0004:FFFFFFFE.003D: unknown main item tag 0x0 [ 822.293976][ T5972] hid-generic 0003:0004:FFFFFFFE.003D: unknown main item tag 0x0 [ 822.300229][ T5972] hid-generic 0003:0004:FFFFFFFE.003D: unknown main item tag 0x0 [ 822.304815][ T5972] hid-generic 0003:0004:FFFFFFFE.003D: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 822.365548][T16630] fido_id[16630]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 823.471487][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 824.326009][T16622] team0: No ports can be present during mode change [ 824.991356][T13191] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 825.152326][T13191] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.155252][T13191] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.158486][T13191] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.161730][T13191] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.167029][T13191] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.169876][T13191] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.175962][T13191] usb 12-1: Product: syz [ 825.177542][T13191] usb 12-1: Manufacturer: syz [ 825.185279][T13191] cdc_wdm 12-1:1.0: skipping garbage [ 825.187163][T13191] cdc_wdm 12-1:1.0: skipping garbage [ 825.189762][T13191] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 825.192586][T13191] cdc_wdm 12-1:1.0: Unknown control protocol [ 825.395836][T16647] vlan2: entered allmulticast mode [ 825.398124][T16647] team0: entered allmulticast mode [ 825.400304][T16647] team_slave_0: entered allmulticast mode [ 825.402721][T16647] team_slave_1: entered allmulticast mode [ 825.427025][T16647] netlink: 'syz.7.2850': attribute type 1 has an invalid length. [ 825.437261][T13191] usb 12-1: USB disconnect, device number 8 [ 825.707319][ T59] hid-generic 0003:0004:FFFFFFFE.003E: unknown main item tag 0x0 [ 825.712120][ T59] hid-generic 0003:0004:FFFFFFFE.003E: unknown main item tag 0x0 [ 825.714874][ T59] hid-generic 0003:0004:FFFFFFFE.003E: unknown main item tag 0x0 [ 825.720809][ T59] hid-generic 0003:0004:FFFFFFFE.003E: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 825.735484][T16632] Set syz1 is full, maxelem 65536 reached [ 825.760798][T16658] fido_id[16658]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 825.794522][T16664] overlay: ./file0 is not a directory [ 826.163988][T16678] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 826.184371][T16676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.312803][ T9] hid-generic 0003:0004:FFFFFFFE.003F: unknown main item tag 0x0 [ 826.317938][ T9] hid-generic 0003:0004:FFFFFFFE.003F: unknown main item tag 0x0 [ 826.320576][ T9] hid-generic 0003:0004:FFFFFFFE.003F: unknown main item tag 0x0 [ 826.334051][ T9] hid-generic 0003:0004:FFFFFFFE.003F: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 826.376782][T16686] fido_id[16686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 826.883512][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2870'. [ 826.886926][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2870'. [ 827.769449][ T59] hid-generic 0003:0004:FFFFFFFE.0040: unknown main item tag 0x0 [ 827.773120][ T59] hid-generic 0003:0004:FFFFFFFE.0040: unknown main item tag 0x0 [ 827.776271][ T59] hid-generic 0003:0004:FFFFFFFE.0040: unknown main item tag 0x0 [ 827.785432][ T59] hid-generic 0003:0004:FFFFFFFE.0040: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 827.837543][T16709] fido_id[16709]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 838.773941][T16731] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.823323][ T24] hid-generic 0003:0004:FFFFFFFE.0041: unknown main item tag 0x0 [ 838.827323][ T24] hid-generic 0003:0004:FFFFFFFE.0041: unknown main item tag 0x0 [ 838.831643][ T24] hid-generic 0003:0004:FFFFFFFE.0041: unknown main item tag 0x0 [ 838.840630][ T24] hid-generic 0003:0004:FFFFFFFE.0041: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 838.904624][T16740] fido_id[16740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 838.939670][T16733] /dev/sr0: Can't open blockdev [ 839.089166][T16750] xt_ipcomp: unknown flags 1D [ 839.094765][T16750] syzkaller0: entered promiscuous mode [ 839.096577][T16750] syzkaller0: entered allmulticast mode [ 839.652001][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2889'. [ 840.287246][T16759] bond2: Unable to set down delay as MII monitoring is disabled [ 840.492463][T16770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.566268][T16759] bond2 (unregistering): Released all slaves [ 840.824431][ T40] audit: type=1326 audit(1778425961.147:29377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.843354][ T40] audit: type=1326 audit(1778425961.147:29378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.850499][ T40] audit: type=1326 audit(1778425961.157:29379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.859474][ T40] audit: type=1326 audit(1778425961.167:29380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.867316][ T40] audit: type=1326 audit(1778425961.167:29381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.874414][ T40] audit: type=1326 audit(1778425961.177:29382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.883454][ T40] audit: type=1326 audit(1778425961.177:29383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.891101][ T40] audit: type=1326 audit(1778425961.187:29384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.894798][T16780] wg2 speed is unknown, defaulting to 1000 [ 840.899430][ T40] audit: type=1326 audit(1778425961.187:29385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 840.909816][ T40] audit: type=1326 audit(1778425961.207:29386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2892" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 841.634399][T16794] Bluetooth: MGMT ver 1.23 [ 841.637967][T16794] program syz.7.2898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.961676][T16802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2900'. [ 842.346512][T16805] team0: No ports can be present during mode change [ 843.390189][T16837] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2909'. [ 843.450997][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 843.611051][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 843.617464][T16842] siw: device registration error -23 [ 843.620803][ T9] usb 9-1: config 0 has no interfaces? [ 843.627669][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 843.633083][ T9] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 843.637967][ T9] usb 9-1: Product: syz [ 843.642682][ T9] usb 9-1: Manufacturer: syz [ 843.648788][ T9] usb 9-1: SerialNumber: syz [ 843.665177][ T9] usb 9-1: config 0 descriptor?? [ 843.951169][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 844.491448][T16867] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 844.744043][ T5827] usb 9-1: USB disconnect, device number 22 [ 845.461339][ T9] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 845.921388][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 845.924504][ T9] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 845.927149][ T9] usb 13-1: config 0 has no interface number 0 [ 845.929113][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 845.932836][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 845.937306][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 845.940762][ T9] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 845.945221][ T9] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 845.948193][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.959835][ T9] usb 13-1: config 0 descriptor?? [ 845.967434][ T9] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 846.044008][T16883] team0: No ports can be present during mode change [ 846.373644][T16890] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2924'. [ 846.571788][ T59] usb 13-1: USB disconnect, device number 12 [ 846.571942][ C0] ldusb 13-1:0.55: usb_submit_urb failed (-19) [ 846.590432][ T59] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 846.995982][T16896] FAULT_INJECTION: forcing a failure. [ 846.995982][T16896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.007491][T16889] ldusb: No device or device unplugged -19 [ 847.011019][T16896] CPU: 2 UID: 0 PID: 16896 Comm: syz.7.2926 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.011040][T16896] Tainted: [L]=SOFTLOCKUP [ 847.011044][T16896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 847.011051][T16896] Call Trace: [ 847.011057][T16896] [ 847.011063][T16896] dump_stack_lvl+0x100/0x190 [ 847.011080][T16896] should_fail_ex.cold+0x5/0xa [ 847.011094][T16896] _copy_from_iter+0x1f4/0x1690 [ 847.011108][T16896] ? __asan_memset+0x23/0x50 [ 847.011128][T16896] ? __pfx__copy_from_iter+0x10/0x10 [ 847.011139][T16896] ? __pfx___alloc_skb+0x10/0x10 [ 847.011157][T16896] netlink_sendmsg+0x808/0xda0 [ 847.011176][T16896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.011194][T16896] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 847.011214][T16896] ____sys_sendmsg+0x9e1/0xb70 [ 847.011229][T16896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.011246][T16896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.011265][T16896] ? _kstrtoull+0x13c/0x1f0 [ 847.011278][T16896] ? __pfx__kstrtoull+0x10/0x10 [ 847.011293][T16896] ___sys_sendmsg+0x190/0x1e0 [ 847.011310][T16896] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.011327][T16896] ? __lock_acquire+0x4a5/0x2630 [ 847.011352][T16896] __sys_sendmmsg+0x2ff/0x430 [ 847.011366][T16896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 847.011384][T16896] ? __fget_files+0x215/0x3d0 [ 847.011402][T16896] ? fput+0x79/0x100 [ 847.011418][T16896] ? ksys_write+0x1ac/0x250 [ 847.011432][T16896] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 847.011448][T16896] ? lockdep_hardirqs_on+0x78/0x100 [ 847.011464][T16896] __do_fast_syscall_32+0xe7/0x950 [ 847.011481][T16896] ? lockdep_hardirqs_on+0x78/0x100 [ 847.011513][T16896] do_fast_syscall_32+0x32/0x70 [ 847.011530][T16896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.011545][T16896] RIP: 0023:0xf702efcc [ 847.011554][T16896] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 847.011565][T16896] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 847.011576][T16896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 847.011583][T16896] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 847.011590][T16896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 847.011597][T16896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 847.011603][T16896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 847.011616][T16896] [ 847.317624][T16903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2928'. [ 847.320504][T16903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2928'. [ 847.954447][T16910] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 848.044360][T16912] syzkaller0: entered promiscuous mode [ 848.046225][T16912] syzkaller0: entered allmulticast mode [ 848.055623][T16912] 0: reclassify loop, rule prio 0, protocol 800 [ 848.066847][T16915] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2933'. [ 848.347106][T16919] syzkaller0: entered promiscuous mode [ 848.351867][T16919] syzkaller0: entered allmulticast mode [ 848.425580][T16922] input: syz1 as /devices/virtual/input/input54 [ 848.765591][T16933] team0: No ports can be present during mode change [ 848.803686][T16936] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2937'. [ 849.362558][ T6053] hid-generic 0003:0004:FFFFFFFE.0042: unknown main item tag 0x0 [ 849.366598][ T6053] hid-generic 0003:0004:FFFFFFFE.0042: unknown main item tag 0x0 [ 849.369068][ T6053] hid-generic 0003:0004:FFFFFFFE.0042: unknown main item tag 0x0 [ 849.372680][ T6053] hid-generic 0003:0004:FFFFFFFE.0042: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 849.403240][T16961] fido_id[16961]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 850.061063][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 850.221338][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 850.228679][ T24] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 850.232485][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.235778][ T24] usb 9-1: Product: syz [ 850.237697][ T24] usb 9-1: Manufacturer: syz [ 850.239659][ T24] usb 9-1: SerialNumber: syz [ 850.247821][ T24] usb 9-1: config 0 descriptor?? [ 850.259306][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 850.267427][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 850.271891][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.280694][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 850.284471][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.294276][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.298563][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 850.303468][ T24] usb 9-1: media controller created [ 850.310523][T16998] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 850.312621][T16998] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 850.315588][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.316911][T16998] vhci_hcd vhci_hcd.0: Device attached [ 850.330644][ T24] usb 9-1: selecting invalid altsetting 3 [ 850.333151][ T24] ttusb2: set interface to alts=3 failed [ 850.356413][ T24] DVB: Unable to find symbol tda10086_attach() [ 850.358365][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 850.361651][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 850.363405][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.366738][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 850.368551][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.369950][T16998] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 850.372174][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 850.401707][T15082] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 850.551438][T15082] usb 12-1: Using ep0 maxpacket: 32 [ 850.567640][T15082] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 850.573113][T15082] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.576339][T15082] usb 12-1: Product: syz [ 850.578138][T15082] usb 12-1: Manufacturer: syz [ 850.581520][T15082] usb 12-1: SerialNumber: syz [ 850.586444][T15082] usb 12-1: config 0 descriptor?? [ 850.589894][T16969] dvb-usb: bulk message failed: -22 (7/0) [ 850.593304][T15082] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 850.596667][T15082] dvb-usb: bulk message failed: -22 (4/0) [ 850.598874][T16969] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 850.599973][T15082] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.606822][T16969] ttusb2: i2c transfer failed. [ 850.608927][T15082] dvb-usb: bulk message failed: -22 (5/0) [ 850.611057][ T6053] usb 54-1: SetAddress Request (2) to port 0 [ 850.611093][ T6053] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 850.616687][T15082] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.625138][T15082] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.629366][T15082] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 850.633021][T15082] usb 12-1: media controller created [ 850.642391][T15082] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.653322][T15082] usb 12-1: selecting invalid altsetting 3 [ 850.655600][T15082] ttusb2: set interface to alts=3 failed [ 850.676637][T15082] DVB: Unable to find symbol tda10086_attach() [ 850.678976][T15082] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 850.682349][T15082] dvb-usb: bulk message failed: -22 (4/0) [ 850.684282][T15082] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.688078][T15082] dvb-usb: bulk message failed: -22 (5/0) [ 850.690056][T15082] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 850.694206][T15082] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 850.731631][ T24] usb 9-1: USB disconnect, device number 23 [ 850.744986][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 850.878867][T16999] vhci_hcd: connection reset by peer [ 850.881784][ T169] vhci_hcd vhci_hcd.8: stop threads [ 850.883817][ T169] vhci_hcd vhci_hcd.8: release socket [ 850.886025][ T169] vhci_hcd vhci_hcd.8: disconnect device [ 850.942765][ T59] usb 12-1: USB disconnect, device number 9 [ 850.962317][ T59] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 851.303090][T15082] hid-generic 0003:0004:FFFFFFFE.0043: unknown main item tag 0x0 [ 851.306498][T15082] hid-generic 0003:0004:FFFFFFFE.0043: unknown main item tag 0x0 [ 851.309482][T15082] hid-generic 0003:0004:FFFFFFFE.0043: unknown main item tag 0x0 [ 851.314017][T15082] hid-generic 0003:0004:FFFFFFFE.0043: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 851.347951][T17011] fido_id[17011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 851.421027][ T59] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 851.568051][T17024] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 851.813908][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 851.819307][ T59] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.823908][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 851.836178][ T59] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 851.840075][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.845282][ T59] usb 10-1: Product: syz [ 851.847426][ T59] usb 10-1: Manufacturer: syz [ 851.849420][ T59] usb 10-1: SerialNumber: syz [ 851.861085][T12816] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 851.871127][ T59] usb 10-1: config 0 descriptor?? [ 852.814736][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 852.820334][ T59] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input55 [ 852.830893][ T59] imon:send_packet: packet tx failed (-71) [ 852.851017][ T59] imon 10-1:0.0: panel buttons/knobs setup failed [ 852.910968][T12816] usb 12-1: Using ep0 maxpacket: 32 [ 852.915586][T12816] usb 12-1: unable to get BOS descriptor or descriptor too short [ 852.919510][T12816] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 852.920995][ T59] rc_core: IR keymap rc-imon-pad not found [ 852.922116][T12816] usb 12-1: config 8 has no interface number 0 [ 852.924481][ T59] Registered IR keymap rc-empty [ 852.926406][T12816] usb 12-1: config 8 interface 188 has no altsetting 0 [ 852.928422][ T59] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 852.935393][ T59] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 852.937133][T12816] usb 12-1: string descriptor 0 read error: -22 [ 852.940593][ T59] imon:send_packet: packet tx failed (-71) [ 852.942384][T12816] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 852.947745][T12816] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.963801][T12816] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 852.966384][T12816] dw2102: su3000_power_ctrl: 1, initialized 0 [ 852.968297][T12816] dvb-usb: bulk message failed: -22 (2/0) [ 852.972166][T12816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 852.975985][T12816] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 852.978586][T12816] usb 12-1: media controller created [ 852.980229][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 853.216711][ T59] imon 10-1:0.0: remote input dev register failed [ 853.219009][ T59] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 853.233016][T17038] xt_ipcomp: unknown flags 1D [ 853.556824][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 853.556840][ T40] audit: type=1326 audit(1778425973.877:29411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.7.2959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 853.578075][ T40] audit: type=1326 audit(1778425973.877:29412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.7.2959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 853.634771][ T59] imon 10-1:0.0: unable to initialize intf0, err 0 [ 853.637787][ T59] imon:imon_probe: failed to initialize context! [ 853.640333][ T59] imon 10-1:0.0: unable to register, err -19 [ 853.649858][ T59] usb 10-1: USB disconnect, device number 19 [ 853.672776][T17044] wg2 speed is unknown, defaulting to 1000 [ 853.694633][T12816] dw2102: i2c transfer failed. [ 853.696701][T17040] dvb-usb: bulk message failed: -22 (20/0) [ 853.699116][T17040] dw2102: i2c transfer failed. [ 853.703085][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 853.705322][T12816] dw2102: i2c transfer failed. [ 853.707225][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 853.709380][T12816] dw2102: i2c transfer failed. [ 853.710765][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 853.721008][T12816] dw2102: i2c transfer failed. [ 853.722784][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 853.724628][T12816] dw2102: i2c transfer failed. [ 853.726603][T12816] dvb-usb: bulk message failed: -22 (6/0) [ 853.728841][T12816] dw2102: i2c transfer failed. [ 853.730317][T12816] dvb-usb: MAC address: 02:02:02:02:02:02 [ 853.739790][T12816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.766294][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 853.768617][T12816] dw2102: command 0x0e transfer failed. [ 853.770753][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 853.772696][T12816] dw2102: command 0x0e transfer failed. [ 853.961407][ T59] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 854.081037][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 854.082880][T12816] dw2102: command 0x0e transfer failed. [ 854.084704][T12816] dvb-usb: bulk message failed: -22 (3/0) [ 854.086466][T12816] dw2102: command 0x0e transfer failed. [ 854.088262][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 854.090064][T12816] dw2102: command 0x51 transfer failed. [ 854.110469][T12816] DVB: Unable to find symbol ds3000_attach() [ 854.112488][T12816] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 854.112594][ T59] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 854.123575][ T59] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 854.133193][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 854.144744][ T59] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 854.154896][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.161054][T12816] rc_core: IR keymap rc-su3000 not found [ 854.162576][ T59] usb 10-1: Product: syz [ 854.163150][T12816] Registered IR keymap rc-empty [ 854.168418][ T59] usb 10-1: Manufacturer: syz [ 854.168669][T12816] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 854.170362][ T59] usb 10-1: SerialNumber: syz [ 854.187492][T12816] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input57 [ 854.203664][ T59] usb 10-1: config 0 descriptor?? [ 854.205111][T12816] dvb-usb: schedule remote query interval to 150 msecs. [ 854.213507][T12816] dw2102: su3000_power_ctrl: 0, initialized 1 [ 854.222772][T12816] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 854.227793][ T59] usb 10-1: can't set config #0, error -71 [ 854.242783][ T59] usb 10-1: USB disconnect, device number 20 [ 854.277343][ T40] audit: type=1326 audit(1778425974.597:29413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.8.2963" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x0 [ 854.388789][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 854.391500][T12816] dw2102: i2c transfer failed. [ 854.556413][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 854.574006][T12816] dw2102: i2c transfer failed. [ 854.649861][T17074] xt_ipcomp: unknown flags 1D [ 854.751023][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 854.753423][T12816] dw2102: i2c transfer failed. [ 854.921523][T12816] dvb-usb: bulk message failed: -22 (1/0) [ 854.923952][T12816] dw2102: i2c transfer failed. [ 854.958870][T17077] bridge1: entered promiscuous mode [ 854.961579][T17077] bridge1: entered allmulticast mode [ 854.967201][T17077] team0: Port device bridge1 added [ 854.975674][T17077] bridge0: port 3(team0) entered blocking state [ 854.978402][T17077] bridge0: port 3(team0) entered disabled state [ 854.981430][T17077] team0: entered allmulticast mode [ 854.983615][T17077] team_slave_0: entered allmulticast mode [ 854.987986][T17077] team_slave_1: entered allmulticast mode [ 854.998462][T17077] team0: entered promiscuous mode [ 855.000535][T17077] team_slave_0: entered promiscuous mode [ 855.003227][T17077] team_slave_1: entered promiscuous mode [ 855.006830][T17077] bridge0: port 3(team0) entered blocking state [ 855.009503][T17077] bridge0: port 3(team0) entered forwarding state [ 855.060016][ T59] hid-generic 0003:0004:FFFFFFFE.0044: unknown main item tag 0x0 [ 855.063727][ T59] hid-generic 0003:0004:FFFFFFFE.0044: unknown main item tag 0x0 [ 855.066536][ T59] hid-generic 0003:0004:FFFFFFFE.0044: unknown main item tag 0x0 [ 855.071367][ T59] hid-generic 0003:0004:FFFFFFFE.0044: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 855.081134][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 855.085189][ T24] dw2102: i2c transfer failed. [ 855.213201][T17080] fido_id[17080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 855.253289][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 855.255295][ T24] dw2102: i2c transfer failed. [ 855.343690][ T5827] usb 12-1: USB disconnect, device number 10 [ 855.432551][ T5827] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 855.764391][T17098] xt_ipcomp: unknown flags 1D [ 855.811565][ T6053] usb 54-1: device descriptor read/8, error -110 [ 856.326776][T17054] udevd[17054]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 856.352261][T17092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 856.391961][ T6053] usb usb54-port1: attempt power cycle [ 856.423916][ T59] hid-generic 0003:0004:FFFFFFFE.0045: unknown main item tag 0x0 [ 856.430046][ T59] hid-generic 0003:0004:FFFFFFFE.0045: unknown main item tag 0x0 [ 856.435052][ T59] hid-generic 0003:0004:FFFFFFFE.0045: unknown main item tag 0x0 [ 856.446721][ T59] hid-generic 0003:0004:FFFFFFFE.0045: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 856.468878][T17104] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 856.609131][T17109] fido_id[17109]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 856.797375][T17124] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2988'. [ 856.961699][ T6053] usb usb54-port1: unable to enumerate USB device [ 857.031120][ T24] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 857.201263][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 857.205115][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.208767][ T24] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 857.211869][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.215924][ T24] usb 12-1: config 0 descriptor?? [ 857.365691][T15082] hid-generic 0003:0004:FFFFFFFE.0046: unknown main item tag 0x0 [ 857.369151][T15082] hid-generic 0003:0004:FFFFFFFE.0046: unknown main item tag 0x0 [ 857.373395][T15082] hid-generic 0003:0004:FFFFFFFE.0046: unknown main item tag 0x0 [ 857.379407][T15082] hid-generic 0003:0004:FFFFFFFE.0046: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 857.419960][T17137] fido_id[17137]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 857.425317][ T24] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 857.575495][T17139] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 859.891130][ T24] usb 12-1: USB disconnect, device number 11 [ 860.241115][ T24] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 860.394382][ T24] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 860.398111][ T24] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.402319][ T24] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 860.405998][ T24] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.412509][ T24] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 860.416349][ T24] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 860.419786][ T24] usb 12-1: Product: syz [ 860.423523][ T24] usb 12-1: Manufacturer: syz [ 860.429440][ T24] cdc_wdm 12-1:1.0: skipping garbage [ 860.432904][ T24] cdc_wdm 12-1:1.0: skipping garbage [ 860.436605][ T24] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 860.439140][ T24] cdc_wdm 12-1:1.0: Unknown control protocol [ 860.736111][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2993'. [ 867.325601][T17139] bond2: entered promiscuous mode [ 867.327515][T17139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 867.339345][T17140] bond2: (slave bridge1): making interface the new active one [ 867.346247][T17140] bridge1: entered promiscuous mode [ 867.352157][T17140] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 867.361589][T17147] syzkaller1: entered promiscuous mode [ 867.364541][T17147] syzkaller1: entered allmulticast mode [ 867.683460][ T59] usb 12-1: USB disconnect, device number 12 [ 868.106887][T17179] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 868.138738][T17178] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 868.202105][ T5813] hid-generic 0003:0004:FFFFFFFE.0047: unknown main item tag 0x0 [ 868.206307][ T5813] hid-generic 0003:0004:FFFFFFFE.0047: unknown main item tag 0x0 [ 868.211159][ T5813] hid-generic 0003:0004:FFFFFFFE.0047: unknown main item tag 0x0 [ 868.216146][ T5813] hid-generic 0003:0004:FFFFFFFE.0047: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 868.283806][T17182] fido_id[17182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 868.287035][T17184] /dev/sg0: Can't lookup blockdev [ 868.545859][T17188] team0: No ports can be present during mode change [ 868.567882][T17173] syz.7.2997 (17173): drop_caches: 2 [ 868.671219][T17190] team0: No ports can be present during mode change [ 868.935943][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3004'. [ 868.938968][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3004'. [ 868.948032][ T1164] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.953288][ T1164] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.961934][ T1164] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.963304][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3004'. [ 868.966892][ T1164] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.972917][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3004'. [ 869.713377][T17210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 870.191945][ T40] audit: type=1804 audit(1778425990.517:29414): pid=17227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3013" name="/newroot/106/file0/file0" dev="9p" ino=85983385 res=1 errno=0 [ 870.244639][ T40] audit: type=1804 audit(1778425990.567:29415): pid=17226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3013" name="/newroot/106/file0/file0" dev="9p" ino=85983385 res=1 errno=0 [ 870.730161][T17235] team0: No ports can be present during mode change [ 870.997083][T17245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3021'. [ 871.032051][T17247] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 872.118297][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3026'. [ 872.613346][T17301] 9p: Bad value for 'rfdno' [ 872.615413][T17301] sctp: [Deprecated]: syz.8.3030 (pid 17301) Use of int in max_burst socket option. [ 872.615413][T17301] Use struct sctp_assoc_value instead [ 872.949630][T17305] wg2 speed is unknown, defaulting to 1000 [ 872.971522][T15082] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 873.052661][T17306] loop7: detected capacity change from 0 to 7 [ 873.121569][T17306] Dev loop7: unable to read RDB block 7 [ 873.124102][T17306] loop7: unable to read partition table [ 873.127240][T17306] loop7: partition table beyond EOD, truncated [ 873.129912][T17306] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 873.165198][T15082] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 873.168050][T15082] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.171959][T15082] usb 9-1: config 0 has no interface number 0 [ 873.174028][T15082] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 873.177179][T15082] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.181173][T15082] usb 9-1: config 0 descriptor?? [ 873.185368][T15082] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 873.253779][T17309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3033'. [ 873.376806][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3036'. [ 873.486178][T17316] NILFS (nullb0): couldn't find nilfs on the device [ 874.662435][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.714469][ T5813] usb 9-1: USB disconnect, device number 24 [ 876.042501][T15160] Bluetooth: hci1: unexpected event for opcode 0x137b [ 880.101212][T15160] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 880.107448][T15160] Bluetooth: hci1: Injecting HCI hardware error event [ 880.111498][T15180] Bluetooth: hci1: hardware error 0x00 [ 882.183704][T15180] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 883.611737][T17320] team0: No ports can be present during mode change [ 883.793355][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 883.879109][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 883.889960][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3043'. [ 883.931976][T17353] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3046'. [ 884.033565][T17353] syzkaller1: entered allmulticast mode [ 886.236164][T17396] syzkaller1: entered promiscuous mode [ 886.237939][T17396] syzkaller1: entered allmulticast mode [ 886.268852][T17351] Set syz1 is full, maxelem 65536 reached [ 886.315699][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3062'. [ 886.347159][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3061'. [ 886.350745][T17398] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3061'. [ 886.961590][ T24] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 887.121031][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 887.125373][ T24] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.130206][ T24] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.134812][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 887.140977][ T24] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 887.147926][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.168518][ T24] usb 13-1: config 0 descriptor?? [ 887.421625][T17429] netlink: 'syz.7.3070': attribute type 12 has an invalid length. [ 887.424513][T17429] netlink: 'syz.7.3070': attribute type 29 has an invalid length. [ 887.427705][T17429] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3070'. [ 887.430689][T17429] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3070'. [ 887.584523][ T24] mcp2221 0003:04D8:00DD.0048: unknown main item tag 0x0 [ 887.592808][ T24] mcp2221 0003:04D8:00DD.0048: unknown main item tag 0x0 [ 887.595167][ T24] mcp2221 0003:04D8:00DD.0048: unknown main item tag 0x0 [ 887.602129][ T24] mcp2221 0003:04D8:00DD.0048: unknown main item tag 0x0 [ 887.604548][ T24] mcp2221 0003:04D8:00DD.0048: unknown main item tag 0x0 [ 887.607937][ T24] mcp2221 0003:04D8:00DD.0048: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 887.831845][ T5972] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 887.982351][ T5972] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 887.986388][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.990155][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.996038][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 887.999731][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.004067][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.008516][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.015347][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.019113][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.024686][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.028505][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.032271][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.035767][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.038730][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.043479][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.047824][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.050887][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.054668][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.058206][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.061544][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.064284][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.067680][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.070423][ T5972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 888.073628][ T5972] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 888.077265][ T5972] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.083155][ T5972] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 888.087500][ T5972] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 888.091597][ T5972] usb 9-1: Product: syz [ 888.093439][ T5972] usb 9-1: Manufacturer: syz [ 888.095352][ T5972] usb 9-1: SerialNumber: syz [ 888.100798][ T5972] usb 9-1: config 0 descriptor?? [ 888.116180][ T5972] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 888.163169][T17450] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3077'. [ 888.315458][ T5972] usb 9-1: USB disconnect, device number 25 [ 888.321746][ T5972] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 888.490980][ T6053] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 888.652310][ T6053] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 888.657157][ T6053] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 888.663512][ T6053] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 888.669723][ T6053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.674372][T17454] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 888.678630][ T6053] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 889.078509][T17464] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3079'. [ 889.081604][T17464] netlink: 33 bytes leftover after parsing attributes in process `syz.5.3079'. [ 889.099498][ T6053] usb 10-1: USB disconnect, device number 21 [ 890.756102][ T5972] usb 13-1: USB disconnect, device number 13 [ 890.807748][T17481] tipc: Enabling of bearer rejected, failed to enable media [ 890.865176][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'. [ 890.866085][T17478] syzkaller0: entered promiscuous mode [ 890.868211][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3084'. [ 890.872812][T17478] syzkaller0: entered allmulticast mode [ 891.147684][T17492] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 891.149810][T17492] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 891.167055][T17492] vhci_hcd vhci_hcd.0: Device attached [ 891.431462][ T5958] usb 46-1: SetAddress Request (2) to port 0 [ 892.374186][ T5958] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 892.406829][T17492] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 892.512389][T17493] vhci_hcd: connection reset by peer [ 892.515256][ T12] vhci_hcd vhci_hcd.4: stop threads [ 892.517028][ T12] vhci_hcd vhci_hcd.4: release socket [ 892.520354][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 892.668209][T17501] ------------[ cut here ]------------ [ 892.670546][T17501] refcount_t: underflow; use-after-free. [ 892.673739][T17501] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#3: syz.7.3088/17501 [ 892.678330][T17501] Modules linked in: [ 892.680735][T17501] CPU: 3 UID: 0 PID: 17501 Comm: syz.7.3088 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.684674][T17501] Tainted: [L]=SOFTLOCKUP [ 892.686076][T17501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 892.689169][T17501] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 892.691715][T17501] Code: 06 e8 70 d6 10 fd 48 8d 3d 69 5f eb 0b 67 48 0f b9 3a e8 5f d6 10 fd 5b 5d c3 cc cc cc cc e8 53 d6 10 fd 48 8d 3d 5c 5f eb 0b <67> 48 0f b9 3a e8 42 d6 10 fd 5b 5d e9 9b fe 93 06 e8 36 d6 10 fd [ 892.697816][T17501] RSP: 0000:ffffc9000767f0f8 EFLAGS: 00010293 [ 892.699743][T17501] RAX: 0000000000000000 RBX: ffff888064a3c880 RCX: ffffffff84f72bdb [ 892.702868][T17501] RDX: ffff888056132500 RSI: ffffffff84f72c6d RDI: ffffffff90e28bd0 [ 892.705574][T17501] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 892.708206][T17501] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888064a3c880 [ 892.710813][T17501] R13: ffffffff8a3eb070 R14: 0000000000000000 R15: 0000000000000018 [ 892.713757][T17501] FS: 0000000000000000(0000) GS:ffff888097477000(0063) knlGS:00000000f53fcb40 [ 892.716608][T17501] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 892.718799][T17501] CR2: 00000000f53b9ff4 CR3: 000000006e60f000 CR4: 0000000000352ef0 [ 892.721856][T17501] Call Trace: [ 892.722996][T17501] [ 892.724022][T17501] sk_common_release+0x260/0x370 [ 892.725666][T17501] inet_release+0xed/0x200 [ 892.727132][T17501] inet6_release+0x4f/0x70 [ 892.728621][T17501] sock_release+0x91/0x1c0 [ 892.730146][T17501] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 892.732090][T17501] rxe_sock_put+0xae/0x130 [ 892.733728][T17501] ? __pfx_rxe_dellink+0x10/0x10 [ 892.735368][T17501] rxe_net_del+0xaf/0x120 [ 892.736827][T17501] rxe_dellink+0x15/0x20 [ 892.738206][T17501] nldev_dellink+0x289/0x3c0 [ 892.739751][T17501] ? __pfx_nldev_dellink+0x10/0x10 [ 892.741571][T17501] ? rcu_is_watching+0x12/0xc0 [ 892.743302][T17501] ? apparmor_capable+0x1d7/0x4d0 [ 892.745485][T17501] ? bpf_lsm_capable+0x9/0x10 [ 892.747536][T17501] ? security_capable+0x80/0x260 [ 892.750338][T17501] ? ns_capable+0xd2/0xf0 [ 892.754018][T17501] ? __pfx_nldev_dellink+0x10/0x10 [ 892.756163][T17501] rdma_nl_rcv_msg+0x392/0x6f0 [ 892.757743][T17501] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 892.759539][T17501] ? __lock_acquire+0x4a5/0x2630 [ 892.763008][T17501] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 892.765642][T17501] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 892.768454][T17501] ? netlink_deliver_tap+0x1ae/0xcc0 [ 892.770687][T17501] netlink_unicast+0x585/0x850 [ 892.773476][T17501] ? __pfx_netlink_unicast+0x10/0x10 [ 892.775765][T17501] netlink_sendmsg+0x8b0/0xda0 [ 892.777900][T17501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.780165][T17501] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 892.783186][T17501] ____sys_sendmsg+0x9e1/0xb70 [ 892.785272][T17501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.787463][T17501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.789713][T17501] ? __pfx___futex_wait+0x10/0x10 [ 892.792494][T17501] ? __pfx_futex_wake_mark+0x10/0x10 [ 892.794693][T17501] ___sys_sendmsg+0x190/0x1e0 [ 892.796660][T17501] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.798920][T17501] ? find_held_lock+0x2b/0x80 [ 892.801578][T17501] __sys_sendmsg+0x170/0x220 [ 892.803572][T17501] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.805771][T17501] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 892.808212][T17501] ? rcu_is_watching+0x12/0xc0 [ 892.810059][T17501] __do_fast_syscall_32+0xe7/0x950 [ 892.812238][T17501] ? lockdep_hardirqs_on+0x78/0x100 [ 892.814263][T17501] do_fast_syscall_32+0x32/0x70 [ 892.816044][T17501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.818136][T17501] RIP: 0023:0xf702efcc [ 892.819473][T17501] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 892.826200][T17501] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 892.828954][T17501] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002c80 [ 892.831973][T17501] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.834966][T17501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.837713][T17501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 892.840312][T17501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.843536][T17501] [ 892.844685][T17501] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 892.847238][T17501] CPU: 3 UID: 0 PID: 17501 Comm: syz.7.3088 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.850781][T17501] Tainted: [L]=SOFTLOCKUP [ 892.852228][T17501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 892.855556][T17501] Call Trace: [ 892.856701][T17501] [ 892.857680][T17501] dump_stack_lvl+0x100/0x190 [ 892.859240][T17501] vpanic+0x552/0x970 [ 892.860569][T17501] ? __pfx_vpanic+0x10/0x10 [ 892.862094][T17501] panic+0xd1/0xe0 [ 892.863410][T17501] ? __pfx_panic+0x10/0x10 [ 892.864908][T17501] ? check_panic_on_warn+0x1f/0x90 [ 892.866575][T17501] check_panic_on_warn.cold+0x19/0x34 [ 892.868320][T17501] ? refcount_warn_saturate+0xf4/0x130 [ 892.870057][T17501] __warn.cold+0x191/0x328 [ 892.871514][T17501] __report_bug+0x296/0x3d0 [ 892.873067][T17501] ? refcount_warn_saturate+0xf4/0x130 [ 892.874887][T17501] ? __pfx___report_bug+0x10/0x10 [ 892.876575][T17501] ? refcount_warn_saturate+0xed/0x130 [ 892.878349][T17501] ? refcount_warn_saturate+0x5b/0x130 [ 892.880160][T17501] report_bug_entry+0xe1/0x290 [ 892.881717][T17501] ? refcount_warn_saturate+0xf4/0x130 [ 892.883526][T17501] handle_bug+0x1cd/0x2a0 [ 892.885013][T17501] exc_invalid_op+0x17/0x50 [ 892.886507][T17501] asm_exc_invalid_op+0x1a/0x20 [ 892.888090][T17501] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 892.890002][T17501] Code: 06 e8 70 d6 10 fd 48 8d 3d 69 5f eb 0b 67 48 0f b9 3a e8 5f d6 10 fd 5b 5d c3 cc cc cc cc e8 53 d6 10 fd 48 8d 3d 5c 5f eb 0b <67> 48 0f b9 3a e8 42 d6 10 fd 5b 5d e9 9b fe 93 06 e8 36 d6 10 fd [ 892.895977][T17501] RSP: 0000:ffffc9000767f0f8 EFLAGS: 00010293 [ 892.897897][T17501] RAX: 0000000000000000 RBX: ffff888064a3c880 RCX: ffffffff84f72bdb [ 892.900376][T17501] RDX: ffff888056132500 RSI: ffffffff84f72c6d RDI: ffffffff90e28bd0 [ 892.902836][T17501] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 892.906036][T17501] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888064a3c880 [ 892.909158][T17501] R13: ffffffff8a3eb070 R14: 0000000000000000 R15: 0000000000000018 [ 892.912227][T17501] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 892.914430][T17501] ? refcount_warn_saturate+0x5b/0x130 [ 892.916553][T17501] ? refcount_warn_saturate+0xed/0x130 [ 892.918646][T17501] ? refcount_warn_saturate+0xed/0x130 [ 892.920397][T17501] sk_common_release+0x260/0x370 [ 892.921972][T17501] inet_release+0xed/0x200 [ 892.923409][T17501] inet6_release+0x4f/0x70 [ 892.924828][T17501] sock_release+0x91/0x1c0 [ 892.926255][T17501] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 892.928055][T17501] rxe_sock_put+0xae/0x130 [ 892.929457][T17501] ? __pfx_rxe_dellink+0x10/0x10 [ 892.931013][T17501] rxe_net_del+0xaf/0x120 [ 892.932408][T17501] rxe_dellink+0x15/0x20 [ 892.933766][T17501] nldev_dellink+0x289/0x3c0 [ 892.935239][T17501] ? __pfx_nldev_dellink+0x10/0x10 [ 892.937099][T17501] ? rcu_is_watching+0x12/0xc0 [ 892.938997][T17501] ? apparmor_capable+0x1d7/0x4d0 [ 892.940638][T17501] ? bpf_lsm_capable+0x9/0x10 [ 892.942136][T17501] ? security_capable+0x80/0x260 [ 892.943720][T17501] ? ns_capable+0xd2/0xf0 [ 892.945098][T17501] ? __pfx_nldev_dellink+0x10/0x10 [ 892.946700][T17501] rdma_nl_rcv_msg+0x392/0x6f0 [ 892.948226][T17501] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 892.949856][T17501] ? __lock_acquire+0x4a5/0x2630 [ 892.951415][T17501] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 892.953461][T17501] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 892.955604][T17501] ? netlink_deliver_tap+0x1ae/0xcc0 [ 892.957248][T17501] netlink_unicast+0x585/0x850 [ 892.958778][T17501] ? __pfx_netlink_unicast+0x10/0x10 [ 892.960446][T17501] netlink_sendmsg+0x8b0/0xda0 [ 892.961922][T17501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.963575][T17501] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 892.965302][T17501] ____sys_sendmsg+0x9e1/0xb70 [ 892.966802][T17501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.968458][T17501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.970115][T17501] ? __pfx___futex_wait+0x10/0x10 [ 892.971796][T17501] ? __pfx_futex_wake_mark+0x10/0x10 [ 892.973462][T17501] ___sys_sendmsg+0x190/0x1e0 [ 892.974922][T17501] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.976563][T17501] ? find_held_lock+0x2b/0x80 [ 892.978054][T17501] __sys_sendmsg+0x170/0x220 [ 892.979465][T17501] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.981026][T17501] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 892.982703][T17501] ? rcu_is_watching+0x12/0xc0 [ 892.984189][T17501] __do_fast_syscall_32+0xe7/0x950 [ 892.985788][T17501] ? lockdep_hardirqs_on+0x78/0x100 [ 892.987454][T17501] do_fast_syscall_32+0x32/0x70 [ 892.989011][T17501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.990999][T17501] RIP: 0023:0xf702efcc [ 892.992313][T17501] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 892.998872][T17501] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 893.001444][T17501] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002c80 [ 893.003949][T17501] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 893.006477][T17501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 893.008979][T17501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 893.011480][T17501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.013983][T17501] [ 893.015599][T17501] Kernel Offset: disabled [ 893.016950][T17501] Rebooting in 86400 seconds..