last executing test programs: 16m25.834043752s ago: executing program 4 (id=1144): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000d00)={{0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendfile(r0, r0, &(0x7f0000000200)=0x9, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = mq_open(&(0x7f0000000180)='bauadv_slave_1\x00\xdc\xba[8H\xf5\x81zo\x0e\xfdf\xfd\x86F\xb8\xd8\x9d\xa5\v\x7fc\x150\xa8\x01\x04\xe4\xa8\xb4\f\xf7sE\x1f\x86\x1c\xfd\xa4G\xe7\xb5\xad\x10\x03\x00\x05\x82\x1f\xdd\xa2', 0x8c0, 0x0, 0x0) preadv(r5, &(0x7f0000001340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1, 0x7, 0x6) 16m25.314101993s ago: executing program 4 (id=1149): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) r1 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/wireless\x00') open(&(0x7f0000000000)='./file0\x00', 0x2400, 0x52) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x91c, 0xffffffffffffffff}}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000f925a768f844e95dc603f80e5d54e4d4d87378ca1022eb4f4d51930e57a33b747e82540bc4da993d888beb7b005e2f2de4ff28acff5f938eb19ec8458bd995f37bac1a96fddb620e6389c475959d3baa704f331a77e745c6a29fc32a7cba994ee16527559b72898164d54cbacbe3a69b4c5bc8bf56184a005a28790e3bcd180c904e", @ANYBLOB="010029bd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) fchownat(0xffffffffffffff9c, 0x0, 0xee00, 0xee01, 0x1000) dup(0xffffffffffffffff) pread64(r2, &(0x7f0000000040)=""/30, 0x1e, 0x8001) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) utimes(0x0, 0x0) sigaltstack(0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 16m23.404789056s ago: executing program 4 (id=1150): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) pipe(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x14, r3, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16m22.852330588s ago: executing program 4 (id=1152): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r4 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r4, 0x5, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="6e5824b395c620dd", @ANYBLOB="99939317f305e417746fc1ae5895c62275a431ce0abc1356bde42930f5ab41d76abd7c211ebfe7e8bad9a0fedbb89032ace8c649597d4c95d04d821e0af9953960636a5297b35c265b7c2e867eeb5212056de04ffab8e875bac8d5c76747c3d9480b428a3cfdd503feb53276ba47847999e99103b73df04b2d032e406be0732d5d86a7bc15cee3ad58f04487765819d38101223bdb4ca5a40bafb60bf2e8f3cfe3a8b1608235950221f1e07213e54f57b5923832e6c6923b4e8bb5e6d627bdc7aff1b0510e739e56e63eff"], 0x28}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x7f, @mcast1, 0xab4b}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000380)="7d063178e096f71f1287f1a49ae61b9dc182a873864d365540c9607c174f4d437404b459080431646b691790475a14ea6fbd72c9de5f1032e8b6f28f00b468fd3d3493911db9bf58989c2f407d6d51dc8b8bb7666d", 0x55}, {0x0}, {&(0x7f0000000440)="0e42c167481b9e8a8ec88bf3766d862bbb48c0593efe82b5e951e4b4e42f4c9949e680fba2bb5bb429019b7acc56033b1cdcb0ad7fef6ce836e9d014b4477f9754045e2e63e35b829e87b96ca88c31a41b0fdfab1457087aba2c73ff82608b77c6c499f85a957fa5e8256b7e3578278822e026586414a2409b199f3bbac79be23a22db56eada04809f6d679f5e", 0x8d}, {&(0x7f0000000500)="c28c175f7c900fff57d89c8bfc871ffebb81d1b8a816840cfbefc31d978204f0f4a6b8f0d90687edd20c7ea3c6ad90f136a351a0a9e8a323966f2fb9efb4a0815fc14ec3185e28abddc9892adc7ab2a980504068be8cf06715cc6c3eb91a089cce2248cbde334ce426cab25282a9433d386aabf0636a0ba72aeb57aa1ce7aca6af84e6f23553d8b2e04bacb5246b19c80226053d7a5dbe699ea32b84b2c0", 0x9e}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="872e2469cae0cf638a23df7116ed9f154e91ed9cd5955b4d92c915053401ccf279c37f3a2a46474bc52d237e0f8174e9966d97a2b96f9383f55db9e839ad460031b2ec8dbe224ff4cfea60c54d1f500db892c16c23666d1017ebe93e35a1a7affd9d37ccbe5bcabc66f2fc48d162555272f6b3745b6dd7ec197b4444898c138c01a37d18b67ba3af234d6026eee5d0425a60af89", 0x94}, {&(0x7f0000001680)="c47d5c13cb0f345c631e538bb1eab4abe969038f359305d8ed832fd462706d7424de9f32bcbc99c4a8eab6ff4d231d867909b81723248b7567423c9c23f46fce433b72a2e0419ff8ca628b5b94c835f5016621b506d8edfd1f18f525e89fa3da56b20e20ab79dfa219c9b8e767f7b88a3ff3554d6b9ce06ffbec47e0a310d75551e8b1c1790ea463ef6b29a9", 0x8c}, {&(0x7f0000001740)}], 0x8, &(0x7f0000001800)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x87, 0x12, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc1, 0x7, [0xaf1, 0x5, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x9b}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0xb, 0x6, [0xe, 0x5, 0x1, 0x0, 0x7, 0xc2b, 0xfffffffffffff4c3]}}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0xe, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}]}}}], 0x110}}, {{&(0x7f00000019c0)={0xa, 0x4e24, 0x8, @mcast2, 0x8}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001a00)="2a4774a4fecae6f532ca8a8cb26b6b4fa0597081f4d1ad73d35ee07f7b3611b520e4196fca9413aed38af055d8d1d9e266c075651afd9064b446afb680e7d505f6018d4105c25dcfdaa3d64701a1665b6d279852b3c6e74f", 0x58}, {&(0x7f0000001a80)="dfe2163bb6e68b5fa81b36d63c06af", 0xf}, {&(0x7f0000001ac0)="676fb1557b0b1294f2536028df2eeb902c13cd0ef1b679bf9ec2d52f2710ff2cf34f1adb1b1d04e715cf65547bb5627d943378df33dfc138e4fc6c22d95b21860a7784f7fc9a104f0ab35c683285a6afd8175cb659bcb7eee0387540fdfb2bf687a605cb1128b933f2a21e43a4779cc3a65fc0af98dce861ca5a3648c4386cf0e53408c4e51f37d0ffa48d585da7a23d23a527c720c50f33d807c023a53143fc1af4ba14c40c1d8fb4ca34194f5004966b828f742bcfd7c331", 0xb9}, {&(0x7f0000001b80)="422d23baedd8f2f6c0dce4d256f0a877087ff2bcf986dfbb53bd957d0f237903572106688f08807ed6a3a60abea9c4c7932e163a56efd1f84d96933efaa78a608cc461c893d7b4c48bef4f1344e0f0b90fb6a5db68c545717c1587c8e23126694bd2409d8cb1cf", 0x67}, {&(0x7f0000001c00)="7954e79e1a9604975e9ec2a3b0fb9947b6c7cdff5ea5d0d3a7bfc163d03872ff85aad814170a6300fa7a322bf1c41717c9e475084c4308fd8496fed7889e4682ece22157f1f2bd3492c1282a15dcd0c68b9d0b88fb84b252206e7638735063182e2460cacd23593357fa36a68ffb25378cb35fa97b4843a68dbd51089d8f2c9bb09434bd97e562823da5be5d79cf41f65c429441f30806efa903312c359c1a313a837007937b0fb5b544f8a289b5ca7189fd", 0xb2}, {&(0x7f0000001cc0)="a430dc9f08ae2ea1cddd0266c8dcc25b3622759cc867e832c8f37ba171f1b4dc8e5120e081a6a68f2a68cf8a65eb6d7ae9400c4097da48f898defabae427f3b47aa9658f76b44b2b05e6e230855847e66c180153287391a8d19797b83bb1b678bd6d4b98ff041e10d793ebfa7caf1db4cdb4b0b5befb774a5c981b1bbb81151ac705f2ba61eae4806cd029acbb37d5312c71f48eb0a9cce679", 0x99}, {&(0x7f0000001d80)="8ba5f7861902bd618510430631fad4aea16c70dc773a15cfb5a1ef17a63024511321cdeda67e7aba6171bb9e8c9536869667bb11adcee95566d5adbff64be48a91cd", 0x42}, {&(0x7f0000001e00)="e18e79c54bc4298af8fa2a4ee4b385987fa3b24f62f2dcce79039205dda65058b37ca59a7800666ed5014288a23c1cf64bd319c3add5f6c192ed353fcf9de501676672b6bc22fcf6d5100a563c25cd2cdf55b64b04361bbafa4092bbd4bbd4bc1664c62e6fcc3fb875c3cc10d4cf6bbcf99c2189fd94067ec27c5f40a8d14a3d8e1e6ae230f3107e753ea276e5767e0beb8486efee", 0x95}], 0x8, &(0x7f0000001f40)=[@tclass={{0x14, 0x29, 0x43, 0xe59}}], 0x18}}], 0x3, 0x4041) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 16m21.41601113s ago: executing program 4 (id=1154): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x4000000000000000, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe, 0x3}, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xdfd33369c4ba71e}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3, 0xb7, 0x1, 0x7dffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0) msgget(0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f026, 0x100000}) gettid() madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 16m20.671887297s ago: executing program 4 (id=1156): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x5}}, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x4000000000000000, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe, 0x3}, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xdfd33369c4ba71e}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3, 0xb7, 0x1, 0x7dffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0) msgget(0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x5c}, 0x1, 0x400000000000000}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f026, 0x100000}) gettid() madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 16m5.439733205s ago: executing program 32 (id=1156): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x5}}, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x4000000000000000, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe, 0x3}, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xdfd33369c4ba71e}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3, 0xb7, 0x1, 0x7dffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0) msgget(0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x5c}, 0x1, 0x400000000000000}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f026, 0x100000}) gettid() madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 11m40.533319536s ago: executing program 2 (id=1756): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5e}, 0x1, 0x0, 0x0, 0x20044051}, 0x4000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x8000) 11m40.308399951s ago: executing program 2 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 11m37.615393971s ago: executing program 2 (id=1763): link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x6, @pix={0x1, 0x1, 0x39555659, 0x0, 0x81, 0x9, 0xc, 0xef6, 0x0, 0x2, 0x2, 0x1}}) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14}, [@RTA_PREFSRC={0x8, 0x7, @local}]}, 0x24}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) socket$can_raw(0x1d, 0x3, 0x1) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) syz_emit_ethernet(0xdc4, &(0x7f0000001500)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f9edff0d8e3a00fe8000000000000000000000000000bbff020000000000000000000000000001800090780ffffff8e169018abf3bba16f1cc4357d84e73a4d6861c12dd0261b74589b7137749d96324657062cf14743c7aaed18f642c71ee65bf55552536196208372f133eae26ff892efe07790d0327cd32895042bac0bce167d9d57f4a79fad9dbc0854af14467cbe187bb1ad85b6a7951070659432a831232249183527dbc1273676d5a8895b20e1e546a77e13f1318eb4c9be48499b018b66bc585e7a8113dc7ed13cc497440b3f09bce6074ac056e7fe968b3c169c5be2a5fd8b6fe5c0b5b52a8493844fe4319acc98940987cd59625d9e272fa7b677f47db3ebd1935be20a177f47047edc705777dae28834748111e1d6a8fe4c5f3f7a588fd5111d46a20e6bb4b3029e313d837a581d4411bed9191d73b89d6efecc419b4db6c3e9c6d299e23569ed4c49b05a7c5f54238e6b6290c0826bdee5057f36963cd0a439dbb38c1152c9ba2b71a9fc9e06a7e38f0e64646510c8f6d5d09317ee7735baf198206b724538b2059b7e7cb3af0986ef3615d991cb74a34903273e9da22972f57c40b77288109d209cc4c4a526c692d87e9a5261ea1de79462d18c4bb1c5b91dcaba8d4adfa68434be9d6d93148c63d002ec26da072258c0aecaa72b189077333a92f67d7c19a767df420ae7891cda232b9ca0d97c4b6b0a200ef78223a4f5e73ae0e34cf0173f6e57fdf7c44037a0265892033f575756d2f72ce32b5a9902239e837727f251d26f21fad7a64702cb9d2d1dc99fccfc4130e597984cbe0baff28c3323e7f354d1846078ffaebb82b2bcd10dd5c50f80b0fe5e5d4a6fa4c05f1e4e0b15e93d2c1243da6d9c67bf1a23576f5078a682dad3b60535f7471f6e2e7b61450321585b862c33f733309a6af16c50b4f490efca2fec4303d04dd18f2f92539eb15ac94012497b497e44baa370b6bd173dc068cad7bc16f8ca19f77a3838f8f20d4395d4f0578cf5c16cb352a5fb9aadd3125efb529ff2d51afafb1923f37da0982f2eb6469f3d6cd312dcb6162ddacfa376e3004c4fa90264440fce34b5f442d327af14c4c62b01f43e39a1b8f728c9a5bd0b3850ca6fd364a42c9ea2313a3510d46c1bfeaade3626900161d3d27a76721da32e686ebb04a0d531a6f88c52d2385e33413c3562805430d0c7936d5bee80c21f12fc87fc64f6a38a9d260e9eeb25450c140f9d6ea5c525522d04d39f5ffcec822b78718354b61c3cc0276a096dbc2d59956914e388a04f64538fed548a5276e9e5ba84e8758280e76e54b84efa973a0add06799cad803f92050d9af4f45f33b6a82517c8a1efab256edd5c7a3938809a22e649560386d0c1eb0946ad6d572e1c8caac0eaa4d448927e444e2c0610285b0100ee0e7f88ca0472086a09473263a3d20f59c67bfa754c4fbb927e82422b878030e9147da79b1aa296b34056b4cd3596b93797a74db603f2cf83a1a61475539f7d1f67dd767930806eb51d610f2806b4ec9d6585514f2078951e6570f3ee275a9647b0b5fc29e21bda2428f3aba499ae4b5c445a1277d5d6aede5e4f3b80d94e814475e43936db3ab38ea0a21a7cac62e706ba41d12fbe545093570687ef4e549a9a7c5b0afd2ef86d4477c30d8929aac65eac8bc56e5b04460c10886255cbbb6a2afdd8144e039a1b25c614cf96cacbcb64d6e71d24fff1135b960aed9c6fd8fc0f855519aec548b64cace2efbb6b6de8fb8f5d5a963ef0567a8ba09eaf7992a8eec82de57ea383eaa4f310a70fe27aed53f1eecd6a4924046bf8caa20ba3b61b8aa344c0b528cd0678b9ac52baf65f3c47d1de97af1542eb9fb55d9a4a9235ee362d69040108b9fe5a2184b87370a62f7fe472d861825473dc55b5802dde5d5429fa38a82e0546a67fee08e7d6fe63aa4f4a2509fbe826c1de770c2b4ac96e64766e38984c299ecdd797f3fc36b93a08e127da9855c57d7bfdb3b18686889b1db53ce0e1e2819226db19d9142b1da6c3459f1d303ca42784b026a01130ca55d028eef0bca625ee61a1eaa14a7178c833669fe47baedb39a8aa10eb69cbaaca593a0aac0c6f41f4c4a2ab92f77fc7d85a7f543b71467efca2bfaa69103950d482dc743f9cbee9beedbaf4ee277895341781544aaeccdd084c29af8a5ab1dce8f48a01721e6f6f56bf095057fe68b3c8ddd43c92ffe614062970b1e22cfcddeca8925b58af598a1e89890d0c7ba6d74d06d8eb01a1a68f5cf81a6031ad137471943def7d3cdce38abe8d23981933ffedb72aa5f4bdf47dc0e9150220347f673f4cbebcf1b0149e8eea12252bd950d172960c1dabeeac4ee9127f7dbc695fc6364960ce9e53c8d63432895eb2d99d4b7538734a9e20126b26a09c4c0dc74b85a3ee740b8b4722588e5bbdb3c254badf15a22482f178827cd4bccff1262213cffa0ca95ac91b56e99eb8495c3b58063e91c1038bebcbcab3a2981bb9238235c45262c6da5f38904edc311a72a7e239e427232f58499de7b33fcb0e335733e3240f5f15697898b266e82e123e6f11157d985ddb611e970e5082a255144df45e41afc853294631c52eca42c66391ad886ac6d827efa5eeee59e08905399bbbf549703bcef6c070553a6a01eb3b07418f9e61d5861cbcd77600f7e6b747c5a3bcea1b685a6f66a9e6b1743992b164db2ade93771e8d4490c5677a1e9f7fcf767b96cfb8c36521bcf7563d4333f4362fea05f5a63de3970fe62d5a00983eeee0b7ea9f9f32bbe2bc356901969ea533e4c5af2fe3389905773f492a6cd2b9df1d1e19438c005d2b4d92114aac54b3fd5ceb4dd8eb3483e31ee0d4559c6c0ad2b1e0a14c570de46dce5d5cea7da1f4dd5e9fec9797f1e40a9bdcc7c39c67ca93e8bc9fc450121004ffc3d614d1a5bf7dd8bcab5765fef9d52763ec0f924efd983acbdfc6c268777d7de90315355df80bbdbc369c2f2c9e9a8ca0b1c179ed3f83db0e6ced935c578c54d8ad379b7df35114512951019019959d5d5d7683a16585b91e7882ebd7083b1c46dcbff1470f463e5775c7ef94ed6f4cbdeceaf4fb74ee51b9177725d2773cae1ad3e0f32b9bfb764db89d98a3d516c83c544e47a375a149a45baa2395ab1073f360dbe734205812e0a591ca352779e739f64216a8ced9b34bf4fbdea02a592a15be233c920e933ffe90bf4fa9bc4bd78c7b23ba2a012d4d23219739a9d2e7bbf51506eeeb2ee4600d55d9cf919c147029740d76c9bfbc28d443cb1ba38d2b2ce46b2381403a1f4ec7d241e8d31388976ca882e4d2dbe19198a6b800b0b8153c1102a458ee7a55ae695da0da4e443338318b9b30fe717a41820e9952f97bc73adb8cf2ebfc9521cdbf25900cfb95f56408086845ded53744485088666b08a257f4358b88c20086ab36b6c65e5ce59f496cc97f050584f3a470074e1b18db2f247b882fa1588d2276cc8fefaf1588561b080b6cf63cc757e0bfcde45c8f64556bf296563982bab730d80621304052829674eb57833f09d4050cfc0dfc29abc150a8ae2fd4d80daa0481df7c1a6bf4bb1e819fdcb2ac51750ec6be4972b4db79332dc9ce67be5031075318d7c52d40e2cdd95f259f2dda1fac5aacf50c8b845849e93b1a9c1c0d9471d80436f3b4b9046a760ec7f64b1f473d680b6e52460e512ab8b744e798c028dcdf6191ec94a3d70600669f1053b13c364fb5a4aecebc0290952c094d25dbd01a2e19a69b470417a402af195ab6908dde5d8375a22cf085c94a2cea1df54cbde3ffafc677604030163403c7ca866a3b528afd892ec5ca63784c820ecd0d1132bfeb0c266ab9b367dfd63d021ce0dc6820d3aa133c0691dd3eb84f96eaf98ddbb91a10cf846624f1a2b97929f7af0873d5b96af1f8387b6ec96324ec9e9275383b8ac4eba2e998e88f4d83931b59b66f531bf9054e8198a2d5e27292f85e97d7c2c75446ed57cb93b5977c0171dd5fa9d552fd4c7d703db4d62eb53669cf75fcf041fc672a33f56b82302b41c35af5b0e066c3e2d72e0dd31a28a94b5a04de4f45ce175b080e81d5eda5ec617ef8b60d5bfe66ab4bcf8c6fcc2b07558a3f4821398c2985463ad33c3c1492a2c2fcd1f4b45df9355a2872310c1f26205984d5df45b09f6c58b5b597f261dd01bce9d6de569aa7a0873f757c4118d86ca644dc08a4b02bd7d7730902a503e7b2fd4e7762c4ce746f2fe680fe335cc928feb202aa174663b70ed20c05e537208565c020c2141992873a8d187cf5d84501ec0825b3aa8c7fb94eedd7b4cb92d239f2239629a832c8e0048e18bd54077d34fba87c2d2be30ba81ac6e7b3aad15f78cfbfb6888790bbb0d651ad37965beda5842c948071db842d8cc002d429c186386563937b09fc5fe890c5f55604306ff029c0f4fa32cfe2ee4edbd91c64a9f56bf7bb89dd05f4179a0fd387c503b764441fcf29bd5064c63bd88ca24a492b409673645ee47bd6712600ca832d15772f3ecec08153ccb884fcea032cdcb71ad72c6b78dc0347411ef1b25716d040b9b6b4aa7d12a3bdc82c94453b068b8cb7b7e8c0677102585a64da968385a997d10d24d8c91e8180de651fa623fe34f0d27623df9f3fe107aacc15e40f67c54012213e7ab27e04b1b3d019e78acd2ea109a00f885633883ea815ae8f194140015da1af3703564604b4693399b7f5e89391099a15d8009cf0d5f647aeaca4166bea683a624d9b7f92a8603026fb534ff10f75e5449ca07a49dccd8c55f82ecc375eae14daeaabdf05cee7f2d229be849387d38b49d03058162bc5216fe77eaf0ed73cfdca8f834c946a4904e1db773d5c7fb8d6217f78ff105da143bc06417878fe51ba65e9514f26683dab59f636156d30c8f289b47171ca809b6c1af7d636f55056312139b811d16eac16f0343d04762d1b25bd508a6ea224736853c19ad2a6840d322"], 0x0) 11m31.384892139s ago: executing program 2 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xe}], 0x1}, 0x20000885) 11m30.046424419s ago: executing program 2 (id=1778): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r4 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r4, 0x5, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="6e5824b395c620dd", @ANYBLOB="99939317f305e417746fc1ae5895c62275a431ce0abc1356bde42930f5ab41d76abd7c211ebfe7e8bad9a0fedbb89032ace8c649597d4c95d04d821e0af9953960636a5297b35c265b7c2e867eeb5212056de04ffab8e875bac8d5c76747c3d9480b428a3cfdd503feb53276ba47847999e99103b73df04b2d032e406be0732d5d86a7bc15cee3ad58f04487765819d38101223bdb4ca5a40bafb60bf2e8f3cfe3a8b1608235950221f1e07213e54f57b5923832e6c6923b4e8bb5e6d627bdc7aff1b0510e739e56e63eff"], 0x28}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x7f, @mcast1, 0xab4b}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000380)="7d063178e096f71f1287f1a49ae61b9dc182a873864d365540c9607c174f4d437404b459080431646b691790475a14ea6fbd72c9de5f1032e8b6f28f00b468fd3d3493911db9bf58989c2f407d6d51dc8b8bb7666d", 0x55}, {0x0}, {&(0x7f0000000440)="0e42c167481b9e8a8ec88bf3766d862bbb48c0593efe82b5e951e4b4e42f4c9949e680fba2bb5bb429019b7acc56033b1cdcb0ad7fef6ce836e9d014b4477f9754045e2e63e35b829e87b96ca88c31a41b0fdfab1457087aba2c73ff82608b77c6c499f85a957fa5e8256b7e3578278822e026586414a2409b199f3bbac79be23a22db56eada04809f6d679f5e", 0x8d}, {&(0x7f0000000500)="c28c175f7c900fff57d89c8bfc871ffebb81d1b8a816840cfbefc31d978204f0f4a6b8f0d90687edd20c7ea3c6ad90f136a351a0a9e8a323966f2fb9efb4a0815fc14ec3185e28abddc9892adc7ab2a980504068be8cf06715cc6c3eb91a089cce2248cbde334ce426cab25282a9433d386aabf0636a0ba72aeb57aa1ce7aca6af84e6f23553d8b2e04bacb5246b19c80226053d7a5dbe699ea32b84b2c0", 0x9e}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="872e2469cae0cf638a23df7116ed9f154e91ed9cd5955b4d92c915053401ccf279c37f3a2a46474bc52d237e0f8174e9966d97a2b96f9383f55db9e839ad460031b2ec8dbe224ff4cfea60c54d1f500db892c16c23666d1017ebe93e35a1a7affd9d37ccbe5bcabc66f2fc48d162555272f6b3745b6dd7ec197b4444898c138c01a37d18b67ba3af234d6026eee5d0425a60af89", 0x94}, {&(0x7f0000001680)="c47d5c13cb0f345c631e538bb1eab4abe969038f359305d8ed832fd462706d7424de9f32bcbc99c4a8eab6ff4d231d867909b81723248b7567423c9c23f46fce433b72a2e0419ff8ca628b5b94c835f5016621b506d8edfd1f18f525e89fa3da56b20e20ab79dfa219c9b8e767f7b88a3ff3554d6b9ce06ffbec47e0a310d75551e8b1c1790ea463ef6b29a9", 0x8c}, {&(0x7f0000001740)}], 0x8, &(0x7f0000001800)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x87, 0x12, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc1, 0x7, [0xaf1, 0x5, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x9b}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0xb, 0x6, [0xe, 0x5, 0x1, 0x0, 0x7, 0xc2b, 0xfffffffffffff4c3]}}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0xe, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}]}}}], 0x110}}, {{&(0x7f00000019c0)={0xa, 0x4e24, 0x8, @mcast2, 0x8}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001a00)="2a4774a4fecae6f532ca8a8cb26b6b4fa0597081f4d1ad73d35ee07f7b3611b520e4196fca9413aed38af055d8d1d9e266c075651afd9064b446afb680e7d505f6018d4105c25dcfdaa3d64701a1665b6d279852b3c6e74f", 0x58}, {&(0x7f0000001a80)="dfe2163bb6e68b5fa81b36d63c06af", 0xf}, {&(0x7f0000001ac0)="676fb1557b0b1294f2536028df2eeb902c13cd0ef1b679bf9ec2d52f2710ff2cf34f1adb1b1d04e715cf65547bb5627d943378df33dfc138e4fc6c22d95b21860a7784f7fc9a104f0ab35c683285a6afd8175cb659bcb7eee0387540fdfb2bf687a605cb1128b933f2a21e43a4779cc3a65fc0af98dce861ca5a3648c4386cf0e53408c4e51f37d0ffa48d585da7a23d23a527c720c50f33d807c023a53143fc1af4ba14c40c1d8fb4ca34194f5004966b828f742bcfd7c331", 0xb9}, {&(0x7f0000001b80)="422d23baedd8f2f6c0dce4d256f0a877087ff2bcf986dfbb53bd957d0f237903572106688f08807ed6a3a60abea9c4c7932e163a56efd1f84d96933efaa78a608cc461c893d7b4c48bef4f1344e0f0b90fb6a5db68c545717c1587c8e23126694bd2409d8cb1cf", 0x67}, {&(0x7f0000001c00)="7954e79e1a9604975e9ec2a3b0fb9947b6c7cdff5ea5d0d3a7bfc163d03872ff85aad814170a6300fa7a322bf1c41717c9e475084c4308fd8496fed7889e4682ece22157f1f2bd3492c1282a15dcd0c68b9d0b88fb84b252206e7638735063182e2460cacd23593357fa36a68ffb25378cb35fa97b4843a68dbd51089d8f2c9bb09434bd97e562823da5be5d79cf41f65c429441f30806efa903312c359c1a313a837007937b0fb5b544f8a289b5ca7189fd", 0xb2}, {&(0x7f0000001cc0)="a430dc9f08ae2ea1cddd0266c8dcc25b3622759cc867e832c8f37ba171f1b4dc8e5120e081a6a68f2a68cf8a65eb6d7ae9400c4097da48f898defabae427f3b47aa9658f76b44b2b05e6e230855847e66c180153287391a8d19797b83bb1b678bd6d4b98ff041e10d793ebfa7caf1db4cdb4b0b5befb774a5c981b1bbb81151ac705f2ba61eae4806cd029acbb37d5312c71f48eb0a9cce679", 0x99}, {&(0x7f0000001d80)="8ba5f7861902bd618510430631fad4aea16c70dc773a15cfb5a1ef17a63024511321cdeda67e7aba6171bb9e8c9536869667bb11adcee95566d5adbff64be48a91cd", 0x42}, {&(0x7f0000001e00)="e18e79c54bc4298af8fa2a4ee4b385987fa3b24f62f2dcce79039205dda65058b37ca59a7800666ed5014288a23c1cf64bd319c3add5f6c192ed353fcf9de501676672b6bc22fcf6d5100a563c25cd2cdf55b64b04361bbafa4092bbd4bbd4bc1664c62e6fcc3fb875c3cc10d4cf6bbc", 0x70}], 0x8, &(0x7f0000001f40)=[@tclass={{0x14, 0x29, 0x43, 0xe59}}], 0x18}}], 0x3, 0x4041) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 11m28.588385561s ago: executing program 2 (id=1783): socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r3, 0xc10c3000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00002eb000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, &(0x7f0000000080)) pwritev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000b00)='\x00', 0x1}], 0x2, 0x8, 0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000287000/0x1000)=nil, 0x1000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 11m13.547899416s ago: executing program 33 (id=1783): socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r3, 0xc10c3000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00002eb000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, &(0x7f0000000080)) pwritev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000b00)='\x00', 0x1}], 0x2, 0x8, 0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000287000/0x1000)=nil, 0x1000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 7m10.79949911s ago: executing program 6 (id=2352): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5e}, 0x1, 0x0, 0x0, 0x20044051}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x38a4, 0x2000000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 7m9.024107459s ago: executing program 6 (id=2356): io_submit(0x0, 0x3c, &(0x7f0000000840)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000500)="cf5e28e57254e7762564c549285685d31ad8640605f6d9fad6942f8c7b0446942821c148f1420b7e4b899eb80bc10a6583f682794889438f2b65b5a5804b9c93bb1b79482e9d987408dfa5991e20ed6023a0f9e78dd81112781118e2ba8812d030f2a18680f5398a878f55c918632584c787cb08540da9125898cf5ed16498", 0x0, 0xffffffffffffffff, 0x0, 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r1, 0x400, 0x1) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x105513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x19, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00005a3000/0x3000)=nil, 0x3000, 0x380000b, 0x12, r2, 0x724c6000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="186a000009000000000000000800000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000500000018110000", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="02002f00e2000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, r5, 0x6}, 0x94) 7m4.823404552s ago: executing program 6 (id=2360): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) 7m4.166259477s ago: executing program 6 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) 7m1.011329817s ago: executing program 6 (id=2368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m59.728286506s ago: executing program 6 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m42.528507858s ago: executing program 34 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.342590782s ago: executing program 0 (id=3213): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x1ad083, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.223344847s ago: executing program 0 (id=3217): bpf$PROG_LOAD(0x5, 0x0, 0xffffff14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0x30, 0x4048080}}], 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000080)={0x407, {0x0, 0x0, 0x0, 0x3}}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x5, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x3, 0x1, 0x40000, 0xff, 0x2, 0x5, 0x2, 0xfffffffb, 0x0, 0x10, 0x140, 0x5, 0xfffffff8, 0x4, 0xe, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x4, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x7], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x40009, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x14f8, 0x9, 0x9, 0x3, 0x35, 0x8001, 0x9, 0x4, 0x0, 0x0, 0x101, 0xa2fc, 0x3, 0x412, 0x1, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x3, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0xd, 0xa0c2, 0x1001, 0x8, 0x1, 0x8, 0x7fff, 0x4, 0x5, 0x3, 0x7f, 0x1, 0xd, 0x7, 0x8001, 0x3, 0x9, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x7, 0x7, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd5, 0x1, 0x7fff], [0x3, 0x9, 0x3, 0x3, 0x81, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0x0, 0x401, 0x3, 0xb, 0x4, 0x8, 0xf, 0x1, 0xffffdff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) openat$ptp0(0xffffff9c, 0x0, 0x2000, 0x0) 13.394917647s ago: executing program 0 (id=3221): ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0xc10c3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) 11.333204772s ago: executing program 0 (id=3225): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006800011003000000000000800000070000000000"], 0x18}}, 0x4000) r2 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2, 0x129}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002700)=""/4095, 0xfff}], 0x1) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e1221b23bb601c477d3df373e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000100)="2d6d0000088fe40442a9242ecbf3a92009", 0x11}], 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001002abd7000fcdbdf251d"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x110000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000280)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x28) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r7, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000440)=0xc) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c2000905"], 0x0) 10.740264605s ago: executing program 5 (id=3227): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) inotify_init() r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 10.434956861s ago: executing program 1 (id=3230): unshare(0x20000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0xfe, 0xd, 0x2000100}]}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="183ff0c9b70923cb12f8e2de7af23ffd8218c6efceea198f4755271a00008e2757f7cb17188961461bdf43347b9c3cd077123e49a5697c6c26a4a86ad1c7f21e2a"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x8}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x16c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020002005000048018000180080001006f7366000c000280080001400000001224000180090001006d6574610000000014000280080002400000000c0800034000000015100001800b00010064796e73657400000900010073797a30000000000900020073"], 0xa4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e1450009"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000100)={0x20, 0x3, 0x10, "509785a5fe3aa315b8cded5b83201969"}, 0x0, 0x0}) 8.763693958s ago: executing program 3 (id=3232): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000009b40)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x4, {0x5, 0x0, 0x3, 0x0, 0x0, 0x6, {0x2, 0x2, 0x8000000000, 0x7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xee00, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f0000000040)) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 8.323401787s ago: executing program 3 (id=3233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0xc6, 0x47, 0x7ffcffff}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000040)) splice(r2, 0x0, r5, 0x0, 0x80, 0x8) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) userfaultfd(0x80800) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', '', [{0x20, '/dev/ptmx\x00d\xc1\x80\x9e\xc1\v\x17\xc7K\x12\x9fI$\xf2o\xf0\xb9\x97J\xda\xf4\x946{\"y\x9e\xda\x93\x84\x00p\x87\xbb\n\xaa&\x9a\v\xf7\xfa\xdd|1\xc7YI2_J\x8b\xd2\x9b\x889\xbe_\xc4\x1c\xcc\xec{\x7f\xcc\x8f\xdd\x03~\x9fZ\x1er\xeb\x1f]\xe3:\x04\xf0S^q\xf3\x9cV>\xefRW+\x1b1:OE\xbc\x96\xbb|\xb3;n\x89\xb8\x15?\x14\f\x1d\x12x\x88\x858\xdc\xbe\xa5$U\v\xf6:\xf7\x94\x1b\x8c\x97z\x14\xc0\r;\x94D\xf0KY\x1a\xa3\xcc~!:z\xf9\xd9\x8b\xee\xbc.!Y\xe0\x02\xf7\xe8wO\xea\x16\x89\x1f`\x17\xb5\x82\x95\xaeE\xaa\xd2X^\xec\xe78\xd2;v\xdegn\x7f\x91\xb6\x1d\xc4G\'\xdd\xbe\xd0\x92\xd6\xf0I\xc2D^[\x91v\xed\xf0\xe5%\x8b\xa1\xdc\xd4\xe4F^{t\xca0X\xc7\xc8\xcf\x1d*\x00'/249}, {}], 0xa, "595f5eb30d90f68ad8a75c0278a9145497e6c208a6968a160cd42d57d93f913ee2c82aa5d2301d8a6ea4573de95a1712bb413d739ad6d0a65101af527f206f"}, 0x13e) close(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 7.340772699s ago: executing program 0 (id=3234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x9, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xb, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0x2}, {0x56, 0x4, 0x1}, {0x3, 0x6, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c481fde2c8c744240000000000c74424020e00000064410f01c40f101c2436430fc76f00c744240001cac93fc744240602000000939393240600000000c441fc2fa20b0000483e440f01c9c46119f3660066450fc7b30000000065410f0636660f3881450c", 0x65}], 0xaaaaaaaaaaaaa8a, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x2, 0xffffffffffffffff, 0x11}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x5, 0x700, 0x4, 0x20363059, [0x9a0, 0x4], [0x8, 0xfffffff9], 0x1}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 7.270558321s ago: executing program 1 (id=3235): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) unshare(0x4000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80012, r1, 0x7ffff000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@userptr={0x5f65, 0xb, 0x4, 0x2, 0x9, {}, {0x1, 0x1, 0x6, 0x9, 0xff, 0x7, "22ec6c62"}, 0x7fff, 0x2, {0x0}, 0x2}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x1, 0x2000, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r8, 0x38, 0x0) setsockopt$MRT6_TABLE(r8, 0x29, 0xcf, &(0x7f0000000140), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059", 0xf, 0xffffffffffffffff) 7.119486684s ago: executing program 3 (id=3236): ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0xc10c3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) 6.910714658s ago: executing program 5 (id=3237): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="15", 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 6.323927342s ago: executing program 1 (id=3238): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000001180)) r2 = dup(r1) mmap(&(0x7f0000505000/0x2000)=nil, 0x2000, 0xb, 0x110, r2, 0xab10c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000032300)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) 6.251446292s ago: executing program 7 (id=3239): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) 5.803954643s ago: executing program 5 (id=3240): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 5.523431119s ago: executing program 1 (id=3241): open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000300)=ANY=[], 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f0000002140)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x4, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 5.49131874s ago: executing program 7 (id=3242): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="e800000010000100"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) lseek(r4, 0x7, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)={0x400}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 5.087347438s ago: executing program 3 (id=3243): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60, 0x0, 0x0, 0x1f}, {}, {0x3}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 4.947513681s ago: executing program 0 (id=3244): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x8, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0x3, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xec4, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000002c0)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.449255882s ago: executing program 3 (id=3245): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006800011003000000000000800000070000000000"], 0x18}}, 0x4000) r2 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2, 0x129}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002700)=""/4095, 0xfff}], 0x1) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e1221b23bb601c477d3df373e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000100)="2d6d0000088fe40442a9242ecbf3a92009", 0x11}], 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001002abd7000fcdbdf251d"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x110000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000280)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x28) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r7, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000440)=0xc) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c2000905"], 0x0) 3.978992593s ago: executing program 7 (id=3246): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0xc6, 0x47, 0x7ffcffff}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000040)) splice(r2, 0x0, r5, 0x0, 0x80, 0x8) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', '', [{0x20, '/dev/ptmx\x00d\xc1\x80\x9e\xc1\v\x17\xc7K\x12\x9fI$\xf2o\xf0\xb9\x97J\xda\xf4\x946{\"y\x9e\xda\x93\x84\x00p\x87\xbb\n\xaa&\x9a\v\xf7\xfa\xdd|1\xc7YI2_J\x8b\xd2\x9b\x889\xbe_\xc4\x1c\xcc\xec{\x7f\xcc\x8f\xdd\x03~\x9fZ\x1er\xeb\x1f]\xe3:\x04\xf0S^q\xf3\x9cV>\xefRW+\x1b1:OE\xbc\x96\xbb|\xb3;n\x89\xb8\x15?\x14\f\x1d\x12x\x88\x858\xdc\xbe\xa5$U\v\xf6:\xf7\x94\x1b\x8c\x97z\x14\xc0\r;\x94D\xf0KY\x1a\xa3\xcc~!:z\xf9\xd9\x8b\xee\xbc.!Y\xe0\x02\xf7\xe8wO\xea\x16\x89\x1f`\x17\xb5\x82\x95\xaeE\xaa\xd2X^\xec\xe78\xd2;v\xdegn\x7f\x91\xb6\x1d\xc4G\'\xdd\xbe\xd0\x92\xd6\xf0I\xc2D^[\x91v\xed\xf0\xe5%\x8b\xa1\xdc\xd4\xe4F^{t\xca0X\xc7\xc8\xcf\x1d*\x00'/249}, {}], 0xa, "595f5eb30d90f68ad8a75c0278a9145497e6c208a6968a160cd42d57d93f913ee2c82aa5d2301d8a6ea4573de95a1712bb413d739ad6d0a65101af527f206f"}, 0x13e) close(r6) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 3.919492734s ago: executing program 5 (id=3247): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0x2}) 3.6528587s ago: executing program 5 (id=3248): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) unshare(0x4000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80012, r1, 0x7ffff000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@userptr={0x5f65, 0xb, 0x4, 0x2, 0x9, {}, {0x1, 0x1, 0x6, 0x9, 0xff, 0x7, "22ec6c62"}, 0x7fff, 0x2, {0x0}, 0x2}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x1, 0x2000, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r8, 0x38, 0x0) setsockopt$MRT6_TABLE(r8, 0x29, 0xcf, &(0x7f0000000140), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059", 0xf, 0xffffffffffffffff) 2.753564399s ago: executing program 5 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x1ffe, &(0x7f00000006c0)={0x0, 0xc4e9, 0x0, 0x1, 0x209}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5330, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, 0x0, 0x80) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000034b000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f000016a000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181c01, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 2.071482575s ago: executing program 7 (id=3250): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="15", 0x1}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 1.983257726s ago: executing program 7 (id=3251): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000b15dbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 947.160769ms ago: executing program 1 (id=3252): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000001180)) r2 = dup(r1) mmap(&(0x7f0000505000/0x2000)=nil, 0x2000, 0xb, 0x110, r2, 0xab10c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000032300)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) 939.367999ms ago: executing program 3 (id=3253): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x2a, 0x800, 0x1000) r0 = syz_usbip_server_init(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b6574000008000240000000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4005}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x74]}, 0x8) fsopen(&(0x7f00000000c0)='qnx4\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x110, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000014000200626f6e64"], 0x34}}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="000008000100000000003d0000002a6ad5fde1b6554242ac10fef9878574f7e568ff42b7b7151d6986161da58b840d7a6e0eb304946c4b948e98ec852cd40c1b51c39a1487d8b9912cf4e3091607d53f02f0954c89d08eec9bb780ff23d2f0e347d88d0edf4ca5d5c4f8b2ed6a9e836bccb2c65020578c56730534689dc1cbb21044dc8cd15b50f1ed31887ebf8de493e0364362eec95799088df4f44503e5010000007867d80f8fdd6bdc48cab8187e71a8ff8f05285679ca69809a7b7d04e80a81a9e75924162806c973348c57c81c5ba24fde98d8006dafb1e0a6096257ced6ef5ff20b62e6e5042b0ebd20a4a1d845b4b3ca9750aba8758bcf311ae2e25444a729ef407df2abaac0ce"], 0x10b) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 678.742205ms ago: executing program 7 (id=3254): ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0xc10c3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) 0s ago: executing program 1 (id=3255): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60, 0x0, 0x0, 0x1f}, {}, {0x3}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=unconfined pid=15106 comm="syz.7.2705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1389.506218][ T27] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1389.592446][ T27] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1389.635551][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.651357][ T26] audit: type=1326 audit(1784387566.664:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.7.2705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1389.661585][ T27] usb 4-1: Product: syz [ 1389.712117][ T26] audit: type=1326 audit(1784387566.664:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.7.2705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1389.745199][ T27] usb 4-1: Manufacturer: syz [ 1389.756992][ T27] usb 4-1: SerialNumber: syz [ 1389.765443][ T26] audit: type=1326 audit(1784387566.664:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.7.2705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1389.795406][T15100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1389.845282][T15131] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2708'. [ 1391.121169][T15100] Can't find a SQUASHFS superblock on nullb0 [ 1391.214641][ T26] audit: type=1326 audit(1784387566.664:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.7.2705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1391.433538][ T26] audit: type=1326 audit(1784387566.664:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.7.2705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1391.792783][ T27] usblp0: Disabling reads from problematic bidirectional printer [ 1391.843180][ T27] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1391.924677][ T27] usb 4-1: USB disconnect, device number 43 [ 1391.970843][ T27] usblp0: removed [ 1395.929881][ T7633] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1396.218520][ T7633] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1396.330979][ T7633] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.346666][ T7633] usb 8-1: Product: syz [ 1396.355886][ T7633] usb 8-1: Manufacturer: syz [ 1396.362803][ T7633] usb 8-1: SerialNumber: syz [ 1396.419699][ T7633] usb 8-1: config 0 descriptor?? [ 1396.473151][ T7633] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1396.512721][ T7633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1396.537838][ T7633] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1396.559846][ T7633] usb 8-1: media controller created [ 1398.624864][ T7633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.680663][ T7633] DVB: Unable to find symbol mt352_attach() [ 1399.933347][ T7633] DVB: Unable to find symbol nxt6000_attach() [ 1399.939977][ T7633] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1399.970565][ T7633] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input46 [ 1399.998032][ T7633] dvb-usb: schedule remote query interval to 1000 msecs. [ 1400.026351][ T7633] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1400.070603][ T7633] dvb-usb: bulk message failed: -22 (7/0) [ 1400.076853][ T7633] dvb-usb: bulk message failed: -22 (7/0) [ 1400.142479][ T7633] usb 8-1: USB disconnect, device number 5 [ 1400.251315][ T7633] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1401.280920][T15194] lo speed is unknown, defaulting to 1000 [ 1401.329738][T15194] lo speed is unknown, defaulting to 1000 [ 1401.383892][T15194] lo speed is unknown, defaulting to 1000 [ 1401.567328][T15194] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1401.615635][T15194] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1401.746459][T15194] lo speed is unknown, defaulting to 1000 [ 1401.963054][T15194] lo speed is unknown, defaulting to 1000 [ 1401.982100][T15194] lo speed is unknown, defaulting to 1000 [ 1402.630917][T15194] lo speed is unknown, defaulting to 1000 [ 1402.852525][T15194] lo speed is unknown, defaulting to 1000 [ 1402.858939][T15194] lo speed is unknown, defaulting to 1000 [ 1402.905521][T15194] lo speed is unknown, defaulting to 1000 [ 1403.189621][ T27] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1403.379641][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1403.536362][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1403.545510][ T27] usb 4-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 1403.555914][ T27] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1403.576672][ T27] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1403.619688][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.648986][ T27] usb 4-1: Product: syz [ 1403.669501][T15192] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1403.678578][ T27] usb 4-1: Manufacturer: syz [ 1403.707858][ T27] usb 4-1: SerialNumber: syz [ 1403.733038][T15226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1403.871939][T15192] usb 6-1: not running at top speed; connect to a high speed hub [ 1403.920572][T15192] usb 6-1: config 7 has an invalid interface number: 116 but max is 0 [ 1403.959958][T15226] Can't find a SQUASHFS superblock on nullb0 [ 1404.008701][T15192] usb 6-1: config 7 has no interface number 0 [ 1404.020702][ T6864] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1404.044950][T15192] usb 6-1: config 7 interface 116 has no altsetting 0 [ 1404.103491][T15192] usb 6-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 1404.170693][T15192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.210258][ T6864] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1404.219192][T15192] usb 6-1: Product: syz [ 1404.231448][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1404.239206][T15192] usb 6-1: Manufacturer: syz [ 1404.279548][T15192] usb 6-1: SerialNumber: syz [ 1404.797232][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1404.812113][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1404.839152][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1404.913359][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1404.983503][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1405.048140][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.065080][T15192] usb-storage 6-1:7.116: USB Mass Storage device detected [ 1405.146594][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1405.230869][T15192] usb 6-1: USB disconnect, device number 19 [ 1405.270250][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1405.288048][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.354585][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1405.369020][ T27] usblp0: Disabling reads from problematic bidirectional printer [ 1405.402290][ T27] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1405.427561][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1405.447007][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2733'. [ 1405.489114][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.506616][ T27] usb 4-1: USB disconnect, device number 44 [ 1405.529183][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1405.557955][ T27] usblp0: removed [ 1405.562973][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2733'. [ 1405.612595][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1405.665498][T15262] device syzkaller0 entered promiscuous mode [ 1405.680886][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.717245][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1405.775212][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1405.835744][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.875742][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1405.929986][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1405.976731][ T6864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.986891][ T6864] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1406.035852][ T6864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1406.078305][ T6864] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1406.088573][ T6864] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1406.100506][ T6864] usb 2-1: Product: syz [ 1406.104827][ T6864] usb 2-1: Manufacturer: syz [ 1406.181589][ T6864] usb 2-1: SerialNumber: syz [ 1406.228702][ T6864] usb 2-1: config 0 descriptor?? [ 1406.272142][ T6864] yurex 2-1:0.0: Could not find endpoints [ 1407.741930][T15192] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1408.074837][T15192] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.333961][T15192] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.424211][T15192] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1408.697554][T15192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.945947][T15192] usb 8-1: config 0 descriptor?? [ 1409.691446][T15306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2744'. [ 1409.771254][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.779771][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.786728][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.805589][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.817845][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.829179][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.858469][T15192] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1409.877935][T15192] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 1409.924973][ T4316] usb 2-1: USB disconnect, device number 45 [ 1409.970566][T15192] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 1409.986182][T15192] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 1410.018397][T15192] pyra: probe of 0003:1E7D:2CF6.000C failed with error -71 [ 1410.052135][T15192] usb 8-1: USB disconnect, device number 6 [ 1410.079700][T10046] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1410.309815][T10046] usb 1-1: Using ep0 maxpacket: 32 [ 1410.321970][T10046] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1410.370574][T10046] usb 1-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 1410.415281][T10046] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1410.459147][T10046] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1410.501999][T10046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.517779][T15311] fido_id[15311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1410.545799][T10046] usb 1-1: Product: syz [ 1410.582745][T10046] usb 1-1: Manufacturer: syz [ 1410.624859][T10046] usb 1-1: SerialNumber: syz [ 1410.687256][T15306] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1410.865405][T15319] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2748'. [ 1411.408306][T15306] Can't find a SQUASHFS superblock on nullb0 [ 1411.569917][T15327] binder: 15320:15327 ioctl c0306201 200000000140 returned -14 [ 1412.096040][T10046] usblp0: Disabling reads from problematic bidirectional printer [ 1412.136068][T10046] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1412.709688][T10046] usb 1-1: USB disconnect, device number 38 [ 1412.731248][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2752'. [ 1412.786225][T10046] usblp0: removed [ 1414.485753][ T48] Bluetooth: hci4: link tx timeout [ 1414.491356][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1417.375663][T15376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1417.409744][ T126] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1417.684040][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.805039][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.015878][ T126] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1418.025332][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.042383][ T126] usb 4-1: config 0 descriptor?? [ 1418.458049][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.475772][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.491887][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.568157][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.598635][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.617813][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.636132][ T126] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1418.663221][ T126] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1418.769880][ T4319] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1419.277237][ T126] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 1419.305389][ T126] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 1419.337962][ T126] pyra: probe of 0003:1E7D:2CF6.000D failed with error -71 [ 1419.402884][ T126] usb 4-1: USB disconnect, device number 45 [ 1419.429863][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 1419.478602][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1419.521913][ T4319] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1419.609018][ T4319] usb 2-1: string descriptor 0 read error: -22 [ 1419.619855][ T4319] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1419.726280][ T4319] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1419.847744][ T4319] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1419.937518][T15394] fido_id[15394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1419.998929][ T4319] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1420.144999][ T4319] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1420.206773][ T4319] usb 2-1: media controller created [ 1420.440839][T15402] comedi comedi3: pcl818: I/O port conflict (0x100,16) [ 1420.513771][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1421.088819][ T4319] zl10353_read_register: readreg error (reg=127, ret==0) [ 1421.178847][T15406] NILFS (nullb0): couldn't find nilfs on the device [ 1422.806813][ T4319] usb 2-1: USB disconnect, device number 46 [ 1423.003735][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.024277][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.334463][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 1425.334475][ T26] audit: type=1326 audit(1784387604.064:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1425.457038][ T26] audit: type=1326 audit(1784387604.104:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.067045][ T26] audit: type=1326 audit(1784387604.104:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.205809][ T26] audit: type=1326 audit(1784387604.104:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.259626][T15437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2778'. [ 1426.280241][ T5094] Bluetooth: (null): Invalid header checksum [ 1426.286441][ T5094] Bluetooth: (null): Invalid header checksum [ 1426.288633][ T26] audit: type=1326 audit(1784387604.104:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.328752][ T26] audit: type=1326 audit(1784387604.114:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.389938][T13789] Bluetooth: (null): Invalid header checksum [ 1426.499738][ T5094] Bluetooth: (null): Invalid header checksum [ 1426.506194][ T26] audit: type=1326 audit(1784387604.114:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.609873][T11280] Bluetooth: (null): Invalid header checksum [ 1426.622427][ T26] audit: type=1326 audit(1784387604.114:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.714048][ T26] audit: type=1326 audit(1784387604.114:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.725677][T11280] Bluetooth: (null): Invalid header checksum [ 1426.813308][ T26] audit: type=1326 audit(1784387604.114:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.5.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1426.838513][T11280] Bluetooth: (null): Invalid header checksum [ 1426.939647][T15192] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1426.947625][ T5090] Bluetooth: (null): Invalid header checksum [ 1427.131507][T15192] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1427.161992][T15192] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1427.213861][T15192] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1427.242417][T15192] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1427.283368][T15192] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1427.313654][T15192] usb 1-1: Product: syz [ 1427.331542][T15192] usb 1-1: Manufacturer: syz [ 1427.349106][T15192] usb 1-1: SerialNumber: syz [ 1427.375786][T15192] usb 1-1: config 0 descriptor?? [ 1427.400647][T15441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1427.425716][T15192] usb 1-1: selecting invalid altsetting 0 [ 1427.658646][T15441] usb 1-1: BOGUS urb xfer, pipe 0 != type 1 [ 1427.792238][ T27] usb 1-1: USB disconnect, device number 39 [ 1427.819657][ T4319] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1428.009546][ T4319] usb 8-1: Using ep0 maxpacket: 8 [ 1428.106547][T15455] comedi comedi3: pcl818: I/O port conflict (0x100,16) [ 1428.134516][ T4319] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1428.194096][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.217538][T13439] udevd[13439]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.229561][ T4319] usb 8-1: Product: syz [ 1428.241648][ T4319] usb 8-1: Manufacturer: syz [ 1428.248722][ T4319] usb 8-1: SerialNumber: syz [ 1428.270360][ T4319] usb 8-1: config 0 descriptor?? [ 1428.297092][ T4319] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1430.140525][ T4319] gspca_sonixj: i2c_w8 err -110 [ 1430.919858][ T4319] sonixj: probe of 8-1:0.0 failed with error -110 [ 1431.655140][ T4316] usb 8-1: USB disconnect, device number 7 [ 1431.739208][T15477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2791'. [ 1431.979532][ T4362] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1432.201397][ T4362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.239830][ T4362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.299997][ T4362] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1432.330710][ T4362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.355750][ T4362] usb 6-1: config 0 descriptor?? [ 1432.526387][T15484] UBIFS error (pid: 15484): cannot open "(null)", error -22 [ 1432.791273][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.843667][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.869535][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.889947][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.920704][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.927617][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.953916][ T4362] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1432.986710][ T4362] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1433.035045][ T4362] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 1433.047962][ T4362] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 1433.063590][ T4362] pyra: probe of 0003:1E7D:2CF6.000E failed with error -71 [ 1433.105291][ T4362] usb 6-1: USB disconnect, device number 20 [ 1435.178118][T15498] fido_id[15498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1437.217355][T15530] netlink: 'syz.0.2806': attribute type 21 has an invalid length. [ 1444.107159][T15585] netlink: 'syz.1.2821': attribute type 21 has an invalid length. [ 1450.221937][T15662] UBIFS error (pid: 15662): cannot open "(null)", error -22 [ 1451.104833][T15669] UBIFS error (pid: 15669): cannot open "(null)", error -22 [ 1451.584492][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1451.604396][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1451.630442][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1451.638530][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1451.650135][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1451.657632][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1451.852302][T15675] lo speed is unknown, defaulting to 1000 [ 1453.937701][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 1454.569872][T10046] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1454.810158][T10046] usb 8-1: Using ep0 maxpacket: 16 [ 1454.871662][T10046] usb 8-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1455.147707][T10046] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.359122][T10046] usb 8-1: Product: syz [ 1455.388498][T10046] usb 8-1: Manufacturer: syz [ 1455.430609][T10046] usb 8-1: SerialNumber: syz [ 1455.487276][T10046] usb 8-1: config 0 descriptor?? [ 1455.522794][T10046] usb 8-1: selecting invalid altsetting 1 [ 1455.528590][T10046] technisat-usb2: could not set alternate setting to 0 [ 1455.604615][T15675] chnl_net:caif_netlink_parms(): no params data found [ 1455.733250][T10046] technisat-usb2: firmware version: 0.0 [ 1455.738899][T10046] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1455.969471][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1456.387657][T15675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.454135][T15675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.553520][T15675] device bridge_slave_0 entered promiscuous mode [ 1456.602540][T15675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.610968][T10046] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1456.620712][T15675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.629051][T15675] device bridge_slave_1 entered promiscuous mode [ 1456.635835][T10046] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1456.645885][T10046] usb 8-1: media controller created [ 1456.651235][T10046] technisat-usb2: i2c-error: out failed 53 = -22 [ 1456.658914][T10046] dvb-usb: MAC address reading failed. [ 1456.698319][T10046] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1456.707891][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.747313][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.820936][T10046] DVB: Unable to find symbol stv090x_attach() [ 1456.827632][T10046] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1456.926380][T15675] team0: Port device team_slave_0 added [ 1456.956161][T15675] team0: Port device team_slave_1 added [ 1457.028634][T15689] technisat-usb2: i2c-error: out failed 00 = -22 [ 1457.286710][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.294002][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.329215][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.714954][T10046] rc_core: IR keymap rc-technisat-usb2 not found [ 1457.724309][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.731725][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.758617][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.769334][T10046] Registered IR keymap rc-empty [ 1457.837037][T10046] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1457.904949][T10046] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input47 [ 1457.992546][T15675] device hsr_slave_0 entered promiscuous mode [ 1458.006511][T15675] device hsr_slave_1 entered promiscuous mode [ 1458.019541][T10046] dvb-usb: schedule remote query interval to 100 msecs. [ 1458.038372][T10046] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1458.053995][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1458.166794][T15722] UBIFS error (pid: 15722): cannot open "(null)", error -22 [ 1458.334692][T10046] usb 8-1: USB disconnect, device number 8 [ 1458.407691][T15675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.421519][T15675] Cannot create hsr debugfs directory [ 1458.437628][T15731] binder: 15726:15731 ioctl c0306201 200000000080 returned -14 [ 1458.692494][T15728] binder: 15726:15728 ioctl c0306201 2000000003c0 returned -14 [ 1459.272201][T15734] sctp: failed to load transform for md5: -2 [ 1459.728882][T10046] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1460.119660][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1461.451157][T15675] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.867717][T15675] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.168808][T15675] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.892423][T15675] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.399735][T10046] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1463.439432][T15771] overlayfs: overlapping lowerdir path [ 1463.690371][T10046] usb 8-1: Using ep0 maxpacket: 8 [ 1463.717725][T10046] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.788021][T10046] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1463.828777][T15675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1463.839640][T10046] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1463.871298][T10046] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1463.895038][T15675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1463.903240][T10046] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1463.929794][T10046] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.949776][T10046] usb 8-1: Product: syz [ 1463.960293][T10046] usb 8-1: Manufacturer: syz [ 1463.964945][T10046] usb 8-1: SerialNumber: syz [ 1463.991388][T10046] usb 8-1: config 0 descriptor?? [ 1464.001114][T15675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1464.022639][T10046] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 1464.038527][T15675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1464.178598][T15775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1464.217342][T10046] snd_usb_toneport 8-1:0.0: cannot get proper max packet size [ 1464.248893][T10046] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 1464.279101][T15675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.294833][T10046] snd_usb_toneport: probe of 8-1:0.0 failed with error -22 [ 1464.325785][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1464.363572][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1464.385498][T15675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.405437][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1464.423908][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1464.435905][ T4316] usb 8-1: USB disconnect, device number 9 [ 1464.480198][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.487385][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.525393][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1464.583528][T13571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1464.607906][T13571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1464.616493][T10046] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1464.664345][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.671656][T13571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.707153][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1464.727560][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1464.755049][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1464.769135][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1464.790337][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1464.800676][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1464.811050][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1464.819576][T10046] usb 1-1: Using ep0 maxpacket: 32 [ 1464.827860][T10046] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1464.838533][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1464.868392][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1464.873519][T10046] usb 1-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 1464.890201][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1464.917814][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1464.934818][T10046] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1464.961371][T15675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1465.003600][T10046] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1465.048129][T10046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.130577][T10046] usb 1-1: Product: syz [ 1465.154167][T10046] usb 1-1: Manufacturer: syz [ 1465.161087][T10046] usb 1-1: SerialNumber: syz [ 1465.212088][T15778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1465.346443][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1465.355824][T15789] device bridge_slave_1 left promiscuous mode [ 1465.362820][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.384936][T15789] device bridge_slave_0 left promiscuous mode [ 1465.391779][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.473263][T15775] Can't find a SQUASHFS superblock on nullb0 [ 1465.558264][ T52] block nbd7: Attempted send on invalid socket [ 1465.565384][ T52] blk_print_req_error: 10 callbacks suppressed [ 1465.565954][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1465.583767][T15791] efs: cannot read volume header [ 1468.498974][T10046] usblp0: Disabling reads from problematic bidirectional printer [ 1468.514341][T10046] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1468.543148][T10046] usb 1-1: USB disconnect, device number 40 [ 1468.559916][T10046] usblp0: removed [ 1470.088983][T15818] trusted_key: encrypted_key: key user:syz not found [ 1470.099000][T15818] netlink: 'syz.7.2869': attribute type 21 has an invalid length. [ 1470.113927][T15818] netlink: 'syz.7.2869': attribute type 7 has an invalid length. [ 1470.591202][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1470.610781][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1470.656187][T15823] binder: 15822:15823 ioctl c0306201 200000000180 returned -14 [ 1470.679685][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.794988][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1470.806868][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1470.836293][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1470.848436][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1470.876956][T15675] device veth0_vlan entered promiscuous mode [ 1470.905634][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1470.953571][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1472.228024][T15675] device veth1_vlan entered promiscuous mode [ 1472.363324][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1472.406841][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1472.454153][T15675] device veth0_macvtap entered promiscuous mode [ 1472.488304][T15675] device veth1_macvtap entered promiscuous mode [ 1472.588010][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.618949][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.655222][T15837] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2876'. [ 1472.671227][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.699467][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.719543][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.738397][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.769467][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.789475][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.837766][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.899066][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.959513][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.985227][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.041960][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.080648][ T48] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15 [ 1473.090130][ T6388] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1473.197289][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.322030][ T6388] usb 2-1: Using ep0 maxpacket: 32 [ 1473.362237][ T6388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1473.467532][ T6388] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 1473.573377][T15675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.599499][ T6388] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1473.616648][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.635879][ T6388] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1473.655180][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.679631][ T6388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.706927][ T6388] usb 2-1: Product: syz [ 1473.711810][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.731396][ T6388] usb 2-1: Manufacturer: syz [ 1473.787584][ T6388] usb 2-1: SerialNumber: syz [ 1473.806542][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.827626][T15837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1473.849441][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.360956][T15837] Can't find a SQUASHFS superblock on nullb0 [ 1474.376522][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.429457][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.490313][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.532035][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.565067][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.610915][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.663282][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.695701][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.763358][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.803840][T15675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.838708][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1474.867876][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1474.894747][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1474.926675][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1474.958462][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1475.011321][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1475.044394][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1475.069524][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1475.105974][T15675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.135215][T15675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.174930][T15675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.753881][T15675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.774293][ T6388] usblp0: Disabling reads from problematic bidirectional printer [ 1475.809542][ T6388] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1475.879777][ T6388] usb 2-1: USB disconnect, device number 47 [ 1475.912356][ T6388] usblp0: removed [ 1476.148131][T11747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.168483][T11747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.285076][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1476.630219][T10512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.638346][T10512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.676673][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1476.768094][T15863] binder: 15862:15863 ioctl c0306201 200000000180 returned -14 [ 1477.259430][T15879] netlink: 'syz.3.2836': attribute type 21 has an invalid length. [ 1480.839567][ T7] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1482.491335][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.515984][ T7] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.547295][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1482.610238][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.634118][ T7] usb 2-1: Product: syz [ 1482.648982][ T7] usb 2-1: Manufacturer: syz [ 1482.682542][ T7] usb 2-1: SerialNumber: syz [ 1482.720829][ T7] cdc_ncm 2-1:1.0: skipping garbage [ 1482.726109][ T7] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1482.760366][ T7] cdc_ncm 2-1:1.0: bind() failure [ 1482.790896][ T7] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1482.825442][ T7] cdc_ncm 2-1:1.1: bind() failure [ 1482.999500][ T7] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1484.442229][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.448628][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.708112][ T6864] usb 2-1: USB disconnect, device number 48 [ 1484.749441][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 1484.761153][ T7] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1484.779749][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.795248][ T7] usb 6-1: Product: syz [ 1484.836765][ T7] usb 6-1: Manufacturer: syz [ 1484.949270][T15931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.339786][ T7] usb 6-1: SerialNumber: syz [ 1485.361503][ T7] usb 6-1: config 0 descriptor?? [ 1485.369787][ T7] usb 6-1: selecting invalid altsetting 1 [ 1485.375702][ T7] technisat-usb2: could not set alternate setting to 0 [ 1486.824752][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1486.871206][ T7] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 1486.896767][ T7] usb 6-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 1486.957070][ T7] usb 6-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 1487.130619][T15938] binder: 15937:15938 ioctl c0306201 200000000080 returned -14 [ 1487.148923][T15938] binder: 15937:15938 ioctl c0306201 2000000003c0 returned -14 [ 1487.427973][T15944] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.476936][T15944] binder: 15942:15944 ioctl 4018620d 2000000002c0 returned -16 [ 1487.951138][T15947] random: crng reseeded on system resumption [ 1488.103394][T15949] UBIFS error (pid: 15949): cannot open "(null)", error -22 [ 1488.120440][ T48] Bluetooth: hci4: adv larger than maximum supported [ 1488.127768][ T48] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1490.473734][T15192] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 1490.551967][T15967] overlayfs: overlapping lowerdir path [ 1490.865407][T15192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.939785][T15192] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1490.948741][T15192] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1491.034848][T15192] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1491.076428][T15192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.116486][T15964] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1491.138028][T15192] hub 1-1:1.0: bad descriptor, ignoring hub [ 1491.150983][T15192] hub: probe of 1-1:1.0 failed with error -5 [ 1491.166064][T15192] cdc_wdm 1-1:1.0: skipping garbage [ 1491.177141][T15192] cdc_wdm 1-1:1.0: skipping garbage [ 1491.217601][T15192] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1491.236177][T15192] cdc_wdm 1-1:1.0: Unknown control protocol [ 1491.465096][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1491.471935][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1491.478428][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1491.485058][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1491.498072][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1491.504718][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1491.510859][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1491.530397][ T6864] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1491.721323][ T6388] usb 1-1: USB disconnect, device number 41 [ 1491.789919][ T6864] usb 8-1: Using ep0 maxpacket: 16 [ 1491.801701][ T6864] usb 8-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1491.858700][ T6864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.911769][ T6864] usb 8-1: Product: syz [ 1491.937850][ T6864] usb 8-1: Manufacturer: syz [ 1491.961190][ T6864] usb 8-1: SerialNumber: syz [ 1492.000421][ T6864] usb 8-1: config 0 descriptor?? [ 1492.044184][ T6864] usb 8-1: selecting invalid altsetting 1 [ 1492.068879][ T6864] technisat-usb2: could not set alternate setting to 0 [ 1492.167467][T15981] binder: 15980:15981 ioctl c0306201 200000000080 returned -14 [ 1492.255831][T15981] binder: 15980:15981 ioctl c0306201 2000000003c0 returned -14 [ 1492.268936][ T6864] technisat-usb2: firmware version: 0.0 [ 1492.283053][ T6864] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1492.494243][T15985] binder_alloc: 15983: binder_alloc_buf, no vma [ 1492.679214][ T6864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1492.745394][ T6864] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1492.797957][ T6864] usb 8-1: media controller created [ 1492.826396][ T6864] technisat-usb2: i2c-error: out failed 53 = -22 [ 1492.851150][ T6864] dvb-usb: MAC address reading failed. [ 1492.983846][ T6864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1493.234165][T15989] technisat-usb2: i2c-error: out failed 00 = -22 [ 1493.338963][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 1493.349430][T15990] device bridge_slave_1 left promiscuous mode [ 1493.356219][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.490531][T15990] device bridge_slave_0 left promiscuous mode [ 1493.532490][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.124494][ T6864] DVB: Unable to find symbol stv090x_attach() [ 1494.149057][ T6864] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1494.493687][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1494.505272][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1494.513445][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1494.531162][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1494.540881][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1494.556823][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1494.569524][ T6864] rc_core: IR keymap rc-technisat-usb2 not found [ 1494.599893][ T6864] Registered IR keymap rc-empty [ 1494.605281][ T6864] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1494.741680][T15997] lo speed is unknown, defaulting to 1000 [ 1496.231061][ T6864] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input48 [ 1496.302747][ T6864] dvb-usb: schedule remote query interval to 100 msecs. [ 1496.340222][ T6864] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1496.414626][ T6864] usb 8-1: USB disconnect, device number 10 [ 1496.440744][ T128] dvb-usb: error -19 while querying for an remote control event. [ 1496.538934][ T6864] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1496.600068][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1496.678347][T15997] chnl_net:caif_netlink_parms(): no params data found [ 1496.719535][T15192] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1496.820872][T15997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.848536][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.910684][T15192] usb 4-1: not running at top speed; connect to a high speed hub [ 1496.927665][T15997] device bridge_slave_0 entered promiscuous mode [ 1496.941822][T15192] usb 4-1: config 7 has an invalid interface number: 116 but max is 0 [ 1496.972881][T15997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.007480][T15997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.025870][T15192] usb 4-1: config 7 has no interface number 0 [ 1497.042354][T15192] usb 4-1: config 7 interface 116 has no altsetting 0 [ 1497.047982][T15997] device bridge_slave_1 entered promiscuous mode [ 1497.070518][T15192] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 1497.209665][T16019] UBIFS error (pid: 16019): cannot open "(null)", error -22 [ 1497.311135][T15192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.669494][T15192] usb 4-1: Product: syz [ 1497.690715][T15997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.700069][T15192] usb 4-1: Manufacturer: syz [ 1497.704709][T15192] usb 4-1: SerialNumber: syz [ 1497.757773][T15997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.854053][T15997] team0: Port device team_slave_0 added [ 1497.872802][T15997] team0: Port device team_slave_1 added [ 1497.952175][T15192] usb-storage 4-1:7.116: USB Mass Storage device detected [ 1497.970242][T15997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.981744][T15997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.097149][T15192] usb 4-1: USB disconnect, device number 46 [ 1498.202301][T15997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.247525][T15997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.273813][T15997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.379259][T15997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.663996][T15997] device hsr_slave_0 entered promiscuous mode [ 1498.679579][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1498.691621][ T48] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 1498.707477][T15997] device hsr_slave_1 entered promiscuous mode [ 1498.731635][T15997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1498.742635][T15997] Cannot create hsr debugfs directory [ 1499.710323][T16036] binder_alloc: 16032: binder_alloc_buf, no vma [ 1499.771047][T16035] device syzkaller0 entered promiscuous mode [ 1500.224879][T15997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.848761][T15192] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1501.860031][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1502.055927][T16046] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1502.065588][T15192] usb 4-1: Using ep0 maxpacket: 16 [ 1502.072951][T15997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.088987][T15192] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1502.128121][T15192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.159646][T15192] usb 4-1: Product: syz [ 1502.163878][T15192] usb 4-1: Manufacturer: syz [ 1502.168509][T15192] usb 4-1: SerialNumber: syz [ 1502.200209][T16048] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1502.211070][T15192] usb 4-1: config 0 descriptor?? [ 1502.257887][T15192] usb 4-1: selecting invalid altsetting 1 [ 1502.279500][T15192] technisat-usb2: could not set alternate setting to 0 [ 1502.364765][T15997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.419269][T15192] technisat-usb2: firmware version: 0.0 [ 1502.425173][T15192] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1502.597633][T15997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.827173][T15192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1502.852787][T15192] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1502.885714][T15192] usb 4-1: media controller created [ 1502.904708][T15192] technisat-usb2: i2c-error: out failed 53 = -22 [ 1502.926398][T15192] dvb-usb: MAC address reading failed. [ 1502.945943][T15997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1502.974271][T15192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1503.071808][T15997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1503.098096][T15997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1503.142103][T15997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1503.445519][T16062] technisat-usb2: i2c-error: out failed 00 = -22 [ 1503.830118][T15192] DVB: Unable to find symbol stv090x_attach() [ 1503.838652][T15192] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1503.881060][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1504.122409][T15997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.151931][T16070] device syzkaller0 entered promiscuous mode [ 1504.175448][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1504.194250][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1504.210991][T15997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.239563][T15192] rc_core: IR keymap rc-technisat-usb2 not found [ 1504.248240][T15192] Registered IR keymap rc-empty [ 1504.265926][T15192] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1504.308818][T15192] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input49 [ 1504.364512][T15192] dvb-usb: schedule remote query interval to 100 msecs. [ 1504.372888][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1504.387394][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1504.402058][T15192] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1504.451623][T15192] usb 4-1: USB disconnect, device number 47 [ 1504.454063][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.464834][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.545518][T15192] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1504.564150][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1504.591407][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1504.610490][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1504.640233][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.647430][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.284018][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1506.303344][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1506.382559][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1506.437843][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1506.459091][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1506.501143][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1506.528865][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1506.561945][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1506.596511][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1506.625415][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1506.665768][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1506.717761][T15997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1507.425583][T16092] device syzkaller0 entered promiscuous mode [ 1509.042266][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1509.042283][ T26] audit: type=1326 audit(1784387687.774:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.134766][ T26] audit: type=1326 audit(1784387687.774:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.220116][ T26] audit: type=1326 audit(1784387687.834:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.394725][ T26] audit: type=1326 audit(1784387687.834:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.427762][ T26] audit: type=1326 audit(1784387687.834:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.477099][ T26] audit: type=1326 audit(1784387687.844:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.513179][ T26] audit: type=1326 audit(1784387687.844:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.602228][ T26] audit: type=1326 audit(1784387687.844:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.659327][ T26] audit: type=1326 audit(1784387687.844:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1509.722363][ T26] audit: type=1326 audit(1784387687.844:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.7.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1510.178439][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2959'. [ 1512.103300][ T1045] block nbd3: Attempted send on invalid socket [ 1512.110104][ T1045] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1512.119287][T16151] efs: cannot read volume header [ 1513.897432][T16161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1514.792860][T16114] device syzkaller0 entered promiscuous mode [ 1514.819871][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1515.706923][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1515.729881][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1515.805141][T15997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.887281][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1515.905053][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1516.011376][T16152] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1516.210773][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1516.232882][T16152] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1516.247393][ T48] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 1516.313843][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1516.477449][T15997] device veth0_vlan entered promiscuous mode [ 1516.563752][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1516.648083][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1516.964648][T15997] device veth1_vlan entered promiscuous mode [ 1517.594958][T16189] fido_id[16189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1517.611321][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1517.653410][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1518.074770][T15997] device veth0_macvtap entered promiscuous mode [ 1518.246543][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1518.272746][T15997] device veth1_macvtap entered promiscuous mode [ 1518.816158][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.919633][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.032435][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.873704][ T48] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1520.921539][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.992670][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.039760][T16205] random: crng reseeded on system resumption [ 1521.116050][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.335831][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.424290][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.524805][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.628254][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.759673][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.864348][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.957531][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.098527][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.206710][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.349538][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.363627][T15997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.379922][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.390762][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.400938][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.412107][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.422247][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.433031][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.443206][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.454111][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.464253][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.474979][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.485108][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.495825][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.506285][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.517819][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.528209][T15997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.539209][T15997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.551229][T15997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.653235][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1522.687381][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1522.707078][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1522.750948][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1522.767720][T15997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.777736][T15997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.790588][T15997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.802598][T15997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.569715][T12251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.623476][T12251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.691358][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1523.785900][ T5088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.803618][ T5088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.859882][T12251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1523.903842][ T26] kauditd_printk_skb: 178 callbacks suppressed [ 1523.903859][ T26] audit: type=1326 audit(1784387702.634:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1523.991647][ T26] audit: type=1326 audit(1784387702.644:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1524.557836][T16243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.603284][ T26] audit: type=1326 audit(1784387702.644:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1524.630037][ T26] audit: type=1326 audit(1784387702.644:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1524.765795][ T26] audit: type=1326 audit(1784387702.644:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1525.251709][ T26] audit: type=1326 audit(1784387702.674:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1525.277218][ T26] audit: type=1326 audit(1784387702.674:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1525.386997][ T26] audit: type=1326 audit(1784387702.674:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1525.453184][ T26] audit: type=1326 audit(1784387702.674:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1525.506770][ T26] audit: type=1326 audit(1784387702.674:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f19de99 code=0x7ffc0000 [ 1525.979709][T16262] UBIFS error (pid: 16262): cannot open "(null)", error -22 [ 1527.192998][T16275] device syzkaller0 entered promiscuous mode [ 1527.758979][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 1527.898717][ T1045] block nbd3: Attempted send on invalid socket [ 1527.905215][ T1045] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.914978][T16283] efs: cannot read volume header [ 1529.273469][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1529.285705][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1529.304919][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1529.325464][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1529.333650][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1529.345134][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1529.640240][T16285] lo speed is unknown, defaulting to 1000 [ 1529.911536][T16285] chnl_net:caif_netlink_parms(): no params data found [ 1530.979643][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3005'. [ 1531.167106][T16285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.199665][T16285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.247550][T16285] device bridge_slave_0 entered promiscuous mode [ 1531.758403][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 1531.794445][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.826041][T16285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.838447][T16285] device bridge_slave_1 entered promiscuous mode [ 1531.845503][ T4289] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1531.927414][T16285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.966976][T16285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.037417][ T4289] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1532.059716][ T4289] usb 4-1: can't read configurations, error -71 [ 1532.083011][T16285] team0: Port device team_slave_0 added [ 1532.119819][T16285] team0: Port device team_slave_1 added [ 1532.184305][T16285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.192014][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.220750][T16285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.235840][T16285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.245049][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.279815][ T4362] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1532.308785][T16285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.380504][T16285] device hsr_slave_0 entered promiscuous mode [ 1532.396453][T16285] device hsr_slave_1 entered promiscuous mode [ 1532.420168][T16285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.427837][T16285] Cannot create hsr debugfs directory [ 1532.452384][T16322] device syzkaller0 entered promiscuous mode [ 1532.459630][ T4362] usb 2-1: device descriptor read/64, error -71 [ 1532.753957][ T4362] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1532.969510][ T4362] usb 2-1: device descriptor read/64, error -71 [ 1533.160831][ T4362] usb usb2-port1: attempt power cycle [ 1533.689686][ T4362] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1533.754484][ T4362] usb 2-1: device descriptor read/8, error -71 [ 1533.800224][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 1533.855578][T16285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.986442][T16285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.089881][ T4362] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1534.131561][ T4362] usb 2-1: device descriptor read/8, error -71 [ 1534.172621][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1534.232259][ T1045] block nbd3: Attempted send on invalid socket [ 1534.238756][ T1045] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1534.249464][T16340] efs: cannot read volume header [ 1534.270283][ T4362] usb usb2-port1: unable to enumerate USB device [ 1534.969208][T16285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.047380][T16343] device syzkaller0 entered promiscuous mode [ 1535.076562][T16339] tipc: Started in network mode [ 1535.128306][T16339] tipc: Node identity 16263259222b, cluster identity 4711 [ 1535.160600][T16339] tipc: Enabled bearer , priority 0 [ 1535.268261][T16285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.333852][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1535.762802][T16338] tipc: Resetting bearer [ 1535.880409][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 1536.195269][T16338] tipc: Disabling bearer [ 1536.211216][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3022'. [ 1537.963967][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 1538.035882][T16285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1538.261991][T16285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1538.262069][ T6388] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1538.301595][T16285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1538.314253][T16285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1538.614900][ T6388] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1538.669444][ T6388] usb 2-1: can't read configurations, error -71 [ 1538.701928][T16285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.737792][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1538.760937][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1538.783475][T16285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.805235][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1538.830188][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1538.926239][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.933668][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.499692][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1539.521484][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1539.571582][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1539.596709][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.603980][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.618565][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1539.644616][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1539.658612][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1539.673198][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1539.712981][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1539.722474][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1539.733895][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1539.744769][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1539.754138][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1539.763925][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1539.784698][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1539.813011][T16285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1539.849833][T16209] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1539.969076][T16382] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1539.976198][T16382] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1539.991240][T16382] device hsr0 entered promiscuous mode [ 1539.998377][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 1540.009530][T16209] usb 8-1: device descriptor read/64, error -71 [ 1540.059681][ T6388] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1540.272500][ T6388] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1540.289531][T16209] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1540.299996][ T6388] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1540.308043][ T6388] usb 2-1: Product: syz [ 1540.339379][ T6388] usb 2-1: SerialNumber: syz [ 1540.354858][ T6388] usb 2-1: config 0 descriptor?? [ 1540.451972][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1540.460810][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1540.481337][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.545463][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1540.565661][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1540.576843][ T6388] hso 2-1:0.0: Failed to find INT IN ep [ 1540.610881][T16209] usb 8-1: device descriptor read/64, error -71 [ 1540.664198][T16285] device veth0_vlan entered promiscuous mode [ 1540.730379][T16209] usb usb8-port1: attempt power cycle [ 1540.766546][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1540.778557][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1540.790629][ T6388] usb 2-1: USB disconnect, device number 55 [ 1540.812739][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1540.833006][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1540.845053][T16285] device veth1_vlan entered promiscuous mode [ 1540.874292][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1540.882963][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1540.902498][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1540.920900][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1540.946057][T16285] device veth0_macvtap entered promiscuous mode [ 1540.968726][T16285] device veth1_macvtap entered promiscuous mode [ 1540.988018][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.008047][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.028454][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.040352][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.052544][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.088383][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.100582][T16397] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[16398] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16397] [ 1541.110423][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.139508][T16209] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1541.161247][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.171836][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.183839][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.196110][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.196348][T16209] usb 8-1: device descriptor read/8, error -71 [ 1541.213767][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.224577][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.236443][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.247464][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.270695][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.281321][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.292166][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.304348][T16285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.315511][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1541.340532][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1541.356443][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1541.381570][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1541.405571][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.466512][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.489372][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.499768][T16209] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1541.519480][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.533712][T16209] usb 8-1: device descriptor read/8, error -71 [ 1541.539482][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.560380][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.599372][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.629692][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.641313][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.659035][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.660179][T16209] usb usb8-port1: unable to enumerate USB device [ 1541.680430][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.699366][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.710691][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.747679][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.757896][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.779656][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.799381][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.819395][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.841184][T16285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.856038][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1541.866682][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1541.884589][T16285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.898106][T16285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.907342][T16285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.916883][T16285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.032838][T11399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.052666][T11399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.071475][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1542.116835][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.127747][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.136316][T11399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1542.326486][T16404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3038'. [ 1542.600012][T16407] netlink: 'syz.0.2996': attribute type 21 has an invalid length. [ 1544.751059][T16421] trusted_key: encrypted_key: key user:syz not found [ 1544.751210][T16421] netlink: 'syz.1.3041': attribute type 21 has an invalid length. [ 1544.766554][T16421] netlink: 'syz.1.3041': attribute type 7 has an invalid length. [ 1545.883562][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.890983][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.035941][T16441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1546.042531][T16441] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1546.051955][T16441] vhci_hcd vhci_hcd.0: Device attached [ 1546.250033][ T4271] vhci_hcd: vhci_device speed not set [ 1546.310098][ T4362] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1546.319463][ T4271] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 1546.459636][ T4362] usb 2-1: device descriptor read/64, error -71 [ 1546.628340][T16454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3050'. [ 1546.679811][ T48] Bluetooth: hci0: command 0x2016 tx timeout [ 1546.739667][ T4362] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1546.860275][T16442] vhci_hcd: connection reset by peer [ 1546.867406][T11296] vhci_hcd: stop threads [ 1546.872194][T11296] vhci_hcd: release socket [ 1546.876815][T11296] vhci_hcd: disconnect device [ 1546.899832][ T4362] usb 2-1: device descriptor read/64, error -71 [ 1547.019826][ T4362] usb usb2-port1: attempt power cycle [ 1547.849446][ T4362] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1547.890782][ T4362] usb 2-1: device descriptor read/8, error -71 [ 1548.118170][T16470] netlink: 'syz.0.3055': attribute type 21 has an invalid length. [ 1548.309661][ T4362] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1548.382332][ T4362] usb 2-1: device descriptor read/8, error -71 [ 1548.570324][ T4362] usb usb2-port1: unable to enumerate USB device [ 1548.759697][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1549.871248][ T48] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 1550.231969][ T1045] block nbd1: Dead connection, failed to find a fallback [ 1550.240044][ T1045] block nbd1: shutting down sockets [ 1550.245292][ T1045] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1550.258980][T16486] befs: (nbd1): unable to read superblock [ 1550.563088][T16496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3062'. [ 1550.819479][T16209] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1551.017797][ T7] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1551.026144][T16209] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1551.049614][T16209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.058293][T16209] usb 1-1: Product: syz [ 1551.069803][T16209] usb 1-1: Manufacturer: syz [ 1551.078054][T16209] usb 1-1: SerialNumber: syz [ 1551.143885][T16209] usb 1-1: config 0 descriptor?? [ 1551.172778][T16502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.227789][T16209] ch341 1-1:0.0: ch341-uart converter detected [ 1551.519594][ T4271] vhci_hcd: vhci_device speed not set [ 1551.526084][ T7] usb 6-1: USB disconnect, device number 21 [ 1552.579843][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1552.670408][ T4362] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1552.744112][T16209] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 1552.806277][ T1045] block nbd3: Attempted send on invalid socket [ 1552.813382][ T1045] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1552.830167][T16522] efs: cannot read volume header [ 1552.839791][ T4362] usb 2-1: device descriptor read/64, error -71 [ 1553.129625][ T4362] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1553.319634][ T4362] usb 2-1: device descriptor read/64, error -71 [ 1553.410406][T16209] usb 1-1: USB disconnect, device number 42 [ 1553.423893][T16209] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1553.434659][T16209] ch341 1-1:0.0: device disconnected [ 1553.449685][ T4362] usb usb2-port1: attempt power cycle [ 1553.884280][ T4362] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1554.062493][ T4362] usb 2-1: device descriptor read/8, error -71 [ 1554.419409][ T4362] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1554.505150][ T4362] usb 2-1: device descriptor read/8, error -71 [ 1554.640425][ T4362] usb usb2-port1: unable to enumerate USB device [ 1555.219425][ T5389] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1555.234679][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1556.159424][ T5389] usb 6-1: Using ep0 maxpacket: 16 [ 1556.169147][ T5389] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1556.191073][ T5389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.200689][ T5389] usb 6-1: Product: syz [ 1556.204997][ T5389] usb 6-1: Manufacturer: syz [ 1556.210005][ T5389] usb 6-1: SerialNumber: syz [ 1556.216865][ T5389] usb 6-1: config 0 descriptor?? [ 1556.251930][ T5389] usb 6-1: selecting invalid altsetting 1 [ 1556.265960][ T5389] technisat-usb2: could not set alternate setting to 0 [ 1556.443451][ T5389] technisat-usb2: firmware version: 0.0 [ 1556.462281][ T5389] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1556.960445][ T5389] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1557.039299][ T5389] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1557.076329][T16551] netlink: 'syz.7.3082': attribute type 21 has an invalid length. [ 1557.111576][ T5389] usb 6-1: media controller created [ 1557.188632][ T5389] technisat-usb2: i2c-error: out failed 53 = -22 [ 1557.365741][ T5389] dvb-usb: MAC address reading failed. [ 1557.595499][T16552] technisat-usb2: i2c-error: out failed 00 = -22 [ 1557.608401][ T5389] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1557.907653][ T5389] DVB: Unable to find symbol stv090x_attach() [ 1558.026065][ T5389] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1559.179730][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3085'. [ 1559.249888][ T5389] rc_core: IR keymap rc-technisat-usb2 not found [ 1559.256785][ T5389] Registered IR keymap rc-empty [ 1559.289541][ T5389] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1559.315742][ T1045] block nbd7: Attempted send on invalid socket [ 1559.322432][ T1045] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1559.332427][T16566] efs: cannot read volume header [ 1559.440988][ T5389] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input50 [ 1559.594842][ T5389] dvb-usb: schedule remote query interval to 100 msecs. [ 1559.633012][ T5389] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1559.897990][ T5389] usb 6-1: USB disconnect, device number 22 [ 1560.144819][ T5389] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1560.819598][ T5389] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1560.873315][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1561.101336][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3095'. [ 1561.143263][T16596] netlink: 75 bytes leftover after parsing attributes in process `syz.7.3095'. [ 1561.166652][ T5389] usb 1-1: device descriptor read/64, error -71 [ 1562.364615][ T5389] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1562.529643][ T5389] usb 1-1: device descriptor read/64, error -71 [ 1562.770182][ T5389] usb usb1-port1: attempt power cycle [ 1562.819551][ T5352] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1563.019861][ T5352] usb 2-1: Using ep0 maxpacket: 16 [ 1563.127157][ T5352] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1563.136901][ T5352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.148340][ T5352] usb 2-1: Product: syz [ 1563.153768][ T5352] usb 2-1: Manufacturer: syz [ 1563.158882][ T5352] usb 2-1: SerialNumber: syz [ 1563.176445][ T5352] usb 2-1: config 0 descriptor?? [ 1563.202123][ T5352] usb 2-1: selecting invalid altsetting 1 [ 1563.227947][ T5352] technisat-usb2: could not set alternate setting to 0 [ 1563.398205][ T5352] technisat-usb2: firmware version: 0.0 [ 1563.412210][ T5352] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1563.549730][ T5389] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1563.847363][ T5352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1563.891834][ T5352] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1563.904660][ T5352] usb 2-1: media controller created [ 1563.912362][ T5352] technisat-usb2: i2c-error: out failed 53 = -22 [ 1563.919014][ T5352] dvb-usb: MAC address reading failed. [ 1563.924632][ T66] Bluetooth: Error in BCSP hdr checksum [ 1564.052459][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1564.157681][ T5389] usb 1-1: device descriptor read/8, error -71 [ 1564.190219][ T5092] Bluetooth: Error in BCSP hdr checksum [ 1564.393142][T16621] technisat-usb2: i2c-error: out failed 00 = -22 [ 1564.445366][ T5352] DVB: Unable to find symbol stv090x_attach() [ 1564.457410][ T5352] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1564.679522][ T5352] rc_core: IR keymap rc-technisat-usb2 not found [ 1564.688431][ T5352] Registered IR keymap rc-empty [ 1564.703999][ T5352] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1564.728978][ T5352] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input51 [ 1564.771697][ T5352] dvb-usb: schedule remote query interval to 100 msecs. [ 1564.782503][ T5352] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1564.823716][ T5352] usb 2-1: USB disconnect, device number 64 [ 1564.898423][ T5352] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1565.910508][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1566.180290][T16647] syz.5.3111 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1566.282004][T15192] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1566.439473][ T128] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1566.672636][ T128] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1566.676719][T15192] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1566.682519][ T128] usb 1-1: config 0 has no interface number 0 [ 1566.710331][ T128] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1566.722643][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.860409][ T128] usb 1-1: Product: syz [ 1566.864657][ T128] usb 1-1: Manufacturer: syz [ 1566.876553][ T128] usb 1-1: SerialNumber: syz [ 1566.890864][ T128] usb 1-1: config 0 descriptor?? [ 1566.918560][T15192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.990850][T15192] usb 2-1: config 0 descriptor?? [ 1567.043843][T15192] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1567.105858][ T128] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1567.135177][ T128] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1567.177595][ T128] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1567.241666][ T128] usb 1-1: media controller created [ 1567.249432][ T48] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1567.462673][T16659] random: crng reseeded on system resumption [ 1567.490454][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.946120][ T128] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1568.023569][ T128] usb 1-1: USB disconnect, device number 47 [ 1568.336316][T15192] gspca_stv06xx: I2C: Read error writing address: -71 [ 1568.359213][T15192] usb 2-1: USB disconnect, device number 65 [ 1568.519532][ T5389] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1568.679732][ T5389] usb 6-1: device descriptor read/64, error -71 [ 1569.150655][T16676] block nbd3: NBD_DISCONNECT [ 1569.259685][ T5389] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1569.567289][ T5389] usb 6-1: device descriptor read/64, error -71 [ 1569.696620][ T5389] usb usb6-port1: attempt power cycle [ 1572.424855][ T5389] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1572.491859][ T48] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1572.787474][T16706] random: crng reseeded on system resumption [ 1573.058804][ T5389] usb 6-1: device descriptor read/8, error -71 [ 1573.422583][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1573.442714][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1573.452480][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1573.462688][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1573.596153][T16714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.902542][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1573.980850][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1573.994183][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1574.007601][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1574.019241][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1574.029421][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1578.066377][T16747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1578.119846][ T5389] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1578.321279][ T5389] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.349252][ T5389] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1578.410732][ T5389] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1578.445070][ T5389] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.466316][ T5389] usb 8-1: Product: syz [ 1578.480444][ T5389] usb 8-1: Manufacturer: syz [ 1578.493764][ T5389] usb 8-1: SerialNumber: syz [ 1578.639663][ T48] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1578.663310][T16759] random: crng reseeded on system resumption [ 1579.069808][ T5389] usb 8-1: config 0 descriptor?? [ 1580.776013][ T4318] usb 8-1: USB disconnect, device number 15 [ 1581.962528][T16769] netlink: 'syz.7.3149': attribute type 6 has an invalid length. [ 1582.222640][T16775] __nla_validate_parse: 10 callbacks suppressed [ 1582.222661][T16775] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3151'. [ 1583.324186][T16791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1583.731765][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'. [ 1583.741017][T16792] device bridge_slave_1 left promiscuous mode [ 1583.748374][T16792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.780005][T16792] device bridge_slave_0 left promiscuous mode [ 1583.884920][T16792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.937631][T16795] efs: device does not support 512 byte blocks [ 1584.760606][T16806] random: crng reseeded on system resumption [ 1585.190880][ T48] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1585.300753][ T4318] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1585.531785][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.569432][ T4318] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1585.599856][ T4318] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1585.637115][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.669412][ T4318] usb 2-1: Product: syz [ 1585.675942][ T4318] usb 2-1: Manufacturer: syz [ 1585.712541][ T4318] usb 2-1: SerialNumber: syz [ 1585.746970][ T4318] usb 2-1: config 0 descriptor?? [ 1586.034333][ T5389] usb 2-1: USB disconnect, device number 66 [ 1587.422885][T16823] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1587.429482][T16823] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1587.493825][T16823] vhci_hcd vhci_hcd.0: Device attached [ 1587.700234][T15192] vhci_hcd: vhci_device speed not set [ 1587.898976][T15192] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1589.423869][T16838] binder: BINDER_SET_CONTEXT_MGR already set [ 1589.552545][T16824] vhci_hcd: connection reset by peer [ 1589.564022][ T8906] vhci_hcd: stop threads [ 1589.571606][ T8906] vhci_hcd: release socket [ 1589.581583][ T8906] vhci_hcd: disconnect device [ 1589.719185][T16838] binder: 16835:16838 ioctl 4018620d 200000000040 returned -16 [ 1590.031411][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.041917][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.051912][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.062125][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.071854][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.083192][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.092974][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.103753][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.113589][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1590.124166][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1591.593531][T16854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.941678][ T52] block nbd3: Attempted send on invalid socket [ 1591.948030][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1591.958459][T16859] efs: cannot read volume header [ 1592.142146][ T6388] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1592.350052][ T6388] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1593.100509][ T6388] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1593.149421][ T6388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.184051][ T6388] usb 8-1: config 0 descriptor?? [ 1593.272600][ T6388] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1593.679968][ T4318] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1593.802711][T16885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1593.878185][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.901331][ T4318] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1593.927425][ T4318] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1593.937321][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.949065][ T4318] usb 2-1: Product: syz [ 1593.953474][ T4318] usb 2-1: Manufacturer: syz [ 1593.958874][ T4318] usb 2-1: SerialNumber: syz [ 1594.017730][ T4318] usb 2-1: config 0 descriptor?? [ 1594.192845][T16891] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.215127][T16891] binder: 16889:16891 ioctl 4018620d 200000000040 returned -16 [ 1594.229905][T16893] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1594.236490][T16893] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1594.249168][ T4318] usb 2-1: USB disconnect, device number 67 [ 1594.265565][T16893] vhci_hcd vhci_hcd.0: Device attached [ 1594.360074][T15192] vhci_hcd: vhci_device speed not set [ 1594.491693][ T5352] vhci_hcd: vhci_device speed not set [ 1594.565445][ T5352] usb 43-1: new full-speed USB device number 6 using vhci_hcd [ 1594.831847][T16911] efs: device does not support 512 byte blocks [ 1595.033239][T16894] vhci_hcd: connection reset by peer [ 1595.050115][T10746] vhci_hcd: stop threads [ 1595.054620][T10746] vhci_hcd: release socket [ 1595.103091][T10746] vhci_hcd: disconnect device [ 1595.648638][ T6388] usb 8-1: USB disconnect, device number 16 [ 1595.763195][T16916] __nla_validate_parse: 15 callbacks suppressed [ 1595.763255][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1595.779164][T16916] device bridge_slave_1 left promiscuous mode [ 1595.786073][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.807075][T16916] device bridge_slave_0 left promiscuous mode [ 1595.947629][T16916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.975355][T16917] efs: device does not support 512 byte blocks [ 1597.443553][T16939] binder: BINDER_SET_CONTEXT_MGR already set [ 1597.489688][T16939] binder: 16938:16939 ioctl 4018620d 200000000040 returned -16 [ 1597.656933][T16948] Bluetooth: MGMT ver 1.22 [ 1598.006815][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1598.074798][ T52] block nbd3: Attempted send on invalid socket [ 1598.082161][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.092628][T16958] efs: cannot read volume header [ 1598.209450][ T4362] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1598.829599][ T128] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1599.073697][ T128] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1599.087958][ T128] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1599.104823][ T128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.129940][ T4362] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.230769][ T128] usb 6-1: config 0 descriptor?? [ 1599.272910][ T128] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1599.378498][ T4362] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1599.589426][ T4362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1599.630217][ T4362] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1599.659445][ T4362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.671283][ T4362] usb 2-1: Product: syz [ 1599.675522][ T4362] usb 2-1: Manufacturer: syz [ 1599.720966][ T4362] usb 2-1: SerialNumber: syz [ 1599.727820][ T4362] usb 2-1: config 0 descriptor?? [ 1599.746743][ T4362] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 1599.764555][ T4362] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1599.803353][ T4362] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1599.879903][ T5352] vhci_hcd: vhci_device speed not set [ 1600.226947][ T4362] usb 2-1: USB disconnect, device number 68 [ 1600.851537][ T4362] garmin_gps 2-1:0.0: device disconnected [ 1600.908660][T16978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1601.189702][ T6388] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1601.399683][ T6388] usb 4-1: Using ep0 maxpacket: 32 [ 1601.408088][ T6388] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1601.421025][ T6388] usb 4-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 1601.435124][ T6388] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1601.458696][ T6388] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1601.470688][ T6388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.479372][ T6388] usb 4-1: Product: syz [ 1601.483912][ T6388] usb 4-1: Manufacturer: syz [ 1601.489529][ T6388] usb 4-1: SerialNumber: syz [ 1601.511156][T16978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1601.725597][T16978] Can't find a SQUASHFS superblock on nullb0 [ 1601.917390][ T4318] usb 6-1: USB disconnect, device number 27 [ 1602.563804][T15192] libceph: connect (1)[c::]:6789 error -101 [ 1602.703491][T15192] libceph: mon0 (1)[c::]:6789 connect error [ 1602.843619][T17001] ceph: No mds server is up or the cluster is laggy [ 1602.968965][T15192] libceph: connect (1)[c::]:6789 error -101 [ 1603.118192][T15192] libceph: mon0 (1)[c::]:6789 connect error [ 1603.674284][ T6388] usblp0: Disabling reads from problematic bidirectional printer [ 1603.736539][ T6388] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1603.839713][T17007] UBIFS error (pid: 17007): cannot open "(null)", error -22 [ 1603.875932][ T6388] usb 4-1: USB disconnect, device number 50 [ 1603.969586][ T6388] usblp0: removed [ 1604.056863][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3219'. [ 1604.128301][ T1045] block nbd7: Attempted send on invalid socket [ 1604.134771][ T1045] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1604.148812][T17011] efs: cannot read volume header [ 1606.330780][T15192] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1606.556725][T15192] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1606.635167][T15192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.674110][T15192] usb 4-1: Product: syz [ 1606.697274][T15192] usb 4-1: Manufacturer: syz [ 1606.721197][T15192] usb 4-1: SerialNumber: syz [ 1606.950146][ T5352] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1607.026854][T15192] rtl8150 4-1:1.0: couldn't reset the device [ 1607.040106][T15192] rtl8150: probe of 4-1:1.0 failed with error -5 [ 1607.057707][T15192] usb 4-1: USB disconnect, device number 51 [ 1607.059587][ T128] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1607.262073][ T5352] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1607.325182][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.333622][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.579572][T17005] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1607.631641][ T5352] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1607.641445][ T5352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.733542][ T128] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.301544][ T5352] usb 6-1: config 0 descriptor?? [ 1608.307587][ T128] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1608.404293][ T5352] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1608.413523][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1608.432141][T17005] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1608.458931][T17043] UBIFS error (pid: 17043): cannot open "(null)", error -22 [ 1608.476003][T17005] usb 2-1: config 0 has no interface number 0 [ 1608.519561][T17005] usb 2-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1608.535497][ T128] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1608.564264][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.581204][ T128] usb 1-1: Product: syz [ 1608.586279][ T128] usb 1-1: Manufacturer: syz [ 1608.591745][ T128] usb 1-1: SerialNumber: syz [ 1608.612976][ T128] usb 1-1: config 0 descriptor?? [ 1608.616710][T17005] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1608.661256][ T128] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 1608.674678][ T128] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1608.683387][ T128] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1608.714646][T17005] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1608.764621][T17005] usb 2-1: Manufacturer: syz [ 1608.778145][T17005] usb 2-1: SerialNumber: syz [ 1608.785067][T17005] usb 2-1: config 0 descriptor?? [ 1608.865603][ T128] usb 1-1: USB disconnect, device number 48 [ 1608.898393][ T128] garmin_gps 1-1:0.0: device disconnected [ 1609.071203][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 1609.071220][ T26] audit: type=1326 audit(1784387787.804:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.101560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.133197][ T26] audit: type=1326 audit(1784387787.854:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.169364][ T26] audit: type=1326 audit(1784387787.854:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.198008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.204549][ T26] audit: type=1326 audit(1784387787.854:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.232903][ T26] audit: type=1326 audit(1784387787.854:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.261005][ T26] audit: type=1326 audit(1784387787.854:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.285185][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.292247][ T26] audit: type=1326 audit(1784387787.854:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.316481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.328808][ T26] audit: type=1326 audit(1784387787.854:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.352940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.930558][ T26] audit: type=1326 audit(1784387787.854:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.956732][ T26] audit: type=1326 audit(1784387787.854:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.3.3233" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f484379de99 code=0x7ffc0000 [ 1609.981558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.067296][T15192] usb 2-1: USB disconnect, device number 69 [ 1610.405466][ T4271] usb 6-1: USB disconnect, device number 28 [ 1612.069989][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3242'. [ 1612.301363][ T6388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1612.360909][ T6388] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1612.749569][T17093] fuse: Unknown parameter '0xffffffffffffffff' [ 1613.890110][ T128] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1614.099028][ T26] kauditd_printk_skb: 159 callbacks suppressed [ 1614.099063][ T26] audit: type=1326 audit(1784387792.784:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f331af97c17 code=0x7ffc0000 [ 1614.167620][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.189184][ T128] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1614.325590][ T128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1614.343863][ T128] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1614.371601][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.409517][ T128] usb 4-1: Product: syz [ 1614.420055][ T128] usb 4-1: Manufacturer: syz [ 1614.424802][ T128] usb 4-1: SerialNumber: syz [ 1614.476024][ T128] usb 4-1: config 0 descriptor?? [ 1614.481565][ T26] audit: type=1326 audit(1784387792.784:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f331af3f219 code=0x7ffc0000 [ 1614.521011][ T128] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1614.567792][ T128] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1614.618732][ T128] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1614.666753][ T26] audit: type=1326 audit(1784387792.784:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1614.714601][ T128] usb 4-1: USB disconnect, device number 52 [ 1614.730127][ T128] garmin_gps 4-1:0.0: device disconnected [ 1614.773270][ T26] audit: type=1326 audit(1784387792.784:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f331af97c17 code=0x7ffc0000 [ 1614.921962][ T26] audit: type=1326 audit(1784387792.794:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f331af3f219 code=0x7ffc0000 [ 1614.983498][ T26] audit: type=1326 audit(1784387792.794:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1615.039652][ T26] audit: type=1326 audit(1784387792.794:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f331af97c17 code=0x7ffc0000 [ 1615.080109][ T26] audit: type=1326 audit(1784387792.794:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f331af3f219 code=0x7ffc0000 [ 1615.108239][ T26] audit: type=1326 audit(1784387792.804:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f331af9de99 code=0x7ffc0000 [ 1615.149386][ T26] audit: type=1326 audit(1784387792.804:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.7.3246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f331af97c17 code=0x7ffc0000 [ 1615.500230][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3251'. [ 1615.569877][ T1045] block nbd7: Attempted send on invalid socket [ 1615.588172][ T1045] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.598690][T17118] efs: cannot read volume header [ 1616.602232][T17120] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1616.609277][T17120] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1616.659492][T17120] vhci_hcd vhci_hcd.0: Device attached [ 1617.194293][T15192] vhci_hcd: vhci_device speed not set [ 1617.269400][T15192] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1617.424686][T17121] vhci_hcd: connection reset by peer [ 1617.430416][ T9050] vhci_hcd: stop threads [ 1617.436379][ T9050] vhci_hcd: release socket [ 1617.459596][ T9050] vhci_hcd: disconnect device [ 1617.643792][ T48] ------------[ cut here ]------------ [ 1617.649944][ T48] WARNING: CPU: 0 PID: 48 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 1617.659698][ T48] Modules linked in: [ 1617.663653][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1617.671107][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.681245][ T48] Workqueue: hci0 hci_conn_timeout [ 1617.686424][ T48] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1617.692139][ T48] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1617.711817][ T48] RSP: 0018:ffffc90000b97c08 EFLAGS: 00010293 [ 1617.717903][ T48] RAX: ffffffff8938142f RBX: ffff88807d8e6330 RCX: ffff888017683c00 [ 1617.725947][ T48] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1617.734014][ T48] RBP: 00000000ffffffff R08: ffff88807d8e6013 R09: 1ffff1100fb1cc02 [ 1617.742043][ T48] R10: dffffc0000000000 R11: ffffed100fb1cc03 R12: ffffffff81557724 [ 1617.750076][ T48] R13: dffffc0000000000 R14: ffff88807d8e6000 R15: ffff88807d8e6010 [ 1617.758069][ T48] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1617.767065][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1617.773730][ T48] CR2: 00007f331bedaff8 CR3: 0000000072465000 CR4: 00000000003506f0 [ 1617.781781][ T48] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1617.789827][ T48] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1617.798031][ T48] Call Trace: [ 1617.801369][ T48] [ 1617.804323][ T48] ? process_one_work+0x7b4/0x1160 [ 1617.809533][ T48] process_one_work+0x8ab/0x1160 [ 1617.814545][ T48] ? worker_detach_from_pool+0x240/0x240 [ 1617.820248][ T48] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1617.825297][ T48] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1617.830911][ T48] ? wq_worker_running+0x97/0x190 [ 1617.835997][ T48] worker_thread+0xaf5/0x12a0 [ 1617.840756][ T48] kthread+0x29d/0x330 [ 1617.844864][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 1617.849978][ T48] ? kthread_blkcg+0xd0/0xd0 [ 1617.854693][ T48] ret_from_fork+0x1f/0x30 [ 1617.859201][ T48] [ 1617.862283][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1617.869584][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1617.876984][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.887048][ T48] Workqueue: hci0 hci_conn_timeout [ 1617.892182][ T48] Call Trace: [ 1617.895474][ T48] [ 1617.898424][ T48] dump_stack_lvl+0x188/0x24e [ 1617.903152][ T48] ? memcpy+0x3c/0x60 [ 1617.907185][ T48] ? show_regs_print_info+0x12/0x12 [ 1617.912435][ T48] ? load_image+0x410/0x410 [ 1617.916957][ T48] panic+0x2d3/0x710 [ 1617.920876][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 1617.925419][ T48] ? ret_from_fork+0x1f/0x30 [ 1617.930046][ T48] __warn+0x2f8/0x4f0 [ 1617.934077][ T48] ? hci_conn_timeout+0x24f/0x450 [ 1617.939178][ T48] ? hci_conn_timeout+0x24f/0x450 [ 1617.944245][ T48] report_bug+0x2ba/0x4f0 [ 1617.948602][ T48] ? hci_conn_timeout+0x24f/0x450 [ 1617.953672][ T48] handle_bug+0x3a/0x70 [ 1617.957892][ T48] exc_invalid_op+0x16/0x40 [ 1617.962441][ T48] asm_exc_invalid_op+0x16/0x20 [ 1617.967308][ T48] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1617.972961][ T48] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1617.992600][ T48] RSP: 0018:ffffc90000b97c08 EFLAGS: 00010293 [ 1617.998709][ T48] RAX: ffffffff8938142f RBX: ffff88807d8e6330 RCX: ffff888017683c00 [ 1618.006717][ T48] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1618.014702][ T48] RBP: 00000000ffffffff R08: ffff88807d8e6013 R09: 1ffff1100fb1cc02 [ 1618.022687][ T48] R10: dffffc0000000000 R11: ffffed100fb1cc03 R12: ffffffff81557724 [ 1618.030674][ T48] R13: dffffc0000000000 R14: ffff88807d8e6000 R15: ffff88807d8e6010 [ 1618.038661][ T48] ? process_one_work+0x7b4/0x1160 [ 1618.043798][ T48] ? hci_conn_timeout+0x24f/0x450 [ 1618.048852][ T48] ? hci_conn_timeout+0x24f/0x450 [ 1618.053939][ T48] ? process_one_work+0x7b4/0x1160 [ 1618.059069][ T48] process_one_work+0x8ab/0x1160 [ 1618.064050][ T48] ? worker_detach_from_pool+0x240/0x240 [ 1618.069710][ T48] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1618.074770][ T48] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1618.080334][ T48] ? wq_worker_running+0x97/0x190 [ 1618.085418][ T48] worker_thread+0xaf5/0x12a0 [ 1618.090241][ T48] kthread+0x29d/0x330 [ 1618.094334][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 1618.099392][ T48] ? kthread_blkcg+0xd0/0xd0 [ 1618.104005][ T48] ret_from_fork+0x1f/0x30 [ 1618.108450][ T48] [ 1618.112086][ T48] Kernel Offset: disabled [ 1618.116516][ T48] Rebooting in 86400 seconds..