last executing test programs: 23m14.001008418s ago: executing program 32 (id=313): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r3, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x26a200, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800c2ab6f00000000000000000000000000009500000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) unshare(0x24060400) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000002c0)=0xc) 22m34.247153355s ago: executing program 4 (id=382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002cfc5cbcc37b27632134483bbed479457965b7c8b6226675674557dd3316d438c1a739", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b3000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b07007461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d097ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcef1bf1373669caaa2f19b9640000000000000000001200", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22m31.938587162s ago: executing program 4 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 22m26.459298181s ago: executing program 4 (id=393): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0xc10}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x4c}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22m25.370867391s ago: executing program 4 (id=396): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 22m23.489301319s ago: executing program 4 (id=398): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x0, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 22m21.247426136s ago: executing program 4 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x3000}, [{0x8, 0x1, 0x80000001}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'pimreg\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xa, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xb}}]}, 0x38}}, 0x8000) 22m5.736762838s ago: executing program 33 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x3000}, [{0x8, 0x1, 0x80000001}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'pimreg\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xa, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xb}}]}, 0x38}}, 0x8000) 15m14.950324385s ago: executing program 5 (id=1170): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x38, {0x38, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d433"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700"], 0x50) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000280)={{}, "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"}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0xee9a262fe1670979, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xd0}, 0x40) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x7fff, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15m12.737362724s ago: executing program 5 (id=1177): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_clone3(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m11.237077131s ago: executing program 5 (id=1182): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 15m9.91156063s ago: executing program 5 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) 15m8.655467887s ago: executing program 5 (id=1186): syz_open_dev$vim2m(0x0, 0x10003, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x8, 0xd, 0x0, "13eabd3effffdfff018000008000006cef2b4fb01d089f0500", 0x43353039}) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000180), &(0x7f0000000340)=r1}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 15m6.469066124s ago: executing program 5 (id=1188): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0x100806) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403", @ANYRES8=r1, @ANYRES64=r0], 0x0) 14m50.918245974s ago: executing program 34 (id=1188): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0x100806) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403", @ANYRES8=r1, @ANYRES64=r0], 0x0) 14m16.624206539s ago: executing program 1 (id=1262): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x61, {0x61, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 14m15.201794683s ago: executing program 1 (id=1267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_clone3(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m13.182508826s ago: executing program 1 (id=1269): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newtfilter={0x1a4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x174, 0x2, [@TCA_CGROUP_EMATCHES={0x170, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6f5d, 0x2, 0x2}, {0x6}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xfffd}, "3140ab4cbb28fdd32a47248f19c161954970735409f44d61340b7b050d292552db5e58c92f35db8da008d8119d79d77002143b42da0cffe2e08b0f58d4bf646fbe558d9c652a1d95d827236183d9f67672a1550bb084aa8ecb6db98fa53417e20d73ef9f415177dd5aa1b43131244a0fcc192f2ed077249bfab8149073877e1341a2f3c7701d991be486dd358b1ec8b274287da1fd76473051c7af86fc8c7382551ad71316da0df80c8b9ff37df847a9f33c109daad5fd9fde4e6d59c6f8f0e8412a81a1dfc991d73c4defe76b78b74947cc020a3d67169ec9ee36218e30d56d7f5ba7c14e3134bd7a0187"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x0, 0x9, 0x2, 0x6, 0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x9f1, 0x0, 0x4}, "85d3ac9d0eebd7d61890a62d7de0e07993e5340b024c"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x6}, {0x3, 0x1ff, 0x3, 0xb617}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x1a4}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m12.615898798s ago: executing program 1 (id=1271): syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 14m9.679473778s ago: executing program 1 (id=1277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 14m9.052934704s ago: executing program 6 (id=1279): openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a240100", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 14m8.709882502s ago: executing program 1 (id=1280): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newtfilter={0x188, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x158, 0x2, [@TCA_CGROUP_EMATCHES={0x154, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6f5d, 0x2, 0x2}, {0x6}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xfffd}, "3140ab4cbb28fdd32a47248f19c161954970735409f44d61340b7b050d292552db5e58c92f35db8da008d8119d79d77002143b42da0cffe2e08b0f58d4bf646fbe558d9c652a1d95d827236183d9f67672a1550bb084aa8ecb6db98fa53417e20d73ef9f415177dd5aa1b43131244a0fcc192f2ed077249bfab8149073877e1341a2f3c7701d991be486dd358b1ec8b274287da1fd76473051c7af86fc8c7382551ad71316da0df80c8b9ff37df847a9f33c109daad5fd9fde4e6d59c6f8f0e8412a81a1dfc991d73c4defe76b78b74947cc020a3d67169ec9ee36218e30d56d7f5ba7c14e3134bd7a0187"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x0, 0x9, 0x2, 0x6, 0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x9f1, 0x0, 0x4}, "85d3ac9d0eebd7d61890a62d7de0e07993e5340b024c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x188}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m7.602010342s ago: executing program 6 (id=1283): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ftruncate(r0, 0xfffffffffffffff7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) close(0x3) msgget$private(0x0, 0x790) dup3(r1, r2, 0x0) pipe2(0x0, 0x0) 14m6.283705591s ago: executing program 6 (id=1286): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000001440)={0x2, 0x1, 0x3, 0x19, 0x1c0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, 0x0, 0x2) 14m4.48370117s ago: executing program 6 (id=1288): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4004) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/40, 0x28}], 0x1) 14m2.795462514s ago: executing program 6 (id=1292): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mlock2(&(0x7f000013b000/0x4000)=nil, 0x4000, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x800) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) 14m0.689524635s ago: executing program 6 (id=1295): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13m52.930265424s ago: executing program 35 (id=1280): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newtfilter={0x188, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x158, 0x2, [@TCA_CGROUP_EMATCHES={0x154, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6f5d, 0x2, 0x2}, {0x6}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xfffd}, "3140ab4cbb28fdd32a47248f19c161954970735409f44d61340b7b050d292552db5e58c92f35db8da008d8119d79d77002143b42da0cffe2e08b0f58d4bf646fbe558d9c652a1d95d827236183d9f67672a1550bb084aa8ecb6db98fa53417e20d73ef9f415177dd5aa1b43131244a0fcc192f2ed077249bfab8149073877e1341a2f3c7701d991be486dd358b1ec8b274287da1fd76473051c7af86fc8c7382551ad71316da0df80c8b9ff37df847a9f33c109daad5fd9fde4e6d59c6f8f0e8412a81a1dfc991d73c4defe76b78b74947cc020a3d67169ec9ee36218e30d56d7f5ba7c14e3134bd7a0187"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x0, 0x9, 0x2, 0x6, 0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x9f1, 0x0, 0x4}, "85d3ac9d0eebd7d61890a62d7de0e07993e5340b024c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x188}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m43.580847558s ago: executing program 36 (id=1295): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 12m33.963126027s ago: executing program 2 (id=1399): syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12m30.873823288s ago: executing program 2 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)}}, 0xee) 12m30.820414733s ago: executing program 2 (id=1402): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000040)="e9d06eac5a", 0x5}, {&(0x7f0000000100)="d48bab410e744469c734998cab96", 0xe}, {&(0x7f0000000500)="c43288f59eac87b72bf72b4d6f61d2ce73a4bc3d22883f582414ef4f3634518ab8d0337c89fbc4e776ccea9cf111de4f43c348da23c88362e759822f8b26296bc98afb6f35c85411c9660465f691fda530472474b6842026c442c74cd7ee4c230419d83dd52429437dfcbc09a16218cb1dcef4a31ed3960f26917d85e137b6d411c8e8e47aadf60be703a1f9e29b5f1a0ba17c2be11d8fab2ae3120abe9c4026b3c944f437622c395018c1ba0b75e3f8346af2ffc59496ad7d58781d3e8f88e786b54d87b20d02b958998d40d80c11d1d0be4616b3a14e19cd62b0119a8c20d4ec2500eb1a985822296cb46f14993435", 0xf0}, {&(0x7f0000000200)="d8b27ecc1d1f5c0a35e0ff0a6a0a48338ad67922ca84b2648ff4a9bf44f6938112a7a05b3531a4e5ee1ab5390b98cd407abf90e199a4cb29751e169b4e16fdc9f7326da4ae5921137f43138f9d0d2a1306e645d3eed35aa35dffae9f5204c01490239007066cd45b7cf11af660f6aad17d1e2f27f4ced28ae0", 0x79}, {&(0x7f0000000600)="6c4e8a193eed4760f09a0ca6d010dcf532b72a1bc7bd38e9d5dcf8a89fe4fb604f6bf32fd163a07baa8f189e4ddef71f4a4d72b1d07ac5452e83f58762143fdad6f153ec4045aec50b0883a625a2e780795a4e213eaacfbb0906584cb23bf5161c579bed5b901b453a6e209c8663ef037d4d5348cca3e0314a94b6fb0b6aa449e2c3e251e431923fd87c", 0x8a}, {&(0x7f0000000440)="7011b27346255102958cf1da4d2f5f5850903a6de16aaeb065f88c0b27b91022764b0f4eed698c15bc0beca08c88d2bb083505ea7ad3c608bc61ad97b078f943f2b247b6f3598b878f3756751c067c664f52e71b494e39", 0x57}, {&(0x7f00000006c0)="0c0787600639d91b9f64848cb6b23daa4732fe9721cadec4e86904b3e7f3055e884c08bd21c015a17a423c8207a23ab22ed7bc85a898e2ef2b39f500053f8f419ad02f5f2833c60e6629da66626599", 0x4f}, {&(0x7f0000000740)="10937e94dfdc9c509171e768559aec0a714a425e516062def0ca91c2656ef14207c48d4788bbb39e474ff1401241dee29b83de2eeaf1ca27e53f7f680887272c", 0x40}], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) 12m28.370237317s ago: executing program 2 (id=1403): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 12m28.183335666s ago: executing program 2 (id=1404): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r3) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000040)="2b1d13d6e6de24349d752f309b231aaec1c944ad9fe10e37", 0x18}], 0x1) 12m26.937328653s ago: executing program 2 (id=1405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 12m11.847141154s ago: executing program 37 (id=1405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 56.593412566s ago: executing program 9 (id=3886): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x118}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r4], 0x0) 54.12024656s ago: executing program 9 (id=3890): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xf, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x55, {0x55, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 50.387097259s ago: executing program 9 (id=3899): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x0, 0xf, 0x0, 0x0) 40.166909905s ago: executing program 9 (id=3920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000140)="b068c72ac6d16004dbc8c97588315f33cc28a836d3e11a903cfe5c7d8d2fd48f98d52f03f7deb55d6695f813d84b6e3d01b5c97cfd2c560a18422a1cb8f13884007eca5736c620a4c1a75df0916c29e818c81bfd0f869a42aabd299e58f587b44e9e63ba119b5a5393f3b792f1a99a2a3c386183596833710c104764a85feec23323ff2d71f0d0ffd14148d9b6afb596f6f1e4a35fa63c861f0860d296ddffa512", 0xa1, 0x8010, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x2000c040}, 0x4a090) 35.610555908s ago: executing program 9 (id=3929): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 35.40055064s ago: executing program 9 (id=3930): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x0, 0xf, 0x0, 0x0) 19.934617545s ago: executing program 38 (id=3930): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x0, 0xf, 0x0, 0x0) 11.507526273s ago: executing program 0 (id=3982): socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000140)) 10.663165306s ago: executing program 0 (id=3983): r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300000000000000000000000000000080639000011100050000000008000200e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 10.016792306s ago: executing program 7 (id=3986): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 9.603116483s ago: executing program 0 (id=3987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.275873648s ago: executing program 7 (id=3988): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 8.707414782s ago: executing program 7 (id=3989): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xa, {"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", 0x1000}}, 0x1006) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, 0x0}, 0x0) r3 = io_uring_setup(0x2f04, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1) r4 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0xdfe4, 0x40, 0x0, 0x1c7}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000280)=[r3], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xc0, 0x8b, 0x25, 0x20, 0x413c, 0x81a4, 0xae9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x50, 0x0, [{{0x9, 0x4, 0xfb, 0xd4, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000000020000080000000800000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0xce, r5}, 0x38) socket(0x22, 0x2, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r5, &(0x7f0000000000), &(0x7f00000005c0)=""/4}, 0x20) 8.63081646s ago: executing program 0 (id=3990): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000025c0)}], 0x1) 8.435368146s ago: executing program 0 (id=3991): syz_open_dev$vim2m(0x0, 0x10003, 0x2) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x200008, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, 0x0, 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 8.374322746s ago: executing program 8 (id=3992): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 7.007106252s ago: executing program 0 (id=3994): r0 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsmount(r0, 0x0, 0xf2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000640)={{0x2, 0x4, 0xa9a, 0x9, '\x00', 0xb86}, 0x3, 0x40, 0x40, 0x0, 0x5, 0x3, 'syz1\x00', &(0x7f0000000180)=['queue0\x00', 'queue0\x00', '/dev/snd/timer\x00', 'queue0\x00', '/dev/snd/timer\x00'], 0x33}) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) sendto(r2, &(0x7f0000000200)="e201016e455190a10a638958475d2a833c01431225274efe177ef274176f6ccfe89a810223862629a0ac86050afe5ee74f0527ec383b6832aaea8016d59105afd761891dd802c1", 0x47, 0x40, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x4, 0x2, "2ac12beb592d3e10bd14a2af197e4b73fa08752921844a12163507958ff04754fe2c4368e93a0d1b0a1e5dec624a1d61cb69d352483eeb4d111868ddf038dc", 0x21}, 0x80) 6.427030507s ago: executing program 8 (id=3995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000001040)=[{&(0x7f0000000c80)="7551fb275f5e38f5e183f4bc21", 0xd}, {0x0}], 0x2) 6.426544326s ago: executing program 3 (id=3996): r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300000000000000000000000000000080639000011100050000000008000200e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 6.133844938s ago: executing program 8 (id=3997): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 5.342974951s ago: executing program 3 (id=3998): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.191811709s ago: executing program 8 (id=3999): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 5.155261178s ago: executing program 7 (id=4000): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB="2c677260d78c5f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000000000000df6f7bda000000000000003391308513c8c0a02b3adf00", @ANYRES32=0x0, @ANYBLOB="00002000000000001c0012800b0001006d616373656300000c00028005000c0001000000"], 0x3c}}, 0x20040014) fadvise64(0xffffffffffffffff, 0x69a, 0xfa4e, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x7}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7fffffffffffe, 0x957}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) 5.075044839s ago: executing program 3 (id=4001): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(0x0, 0x42, 0x1f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) io_uring_enter(0xffffffffffffffff, 0x14, 0xb9c, 0x2b, 0x0, 0x18) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.976010346s ago: executing program 3 (id=4002): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) 3.594465344s ago: executing program 8 (id=4003): syz_open_dev$vim2m(0x0, 0x10003, 0x2) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x200008, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 3.535557365s ago: executing program 7 (id=4004): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 2.170013868s ago: executing program 8 (id=4005): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 2.156971964s ago: executing program 3 (id=4006): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000001040)=[{&(0x7f0000000c80)="7551fb275f5e38f5e183f4bc21", 0xd}, {0x0}], 0x2) 960.111941ms ago: executing program 7 (id=4007): r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 0s ago: executing program 3 (id=4008): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) kernel console output (not intermixed with test programs): 0.986729][ T5811] Bluetooth: hci2: command tx timeout [ 971.230602][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880390f2400: abort rx timeout. Force session deactivation [ 973.066667][ T5811] Bluetooth: hci2: command tx timeout [ 973.458488][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 973.637247][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 973.756713][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 973.912745][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 973.912773][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 973.912819][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 973.948479][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 973.948497][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 973.948507][ T9] usb 1-1: Product: syz [ 973.948513][ T9] usb 1-1: Manufacturer: syz [ 973.977977][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 973.978000][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 974.182756][ T9] usb 1-1: USB disconnect, device number 51 [ 975.161200][ T5811] Bluetooth: hci2: command tx timeout [ 975.297366][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 975.687131][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 977.226674][ T5811] Bluetooth: hci2: command tx timeout [ 980.478054][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880351dcc00: rx timeout, send abort [ 980.986824][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880351dcc00: abort rx timeout. Force session deactivation [ 981.343293][T11994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.967549][T12017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 983.059237][T12017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 983.126046][T12017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 983.220547][T11994] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.290338][T12017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 983.410449][T12218] chnl_net:caif_netlink_parms(): no params data found [ 983.493745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.493981][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.623688][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.623842][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.740612][T12040] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 983.840861][T12040] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 983.918655][T12040] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 983.985918][T12040] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 984.012731][T12218] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.013205][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.013380][T12218] bridge_slave_0: entered allmulticast mode [ 984.016067][T12218] bridge_slave_0: entered promiscuous mode [ 984.041354][T12218] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.041469][T12218] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.041639][T12218] bridge_slave_1: entered allmulticast mode [ 984.044653][T12218] bridge_slave_1: entered promiscuous mode [ 984.126971][ T5974] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 984.130221][T12218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.184896][T12218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.286693][ T5974] usb 1-1: Using ep0 maxpacket: 16 [ 984.289652][ T5974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.289675][ T5974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 984.291805][ T5974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 984.291826][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.291836][ T5974] usb 1-1: Product: syz [ 984.291843][ T5974] usb 1-1: Manufacturer: syz [ 984.291850][ T5974] usb 1-1: SerialNumber: syz [ 984.395780][T12218] team0: Port device team_slave_0 added [ 984.420966][T12218] team0: Port device team_slave_1 added [ 984.571994][ T5974] usb 1-1: 0:2 : does not exist [ 984.588383][ T5974] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 984.615790][ T5974] usb 1-1: USB disconnect, device number 52 [ 984.662007][T12302] udevd[12302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.698416][T12218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.698428][T12218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.698442][T12218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.777701][T12218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.777713][T12218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.777728][T12218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.959223][T12218] hsr_slave_0: entered promiscuous mode [ 984.960240][T12218] hsr_slave_1: entered promiscuous mode [ 984.960779][T12218] debugfs: 'hsr0' already exists in 'hsr' [ 984.960794][T12218] Cannot create hsr debugfs directory [ 988.155983][T12017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.834592][T12017] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.959289][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 988.982900][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 988.994067][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 988.996267][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 989.001862][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 989.322495][T12040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.333375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.334581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.376105][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.376351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.522763][T12040] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.588365][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.588596][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.170753][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.170938][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.076660][ T5798] Bluetooth: hci3: command tx timeout [ 991.352682][ T7217] bridge_slave_1: left allmulticast mode [ 991.352711][ T7217] bridge_slave_1: left promiscuous mode [ 991.352956][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.433050][ T7217] bridge_slave_0: left allmulticast mode [ 991.433084][ T7217] bridge_slave_0: left promiscuous mode [ 991.433355][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.602405][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.617128][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.619080][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.620221][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.621889][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.890773][ T5798] Bluetooth: hci3: command tx timeout [ 994.891679][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.856855][ T5798] Bluetooth: hci4: command tx timeout [ 996.996561][ T5798] Bluetooth: hci3: command tx timeout [ 997.321282][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.336646][ T5974] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 997.397215][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.418749][ T7217] bond0 (unregistering): Released all slaves [ 997.500665][ T5974] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 997.500692][ T5974] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 997.500708][ T5974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 997.500758][ T5974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 997.503522][ T5974] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 997.503550][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 997.503562][ T5974] usb 1-1: Product: syz [ 997.503569][ T5974] usb 1-1: Manufacturer: syz [ 997.519770][ T5974] cdc_wdm 1-1:1.0: skipping garbage [ 997.519794][ T5974] cdc_wdm 1-1:1.0: skipping garbage [ 997.519887][ T5974] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 997.729817][T10142] usb 1-1: USB disconnect, device number 53 [ 997.986704][ T7217] hsr_slave_0: left promiscuous mode [ 998.006722][ T7217] hsr_slave_1: left promiscuous mode [ 998.007970][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.057943][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.503624][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.506849][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.527205][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.530664][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.531448][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.907153][ T5798] Bluetooth: hci4: command tx timeout [ 999.073605][ T5798] Bluetooth: hci3: command tx timeout [ 999.543212][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 999.807859][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 1000.694856][ T5798] Bluetooth: hci5: command tx timeout [ 1000.987254][ T5798] Bluetooth: hci4: command tx timeout [ 1002.746648][ T5798] Bluetooth: hci5: command tx timeout [ 1002.951858][T12325] chnl_net:caif_netlink_parms(): no params data found [ 1003.069562][ T5798] Bluetooth: hci4: command tx timeout [ 1003.833954][T12325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.834345][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.834533][T12325] bridge_slave_0: entered allmulticast mode [ 1003.859111][T12325] bridge_slave_0: entered promiscuous mode [ 1003.886783][T12325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.886907][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.887380][T12325] bridge_slave_1: entered allmulticast mode [ 1003.889869][T12325] bridge_slave_1: entered promiscuous mode [ 1003.946131][T12218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1004.019068][T12218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1004.109028][T12218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1004.157912][T12325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.178383][T12218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1004.243769][T12325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.424349][T12336] chnl_net:caif_netlink_parms(): no params data found [ 1004.589382][T12325] team0: Port device team_slave_0 added [ 1004.829370][ T5798] Bluetooth: hci5: command tx timeout [ 1004.862840][T12325] team0: Port device team_slave_1 added [ 1005.245081][T12360] chnl_net:caif_netlink_parms(): no params data found [ 1005.261987][T12325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.261998][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.262011][T12325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.315647][T12325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.315664][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.315687][T12325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.714507][T12336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.714625][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.714812][T12336] bridge_slave_0: entered allmulticast mode [ 1005.739809][T12336] bridge_slave_0: entered promiscuous mode [ 1006.011700][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.011855][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.012050][T12336] bridge_slave_1: entered allmulticast mode [ 1006.014691][T12336] bridge_slave_1: entered promiscuous mode [ 1006.129383][T12325] hsr_slave_0: entered promiscuous mode [ 1006.130698][T12325] hsr_slave_1: entered promiscuous mode [ 1006.131620][T12325] debugfs: 'hsr0' already exists in 'hsr' [ 1006.131641][T12325] Cannot create hsr debugfs directory [ 1006.420195][T12336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.422946][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.423131][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.423304][T12360] bridge_slave_0: entered allmulticast mode [ 1006.433967][T12360] bridge_slave_0: entered promiscuous mode [ 1006.494689][T12336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.494911][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.495018][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.495193][T12360] bridge_slave_1: entered allmulticast mode [ 1006.528640][T12360] bridge_slave_1: entered promiscuous mode [ 1006.705225][T12336] team0: Port device team_slave_0 added [ 1006.723039][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.800543][T12336] team0: Port device team_slave_1 added [ 1006.803576][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.916643][ T5798] Bluetooth: hci5: command tx timeout [ 1007.280454][T12336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.280469][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.280486][T12336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.339573][T12360] team0: Port device team_slave_0 added [ 1007.373904][T12336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.373916][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.373929][T12336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.396915][T12360] team0: Port device team_slave_1 added [ 1007.599394][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.599411][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.599435][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.687850][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.687866][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.687890][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.054091][T12336] hsr_slave_0: entered promiscuous mode [ 1008.054924][T12336] hsr_slave_1: entered promiscuous mode [ 1008.055465][T12336] debugfs: 'hsr0' already exists in 'hsr' [ 1008.055481][T12336] Cannot create hsr debugfs directory [ 1008.837617][T12360] hsr_slave_0: entered promiscuous mode [ 1008.838904][T12360] hsr_slave_1: entered promiscuous mode [ 1008.839808][T12360] debugfs: 'hsr0' already exists in 'hsr' [ 1008.839830][T12360] Cannot create hsr debugfs directory [ 1009.935302][T12218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.533045][T12218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.749636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.749787][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.844118][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.845002][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.882434][ T7217] bridge_slave_1: left allmulticast mode [ 1010.882462][ T7217] bridge_slave_1: left promiscuous mode [ 1010.882688][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.979344][ T7217] bridge_slave_0: left allmulticast mode [ 1010.979370][ T7217] bridge_slave_0: left promiscuous mode [ 1010.979605][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.102442][ T7217] bridge_slave_1: left allmulticast mode [ 1011.102470][ T7217] bridge_slave_1: left promiscuous mode [ 1011.102697][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.188059][ T7217] bridge_slave_0: left allmulticast mode [ 1011.188086][ T7217] bridge_slave_0: left promiscuous mode [ 1011.188317][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.280972][ T7217] bridge_slave_1: left allmulticast mode [ 1011.281002][ T7217] bridge_slave_1: left promiscuous mode [ 1011.281230][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.357746][ T7217] bridge_slave_0: left allmulticast mode [ 1011.357765][ T7217] bridge_slave_0: left promiscuous mode [ 1011.357916][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.997648][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.098943][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.140146][ T7217] bond0 (unregistering): Released all slaves [ 1014.378260][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.468204][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.511410][ T7217] bond0 (unregistering): Released all slaves [ 1015.837387][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.909920][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.952092][ T7217] bond0 (unregistering): Released all slaves [ 1015.990154][T12325] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1016.062132][T12325] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1016.265239][T12325] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1016.334139][T12325] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1016.946661][ T7217] hsr_slave_0: left promiscuous mode [ 1016.987158][ T7217] hsr_slave_1: left promiscuous mode [ 1016.988097][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.037423][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.240685][ T7217] hsr_slave_0: left promiscuous mode [ 1017.280904][ T7217] hsr_slave_1: left promiscuous mode [ 1017.281900][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.337952][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.536758][ T7217] hsr_slave_0: left promiscuous mode [ 1017.576802][ T7217] hsr_slave_1: left promiscuous mode [ 1017.577809][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.618282][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.717385][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 1019.027429][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 1021.500794][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 1021.808634][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 1024.699798][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 1024.997271][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 1027.920230][T12218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.051546][T12325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.151914][T12325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.179913][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.181151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.231188][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.231330][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.462392][T12218] veth0_vlan: entered promiscuous mode [ 1028.617351][T12218] veth1_vlan: entered promiscuous mode [ 1029.385790][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.399949][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.401197][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.408224][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.410069][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.596586][T12336] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1029.664507][T12336] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1029.756547][T12336] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1029.969896][T12336] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1030.405375][T12325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.674009][T12360] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1030.763395][T12360] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1030.822905][T12360] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1030.976832][T12360] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1031.549986][ T5811] Bluetooth: hci1: command tx timeout [ 1031.745141][T12325] veth0_vlan: entered promiscuous mode [ 1031.802921][T13826] chnl_net:caif_netlink_parms(): no params data found [ 1031.978603][T12325] veth1_vlan: entered promiscuous mode [ 1032.570319][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.570502][T13826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.570735][T13826] bridge_slave_0: entered allmulticast mode [ 1032.572346][T13826] bridge_slave_0: entered promiscuous mode [ 1032.618329][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.618460][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.618694][T13826] bridge_slave_1: entered allmulticast mode [ 1032.621266][T13826] bridge_slave_1: entered promiscuous mode [ 1032.655722][T12336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.018969][T13826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.048818][T13826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.405753][T13826] team0: Port device team_slave_0 added [ 1033.442181][T12336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.461212][T13826] team0: Port device team_slave_1 added [ 1033.500684][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.531892][T12325] veth0_macvtap: entered promiscuous mode [ 1033.627656][ T5811] Bluetooth: hci1: command tx timeout [ 1033.874198][T13826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.874215][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.874239][T13826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.987085][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.987217][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.993385][T13826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.993399][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.993424][T13826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.994649][T12325] veth1_macvtap: entered promiscuous mode [ 1034.110990][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.114500][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.212002][T12360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.273930][T13826] hsr_slave_0: entered promiscuous mode [ 1034.275324][T13826] hsr_slave_1: entered promiscuous mode [ 1034.482642][T12325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.620998][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.621202][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.760452][T12325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.790160][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.790373][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.952675][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.952917][ T7217] bridge_slave_1: left allmulticast mode [ 1034.952938][ T7217] bridge_slave_1: left promiscuous mode [ 1034.953177][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.028061][ T7217] bridge_slave_0: left allmulticast mode [ 1035.028088][ T7217] bridge_slave_0: left promiscuous mode [ 1035.028327][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.726560][ T5811] Bluetooth: hci1: command tx timeout [ 1037.011889][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.097703][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.129998][ T7217] bond0 (unregistering): Released all slaves [ 1037.193357][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.225187][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.275547][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.787024][ T5811] Bluetooth: hci1: command tx timeout [ 1037.802461][ T7217] hsr_slave_0: left promiscuous mode [ 1037.837393][ T7217] hsr_slave_1: left promiscuous mode [ 1037.838368][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.897270][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.990857][ T7217] veth1_vlan: left promiscuous mode [ 1037.991050][ T7217] veth0_vlan: left promiscuous mode [ 1040.763042][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 1041.050214][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 1043.998843][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.998864][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.354438][T12336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.565297][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.565315][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.767162][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.570489][T13826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1047.460558][T13826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1047.532162][T13826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1047.736814][T13826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1048.732153][T12336] veth0_vlan: entered promiscuous mode [ 1048.855419][T12336] veth1_vlan: entered promiscuous mode [ 1049.010520][T12360] veth0_vlan: entered promiscuous mode [ 1049.192110][T12360] veth1_vlan: entered promiscuous mode [ 1049.243861][T12336] veth0_macvtap: entered promiscuous mode [ 1049.344481][T12336] veth1_macvtap: entered promiscuous mode [ 1049.537258][T12336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.614163][T12360] veth0_macvtap: entered promiscuous mode [ 1049.621853][T12336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.684619][T13826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.693795][T12360] veth1_macvtap: entered promiscuous mode [ 1049.710694][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.736718][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.754162][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.762012][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.878577][T13826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.910198][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.024848][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.025043][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.048487][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.218962][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.219098][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.245008][T10667] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.258906][T10667] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.285408][T10667] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.326601][T10667] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.548439][T10667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.548459][T10667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.011655][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.011673][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.116726][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.116746][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.316963][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.316984][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.592082][T13826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.053249][T13826] veth0_vlan: entered promiscuous mode [ 1053.124611][T13826] veth1_vlan: entered promiscuous mode [ 1053.296144][T13826] veth0_macvtap: entered promiscuous mode [ 1053.323615][T13826] veth1_macvtap: entered promiscuous mode [ 1053.381780][T13826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.432092][T13826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.539565][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.551449][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.568316][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.589188][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.513117][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.831015][T14683] netlink: 'syz.9.2488': attribute type 10 has an invalid length. [ 1054.831029][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2488'. [ 1055.026845][T14683] batadv0: entered promiscuous mode [ 1055.026872][T14683] batadv0: entered allmulticast mode [ 1055.027615][T14683] bridge0: port 3(batadv0) entered blocking state [ 1055.027732][T14683] bridge0: port 3(batadv0) entered disabled state [ 1055.040468][T14683] bridge0: port 3(batadv0) entered blocking state [ 1055.040665][T14683] bridge0: port 3(batadv0) entered forwarding state [ 1055.839395][ T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1055.839414][ T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1055.978390][T10667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.978410][T10667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.626264][ T6230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.626284][ T6230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.516755][ T5974] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1061.316586][ T5974] usb 10-1: Using ep0 maxpacket: 16 [ 1061.322306][ T5974] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.322330][ T5974] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.324657][ T5974] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1061.324682][ T5974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.324699][ T5974] usb 10-1: Product: syz [ 1061.324709][ T5974] usb 10-1: Manufacturer: syz [ 1061.324716][ T5974] usb 10-1: SerialNumber: syz [ 1061.652264][ T5974] usb 10-1: 0:2 : does not exist [ 1061.733950][ T5974] usb 10-1: USB disconnect, device number 2 [ 1061.875808][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.954853][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1061.981953][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1061.983657][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1062.012529][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1062.013768][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1062.715824][T14752] binder: 14751:14752 ioctl c0306201 2000000003c0 returned -14 [ 1062.716193][T14752] binder: 14751:14752 ioctl c0306201 0 returned -14 [ 1063.014099][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2506'. [ 1064.124602][ T5811] Bluetooth: hci2: command tx timeout [ 1064.939672][T14768] netlink: 'syz.8.2507': attribute type 10 has an invalid length. [ 1065.878784][T14768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1066.884057][ T5811] Bluetooth: hci2: command tx timeout [ 1068.906930][ T5811] Bluetooth: hci2: command tx timeout [ 1070.346655][T14773] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1070.519275][T14773] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1070.519941][T14773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1070.520033][T14773] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1071.172323][ T5811] Bluetooth: hci2: command tx timeout [ 1071.296897][T14773] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1071.296926][T14773] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1071.296944][T14773] usb 8-1: Product: syz [ 1071.296957][T14773] usb 8-1: Manufacturer: syz [ 1071.406710][T14773] cdc_wdm 8-1:1.0: skipping garbage [ 1071.406752][T14773] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1071.749101][T14773] usb 8-1: USB disconnect, device number 2 [ 1071.901889][T14807] kernel read not supported for file /file0 (pid: 14807 comm: syz.8.2514) [ 1072.504512][ T37] audit: type=1800 audit(1770800752.524:3): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2514" name="file0" dev="mqueue" ino=50470 res=0 errno=0 [ 1076.165333][ T5796] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1076.726609][ T5796] usb 9-1: Using ep0 maxpacket: 16 [ 1076.819207][ T5796] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.819256][ T5796] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.819309][ T5796] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1076.819387][ T5796] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1076.819408][ T5796] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.032468][ T5796] usb 9-1: config 0 descriptor?? [ 1077.827314][ T5796] usbhid 9-1:0.0: can't add hid device: -71 [ 1077.827405][ T5796] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1077.853131][ T5796] usb 9-1: USB disconnect, device number 2 [ 1079.032528][ T5796] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1079.497885][ T5796] usb 8-1: Using ep0 maxpacket: 16 [ 1079.500246][ T5796] usb 8-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 1079.500270][ T5796] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.502792][ T5796] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1079.502817][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.502836][ T5796] usb 8-1: Product: syz [ 1079.502847][ T5796] usb 8-1: Manufacturer: syz [ 1079.502860][ T5796] usb 8-1: SerialNumber: syz [ 1080.186031][ T5796] usb 8-1: 0:2 : does not exist [ 1080.186122][ T5796] usb 8-1: unit 12 not found! [ 1080.229420][ T5796] usb 8-1: USB disconnect, device number 3 [ 1081.247134][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1081.283410][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.283445][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.947884][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.947905][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.290162][T14745] chnl_net:caif_netlink_parms(): no params data found [ 1085.781005][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.781040][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.414742][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.414781][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.770584][T14745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.774426][T14745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.774630][T14745] bridge_slave_0: entered allmulticast mode [ 1086.812923][T14745] bridge_slave_0: entered promiscuous mode [ 1086.842942][T14745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.843061][T14745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.843263][T14745] bridge_slave_1: entered allmulticast mode [ 1086.893309][T14745] bridge_slave_1: entered promiscuous mode [ 1087.139784][T14745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.199890][T14745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.327472][T14745] team0: Port device team_slave_0 added [ 1087.330856][T14745] team0: Port device team_slave_1 added [ 1087.417819][T14745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.417835][T14745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.417853][T14745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.419643][T14745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.419665][T14745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.419684][T14745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.522128][ T12] bridge0: port 3(batadv0) entered disabled state [ 1087.590616][ T12] bridge_slave_1: left allmulticast mode [ 1087.590644][ T12] bridge_slave_1: left promiscuous mode [ 1087.590901][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.680889][ T12] bridge_slave_0: left allmulticast mode [ 1087.680915][ T12] bridge_slave_0: left promiscuous mode [ 1087.681246][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.751359][T14911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1090.067828][ T10] IPVS: starting estimator thread 0... [ 1090.576867][T14973] IPVS: using max 16 ests per chain, 38400 per kthread [ 1090.971951][T14663] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1091.116631][T14663] usb 9-1: Using ep0 maxpacket: 32 [ 1091.123872][T14663] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 1091.123895][T14663] usb 9-1: config 4 has no interface number 0 [ 1091.123939][T14663] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.123963][T14663] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.123998][T14663] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1091.124019][T14663] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.177091][T14663] hub 9-1:4.128: USB hub found [ 1091.190148][ T5974] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1091.412715][ T5974] usb 8-1: config 0 has no interfaces? [ 1091.415491][ T5974] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1091.415517][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1091.415535][ T5974] usb 8-1: Product: syz [ 1091.415547][ T5974] usb 8-1: Manufacturer: syz [ 1091.415559][ T5974] usb 8-1: SerialNumber: syz [ 1091.461559][ T5974] usb 8-1: config 0 descriptor?? [ 1091.594187][T14663] hub 9-1:4.128: config failed, can't read hub descriptor (err -22) [ 1091.620148][T14663] usb 9-1: USB disconnect, device number 3 [ 1091.657566][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.845611][ T5796] usb 8-1: USB disconnect, device number 4 [ 1091.860073][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.898936][ T12] bond0 (unregistering): Released all slaves [ 1095.152571][T14996] netlink: 184 bytes leftover after parsing attributes in process `syz.8.2546'. [ 1095.438997][ T12] bond1 (unregistering): Released all slaves [ 1096.910805][ T12] bond2 (unregistering): Released all slaves [ 1097.216234][T15005] nvme_fabrics: missing parameter 'transport=%s' [ 1097.216251][T15005] nvme_fabrics: missing parameter 'nqn=%s' [ 1097.624460][T14972] bpq0: entered allmulticast mode [ 1097.625697][ T12] : left promiscuous mode [ 1098.889327][T14942] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1099.585592][ T12] tipc: Left network mode [ 1099.699214][T14942] usb 10-1: Using ep0 maxpacket: 32 [ 1099.718805][T14942] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.718824][T14942] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.720465][T14942] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1099.720480][T14942] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1099.720490][T14942] usb 10-1: Product: syz [ 1099.720497][T14942] usb 10-1: Manufacturer: syz [ 1099.800670][T14745] hsr_slave_0: entered promiscuous mode [ 1099.806197][T14745] hsr_slave_1: entered promiscuous mode [ 1100.189665][T14745] debugfs: 'hsr0' already exists in 'hsr' [ 1100.189692][T14745] Cannot create hsr debugfs directory [ 1100.194147][T14942] hub 10-1:4.0: USB hub found [ 1100.266420][T14942] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 1100.523033][T14942] usb 10-1: USB disconnect, device number 3 [ 1106.096418][T15065] syz.8.2560 (15065): drop_caches: 2 [ 1110.903731][T15105] syz.8.2567 (15105): drop_caches: 2 [ 1112.917739][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 1115.957230][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.996662][ T5796] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1116.148543][ T5796] usb 10-1: config 0 has no interfaces? [ 1116.156959][ T5796] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1116.156985][ T5796] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1116.157003][ T5796] usb 10-1: Product: syz [ 1116.157016][ T5796] usb 10-1: Manufacturer: syz [ 1116.157027][ T5796] usb 10-1: SerialNumber: syz [ 1116.181532][ T5796] usb 10-1: config 0 descriptor?? [ 1116.546709][ T5974] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1116.699020][ T5974] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1116.699048][ T5974] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1116.699066][ T5974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1116.699117][ T5974] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1116.702551][ T5974] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1116.702575][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1116.702593][ T5974] usb 4-1: Product: syz [ 1116.702614][ T5974] usb 4-1: Manufacturer: syz [ 1116.774220][T14602] usb 10-1: USB disconnect, device number 4 [ 1116.818311][ T5974] cdc_wdm 4-1:1.0: skipping garbage [ 1116.818329][ T5974] cdc_wdm 4-1:1.0: skipping garbage [ 1116.818340][ T5974] cdc_wdm 4-1:1.0: skipping garbage [ 1116.818369][ T5974] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1116.917011][ T12] hsr_slave_0: left promiscuous mode [ 1116.963657][ T12] hsr_slave_1: left promiscuous mode [ 1116.964662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.964686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.022040][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.022067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.048461][ T5796] usb 4-1: USB disconnect, device number 3 [ 1117.331509][ T12] veth1_macvtap: left promiscuous mode [ 1117.331716][ T12] veth0_macvtap: left promiscuous mode [ 1117.331968][ T12] veth1_vlan: left promiscuous mode [ 1117.332137][ T12] veth0_vlan: left promiscuous mode [ 1118.026825][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 1118.191864][T15176] netlink: 'syz.3.2586': attribute type 10 has an invalid length. [ 1119.317276][T14633] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1119.503052][T14633] usb 10-1: config 0 has no interfaces? [ 1119.505790][T14633] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1119.505816][T14633] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1119.505835][T14633] usb 10-1: Product: syz [ 1119.505847][T14633] usb 10-1: Manufacturer: syz [ 1119.505860][T14633] usb 10-1: SerialNumber: syz [ 1119.556337][T14633] usb 10-1: config 0 descriptor?? [ 1120.057436][T14663] usb 10-1: USB disconnect, device number 5 [ 1122.611312][T15217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1122.629484][T11256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1122.633163][T11256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1122.634419][T11256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1122.635288][T11256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1123.337047][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 1123.671758][T15228] syz.9.2604 (15228): drop_caches: 2 [ 1124.047182][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1124.342658][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1124.908630][ T5798] Bluetooth: hci0: command tx timeout [ 1126.987516][ T5798] Bluetooth: hci0: command tx timeout [ 1127.246951][ T5974] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1127.411420][ T5974] usb 9-1: Using ep0 maxpacket: 16 [ 1127.413905][ T5974] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.413918][ T5974] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.424756][ T5974] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1127.424781][ T5974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.424799][ T5974] usb 9-1: Product: syz [ 1127.424811][ T5974] usb 9-1: Manufacturer: syz [ 1127.424823][ T5974] usb 9-1: SerialNumber: syz [ 1127.668539][ T5974] usb 9-1: 0:2 : does not exist [ 1127.668628][ T5974] usb 9-1: unit 6 not found! [ 1127.756583][ T5974] usb 9-1: USB disconnect, device number 4 [ 1127.774618][T15176] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1127.869983][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.925054][ T5796] infiniband syz0: ib_query_port failed (-19) [ 1129.066607][ T5798] Bluetooth: hci0: command tx timeout [ 1131.147268][ T5798] Bluetooth: hci0: command tx timeout [ 1134.076739][T15317] netlink: 'syz.9.2640': attribute type 10 has an invalid length. [ 1134.217041][T15317] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1136.985999][T15216] chnl_net:caif_netlink_parms(): no params data found [ 1137.322280][T15349] netlink: 'syz.9.2646': attribute type 10 has an invalid length. [ 1140.953734][ T12] IPVS: stop unused estimator thread 0... [ 1140.964507][T15216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.964629][T15216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.964870][T15216] bridge_slave_0: entered allmulticast mode [ 1141.006779][T15216] bridge_slave_0: entered promiscuous mode [ 1141.037754][T15216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.064369][T15216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.064624][T15216] bridge_slave_1: entered allmulticast mode [ 1141.112099][T15216] bridge_slave_1: entered promiscuous mode [ 1142.499980][T15216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.520600][T15402] syz.8.2660 (15402): drop_caches: 2 [ 1142.559285][ T12] bridge_slave_1: left allmulticast mode [ 1142.559313][ T12] bridge_slave_1: left promiscuous mode [ 1142.564203][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.972470][ T12] bridge_slave_0: left allmulticast mode [ 1142.972490][ T12] bridge_slave_0: left promiscuous mode [ 1142.972645][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.997057][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.187163][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.316822][ T12] bond0 (unregistering): Released all slaves [ 1147.364551][T15216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.532594][T15216] team0: Port device team_slave_0 added [ 1147.534557][T15216] team0: Port device team_slave_1 added [ 1147.764035][T15216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.764052][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.764077][T15216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.766263][T15216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.766276][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.766300][T15216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.186660][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1150.336512][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1150.535267][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.535298][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.535317][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.535342][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.535353][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.576945][ T12] hsr_slave_0: left promiscuous mode [ 1151.328738][ T9] usb 10-1: config 0 descriptor?? [ 1151.364351][ T12] hsr_slave_1: left promiscuous mode [ 1151.422473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.605102][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.783700][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 1152.783830][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1153.116721][ T9] usb 10-1: USB disconnect, device number 6 [ 1154.510715][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 1155.758534][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1156.322368][T15551] netlink: 'syz.8.2707': attribute type 10 has an invalid length. [ 1157.033656][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1161.793431][T15216] hsr_slave_0: entered promiscuous mode [ 1161.797588][T15216] hsr_slave_1: entered promiscuous mode [ 1161.798426][T15216] debugfs: 'hsr0' already exists in 'hsr' [ 1161.798447][T15216] Cannot create hsr debugfs directory [ 1163.398552][T15613] netlink: 'syz.3.2730': attribute type 10 has an invalid length. [ 1164.580294][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1164.731493][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.731518][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.732971][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1164.732996][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1164.733013][ T9] usb 4-1: SerialNumber: syz [ 1165.010467][ T9] usb 4-1: 0:2 : does not exist [ 1165.031652][ T9] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 1165.379038][ T9] usb 4-1: USB disconnect, device number 4 [ 1166.272864][T15216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1166.484520][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.535164][T15216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1166.600506][T15216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1166.686729][T15216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1166.692233][T15641] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1166.692256][T15641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1166.731866][T15641] vhci_hcd vhci_hcd.0: Device attached [ 1167.016855][T14634] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1167.029139][ T5796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1167.189155][ T5796] usb 4-1: config 0 has no interfaces? [ 1167.189190][ T5796] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1167.189211][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.224449][ T5796] usb 4-1: config 0 descriptor?? [ 1167.331497][T15216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.450559][T15642] usb 39-1: recv xbuf, 0 [ 1167.469204][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1167.469220][ T43] vhci_hcd vhci_hcd.3: release socket [ 1167.492338][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1167.552788][T15216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.557092][T14634] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1167.689248][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.689385][T10667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.712886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.713047][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.967645][ T806] usb 4-1: USB disconnect, device number 5 [ 1170.052546][T15216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.530777][T15216] veth0_vlan: entered promiscuous mode [ 1171.424664][T15216] veth1_vlan: entered promiscuous mode [ 1171.807004][T15216] veth0_macvtap: entered promiscuous mode [ 1171.892764][T15216] veth1_macvtap: entered promiscuous mode [ 1172.032500][T15216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.151622][T15216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.281335][ T1023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.301772][ T1023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.316789][ T1023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.318865][ T1023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.129882][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.129912][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.394014][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.394033][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.566565][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1173.716529][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1173.718595][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.718623][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.718642][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1173.718680][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1173.718701][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.723530][ T9] usb 10-1: config 0 descriptor?? [ 1175.435484][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 1175.435607][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1175.473037][ T9] usb 10-1: USB disconnect, device number 7 [ 1177.937106][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.866526][T14633] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1181.039891][T14633] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.039917][T14633] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1181.041697][T14633] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1181.041721][T14633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1181.041739][T14633] usb 1-1: SerialNumber: syz [ 1181.368669][T14633] usb 1-1: 0:2 : does not exist [ 1181.388727][T14633] usb 1-1: 0:0: failed to get current value for ch 0 (-22) [ 1181.438557][T14633] usb 1-1: USB disconnect, device number 54 [ 1181.841228][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1191.796539][ T9331] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1191.960519][ T9331] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.960546][ T9331] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.962832][ T9331] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1191.962856][ T9331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1191.962874][ T9331] usb 10-1: SerialNumber: syz [ 1192.367562][ T9331] usb 10-1: 0:2 : does not exist [ 1192.373363][ T9331] usb 10-1: 0:0: failed to get current value for ch 0 (-22) [ 1192.406215][T15964] netlink: 'syz.8.2816': attribute type 10 has an invalid length. [ 1192.499127][ T9331] usb 10-1: USB disconnect, device number 8 [ 1193.094681][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1195.364362][T16011] netlink: 'syz.0.2829': attribute type 10 has an invalid length. [ 1195.373479][T16011] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1197.167349][T16015] kvm: kvm [16014]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80000000 [ 1197.175635][T16015] kvm: kvm [16014]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6122 [ 1199.565852][T16052] netlink: 'syz.8.2841': attribute type 10 has an invalid length. [ 1199.948195][T16054] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1199.948221][T16054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1199.948300][T16054] vhci_hcd vhci_hcd.0: Device attached [ 1200.385883][ T10] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1200.553170][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1200.709105][ T9] usb 9-1: config 0 has no interfaces? [ 1200.709142][ T9] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1200.709163][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.760045][ T9] usb 9-1: config 0 descriptor?? [ 1201.019471][T16057] usb 49-1: recv xbuf, 0 [ 1201.079787][ T57] vhci_hcd vhci_hcd.8: stop threads [ 1201.079806][ T57] vhci_hcd vhci_hcd.8: release socket [ 1201.080771][ T57] vhci_hcd vhci_hcd.8: disconnect device [ 1201.146694][ T10] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1201.575989][ T9] usb 9-1: USB disconnect, device number 5 [ 1202.397645][T16105] netlink: 'syz.8.2855': attribute type 10 has an invalid length. [ 1203.698730][T16125] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1206.840874][T16147] Bluetooth: MGMT ver 1.23 [ 1207.066184][T16148] syz.3.2866 (16148): drop_caches: 2 [ 1207.309267][T16154] netlink: 'syz.9.2871': attribute type 10 has an invalid length. [ 1207.559592][T16159] gretap0: entered promiscuous mode [ 1207.559918][T16159] vlan2: entered promiscuous mode [ 1208.926570][ T5878] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1209.093468][ T5878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.093524][ T5878] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1209.093537][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.104604][ T5878] usb 10-1: config 0 descriptor?? [ 1209.123704][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 1209.532560][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1209.533304][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 1209.533957][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1209.534601][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 1209.535256][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 1209.545390][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 1209.550358][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 1209.551158][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 1209.552937][ T5878] pwc: recv_control_msg error -32 req 04 val 1500 [ 1209.762898][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 1209.763433][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 1209.763895][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 1209.775139][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 1209.775796][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 1209.776340][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 1209.780252][ T5878] pwc: Registered as video103. [ 1209.783917][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input67 [ 1209.831152][ T5878] usb 10-1: USB disconnect, device number 9 [ 1215.149978][T16251] kvm: kvm [16250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80000000 [ 1215.150353][T16251] kvm: kvm [16250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80000000 [ 1216.038759][T16272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2914'. [ 1216.193203][T16267] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2906'. [ 1220.956817][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2926'. [ 1225.787175][T14633] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1225.916709][T14634] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1225.936510][T14633] usb 1-1: Using ep0 maxpacket: 32 [ 1225.937437][T14633] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1225.940521][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1225.940543][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.940560][T14633] usb 1-1: config 0 has no interface number 0 [ 1225.940610][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.941996][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1225.942017][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.942035][T14633] usb 1-1: config 0 has no interface number 0 [ 1225.942078][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.943474][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1225.943495][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.943513][T14633] usb 1-1: config 0 has no interface number 0 [ 1225.943557][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.945063][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1225.945084][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.945103][T14633] usb 1-1: config 0 has no interface number 0 [ 1225.945167][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.014251][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.014276][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.014293][T14633] usb 1-1: config 0 has no interface number 0 [ 1226.014340][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.106187][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.106211][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.106228][T14633] usb 1-1: config 0 has no interface number 0 [ 1226.106274][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.729620][T14634] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.729647][T14634] usb 4-1: config 0 has no interfaces? [ 1226.729676][T14634] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1226.729697][T14634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.775813][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.775838][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.775856][T14633] usb 1-1: config 0 has no interface number 0 [ 1226.775901][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.806665][T14633] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.806690][T14633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.806707][T14633] usb 1-1: config 0 has no interface number 0 [ 1226.806753][T14633] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.861924][T14633] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1226.861951][T14633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.861969][T14633] usb 1-1: Product: syz [ 1226.861982][T14633] usb 1-1: Manufacturer: syz [ 1226.861994][T14633] usb 1-1: SerialNumber: syz [ 1226.865451][T14634] usb 4-1: config 0 descriptor?? [ 1226.911786][T14633] usb 1-1: config 0 descriptor?? [ 1226.927750][T14633] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 1228.714893][T16372] syz.8.2951 (16372): drop_caches: 2 [ 1229.100735][T15153] usb 4-1: USB disconnect, device number 6 [ 1229.266082][ T806] usb 1-1: USB disconnect, device number 55 [ 1235.566757][ T806] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1236.083079][ T806] usb 10-1: Using ep0 maxpacket: 16 [ 1236.170798][ T806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.170829][ T806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.170850][ T806] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1236.170937][ T806] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1236.170958][ T806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.335559][ T806] usb 10-1: config 0 descriptor?? [ 1239.570265][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.649633][ T806] usbhid 10-1:0.0: can't add hid device: -71 [ 1239.649710][ T806] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1239.673271][ T806] usb 10-1: USB disconnect, device number 10 [ 1241.432022][T16465] netlink: 'syz.8.2982': attribute type 10 has an invalid length. [ 1242.770557][T16470] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2986'. [ 1245.897183][T16517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 1246.268172][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 1248.010591][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 1250.045202][T16558] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3006'. [ 1254.664166][T16625] blktrace: Concurrent blktraces are not allowed on sg0 [ 1260.844978][T16666] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3044'. [ 1260.916436][T16642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.296566][ T5974] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1262.448762][ T5974] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.448817][ T5974] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1262.448836][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.460251][ T5974] usb 9-1: config 0 descriptor?? [ 1262.491066][ T5974] pwc: Askey VC010 type 2 USB webcam detected. [ 1262.559230][T16694] 8021q: VLANs not supported on vcan0 [ 1262.890185][ T5974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1262.890944][ T5974] pwc: recv_control_msg error -32 req 02 val 2700 [ 1262.891937][ T5974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1262.895725][ T5974] pwc: recv_control_msg error -32 req 04 val 1000 [ 1262.898465][ T5974] pwc: recv_control_msg error -32 req 04 val 1300 [ 1262.899576][ T5974] pwc: recv_control_msg error -32 req 04 val 1400 [ 1262.902899][ T5974] pwc: recv_control_msg error -32 req 02 val 2000 [ 1262.903852][ T5974] pwc: recv_control_msg error -32 req 02 val 2100 [ 1262.904830][ T5974] pwc: recv_control_msg error -32 req 04 val 1500 [ 1263.003407][T15153] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1263.123933][ T5974] pwc: recv_control_msg error -71 req 02 val 2400 [ 1263.124291][ T5974] pwc: recv_control_msg error -71 req 02 val 2600 [ 1263.124770][ T5974] pwc: recv_control_msg error -71 req 02 val 2900 [ 1263.125105][ T5974] pwc: recv_control_msg error -71 req 02 val 2800 [ 1263.127539][ T5974] pwc: recv_control_msg error -71 req 04 val 1100 [ 1263.133400][ T5974] pwc: recv_control_msg error -71 req 04 val 1200 [ 1263.150580][ T5974] pwc: Registered as video103. [ 1263.155846][T15153] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1263.155870][T15153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.178171][ T5974] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input68 [ 1263.186959][T15153] usb 1-1: config 0 descriptor?? [ 1263.231747][ T5974] usb 9-1: USB disconnect, device number 6 [ 1263.362537][T15153] usb 1-1: selecting invalid altsetting 3 [ 1263.362569][T15153] comedi comedi5: could not set alternate setting 3 in high speed [ 1263.362584][T15153] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1263.436152][T15153] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1263.474336][T15153] usb 1-1: USB disconnect, device number 56 [ 1267.262610][T16756] syz.0.3079 (16756): drop_caches: 2 [ 1276.377595][T16843] netlink: 'syz.8.3103': attribute type 10 has an invalid length. [ 1276.793825][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1289.490934][T16974] syz.3.3159 (16974): drop_caches: 2 [ 1290.999540][T16999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1296.686521][T14663] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1297.346964][T14663] usb 9-1: device descriptor read/all, error -71 [ 1300.280791][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1303.566528][T14663] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1303.718341][T14663] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.718366][T14663] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.719589][T14663] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1303.719614][T14663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1303.719640][T14663] usb 4-1: SerialNumber: syz [ 1304.006127][T14663] usb 4-1: 0:2 : does not exist [ 1304.021988][T14663] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 1304.083470][T14663] usb 4-1: USB disconnect, device number 7 [ 1304.184296][T17126] udevd[17126]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1304.700307][T17155] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1306.005967][T17166] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1306.005989][T17166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1306.049632][T17166] vhci_hcd vhci_hcd.0: Device attached [ 1306.666617][T15153] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1306.666624][T14634] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 1306.819276][T15153] usb 10-1: config 0 has no interfaces? [ 1306.819313][T15153] usb 10-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1306.819326][T15153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.835991][T15153] usb 10-1: config 0 descriptor?? [ 1307.106070][T17169] usb 51-1: recv xbuf, 0 [ 1307.116943][ T6230] vhci_hcd vhci_hcd.9: stop threads [ 1307.116962][ T6230] vhci_hcd vhci_hcd.9: release socket [ 1307.117061][ T6230] vhci_hcd vhci_hcd.9: disconnect device [ 1307.186727][T14634] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1307.633454][ T806] usb 10-1: USB disconnect, device number 11 [ 1309.817331][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3249'. [ 1311.590198][T17255] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3269'. [ 1314.634671][ T5798] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 1314.636227][ T5798] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 1320.060603][ T5798] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1320.060876][ T5798] Bluetooth: hci1: Injecting HCI hardware error event [ 1320.061777][ T5798] Bluetooth: hci1: hardware error 0x00 [ 1320.548923][T17320] blktrace: Concurrent blktraces are not allowed on sg0 [ 1322.586512][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1345.719844][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3379'. [ 1349.501449][T17611] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 1350.337416][ T5798] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 1350.339889][ T5798] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 1353.426520][T14663] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1353.576592][T14663] usb 10-1: Using ep0 maxpacket: 16 [ 1353.580601][T14663] usb 10-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1353.580623][T14663] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1353.615569][T14663] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1353.615595][T14663] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.615613][T14663] usb 10-1: Product: syz [ 1353.615625][T14663] usb 10-1: Manufacturer: syz [ 1353.615642][T14663] usb 10-1: SerialNumber: syz [ 1353.899070][T14663] usb 10-1: 0:2 : does not exist [ 1353.945217][T14663] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1354.129362][T14663] usb 10-1: USB disconnect, device number 12 [ 1354.347006][ T5798] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1354.347449][ T5798] Bluetooth: hci3: Injecting HCI hardware error event [ 1354.350778][ T5798] Bluetooth: hci3: hardware error 0x00 [ 1354.399061][T17644] udevd[17644]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.529508][ T5811] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 1355.530682][ T5811] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 1356.506583][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1358.343075][T17726] SQUASHFS error: Failed to read block 0x0: -5 [ 1358.343132][T17726] unable to read squashfs_super_block [ 1359.549224][ T5798] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1359.555172][ T5798] Bluetooth: hci5: Injecting HCI hardware error event [ 1359.572215][ T5811] Bluetooth: hci5: hardware error 0x00 [ 1359.622961][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3444'. [ 1361.793464][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.213726][ T5811] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1372.316800][T14634] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1372.466448][T14634] usb 10-1: Using ep0 maxpacket: 32 [ 1372.468909][T14634] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.471099][T14634] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1372.471124][T14634] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1372.471142][T14634] usb 10-1: Product: syz [ 1372.471155][T14634] usb 10-1: Manufacturer: syz [ 1372.542502][T14634] hub 10-1:4.0: bad descriptor, ignoring hub [ 1372.542540][T14634] hub 10-1:4.0: probe with driver hub failed with error -5 [ 1372.616953][T14634] usbhid 10-1:4.0: couldn't find an input interrupt endpoint [ 1375.986749][T14634] usb 10-1: USB disconnect, device number 13 [ 1376.159968][T17899] netlink: 'syz.8.3505': attribute type 10 has an invalid length. [ 1381.239641][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1381.239671][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1381.239856][T17949] vhci_hcd vhci_hcd.0: Device attached [ 1381.569989][T15153] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1381.570164][ T806] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1381.748740][ T806] usb 4-1: config 0 has no interfaces? [ 1381.748774][ T806] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1381.748785][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.752869][ T806] usb 4-1: config 0 descriptor?? [ 1383.064246][T17950] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1383.221401][T15121] vhci_hcd vhci_hcd.3: stop threads [ 1383.221417][T15121] vhci_hcd vhci_hcd.3: release socket [ 1383.221465][T15121] vhci_hcd vhci_hcd.3: disconnect device [ 1383.761261][ T5974] usb 4-1: USB disconnect, device number 8 [ 1385.429330][T14634] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1385.632008][T14634] usb 1-1: Using ep0 maxpacket: 16 [ 1385.647712][T14634] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.647741][T14634] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.647760][T14634] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1385.647791][T14634] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1385.647811][T14634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.669825][T14634] usb 1-1: config 0 descriptor?? [ 1387.140248][T15153] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1387.271941][T14634] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1389.937629][T14633] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1391.027549][T14633] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.027590][T14633] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1391.028936][T14633] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1391.028961][T14633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1391.028979][T14633] usb 4-1: SerialNumber: syz [ 1391.297953][T14634] usb 1-1: USB disconnect, device number 57 [ 1391.325586][T14633] usb 4-1: 0:2 : does not exist [ 1391.352844][T14633] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 1391.498638][T14633] usb 4-1: USB disconnect, device number 9 [ 1391.662662][T17644] udevd[17644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.987425][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1394.006106][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1394.713661][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1394.795140][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1394.796118][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1396.910603][ T5798] Bluetooth: hci2: command tx timeout [ 1398.035529][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.640516][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.987289][ T5798] Bluetooth: hci2: command tx timeout [ 1399.496836][T18121] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3584'. [ 1401.067279][ T5798] Bluetooth: hci2: command tx timeout [ 1401.835329][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.146506][ T5798] Bluetooth: hci2: command tx timeout [ 1403.446583][ T5974] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1404.416094][ T5974] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1404.416125][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.421815][ T5974] usb 1-1: config 0 descriptor?? [ 1404.473089][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.497606][ T5974] usb 1-1: selecting invalid altsetting 3 [ 1404.497627][ T5974] comedi comedi5: could not set alternate setting 3 in high speed [ 1404.497641][ T5974] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1404.539809][ T5974] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1404.564446][T18129] 8021q: VLANs not supported on vcan0 [ 1404.589153][T18082] chnl_net:caif_netlink_parms(): no params data found [ 1404.643415][ T5974] usb 1-1: USB disconnect, device number 58 [ 1404.787480][T18082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.787696][T18082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.787875][T18082] bridge_slave_0: entered allmulticast mode [ 1404.790733][T18082] bridge_slave_0: entered promiscuous mode [ 1404.793981][T18082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.794188][T18082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.794350][T18082] bridge_slave_1: entered allmulticast mode [ 1404.844692][T18082] bridge_slave_1: entered promiscuous mode [ 1404.895838][T18082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.914996][T18082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.033576][T18082] team0: Port device team_slave_0 added [ 1405.057685][T18082] team0: Port device team_slave_1 added [ 1405.333050][T18146] syz.8.3592 (18146): drop_caches: 2 [ 1405.672995][T18082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.673012][T18082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.673035][T18082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.109891][T18082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.109908][T18082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.109931][T18082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.567222][ T67] bridge_slave_1: left allmulticast mode [ 1408.567250][ T67] bridge_slave_1: left promiscuous mode [ 1408.567500][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.662739][ T67] bridge_slave_0: left allmulticast mode [ 1408.662759][ T67] bridge_slave_0: left promiscuous mode [ 1408.662919][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.567790][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.607154][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.629819][ T67] bond0 (unregistering): Released all slaves [ 1414.817827][T18082] hsr_slave_0: entered promiscuous mode [ 1414.819115][T18082] hsr_slave_1: entered promiscuous mode [ 1414.819993][T18082] debugfs: 'hsr0' already exists in 'hsr' [ 1414.820014][T18082] Cannot create hsr debugfs directory [ 1417.233062][T18207] syz.9.3610 (18207): drop_caches: 2 [ 1423.155916][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.006758][ T67] hsr_slave_0: left promiscuous mode [ 1425.064368][ T67] hsr_slave_1: left promiscuous mode [ 1425.065303][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1425.065327][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.138860][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1425.138889][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.394743][T18255] syz.8.3620 (18255): drop_caches: 2 [ 1425.521253][ T67] veth1_macvtap: left promiscuous mode [ 1425.521323][ T67] veth0_macvtap: left promiscuous mode [ 1425.521465][ T67] veth1_vlan: left promiscuous mode [ 1425.521563][ T67] veth0_vlan: left promiscuous mode [ 1428.876411][T15153] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1429.059694][T15153] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.059720][T15153] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.060902][T15153] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1429.060926][T15153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1429.060945][T15153] usb 10-1: SerialNumber: syz [ 1429.343173][T15153] usb 10-1: 0:2 : does not exist [ 1429.343233][T15153] usb 10-1: unit 5 not found! [ 1429.504034][T15153] usb 10-1: USB disconnect, device number 14 [ 1429.672879][T18277] udevd[18277]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.084273][T18285] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3627'. [ 1438.287736][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1438.416418][T14773] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1438.573698][T14773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.573723][T14773] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1438.573756][T14773] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1438.573777][T14773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.579988][T14773] usb 4-1: config 0 descriptor?? [ 1438.664244][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1441.138322][T15153] usb 4-1: USB disconnect, device number 10 [ 1445.948462][T18352] 8021q: VLANs not supported on vcan0 [ 1445.965580][T18354] 8021q: VLANs not supported on vcan0 [ 1446.206560][T14633] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1446.252056][T14773] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1446.360540][T14633] usb 9-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1446.360570][T14633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.396470][T14633] usb 9-1: config 0 descriptor?? [ 1446.400989][T14773] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1446.401015][T14773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.410695][T14773] usb 1-1: config 0 descriptor?? [ 1446.542000][T14773] usb 1-1: selecting invalid altsetting 3 [ 1446.542015][T14773] comedi comedi6: could not set alternate setting 3 in high speed [ 1446.542023][T14773] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1446.624824][T14633] usb 9-1: selecting invalid altsetting 3 [ 1446.624847][T14633] comedi comedi5: could not set alternate setting 3 in high speed [ 1446.624861][T14633] usbduxsigma 9-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1446.629828][T14773] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1446.721084][T14773] usb 1-1: USB disconnect, device number 59 [ 1446.742712][T14633] usbduxsigma 9-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1446.760931][T14633] usb 9-1: USB disconnect, device number 9 [ 1447.726441][T14633] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1447.936359][T14633] usb 1-1: Using ep0 maxpacket: 16 [ 1447.938698][T14633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.938726][T14633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.938746][T14633] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1447.938784][T14633] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1447.938805][T14633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.016464][T14633] usb 1-1: config 0 descriptor?? [ 1448.180040][T18082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1448.254876][T18082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1448.317259][T18082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1448.376118][T18082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1448.454433][T14633] usbhid 1-1:0.0: can't add hid device: -71 [ 1448.454549][T14633] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1448.481990][T14633] usb 1-1: USB disconnect, device number 60 [ 1451.152626][T18082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.330586][T18082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.367471][T16390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.400776][T16390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.534453][T15121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.534527][T15121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.647891][T18412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1452.326843][T18082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.709534][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1455.728943][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1455.730363][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1455.731899][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1456.545798][T18462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1457.413806][T18449] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3662'. [ 1459.077008][ T5798] Bluetooth: hci4: command tx timeout [ 1461.147015][ T5798] Bluetooth: hci4: command tx timeout [ 1461.485305][T18460] chnl_net:caif_netlink_parms(): no params data found [ 1462.906648][T14633] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1463.036750][T18511] 8021q: VLANs not supported on vcan0 [ 1463.058539][T14633] usb 10-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1463.058567][T14633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.106162][T14633] usb 10-1: config 0 descriptor?? [ 1463.133743][T14633] usb 10-1: selecting invalid altsetting 3 [ 1463.133757][T14633] comedi comedi5: could not set alternate setting 3 in high speed [ 1463.133764][T14633] usbduxsigma 10-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1463.534990][ T5798] Bluetooth: hci4: command tx timeout [ 1463.630779][T14633] usbduxsigma 10-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1463.659239][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3676'. [ 1463.665500][T14633] usb 10-1: USB disconnect, device number 15 [ 1466.218124][T18462] Bluetooth: hci4: command tx timeout [ 1466.417133][T18460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.417274][T18460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.417392][T18460] bridge_slave_0: entered allmulticast mode [ 1466.418846][T18460] bridge_slave_0: entered promiscuous mode [ 1466.420888][T18460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.421007][T18460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.421274][T18460] bridge_slave_1: entered allmulticast mode [ 1466.422637][T18460] bridge_slave_1: entered promiscuous mode [ 1466.558511][T18460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.562837][T18460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.643389][T18460] team0: Port device team_slave_0 added [ 1466.676131][T18460] team0: Port device team_slave_1 added [ 1466.888238][T18460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.888255][T18460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.888278][T18460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.890964][T18460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.890977][T18460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.891001][T18460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.102341][T18460] hsr_slave_0: entered promiscuous mode [ 1467.105915][T18460] hsr_slave_1: entered promiscuous mode [ 1467.109857][T18460] debugfs: 'hsr0' already exists in 'hsr' [ 1467.109882][T18460] Cannot create hsr debugfs directory [ 1467.280321][T18548] blktrace: Concurrent blktraces are not allowed on sg0 [ 1467.626480][T14634] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1467.872185][T14634] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.872210][T14634] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1467.872244][T14634] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1467.872264][T14634] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.890294][T14634] usb 9-1: config 0 descriptor?? [ 1469.377019][ T806] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1469.526383][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 1469.528666][ T806] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1469.528692][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.566736][ T806] usb 4-1: config 0 descriptor?? [ 1470.627345][ T806] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1470.694528][ T806] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1470.694554][ T806] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1473.615483][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3695'. [ 1474.514586][T15153] usb 9-1: USB disconnect, device number 10 [ 1475.865724][ T6451] bridge_slave_1: left allmulticast mode [ 1475.865789][ T6451] bridge_slave_1: left promiscuous mode [ 1475.867174][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.592174][ T6451] bridge_slave_0: left allmulticast mode [ 1476.592210][ T6451] bridge_slave_0: left promiscuous mode [ 1476.592454][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.307347][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3702'. [ 1480.717161][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.818402][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.877254][ T6451] bond0 (unregistering): Released all slaves [ 1482.652702][T18651] syz.9.3711 (18651): drop_caches: 2 [ 1482.907048][ T6451] hsr_slave_0: left promiscuous mode [ 1482.946446][ T6451] hsr_slave_1: left promiscuous mode [ 1482.947087][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.987567][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.994352][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1483.526883][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3712'. [ 1484.598965][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.738735][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 1488.896928][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 1491.068632][T18697] syz.9.3722 (18697): drop_caches: 2 [ 1495.066555][T18703] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1497.944309][ T5796] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1498.666854][ T5796] usb 9-1: Using ep0 maxpacket: 16 [ 1498.848932][ T5796] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1498.848961][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.848978][ T5796] usb 9-1: Product: syz [ 1498.848992][ T5796] usb 9-1: Manufacturer: syz [ 1498.849095][ T5796] usb 9-1: SerialNumber: syz [ 1498.854348][ T5796] usb 9-1: config 0 descriptor?? [ 1498.942346][ T5796] as10x_usb: device has been detected [ 1498.943397][ T5796] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1499.004923][ T5796] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1500.288233][T18729] syz.9.3732 (18729): drop_caches: 2 [ 1500.366604][ T5796] as10x_usb: error during firmware upload part1 [ 1500.367283][ T5796] Registered device Sky IT Digital Key (green led) [ 1500.439530][ T5796] usb 9-1: USB disconnect, device number 11 [ 1501.371899][ T5796] Unregistered device Sky IT Digital Key (green led) [ 1501.383619][ T5796] as10x_usb: device has been disconnected [ 1502.284323][T14663] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1502.561542][T14663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.561558][T14663] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1502.562411][T14663] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1502.562426][T14663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1502.562435][T14663] usb 1-1: SerialNumber: syz [ 1502.734391][T18460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1502.774530][T14663] usb 1-1: cannot find UAC_HEADER [ 1503.630458][T14663] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1503.950240][T14663] usb 1-1: USB disconnect, device number 61 [ 1504.000507][T18460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1504.078080][T18460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1504.099346][T18277] udevd[18277]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1504.166463][T14633] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1504.187097][T18460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1504.319485][T14633] usb 9-1: Using ep0 maxpacket: 32 [ 1504.327313][T14633] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1504.330779][T14633] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 1504.330801][T14633] usb 9-1: config 0 has no interface number 0 [ 1504.330831][T14633] usb 9-1: config 0 interface 251 has no altsetting 0 [ 1504.364577][T14633] usb 9-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 1504.364595][T14633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.364605][T14633] usb 9-1: Product: syz [ 1504.364612][T14633] usb 9-1: Manufacturer: syz [ 1504.364619][T14633] usb 9-1: SerialNumber: syz [ 1504.370401][T14633] usb 9-1: config 0 descriptor?? [ 1505.934557][T14633] usb 9-1: USB disconnect, device number 12 [ 1506.212989][T18460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.303344][T18460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.346803][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.347006][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.409078][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.409210][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.064868][T18807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1509.078497][T18806] syz.8.3748 (18806): drop_caches: 2 [ 1512.459723][T18322] udevd[18322]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1512.492261][T18322] udevd[18322]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1512.520631][T18460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.512297][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1515.524035][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1515.539992][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1515.541541][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1515.545542][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1518.251453][ T5798] Bluetooth: hci2: command tx timeout [ 1520.322131][T18462] Bluetooth: hci2: command tx timeout [ 1522.841455][T18462] Bluetooth: hci2: command tx timeout [ 1525.323034][T18462] Bluetooth: hci2: command tx timeout [ 1525.812642][T18849] chnl_net:caif_netlink_parms(): no params data found [ 1527.911700][T18849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.911825][T18849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.912047][T18849] bridge_slave_0: entered allmulticast mode [ 1527.937959][T18849] bridge_slave_0: entered promiscuous mode [ 1527.945808][T18849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.945930][T18849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.946125][T18849] bridge_slave_1: entered allmulticast mode [ 1527.976202][T18849] bridge_slave_1: entered promiscuous mode [ 1528.389831][T18849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.685794][T18930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1528.750146][T18849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.457771][T18849] team0: Port device team_slave_0 added [ 1530.457936][ T7217] bridge_slave_1: left allmulticast mode [ 1530.457948][ T7217] bridge_slave_1: left promiscuous mode [ 1530.458084][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.551186][ T7217] bridge_slave_0: left allmulticast mode [ 1530.551213][ T7217] bridge_slave_0: left promiscuous mode [ 1530.551478][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.649750][T18940] syz.9.3777 (18940): drop_caches: 2 [ 1531.282451][T18277] udevd[18277]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1533.348364][T18949] [U] ø [ 1533.410020][T18960] fuse: Unknown parameter 'use00000000000000000000' [ 1533.418785][T18961] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3774'. [ 1535.834964][ T806] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1535.835043][ T806] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1535.890803][ T806] usb 4-1: USB disconnect, device number 11 [ 1536.753622][T18972] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3786'. [ 1538.050965][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.175515][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.210310][ T7217] bond0 (unregistering): Released all slaves [ 1538.259648][T18849] team0: Port device team_slave_1 added [ 1540.374382][T18994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1540.621728][ T7217] hsr_slave_0: left promiscuous mode [ 1540.656500][ T7217] hsr_slave_1: left promiscuous mode [ 1540.657598][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.681192][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.736368][ T5796] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1540.866519][ T5796] usb 4-1: device descriptor read/64, error -71 [ 1541.109524][ T5796] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1541.246427][ T5796] usb 4-1: device descriptor read/64, error -71 [ 1541.356683][ T5796] usb usb4-port1: attempt power cycle [ 1541.457252][T19007] syz.8.3795 (19007): drop_caches: 2 [ 1541.696423][ T5796] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1541.718070][ T5796] usb 4-1: device descriptor read/8, error -71 [ 1542.036487][ T5796] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1542.057313][ T5796] usb 4-1: device descriptor read/8, error -71 [ 1542.396471][ T5796] usb usb4-port1: unable to enumerate USB device [ 1543.420373][T19021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3802'. [ 1544.059777][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 1544.410491][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 1546.045392][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.797815][T18849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.797832][T18849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.797855][T18849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.875649][T18849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.875665][T18849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.875688][T18849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.519337][T19053] ptrace attach of "./syz-executor exec"[12360] was attempted by "./syz-executor exec"[19053] [ 1547.524227][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3813'. [ 1547.936861][T14773] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1548.210742][T18849] hsr_slave_0: entered promiscuous mode [ 1548.238512][T18849] hsr_slave_1: entered promiscuous mode [ 1548.239467][T18849] debugfs: 'hsr0' already exists in 'hsr' [ 1548.239497][T18849] Cannot create hsr debugfs directory [ 1548.349046][T14773] usb 9-1: device descriptor read/64, error -71 [ 1548.626269][T19062] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3815'. [ 1548.956411][T14773] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1549.105492][T14773] usb 9-1: device descriptor read/64, error -71 [ 1549.246669][T14773] usb usb9-port1: attempt power cycle [ 1549.636592][T14773] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1549.660887][T14773] usb 9-1: device descriptor read/8, error -71 [ 1549.966724][T14773] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1550.051521][T14663] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1550.088512][T14773] usb 9-1: device descriptor read/8, error -71 [ 1551.105972][T14773] usb usb9-port1: unable to enumerate USB device [ 1552.188343][T14663] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.188368][T14663] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1552.188389][T14663] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1552.188400][T14663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.224937][T14663] usb 4-1: config 0 descriptor?? [ 1554.284397][T19117] syz.8.3831 (19117): drop_caches: 2 [ 1556.524446][T18849] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1556.598454][T18849] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1556.603886][T14663] usb 4-1: USB disconnect, device number 16 [ 1556.706381][T18849] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1556.765583][T19115] ptrace attach of "./syz-executor exec"[12360] was attempted by "./syz-executor exec"[19115] [ 1556.809612][T18849] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1557.271244][T18849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.308065][T18849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.445932][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.458413][ T7217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.755909][T18849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1557.755934][T18849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1557.943956][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.944121][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1560.093525][T18849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.142325][T19175] fuse: Unknown parameter 'us00000000000000000000' [ 1564.664573][T18849] veth0_vlan: entered promiscuous mode [ 1564.705337][T18849] veth1_vlan: entered promiscuous mode [ 1564.829902][T18849] veth0_macvtap: entered promiscuous mode [ 1566.583516][T18849] veth1_macvtap: entered promiscuous mode [ 1566.665460][T18849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.847069][T18849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.878494][T14786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.878732][T14786] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.878782][T14786] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.878813][T14786] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.995550][T19239] netlink: 'syz.0.3854': attribute type 10 has an invalid length. [ 1569.966212][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.990405][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.132476][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.132496][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.809151][T19289] fuse: Unknown parameter 'use00000000000000000000' [ 1581.917545][T19336] fuse: Unknown parameter 'use00000000000000000000' [ 1586.678212][ T9331] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1588.346464][ T9331] usb 10-1: Using ep0 maxpacket: 16 [ 1588.481917][ T9331] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.481936][ T9331] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1588.481959][ T9331] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1588.481970][ T9331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.551085][ T9331] usb 10-1: config 0 descriptor?? [ 1589.288008][ T9331] usbhid 10-1:0.0: can't add hid device: -71 [ 1589.288125][ T9331] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1589.465027][ T9331] usb 10-1: USB disconnect, device number 16 [ 1592.139101][T19411] fuse: Unknown parameter 'use00000000000000000000' [ 1593.499287][T19425] ptrace attach of "./syz-executor exec"[15216] was attempted by "./syz-executor exec"[19425] [ 1593.505818][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 1593.528517][T19425] loop7: detected capacity change from 0 to 16384 [ 1598.685492][T19441] ptrace attach of "./syz-executor exec"[18849] was attempted by "./syz-executor exec"[19441] [ 1601.056396][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1601.323890][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1601.327875][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.327903][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.332317][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1601.332340][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1601.332359][ T9] usb 4-1: Product: syz [ 1601.332372][ T9] usb 4-1: Manufacturer: syz [ 1602.209744][ T9] hub 4-1:4.0: USB hub found [ 1603.229976][ T9] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1603.273639][ T9] usb 4-1: USB disconnect, device number 17 [ 1607.042402][T19508] ptrace attach of "./syz-executor exec"[15216] was attempted by "./syz-executor exec"[19508] [ 1608.268973][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.625392][T19550] ptrace attach of "./syz-executor exec"[15216] was attempted by "./syz-executor exec"[19550] [ 1617.556388][T14634] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1617.721107][T14634] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1617.721126][T14634] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.721135][T14634] usb 9-1: Product: syz [ 1617.721142][T14634] usb 9-1: Manufacturer: syz [ 1617.721149][T14634] usb 9-1: SerialNumber: syz [ 1617.736364][ T9331] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1617.780925][T14634] usb 9-1: config 0 descriptor?? [ 1617.830353][T14634] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1617.886390][ T9331] usb 4-1: Using ep0 maxpacket: 32 [ 1617.887892][ T9331] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.887909][ T9331] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.889637][ T9331] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1617.889652][ T9331] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1617.889670][ T9331] usb 4-1: Product: syz [ 1617.889677][ T9331] usb 4-1: Manufacturer: syz [ 1618.296435][T14634] usb 9-1: USB disconnect, device number 17 [ 1618.306639][ T9331] hub 4-1:4.0: USB hub found [ 1618.310239][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1618.315438][ T9331] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1618.517607][ T9331] usb 4-1: USB disconnect, device number 18 [ 1621.566522][ T806] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1621.675789][T19607] ptrace attach of "./syz-executor exec"[18849] was attempted by "./syz-executor exec"[19607] [ 1621.776328][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 1622.126152][ T806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1622.127296][ T806] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1622.127331][ T806] usb 4-1: can't read configurations, error -71 [ 1622.139912][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1622.150071][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1622.156416][ T9331] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1622.177479][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1622.208944][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1622.283053][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1622.366472][ T9331] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.366498][ T9331] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1622.366533][ T9331] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1622.366554][ T9331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.430635][ T9331] usb 9-1: config 0 descriptor?? [ 1623.452700][T19644] fuse: Unknown parameter 'use00000000000000000000' [ 1624.006330][ T806] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1624.158484][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 1624.186056][ T806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1624.196169][ T806] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1624.196192][ T806] usb 4-1: config 0 has no interface number 0 [ 1624.212207][ T806] usb 4-1: config 0 interface 251 has no altsetting 0 [ 1624.898661][T18462] Bluetooth: hci4: command tx timeout [ 1625.000863][ T806] usb 4-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 1625.000891][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.000909][ T806] usb 4-1: Product: syz [ 1625.000921][ T806] usb 4-1: Manufacturer: syz [ 1625.000933][ T806] usb 4-1: SerialNumber: syz [ 1625.083096][ T806] usb 4-1: config 0 descriptor?? [ 1625.375561][ T806] usb 4-1: USB disconnect, device number 21 [ 1625.589154][T19630] chnl_net:caif_netlink_parms(): no params data found [ 1625.818829][T19630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.818934][T19630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.819222][T19630] bridge_slave_0: entered allmulticast mode [ 1625.820622][T19630] bridge_slave_0: entered promiscuous mode [ 1625.822704][T19630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.822818][T19630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.822930][T19630] bridge_slave_1: entered allmulticast mode [ 1625.824406][T19630] bridge_slave_1: entered promiscuous mode [ 1626.075709][ T5796] usb 9-1: USB disconnect, device number 18 [ 1626.085675][T19630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.108087][T19630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.354365][T19630] team0: Port device team_slave_0 added [ 1626.370030][T19630] team0: Port device team_slave_1 added [ 1626.476935][T19630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.476946][T19630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.476960][T19630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.486625][T19630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.486640][T19630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.486664][T19630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.633955][T19675] ptrace attach of "./syz-executor exec"[15216] was attempted by "./syz-executor exec"[19675] [ 1626.874930][T19630] hsr_slave_0: entered promiscuous mode [ 1626.880198][T19630] hsr_slave_1: entered promiscuous mode [ 1626.895168][T19630] debugfs: 'hsr0' already exists in 'hsr' [ 1626.895186][T19630] Cannot create hsr debugfs directory [ 1626.907060][T18462] Bluetooth: hci4: command tx timeout [ 1627.709693][T19686] fuse: Unknown parameter 'use00000000000000000000' [ 1628.987396][T18462] Bluetooth: hci4: command tx timeout [ 1630.308559][ T5974] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1630.476670][ T5974] usb 9-1: Using ep0 maxpacket: 32 [ 1630.485276][ T5974] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1630.503653][ T5974] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 1630.503677][ T5974] usb 9-1: config 0 has no interface number 0 [ 1630.503707][ T5974] usb 9-1: config 0 interface 251 has no altsetting 0 [ 1630.535817][ T5974] usb 9-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 1630.535833][ T5974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.535853][ T5974] usb 9-1: Product: syz [ 1630.535861][ T5974] usb 9-1: Manufacturer: syz [ 1630.535868][ T5974] usb 9-1: SerialNumber: syz [ 1630.579028][ T5974] usb 9-1: config 0 descriptor?? [ 1630.919660][ T5974] usb 9-1: USB disconnect, device number 19 [ 1631.066959][T18462] Bluetooth: hci4: command tx timeout [ 1632.876301][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1633.087846][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1633.096096][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1633.126877][ T9] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 1633.126903][ T9] usb 8-1: config 0 has no interface number 0 [ 1633.126940][ T9] usb 8-1: config 0 interface 251 has no altsetting 0 [ 1633.135586][ T9] usb 8-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 1633.135613][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.135631][ T9] usb 8-1: Product: syz [ 1633.135644][ T9] usb 8-1: Manufacturer: syz [ 1633.135656][ T9] usb 8-1: SerialNumber: syz [ 1633.222633][ T9] usb 8-1: config 0 descriptor?? [ 1633.515187][ T9] usb 8-1: USB disconnect, device number 5 [ 1634.455739][T19630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1634.658312][T19630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1634.711792][T19630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1634.796288][T19630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1634.860008][T19765] fuse: Unknown parameter 'use00000000000000000000' [ 1640.060661][ T9] ------------[ cut here ]------------ [ 1640.060675][ T9] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1640.060696][ T9] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#0: kworker/0:0/9 [ 1640.060738][ T9] Modules linked in: [ 1640.060767][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1640.060786][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1640.060797][ T9] Workqueue: events drm_fb_helper_damage_work [ 1640.060829][ T9] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1640.060853][ T9] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1640.060868][ T9] RSP: 0018:ffffc900000e78e0 EFLAGS: 00010246 [ 1640.060883][ T9] RAX: 1ffff11004806400 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 1640.060896][ T9] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 1640.060908][ T9] RBP: ffffc900000e79c8 R08: 0000000000000000 R09: 0000000000000000 [ 1640.060919][ T9] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 1640.060932][ T9] R13: ffff888024032000 R14: 1ffff9200001cf20 R15: ffffffff8b9eef60 [ 1640.060945][ T9] FS: 0000000000000000(0000) GS:ffff88812659c000(0000) knlGS:0000000000000000 [ 1640.060959][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1640.060972][ T9] CR2: 0000200000404030 CR3: 0000000036086000 CR4: 00000000003526f0 [ 1640.060987][ T9] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1640.061000][ T9] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1640.061012][ T9] Call Trace: [ 1640.061024][ T9] [ 1640.061037][ T9] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1640.061060][ T9] ? rt_spin_unlock+0x14f/0x200 [ 1640.061079][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1640.061100][ T9] ? rt_spin_unlock+0x160/0x200 [ 1640.061118][ T9] ? drm_vblank_get+0x147/0x260 [ 1640.061138][ T9] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1640.061161][ T9] drm_fb_helper_damage_work+0x131/0x6f0 [ 1640.061187][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 1640.061209][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1640.061233][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 1640.061248][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 1640.061265][ T9] process_scheduled_works+0xaec/0x17a0 [ 1640.061311][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1640.061328][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 1640.061351][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1640.061378][ T9] worker_thread+0xda6/0x1360 [ 1640.061424][ T9] kthread+0x388/0x470 [ 1640.061446][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1640.061470][ T9] ? __pfx_kthread+0x10/0x10 [ 1640.061492][ T9] ret_from_fork+0x51e/0xb90 [ 1640.061516][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1640.061532][ T9] ? __switch_to+0xc82/0x1410 [ 1640.061555][ T9] ? __pfx_kthread+0x10/0x10 [ 1640.061579][ T9] ret_from_fork_asm+0x1a/0x30 [ 1640.061617][ T9] [ 1640.061633][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1640.061646][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1640.061665][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1640.061676][ T9] Workqueue: events drm_fb_helper_damage_work [ 1640.061698][ T9] Call Trace: [ 1640.061704][ T9] [ 1640.061711][ T9] vpanic+0x1e0/0x670 [ 1640.061732][ T9] panic+0xc5/0xd0 [ 1640.061749][ T9] ? __pfx_panic+0x10/0x10 [ 1640.061775][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 1640.061803][ T9] __warn+0x315/0x4a0 [ 1640.061822][ T9] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1640.061847][ T9] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1640.061871][ T9] __report_bug+0x29a/0x540 [ 1640.061901][ T9] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1640.061924][ T9] ? __pfx___report_bug+0x10/0x10 [ 1640.061969][ T9] report_bug_entry+0x19a/0x290 [ 1640.061992][ T9] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 1640.062013][ T9] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 1640.062033][ T9] handle_bug+0xca/0x200 [ 1640.062052][ T9] exc_invalid_op+0x1a/0x50 [ 1640.062070][ T9] asm_exc_invalid_op+0x1a/0x20 [ 1640.062086][ T9] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1640.062107][ T9] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1640.062122][ T9] RSP: 0018:ffffc900000e78e0 EFLAGS: 00010246 [ 1640.062136][ T9] RAX: 1ffff11004806400 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 1640.062149][ T9] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 1640.062160][ T9] RBP: ffffc900000e79c8 R08: 0000000000000000 R09: 0000000000000000 [ 1640.062171][ T9] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 1640.062182][ T9] R13: ffff888024032000 R14: 1ffff9200001cf20 R15: ffffffff8b9eef60 [ 1640.062217][ T9] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1640.062238][ T9] ? rt_spin_unlock+0x14f/0x200 [ 1640.062258][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1640.062282][ T9] ? rt_spin_unlock+0x160/0x200 [ 1640.062305][ T9] ? drm_vblank_get+0x147/0x260 [ 1640.062329][ T9] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1640.062353][ T9] drm_fb_helper_damage_work+0x131/0x6f0 [ 1640.062378][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 1640.062402][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1640.062429][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 1640.062445][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 1640.062475][ T9] process_scheduled_works+0xaec/0x17a0 [ 1640.062520][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1640.062536][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 1640.062558][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1640.062585][ T9] worker_thread+0xda6/0x1360 [ 1640.062627][ T9] kthread+0x388/0x470 [ 1640.062648][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1640.062665][ T9] ? __pfx_kthread+0x10/0x10 [ 1640.062686][ T9] ret_from_fork+0x51e/0xb90 [ 1640.062709][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1640.062727][ T9] ? __switch_to+0xc82/0x1410 [ 1640.062750][ T9] ? __pfx_kthread+0x10/0x10 [ 1640.062770][ T9] ret_from_fork_asm+0x1a/0x30 [ 1640.062808][ T9] [ 1640.063263][ T9] Kernel Offset: disabled