last executing test programs: 20m58.288064695s ago: executing program 2 (id=8): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x7e78, &(0x7f0000000300)={0x0, 0xf20f, 0x1, 0x2, 0x1b, 0x0, r0}, &(0x7f0000000540), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={0x0}) socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x70}}, 0x0) unshare(0x26020480) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) 20m54.182450081s ago: executing program 2 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r2, 0x9, &(0x7f0000000080)={0x31, 0x1, 0x551cc410}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$rds(0x15, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 20m51.811759588s ago: executing program 2 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="000000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$unix(0x1, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000080)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x8000000c}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={0x0, 0x1, "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", "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"}, [0x0, 0x3, 0x3, 0x2, 0x2, 0xb859, 0x8, 0x5, 0x4, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x6, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x3, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f39, 0xfffffffffffffc00, 0x6, 0x7, 0x3, 0x7, 0x4, 0x3, 0x5, 0x6, 0x7, 0xe93, 0x100000000, 0xffffffffffffff9b]}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000740)={0x0, "81dcd6030d800b0499d2aebbaee94030"}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 20m48.628318379s ago: executing program 2 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000001c00)=r6, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xe, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x9, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfffe, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 20m44.120414465s ago: executing program 2 (id=26): unshare(0x40200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$pid(0x3, 0x0, 0x0) 20m42.453955163s ago: executing program 2 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, &(0x7f0000000600)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 20m26.644145267s ago: executing program 32 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, &(0x7f0000000600)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 19m38.080406203s ago: executing program 1 (id=133): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@name, &(0x7f0000000280)=0x10, 0x80800) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000002c0)=0x8, 0x4) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) open(0x0, 0x143142, 0x80) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) 19m35.968657704s ago: executing program 1 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffda4, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x579e, &(0x7f0000000000)={0x0, 0xb90f, 0x400, 0x1, 0x1d6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2019}}}, 0x7) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000040f8d2e0ff86f6ac620cf5221bba2e9459c942a3cf425759bb5db952c7c7a7c35785fe504b38b702b6530b37a4095e7270eb878eb2ce91d39963fbf468cbf4fb12d65c124406c35099bfed4c4313f3170ca7b8eb1832caccbe59999a5604945d25f91f5b013ea5d4c09597b31297021fc082a1483742ff9fc7ab418d740cb19c5df5ae9c6819653d396f29bf2f75d0cc0e2b11edc613aa34c965b7fc2bf93c4be446ec7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x3}, 0x94) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x44011}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe8) msgget$private(0x0, 0x8) 19m32.790564362s ago: executing program 1 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6, 0x1000, 0x81, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x4, 0xd, 0x7fff, 0x8}, 0x56, [0xf, 0x5, 0xd881, 0x2, 0x0, 0x60, 0xa18, 0x4, 0x112, 0x8, 0x10000, 0x9, 0xfffffffb, 0x53, 0x8, 0x4, 0x2, 0x6, 0x0, 0x9d6e, 0xffff0001, 0xffff, 0x7, 0x4, 0xddf, 0x1, 0x7, 0x1ff, 0x7, 0x0, 0x9, 0x6, 0x7, 0x8, 0x4, 0x6, 0x4, 0x5, 0xfffffff3, 0x8, 0x7, 0x7, 0xfffffff5, 0xe3, 0xc, 0xa5f, 0x4e40, 0x2, 0x3, 0x6, 0x3, 0x10, 0x5, 0xe, 0x6, 0x1, 0x9, 0x679, 0x0, 0x6c2fa8e6, 0x8, 0x5, 0x0, 0x7], [0x1, 0xe81f, 0x9, 0x1, 0x5, 0x270, 0x9, 0x1000, 0x101, 0x5, 0x5, 0x0, 0x4, 0x8, 0x2, 0x5200, 0x7fff, 0xfffffff8, 0xfa, 0x3, 0x5, 0x9, 0x5, 0x5, 0x4, 0x7ff, 0x0, 0xffffffff, 0xa, 0x1, 0x0, 0x8, 0xae77, 0x7, 0x6, 0x9, 0x6c, 0x4, 0xff2, 0x10, 0x3ff, 0x10000, 0x7fff, 0x2, 0x7a83ba40, 0x400, 0x73f1, 0x3, 0x6, 0xa77c, 0x4, 0x82d8, 0x9, 0xff, 0x4, 0x2, 0x7, 0xd6e3, 0x0, 0x4, 0x5288, 0x80000001, 0xfff, 0xfffffffe], [0x9198, 0x7, 0x6, 0x5, 0x7, 0x3, 0xffff, 0x9, 0x100, 0x5, 0x3, 0x5, 0x5, 0x783, 0x3, 0xffffff00, 0xffff7fff, 0x9, 0x7fff, 0x8e4a, 0x5, 0x281, 0x0, 0x8, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x20, 0x8, 0xb7, 0x5, 0x888a, 0x7, 0x8, 0x41, 0x2, 0xe267, 0x0, 0xefab, 0x6, 0x9, 0x3, 0x9a77, 0x101, 0xb60, 0x8, 0x24, 0x1e7, 0x5f0, 0xb40, 0x3ff, 0x4, 0x2, 0xffffffff, 0xc03, 0x0, 0x8, 0x2, 0x5, 0x8001, 0x80000000, 0x9], [0x1000000, 0xc, 0x29e, 0x8, 0x4, 0x4c8, 0x0, 0xabde, 0x61, 0x8, 0x0, 0xffffff7f, 0x0, 0xb233, 0x80000000, 0x8, 0x4, 0xc2c4, 0x80000001, 0x2, 0x9e6, 0x8, 0x8001, 0x3ff, 0x9, 0x80000001, 0x8, 0x9, 0xc, 0x5f1, 0x6, 0x5, 0xffffffff, 0xffffff7f, 0x4, 0x1, 0x80000000, 0xc, 0x200, 0x81, 0x3, 0x7, 0x9, 0xd, 0xb, 0x101, 0x2, 0x904, 0x48c, 0xfffffffa, 0x4, 0x9, 0x7, 0x73ba865f, 0xff, 0xa, 0x5, 0x1, 0x6, 0x2, 0x7, 0x9d, 0xfd, 0x3]}, 0x45c) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c001280080001007369740050000280080002000a01010108000100", @ANYRES32=r4, @ANYBLOB="08008100", @ANYRES32=r4, @ANYBLOB="06000d00020000000500090000000000060008000900000014000b00fe880000000000000000000000000001050005004c00000008000a00", @ANYRES32=r4, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7dff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000020811204000000000095000000000000000852d36fd7456c7fb21b511b1cc3a538c9c46968bb9b3eaf1dec1399c16e"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m27.493715563s ago: executing program 1 (id=143): unshare(0x40200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 19m26.070949346s ago: executing program 1 (id=145): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0x200003c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0x5}}}, 0x24}}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 19m24.821840156s ago: executing program 1 (id=148): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0xc04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000b80)={0x0, 0x3, 0x5, &(0x7f0000000000)={0x1d, "bfffabae9ebef352f700f0231504fc48dbf72a9cba7b41c804c93c66b6318e83c2"}}) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040f0440011104"], 0x7) 19m8.875438224s ago: executing program 33 (id=148): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0xc04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000b80)={0x0, 0x3, 0x5, &(0x7f0000000000)={0x1d, "bfffabae9ebef352f700f0231504fc48dbf72a9cba7b41c804c93c66b6318e83c2"}}) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040f0440011104"], 0x7) 3m52.261456675s ago: executing program 0 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000001c00)=r6, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xe, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x9, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfffe, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m48.959577242s ago: executing program 0 (id=1592): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x10255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc134, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40587e, 0x8200, 0x2, 0x368}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) 3m47.333301989s ago: executing program 0 (id=1593): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bind$inet6(r2, 0x0, 0x0) 3m44.513599912s ago: executing program 0 (id=1597): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x2a, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") chdir(0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x41) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) umount2(&(0x7f0000000240)='./file0\x00', 0x2) 3m37.531796972s ago: executing program 0 (id=1604): io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) 3m35.113520283s ago: executing program 0 (id=1609): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x1, 0x3d, &(0x7f0000000680)={{0x12, 0x1, 0xac877cbec12e8ed0, 0x5d, 0xb9, 0xa3, 0x8, 0xc2e, 0x720, 0xd429, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x4, 0x40, 0x3, "", [{{0x9, 0x4, 0x6d, 0x0, 0x2, 0x78, 0x54, 0x99, 0x1, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x5, 0x9, [@generic={0x7, 0x5, "8e33974a95"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0xc, 0x1}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) write$bt_hci(r3, &(0x7f0000000300)=ANY=[], 0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) readv(r0, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}], 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3m34.909808795s ago: executing program 34 (id=1609): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x1, 0x3d, &(0x7f0000000680)={{0x12, 0x1, 0xac877cbec12e8ed0, 0x5d, 0xb9, 0xa3, 0x8, 0xc2e, 0x720, 0xd429, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x4, 0x40, 0x3, "", [{{0x9, 0x4, 0x6d, 0x0, 0x2, 0x78, 0x54, 0x99, 0x1, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x5, 0x9, [@generic={0x7, 0x5, "8e33974a95"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0xc, 0x1}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) write$bt_hci(r3, &(0x7f0000000300)=ANY=[], 0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) readv(r0, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}], 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5.002930189s ago: executing program 7 (id=2487): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}}], 0x1, 0x2404c845) 4.368767488s ago: executing program 7 (id=2492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000300)={0x2, 0x1, @stop_pts=0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x94, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcf78}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008004}, 0x884) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r4, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) close_range(r4, r5, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000000000)={r11, 0x0, 0x1, 0x0, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3.626640193s ago: executing program 4 (id=2498): close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r2, 0x1ff, 0x0, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, 0x0, 0x0, r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)=r5) 3.573530511s ago: executing program 3 (id=2499): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.421302545s ago: executing program 4 (id=2500): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x40) bind(r1, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 3.16502967s ago: executing program 4 (id=2501): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX=r1], 0x2b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000303010100000000000000bc000000000c00020000000003000000ff"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000007c0)="c5941e9c793e87761194483bc9bdaa6cd718b78ecd11b4825773321864175dce4e7f6bea794019496ea63114c9217676dbcb7e9ce51aa4641c3f033e296218fb9b311e596449002ff94907d3a0b1832a95a87f43e881e8b37ce984d8a1c3d00ad380162437980215cbb39e7c5f76b484acef85a690d0f18895e308b49f03fccff1d06485ec15c18bdb5ca7635c2990273f6156c431d726ee2e824a0d850fa74dc358f9bf2536d961441a20cfe6d0dcaf9c204bb4ca6648cc6d58e07ede436f3f2fef2fa0602c3b88", 0xc8}, {&(0x7f00000008c0)="cf560462cc784669d3d7f4f94b2182289824d16899044cf4364586b2dca27f83a9460644bb43b6395a7b48e3491919d22dc34c666cc849a60eb2d0c51f05178a13a8aef02a9d33f095144cddc109dc4bc98a3efa1e3c1c5beced916761d9052ac4dc0cd445cb7164290f57fdf599a30f5f27595d4fee75738826864247fd3a62077a864f", 0x84}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="aa8d62578b0615c8eb8280afed73151b473f784f866f83d81a34551f50be16a7e152d8bded2dabe1c4b6828e2bb477f8a078c394c3ab2e0404c56948219559991ef84ad2c551cfcb6d9198bec7f66c85e99535cf038e12eb29c3ba870e8649e6", 0x60}], 0x4}, 0x40000) r6 = fsmount(r0, 0x1, 0x87) syz_emit_ethernet(0x66, &(0x7f0000001b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd708003006000000000038000000000000000000000000fe80000000000000000000aa0000400100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0c3000090780000fe"], 0x0) r7 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24}}, @ldst={0x1, 0x1, 0x2, 0x7, 0xa, 0x20, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x15}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4c5b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xe, 0x7, 0x5efd12e8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r0, r0, r0, r1, r6, r0], &(0x7f00000005c0)=[{0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0x5, 0x9}], 0x10, 0xa}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r8, r0}, 0xc) 3.048893229s ago: executing program 5 (id=2502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0xe0000004}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc04, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000040003"], 0x30}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x0) 3.024037196s ago: executing program 3 (id=2503): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b130000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 2.668026544s ago: executing program 5 (id=2506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$kcm(0x11, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.641285049s ago: executing program 3 (id=2507): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, 0x0, 0x0, 0x811) 2.529477455s ago: executing program 3 (id=2509): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x26) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) 2.498478577s ago: executing program 3 (id=2510): r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8) r4 = eventfd2(0xb, 0x80800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x7d9, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) socket(0x1e, 0x805, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fff) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) sendto$inet(r8, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000740)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f0640"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{}, "fe62cea3b52ebaa9", "c9a3315839c227100427fbb86ae6a41547451cdf05a400", "5d3e853f", "33fa4a8f2198c12e"}, 0x38) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40803}, 0x0) 2.355722622s ago: executing program 6 (id=2511): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x40) bind(r1, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 2.24562746s ago: executing program 6 (id=2512): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 2.142401767s ago: executing program 4 (id=2513): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.118673386s ago: executing program 7 (id=2514): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x18, 0x29, 0x37, {0x89}}}], 0x18}}], 0x1, 0x400c0c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x3, 0x7, 0x1}) close(r2) socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$VT_DISALLOCATE(r4, 0x5608) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.854177303s ago: executing program 4 (id=2515): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfffc) 1.645083494s ago: executing program 5 (id=2516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0xe0000004}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc04, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000040003"], 0x30}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x0) 1.487231663s ago: executing program 6 (id=2517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4", 0x66}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/181, 0xb5}], 0x1}, 0x140) 1.417339589s ago: executing program 6 (id=2518): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 1.366673112s ago: executing program 7 (id=2519): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, 0x0, 0x0, 0x811) 1.246266871s ago: executing program 6 (id=2520): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x26) 1.233935959s ago: executing program 7 (id=2521): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x40) bind(r1, 0x0, 0x0) 1.189777726s ago: executing program 5 (id=2522): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x40) bind(r1, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 1.113480875s ago: executing program 5 (id=2523): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX=r1], 0x2b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000303010100000000000000bc000000000c00020000000003000000ff"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$kcm(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000007c0)="c5941e9c793e87761194483bc9bdaa6cd718b78ecd11b4825773321864175dce4e7f6bea794019496ea63114c9217676dbcb7e9ce51aa4641c3f033e296218fb9b311e596449002ff94907d3a0b1832a95a87f43e881e8b37ce984d8a1c3d00ad380162437980215cbb39e7c5f76b484acef85a690d0f18895e308b49f03fccff1d06485ec15c18bdb5ca7635c2990273f6156c431d726ee2e824a0d850fa74dc358f9bf2536d961441a20cfe6d0dcaf9c204bb4ca6648cc6d58e07ede436f3f2fef2fa0602c3b88", 0xc8}, {&(0x7f00000008c0)="cf560462cc784669d3d7f4f94b2182289824d16899044cf4364586b2dca27f83a9460644bb43b6395a7b48e3491919d22dc34c666cc849a60eb2d0c51f05178a13a8aef02a9d33f095144cddc109dc4bc98a3efa1e3c1c5beced916761d9052ac4dc0cd445cb7164290f57fdf599a30f5f27595d4fee75738826864247fd3a62077a864f", 0x84}, {&(0x7f0000000980)="0700cee4b7c163697e922e9bbf2a10d73544f4477769e60ba2509b5d7528eafb8fd4ff1b8e6b63343f0dafca5f5c2f4b176f2ee6c38ff87f2502eee1156fa6a1e56cc80c6ac33567ed79e3f3d7d79d41f9bd084de1a73b1c7808b1820044e0b5c095419a9b466f0fa95651cf515dee23c59ab7c557b8b50b33d0a57bc0b86fa24bb7be2ab5ce4763e865cf4571cdce9eb6a86090b2f8a076b3413e3d85907d068b6a9057ac064bfd28d04a98f13685df356a68fc6ed2675b014004e38c216b082a1fb765a8f953126147822f69e0ac8f8359a5f02c32d0536a602f408c6edcb4fd225d45f663dcc66abea9f7b438505e6bada21b4600e508d91ffd13cce3a6d2e87c1cbbfc4e66f806e7277e4e1434d8ae803f555bc956aca44750d9089642c7660256a8c9cedd19240767f82cc3a755e509151864fd119548092e25403a27aee7fd89d24ae0cffbbe4e6507dcb0a0c5fb4ab6c83b640c3c3a8e2a671e6d801d85e23ff0015d91bff51acb828cd4c4f7d9f82d43af66fa0d8b09cc0553fe4c73ca556aa84ded9bbec0d2d4a14bb188d32838cd7fb5902befc7458f606db02e2463e87f877fe07bea843850e68b48e976c6b1a06ab9f1206ccc0ea126478e57d19300d0b1c8db2b47dadf837422bc109ba88a4cf2edd223d8e1b84be4fbe22716635b4d9e3c4eb4f9eb8f3297da90bad0ea42a9102298e25f6fb1c4eeb3f8ee8ab9e7f685655f1ab7359c6c6480942c4ce19a4ce2da0265f10baf9618a9ec48246ec3cc1d1765a5a2762f864af745b39eb45494be0aa3d307de01143c3ef7350c7ff461130efda021f470628c742fb09b370e84cc1a481a320338d5b4a696c2a8c6c92f6e8a9ecd8acf6929ea912e45b5627929b65ae8683310907841aa77d054cbd913bcae139a3a1b3ad32b61824964e2f83c2e37456dc0c1aeb4e910f2526e40f0443743eaf81968ab3967380af227e26c36602ebafdf3f336ba512a6bfda90c074b3bb12900cac21ddef38435b21c6b4bc528697de65e177f5b442d925f5c5367b401c135360c3db1fdbcb1ca81debec4eb0097dcc5683a2accb8285797463a7b9a56176d950b30ba4ab62438d724f421e36457ccbb1cf73a80f885ec9d576c9800f4db2d14c7388ede00f8567ccb7d14b4f94fe7b80f03a57012b9d3f9b0c0129a8b21e7693ec588f8c8748e56a0ba2110a714f3057941f2832e6f1b02981753c9811b804021192bb724c9db6f7129061e8a37e14a71d21f423280d3f6abb8b922f38537018c3a7789a40551cdb55ee1f277b9c0a8e3434a5f1466893130626ccb870e07412b0f26b59199b1b74eb8f6b8809b502632a7931257d4b8277809215d38bdbf7af30ebfb84726ee63d7a13a4bfba2ac378bd38e2331f1d0a97c72d6f31315053ca631eb21a6f5b566879520e76a92ed24fd51cd126a6de0eee4c73d4b6ae112c74aa18b10570011ce5df7dbe6544738da621ad2e192447c0a6b25c5d3ac40821395fb7bafa2b4958746e1b98bedc7ff05f67f8472dae3206cdf27cbb2f04804e1a39e353c4aa373a3e4f36a22bc230447d9f08a76abc163180f87b0a775062eab3b16ad5604c39c68e3336435a38381714cd0b04361101100dd34f62336f0dd83c0a1596a3a773471aa004d772d96593fdf8d4eb4c79b3a5d4daabff4017559e29d53a5d6d4441624683fe639e5cf29394564e5da5c285c5a7e17e865431e68dbf59cd17da486196d8af133d7b72026f38a84870062bff6432fb1b4f6fa0e3de653c5a7ba85b43b358c74ae052b5882c6fd55e5d532984824a677da582a548a068da88a344a756007d051fe9e7925df06ba805cdc3ac3febada654317977e47029c80f8c565c7f69876b6ebed3c2926e02b1557bfdc3514f2daad96ba4d23fd0c43a87d4024a464ff2ba412cc4acc0d6d1bcd6bed64a23bb9de5f8dc0392ab90f77933a409be498870c306b15fe42c14ba37596a6dbf060f3d47b335911d09848a9daafb13cb78ddd7ef1e9ef731ea8ec8666116c230d71e532bc9ad899140097056786172855f2db176fbb6608f57ad3238fd7d445ef46af3cbc08675466104a53701b0aa33798cd838536739c2469daae15de03fe777cc5264314265def21b32e020d2c06b38daca110a32cb0bbb720299d25bc200ee56b97f8403614329aadd6230b776ee35096dd9d305af37a7abcad20bae209029dd811f1ae365b399fd2157938a3032927d55b14b13eb944b5d3d62ba429b73671720b4daafe024266cd111736fdb5929b9b87fa94004c3a47fa5d10bbe7ae049349c669ef7dad5d94570ea7ddc3ee767099b1b945e20772041c294974cc8517ee04add1041756815657461e25395b7177a6d48d07212011d68fc72d4d89945d236d0449a4d93878ff4b8bbca25c1096b155d89cdf57fc9e5bda8890de31d88b6d0163c816316d37a0b5e9d0e5db97e15729e2a0f2abebd5d75d1b04b47c1ab537750279a86c6379a72a7c077f187b32e927c573bb41bdb62f01417cb6d4c74011da566104a5a1099d5474cf73fa0037334daa7d3126063d6cdf12bbfe679fca3dceaec50373795c5670587f9e5e68237027ca44c96656822d2a569c7a9a63f96d5687100bac4df62a09997ee529ddf26bfde7ba52d55785086323f7ec6895fdb642136152bf54d640d5a2e845055d0e0c639ac40769a28c634ed86a841787ec304bfef4d1dd604f74a19d210fda947baf65bb98be40417d61816c9dde016e6f6352536b4854441e1d1a38456e722ef95c4e111615efa646e51b18f6aa07fe4b5090b4665c1981b5add36dc2d0791571137932cede14732f82432b7f77c1ccf7d42ca515fa047c831e8138cbb5f133a792b567eb691c8a0b662e908d74a226ec171ce3604b5556bd4e3469c794df29b91c294912c70d9b1cddc1e34ba3b8e946e66f0ab3e5868c1688bf4f2ec5a29f3797c153e4399f98e337048537829cd6e5e8976bde6a265678355b2d63c8804ef0a50e662b3cbb67041654a6bf3a0538c25e02f628f06607f133de872e6e5a4ce59494e043bb463acf93eef55dcb4f08fae61d5549fb63a2425f79c8100e8741aec28c5fb0328a2116224bcc414bc71006eebbb26596c183a74a7398a39b93930a0aeb4ce86c958e8c187b2bf32d1d76c14223b80093c34c3a9ef4c2f6ba987d6fe5014afa48648b86d2d71de28f55900475c04b36e63496c986c96250b9d233439da9baac371b155313e5ae86544a4e571596ff0cc5a1948a56f2eb33e98439d841f0b8c3b747f3b197d6c447f96d6a97bb7ff1604334453cd2c692c9273a9a406fc810fc5ed05c6374a3c304abe057d7ad9a3afc519c19400db30b0550fdcfc00cae0a262028dc857a77d7e33890c15fcafc706bd0dec505598b2319b93b3d6b100980284ef6a474d0459a86950e258ab44259e3b735a39040ec6d94bc33727922b1621fb052e6d06cb51543ab7280ae044a9c6b5c80804c1fbbc9b16b28b97b03d575053aed468b0b6d6b850c30904a4d1d4c9fa7c16bce61bb6470f98a2c8225dde8bf693650b089765f470e4185aebae3f61bd8a8b300276ff92cbc24d1406a30590a7728b1f74bf367405227419796f11502007b39336d4b2b1df88343aba626ad15fb6be77aa56fe9953be8d08a68f55615dc39fda184059995c10fde7e11ed4dd075b764c780fd46098bf3326e6d15de0b00db547ae4ac6e79f5df88ea8d1585a419dca7806f9e4180a877e9e7dcf00e567b76e52bbae33e6cc3614add89140e38786cfaa2c63dd7c7d2a28123db1abc66aeda0d2c33207360293546bd4b072792835018da94c624ef3093195b108d8fcd4506ca1b2b9919dec4f96225bd6b75d926c48497a0c57a04b7a3eb187ef9fe656c42df7a6a939bdadf581525de2d6108e6e191ffbc57192fbf028512a07a26e3230c78af2952866dce4fef483a1a9429a5fabed54bf3b144f3cd2abffb1d95efcbfacffc6be49602d4e6324c82e3d981978e0851af983e583a6e4485ce5e2641d848a6866f6865a32db957b58bb2f09e7967bfd078a1e829eb5113543e5c2334050b80ea91e24effdbbe37cf1727c11526162e67609332c3c343369d808c214b45ad66fe735ad22b05e14f2bd795b3c69e6e277d017f2b38d92df8055d7b74516dbea8cc695907fe026ce3f1ecec171b370b3e81d0f7251e41800cf3578604782f9d90268ea0cb74ed005425091bb3aff5228c4593037d516e86592d212dd745b7ecc9de22c4df333ff40ffb21ff214c5b10b6b0bf051931e805e3c9673811193d8a71d1ec2aebd663327ba7c4029ad73509dce4643f9531df4efef492d785f0a92646dd9115a51c6dad482e957022d0dd1286db69d769a33364317f6ace828042035d6a0d130937e266f06a63b61e907828f830fcceaf74e4b367119982cdc8472c67e74072cea54dbc927d8498669b5cb603ccdef823a1271d55cdc12c29c1915f499cb28bb12a4606eeddc32ea21db62d280c6e5cef0d13d56cb7202eab8fff9c0fac829a15ed47b7ac0af3ab4be908d18528cab06292f234da5006caf717f68b85222d3f701afdc96a9908dd2a1d54d71dffc5cf2074ebd7e7311618722e25da4d4729d26f40b3b964e242306550b1b28e901bf98bb1d6c017ea16dd65d027683dead1326542672ec22fd18ecb956955640697101a1c697c8d8c3553cfe0dd0025077e7e1d592b4274bb6007b1acb42ebde6a30c195cc059c5c62893d68e13bd8cf16e05b148fb498a0fadccd76962d3031ac22643c93a677991e5899a419cf0d72182833c7dc3d4fba22b2dab73c20602b2dbf1b7c272787c8e9a1a8732952cb26eb075fbf7875a69d8b09aaec1509ab0f834f1e3ec998b8cbd3cea707a655db39774d4001dc76a8bf76a11cd25f6bf6c884e6bc3003e5a0beb6617df50f589bb170b19af3e512a04f277c7e01d2d25f3e5b66003345e3467eb262a2870cbbad5915997fa26563a02bfc7c9de109d4d584fc6540a486eabbec15db781d20e5a7ef7e922f88e1db9b204d72df99cdb65ea0de1f651a7c3732219b5d506fa32f97cf3a66384071dbda297a7e803c5036a45b80bfccf8bdf846f96e9374d68987e0ce0ab823f5851cf54e7c549e0329fc96d4bf688379a4edf12f148bee514f3d3a5ef44adfca6fbb50f3d937f61d04b79d53c6017b51cccc1c88d79b11e549909e493c7800e256fbba611febdeb65441b071c4519182e5cb8d9d4a6331af1c4ad04be0b3e29c6538af5ef745b7ae8a35d8db0662448e5d12e7c257937da14515ea6acfb1d1011bdd1d89083cdb23b07f8559a0f2ebad75ca6f8c61fa189727d77c1a671678b4a3a4d112b1ac847df9ef4c743ed49a50efcc2f223ee7259deadadfadae9db4151001ab6b26ca9a08aa4938249a74cb5ebc3f80ab8cfcf45f0286188174c52104e702e0d2bf7e0f35bd150f941c2c7d770df04efb8af1a1729a051b16e8a7a3c82454367b2c64f87ff1a260e28da3733161969b96bc42b1a079bdcb33e7e5ccb9ec8100ee48014534f6a58d93dff5eca662389414491635f3ed1708153ba7e71e05e417d29942a5dd28257f0879fe1ddce7e3582cea5d54cfe23d10c7622f7621477e6c887a07e9d7dc4c7c7c6e44f07632dcc1bda790e9d17d87b7f0f34a2a20bb9ccd0a85324aa9c1a5410829eb2df8389395f73ab0aff4768ba66050f0b264131c67ea960cd62d90d2e6ff697545324d5c70a4e158a43ac3c528c3b17ed676c7887b95c34bb97509d1a354946addc80ac0c051cc94bfa", 0x1000}, {&(0x7f0000001980)="aa8d62578b0615c8eb8280afed73151b473f784f866f83d81a34551f50be16a7e152d8bded2dabe1c4b6828e2bb477f8a078c394c3ab2e0404c56948219559991ef84ad2c551cfcb6d9198bec7f66c85e99535cf038e12eb29c3ba870e8649e6", 0x60}], 0x4}, 0x40000) r6 = fsmount(r0, 0x1, 0x87) syz_emit_ethernet(0x66, &(0x7f0000001b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd708003006000000000038000000000000000000000000fe80000000000000000000aa0000400100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0c3000090780000fe"], 0x0) r7 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24}}, @ldst={0x1, 0x1, 0x2, 0x7, 0xa, 0x20, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x15}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4c5b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xe, 0x7, 0x5efd12e8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r0, r0, r0, r1, r6, r0], &(0x7f00000005c0)=[{0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0x5, 0x9}], 0x10, 0xa}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r8, r0}, 0xc) 1.106045523s ago: executing program 4 (id=2524): unshare(0x2c020400) r0 = syz_clone(0xd3175880, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r0) unshare(0x8020100) 940.710298ms ago: executing program 6 (id=2525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000400), 0x8000000000000f8, 0x800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x5}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00c2bbb585317b0cccd6c2cbea7fee1d0000000001", @ANYRES32=0x0, @ANYBLOB="000200000000000024001a80200002801c00018008001e005d03000005001d0000000000080016000900000014003500776c616e3100"/64], 0x58}}, 0x0) getpid() ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 769.190015ms ago: executing program 7 (id=2526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x3, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe15}, {0x6, 0x11, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40084) r2 = socket(0x2, 0x400000000002, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0xc00) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x400800, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x8}, 0x8) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x20000004}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0xffff}}}) syz_usb_connect$uac1(0x0, 0xca, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000300000020392aa03f4000010203010902b80003010680030904000000010100000a2401090015000201020b24060402020100050007090401000001020000090401010101020000072401060001000b24020204000900d063420a04020103020609b8ef0a240202090001800301072401030003100f24020206000000014104dd869edc0905010920004b05010725010081ffff0904020000010200000904020101010200000a24020105040404467407"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) setsockopt(r2, 0x0, 0x3, 0x0, 0x0) 507.060957ms ago: executing program 3 (id=2527): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 0s ago: executing program 5 (id=2528): memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088be"], 0xfdef) kernel console output (not intermixed with test programs): T41] hsr_slave_1: left promiscuous mode [ 1116.145078][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.212278][ T61] Bluetooth: hci5: command 0x0419 tx timeout [ 1116.481352][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.753113][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 1117.869447][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1117.913311][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1118.093701][T13686] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 1118.343201][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1118.732378][ T5735] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 1118.832863][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 1118.889890][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.901542][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.901874][T13347] bridge_slave_0: entered allmulticast mode [ 1118.903639][ T5735] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1118.918534][ T5735] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 1118.918650][ T5735] usb 5-1: config 8 has no interface number 0 [ 1118.919039][ T5735] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1118.919149][ T5735] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 1118.919259][ T5735] usb 5-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1118.941404][ T5735] usb 5-1: string descriptor 0 read error: -22 [ 1118.941546][ T5735] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1118.941607][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.984786][T13347] bridge_slave_0: entered promiscuous mode [ 1119.089114][T13706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1119.105194][ T5735] metro_usb 5-1:8.109: Metrologic USB to Serial converter detected [ 1119.303892][ T5735] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1119.670025][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.671942][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.675713][T13347] bridge_slave_1: entered allmulticast mode [ 1119.775081][T13347] bridge_slave_1: entered promiscuous mode [ 1121.029229][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 1121.564847][T13721] overlayfs: missing 'lowerdir' [ 1121.678878][T13722] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1122.761386][ T5749] usb 5-1: USB disconnect, device number 21 [ 1122.859229][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 1122.871550][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.879345][ T5749] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1122.900463][ T5749] metro_usb 5-1:8.109: device disconnected [ 1123.059208][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.358240][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.358562][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.358904][T13457] bridge_slave_0: entered allmulticast mode [ 1123.375970][T13457] bridge_slave_0: entered promiscuous mode [ 1123.425623][T13347] team0: Port device team_slave_0 added [ 1123.426033][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.427797][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.428026][T13457] bridge_slave_1: entered allmulticast mode [ 1123.431536][T13457] bridge_slave_1: entered promiscuous mode [ 1123.531602][T13347] team0: Port device team_slave_1 added [ 1124.609250][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.714019][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.714040][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.714071][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.723953][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.749742][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.749790][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.749876][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.480936][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 1127.427300][T13762] overlayfs: missing 'lowerdir' [ 1127.531645][T13763] overlayfs: overlapping lowerdir path [ 1128.889804][T13457] team0: Port device team_slave_0 added [ 1128.927359][T13457] team0: Port device team_slave_1 added [ 1129.159019][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.159039][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.159072][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.226372][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.226391][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.226422][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.335692][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1129.458100][T13457] hsr_slave_0: entered promiscuous mode [ 1129.460399][T13457] hsr_slave_1: entered promiscuous mode [ 1129.467171][T13457] debugfs: 'hsr0' already exists in 'hsr' [ 1129.467247][T13457] Cannot create hsr debugfs directory [ 1130.600532][T10508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1130.643097][T10508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1130.644782][T10508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1130.646130][T10508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1130.647016][T10508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1132.842377][T10508] Bluetooth: hci4: command tx timeout [ 1134.378969][T13827] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1134.912364][T10508] Bluetooth: hci4: command tx timeout [ 1135.383321][T13814] IPv6: sit1: Disabled Multicast RS [ 1135.414831][T13811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1135.415061][T13811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1135.415142][T13811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1135.459760][T13833] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1135.500447][T13811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1135.515217][T13836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1135.882207][ T5869] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1136.042225][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 1136.058229][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.058401][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1136.058477][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1136.058539][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1136.058610][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1136.063026][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1136.063141][ T5869] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1136.063199][ T5869] usb 1-1: Manufacturer: syz [ 1136.264456][ T5869] usb 1-1: config 0 descriptor?? [ 1136.409960][ T5957] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1137.018497][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1137.052887][ T5957] usb 5-1: device descriptor read/64, error -71 [ 1137.112166][ T5869] rc_core: IR keymap rc-hauppauge not found [ 1137.112187][ T5869] Registered IR keymap rc-empty [ 1137.112368][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.132654][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.153997][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1137.160839][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 1137.169641][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.183267][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.204747][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.222514][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.242387][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.263678][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.282454][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.302208][ T5957] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1137.304033][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.322225][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.342256][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1137.442287][ T5957] usb 5-1: device descriptor read/64, error -71 [ 1137.482200][ T61] Bluetooth: hci4: command 0x0419 tx timeout [ 1137.482375][T10508] Bluetooth: hci3: command 0x0c1a tx timeout [ 1137.491429][ T5869] mceusb 1-1:0.0: Registered 娍 with mce emulator interface version 1 [ 1137.491447][ T5869] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1137.556982][ T5957] usb usb5-port1: attempt power cycle [ 1137.592295][ T5869] usb 1-1: USB disconnect, device number 25 [ 1137.747055][T13787] wlan0 speed is unknown, defaulting to 1000 [ 1137.932318][ T5957] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1137.953124][ T5957] usb 5-1: device descriptor read/8, error -71 [ 1138.202328][ T5957] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1138.234552][ T5957] usb 5-1: device descriptor read/8, error -71 [ 1138.513895][ T5957] usb usb5-port1: unable to enumerate USB device [ 1138.604526][T13866] IPv6: sit1: Disabled Multicast RS [ 1140.818602][T13864] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1140.851038][T10508] Bluetooth: hci3: command 0x0c1a tx timeout [ 1141.343361][T13876] can0: slcan on ttyS3. [ 1141.470988][T13864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1141.473716][T13876] can0 (unregistered): slcan off ttyS3. [ 1142.920042][ T61] Bluetooth: hci4: command 0x0419 tx timeout [ 1143.477850][T13891] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 1143.779580][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1145.027547][ T61] Bluetooth: hci4: command 0x0419 tx timeout [ 1145.302558][ T41] bridge_slave_1: left allmulticast mode [ 1145.302595][ T41] bridge_slave_1: left promiscuous mode [ 1145.302906][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.423959][ T41] bridge_slave_0: left allmulticast mode [ 1145.423998][ T41] bridge_slave_0: left promiscuous mode [ 1145.424984][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.843036][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.923301][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.985072][ T41] bond0 (unregistering): Released all slaves [ 1146.562322][ T41] hsr_slave_0: left promiscuous mode [ 1146.602342][ T41] hsr_slave_1: left promiscuous mode [ 1146.605100][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.648004][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.872725][ T5623] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1147.053185][ T5623] usb 4-1: device descriptor read/64, error -71 [ 1147.072191][ T61] Bluetooth: hci4: command 0x0419 tx timeout [ 1147.413725][ T5623] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1147.612429][ T5623] usb 4-1: device descriptor read/64, error -71 [ 1147.827729][ T5623] usb usb4-port1: attempt power cycle [ 1147.970962][T10508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1148.030217][T10508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1148.062921][T10508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1148.071568][T10508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1148.077615][T10508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1148.212193][ T5623] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1148.233159][ T5623] usb 4-1: device descriptor read/8, error -71 [ 1148.472132][ T5623] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1148.496067][ T5623] usb 4-1: device descriptor read/8, error -71 [ 1148.506240][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1148.562837][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1148.610954][ T5623] usb usb4-port1: unable to enumerate USB device [ 1150.138301][T13943] loop0: detected capacity change from 0 to 512 [ 1150.252772][T13943] EXT4-fs (loop0): 1 truncate cleaned up [ 1150.273262][ T61] Bluetooth: hci5: command tx timeout [ 1150.425308][T13943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.629297][T13948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1150.700034][ T5869] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1150.866544][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1150.871347][ T5869] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 1150.871379][ T5869] usb 4-1: config 8 has no interface number 0 [ 1150.871426][ T5869] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1150.871457][ T5869] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 1150.871486][ T5869] usb 4-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1150.888818][ T5869] usb 4-1: string descriptor 0 read error: -22 [ 1150.888982][ T5869] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1150.889008][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.478188][ T61] Bluetooth: hci5: command tx timeout [ 1153.153939][T13956] IPv6: sit1: Disabled Multicast RS [ 1154.474543][ T5869] usb 4-1: can't set config #8, error -71 [ 1154.514797][ T61] Bluetooth: hci5: command tx timeout [ 1154.691490][ T5869] usb 4-1: USB disconnect, device number 34 [ 1154.765466][T13787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.765831][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.766176][T13787] bridge_slave_0: entered allmulticast mode [ 1154.786735][T13787] bridge_slave_0: entered promiscuous mode [ 1154.804722][T13787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.805184][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.805531][T13787] bridge_slave_1: entered allmulticast mode [ 1154.824444][T13787] bridge_slave_1: entered promiscuous mode [ 1154.835862][T13952] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1154.836007][T13952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1154.836139][T13952] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1154.836192][T13952] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1154.984167][T13952] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1155.549060][T13787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.549245][T13927] wlan0 speed is unknown, defaulting to 1000 [ 1155.711391][T13787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.253454][ T1461] bridge_slave_1: left allmulticast mode [ 1156.253492][ T1461] bridge_slave_1: left promiscuous mode [ 1156.253790][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.309142][ T5616] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /486/bus: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 1156.594121][ T1461] bridge_slave_0: left allmulticast mode [ 1156.594161][ T1461] bridge_slave_0: left promiscuous mode [ 1156.594463][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.649413][ T5616] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1156.751413][ T5616] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1156.770757][T13985] loop8: detected capacity change from 0 to 7 [ 1156.772749][T13985] Dev loop8: unable to read RDB block 7 [ 1156.772802][T13985] loop8: unable to read partition table [ 1156.773012][T13985] loop8: partition table beyond EOD, truncated [ 1156.773031][T13985] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1156.914387][T10508] Bluetooth: hci4: command 0x0419 tx timeout [ 1156.916023][T10508] Bluetooth: hci5: command 0x0c1a tx timeout [ 1157.312163][ T5957] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1157.402857][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.465675][ T5957] usb 5-1: no configurations [ 1157.465690][ T5957] usb 5-1: can't read configurations, error -22 [ 1157.486235][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.544716][ T1461] bond0 (unregistering): Released all slaves [ 1157.603556][ T5957] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1157.814984][ T5957] usb 5-1: no configurations [ 1157.815005][ T5957] usb 5-1: can't read configurations, error -22 [ 1157.815613][ T5957] usb usb5-port1: attempt power cycle [ 1158.163208][ T5957] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1158.186211][ T5957] usb 5-1: no configurations [ 1158.186227][ T5957] usb 5-1: can't read configurations, error -22 [ 1158.342282][ T5957] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1158.370987][ T5957] usb 5-1: no configurations [ 1158.371002][ T5957] usb 5-1: can't read configurations, error -22 [ 1158.371334][ T5957] usb usb5-port1: unable to enumerate USB device [ 1158.492745][T13787] team0: Port device team_slave_0 added [ 1158.502212][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.533103][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.541378][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.784508][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 1158.845213][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 1158.993606][T10508] Bluetooth: hci5: command 0x0c1a tx timeout [ 1159.741368][T13038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.788203][T13038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.789921][T13038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.791120][T13038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.811794][T13038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1160.087427][T13787] team0: Port device team_slave_1 added [ 1160.424353][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 1160.985754][T13787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.985829][T13787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.985870][T13787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.072254][T10508] Bluetooth: hci5: command 0x0c1a tx timeout [ 1161.268657][T13787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.268676][T13787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.268706][T13787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.733008][T14018] loop8: detected capacity change from 0 to 7 [ 1161.753728][T14018] Dev loop8: unable to read RDB block 7 [ 1161.753774][T14018] loop8: unable to read partition table [ 1161.753977][T14018] loop8: partition table beyond EOD, truncated [ 1161.753998][T14018] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1161.872879][T10508] Bluetooth: hci0: command tx timeout [ 1162.148342][T13787] hsr_slave_0: entered promiscuous mode [ 1162.150578][T13787] hsr_slave_1: entered promiscuous mode [ 1163.545350][T14031] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1163.545586][T14031] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1163.545715][T14031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1163.545769][T14031] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1163.603495][T14031] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1163.962228][ T5735] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1164.092399][ T1461] bridge_slave_1: left allmulticast mode [ 1164.092438][ T1461] bridge_slave_1: left promiscuous mode [ 1164.092741][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.134376][ T5735] usb 5-1: config 0 has no interfaces? [ 1164.134411][ T5735] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1164.134429][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.141664][ T5735] usb 5-1: config 0 descriptor?? [ 1164.254158][ T1461] bridge_slave_0: left allmulticast mode [ 1164.254196][ T1461] bridge_slave_0: left promiscuous mode [ 1164.254491][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.416004][ T5623] usb 5-1: USB disconnect, device number 30 [ 1164.823124][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.904659][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.971181][ T1461] bond0 (unregistering): Released all slaves [ 1165.134769][T13999] wlan0 speed is unknown, defaulting to 1000 [ 1165.780395][T10508] Bluetooth: hci5: command 0x0c1a tx timeout [ 1165.787144][T10508] Bluetooth: hci4: command 0x0419 tx timeout [ 1165.806976][T13038] Bluetooth: hci0: command 0x040f tx timeout [ 1166.385602][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.386018][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.386337][T13927] bridge_slave_0: entered allmulticast mode [ 1166.432117][T13927] bridge_slave_0: entered promiscuous mode [ 1166.518701][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.519040][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.519389][T13927] bridge_slave_1: entered allmulticast mode [ 1166.555564][T13927] bridge_slave_1: entered promiscuous mode [ 1166.986632][ T5957] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 1167.645409][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1167.647252][ T5957] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 1167.647280][ T5957] usb 5-1: config 8 has no interface number 0 [ 1167.647336][ T5957] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1167.647366][ T5957] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 1167.647395][ T5957] usb 5-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1167.710141][ T5957] usb 5-1: string descriptor 0 read error: -22 [ 1167.710304][ T5957] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1167.710330][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.806546][T14067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1167.823149][ T5957] metro_usb 5-1:8.109: Metrologic USB to Serial converter detected [ 1167.846129][T14075] loop8: detected capacity change from 0 to 7 [ 1167.876303][ T5957] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1167.880262][ T61] Bluetooth: hci0: command 0x040f tx timeout [ 1167.923980][T14075] Dev loop8: unable to read RDB block 7 [ 1167.924027][T14075] loop8: unable to read partition table [ 1167.924245][T14075] loop8: partition table beyond EOD, truncated [ 1167.924306][T14075] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1169.962145][ T61] Bluetooth: hci0: command 0x040f tx timeout [ 1170.092708][T14085] overlay: Unknown parameter '/' [ 1170.190926][T14086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1171.362605][ T5735] usb 5-1: USB disconnect, device number 31 [ 1171.421960][ T5735] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1171.427555][ T5735] metro_usb 5-1:8.109: device disconnected [ 1172.510467][ T61] Bluetooth: hci0: command 0x040f tx timeout [ 1173.087491][ T1461] hsr_slave_0: left promiscuous mode [ 1174.028047][ T198] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1174.212186][ T1461] hsr_slave_1: left promiscuous mode [ 1174.213343][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.232358][ T198] usb 5-1: Using ep0 maxpacket: 16 [ 1174.245139][ T198] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.245192][ T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1174.245222][ T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1174.245246][ T198] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1174.245271][ T198] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.246161][T14112] loop8: detected capacity change from 0 to 7 [ 1174.253842][ T198] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1174.253872][ T198] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1174.253892][ T198] usb 5-1: Manufacturer: syz [ 1174.294462][T14112] Dev loop8: unable to read RDB block 7 [ 1174.294597][T14112] loop8: unable to read partition table [ 1174.295226][T14112] loop8: partition table beyond EOD, truncated [ 1174.307412][T14112] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1174.313345][ T198] usb 5-1: config 0 descriptor?? [ 1174.336804][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.512676][ T61] Bluetooth: hci0: command 0x040f tx timeout [ 1174.672183][ T198] rc_core: IR keymap rc-hauppauge not found [ 1174.672206][ T198] Registered IR keymap rc-empty [ 1174.672336][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.692309][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.715641][ T198] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1174.727534][ T198] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 1174.823958][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.849542][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.865754][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.882304][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.915500][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.933229][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.953900][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.972800][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.992784][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1175.012505][ T198] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1175.114793][ T198] mceusb 5-1:0.0: Registered 娍 with mce emulator interface version 1 [ 1175.114867][ T198] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1175.153236][ T198] usb 5-1: USB disconnect, device number 32 [ 1175.343713][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 1175.402915][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 1176.006814][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.339523][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.204177][T13927] team0: Port device team_slave_0 added [ 1178.193773][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.193892][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.348911][T13927] team0: Port device team_slave_1 added [ 1178.695024][T14150] loop8: detected capacity change from 0 to 7 [ 1178.731473][T14150] Dev loop8: unable to read RDB block 7 [ 1178.731536][T14150] loop8: unable to read partition table [ 1178.731744][T14150] loop8: partition table beyond EOD, truncated [ 1178.731784][T14150] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1180.805099][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 1182.242767][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.242786][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.242814][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.247538][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.247556][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.247586][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.349671][T13927] hsr_slave_0: entered promiscuous mode [ 1184.359005][T13927] hsr_slave_1: entered promiscuous mode [ 1184.380504][T13927] debugfs: 'hsr0' already exists in 'hsr' [ 1184.380534][T13927] Cannot create hsr debugfs directory [ 1185.884107][ T5957] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1186.053002][ T5957] usb 4-1: config 0 has no interfaces? [ 1186.053040][ T5957] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1186.053064][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.105427][ T5957] usb 4-1: config 0 descriptor?? [ 1186.361921][ T5957] usb 4-1: USB disconnect, device number 35 [ 1186.407956][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.408237][T13999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.408521][T13999] bridge_slave_0: entered allmulticast mode [ 1186.447396][T13999] bridge_slave_0: entered promiscuous mode [ 1186.495605][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.496027][T13999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.496336][T13999] bridge_slave_1: entered allmulticast mode [ 1186.500062][T13999] bridge_slave_1: entered promiscuous mode [ 1189.128115][T13999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.383061][T13999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.682471][T13999] team0: Port device team_slave_0 added [ 1189.704332][T13999] team0: Port device team_slave_1 added [ 1189.822265][ T822] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1189.880210][T13999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.880230][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.880260][T13999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.973744][T13999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.973764][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.973796][T13999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.974374][T13787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1190.087898][T13787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1190.128535][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1190.128572][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1190.128598][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1190.128625][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1190.131551][ T822] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1190.131583][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.131606][ T822] usb 4-1: Product: syz [ 1190.131621][ T822] usb 4-1: Manufacturer: syz [ 1190.131635][ T822] usb 4-1: SerialNumber: syz [ 1190.224559][ T822] usb 4-1: config 0 descriptor?? [ 1190.241283][T13787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1190.546733][T13787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1190.925977][T13999] hsr_slave_0: entered promiscuous mode [ 1190.930112][T13999] hsr_slave_1: entered promiscuous mode [ 1190.956654][T13999] debugfs: 'hsr0' already exists in 'hsr' [ 1190.956682][T13999] Cannot create hsr debugfs directory [ 1191.019195][ T822] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1191.057824][ T822] usb 4-1: USB disconnect, device number 36 [ 1194.254859][T13038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1194.331909][T13038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1194.365005][T13038] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1194.369914][T13038] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1194.370983][T13038] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1194.829053][T14312] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 1194.872145][ T5957] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1195.037547][ T5957] usb 5-1: config 0 has no interfaces? [ 1195.037587][ T5957] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1195.037613][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.104592][ T5957] usb 5-1: config 0 descriptor?? [ 1195.596494][ T822] usb 5-1: USB disconnect, device number 33 [ 1195.778979][T13927] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1195.901237][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1195.954917][T13927] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1196.066352][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.410135][T13927] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1196.486762][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1196.506056][T13927] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1196.610261][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1196.654902][ T5623] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1196.673088][ T61] Bluetooth: hci3: command tx timeout [ 1196.802234][ T5623] usb 5-1: Using ep0 maxpacket: 8 [ 1196.820740][ T5623] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1196.831299][ T5623] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1196.850914][ T5623] usb 5-1: string descriptor 0 read error: -22 [ 1196.851019][ T5623] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1196.851044][ T5623] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1196.925228][ T5623] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1197.023774][ T5623] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1197.027738][ T5623] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1197.027896][ T5623] usb 5-1: media controller created [ 1197.329946][ T5623] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1197.603518][T14354] : renamed from vlan0 (while UP) [ 1198.433346][ T5623] zl10353_read_register: readreg error (reg=127, ret==0) [ 1198.581653][T14303] wlan0 speed is unknown, defaulting to 1000 [ 1198.729391][ T5623] usb 5-1: USB disconnect, device number 34 [ 1198.762300][ T61] Bluetooth: hci3: command tx timeout [ 1200.009779][T14397] syz_tun: entered allmulticast mode [ 1200.179650][T13999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1200.280947][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1200.503542][T13999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1200.586776][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1200.607042][T13999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1200.638427][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1200.735941][T13999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1200.773785][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1200.836798][ T61] Bluetooth: hci3: command tx timeout [ 1201.558228][ T3193] bridge_slave_1: left allmulticast mode [ 1201.558283][ T3193] bridge_slave_1: left promiscuous mode [ 1201.558593][ T3193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.747250][ T3193] bridge_slave_0: left allmulticast mode [ 1201.747288][ T3193] bridge_slave_0: left promiscuous mode [ 1201.779143][ T3193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.586340][ T3193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.663390][ T3193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.698085][T14447] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1671'. [ 1202.698494][T14447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1671'. [ 1202.722903][ T198] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1202.784658][ T3193] bond0 (unregistering): Released all slaves [ 1202.928237][ T61] Bluetooth: hci3: command tx timeout [ 1202.947472][ T198] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1202.947515][ T198] usb 4-1: config 0 has no interface number 0 [ 1202.947579][ T198] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1202.950697][ T198] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1202.950726][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.950747][ T198] usb 4-1: Product: syz [ 1202.950761][ T198] usb 4-1: Manufacturer: syz [ 1202.950776][ T198] usb 4-1: SerialNumber: syz [ 1203.034432][ T198] usb 4-1: config 0 descriptor?? [ 1203.035356][T14443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1203.240483][T14443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1203.744799][ T3193] hsr_slave_0: left promiscuous mode [ 1203.804566][ T3193] hsr_slave_1: left promiscuous mode [ 1203.805739][ T3193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.854543][ T3193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.842928][ T3193] team0 (unregistering): Port device team_slave_1 removed [ 1204.964794][ T3193] team0 (unregistering): Port device team_slave_0 removed [ 1206.138395][T13927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.894507][ T198] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1206.894708][ T198] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1206.941078][ T198] usb 4-1: USB disconnect, device number 37 [ 1207.467499][T14303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.467771][T14303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.468018][T14303] bridge_slave_0: entered allmulticast mode [ 1207.505759][T14303] bridge_slave_0: entered promiscuous mode [ 1207.533949][T14303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.534742][T14303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.535059][T14303] bridge_slave_1: entered allmulticast mode [ 1207.568387][T14303] bridge_slave_1: entered promiscuous mode [ 1207.809476][T14303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.208196][T14303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.284734][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1208.369413][T14303] team0: Port device team_slave_0 added [ 1208.389561][T14303] team0: Port device team_slave_1 added [ 1208.598502][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.667152][T13038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1208.743456][T13038] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1208.748799][T13038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1208.750312][T13038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1208.751137][T13038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1208.813232][T14303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.813250][T14303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.813280][T14303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.934977][T14303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.934997][T14303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.935029][T14303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.501287][T14502] ip6erspan0: entered allmulticast mode [ 1209.805526][T14303] hsr_slave_0: entered promiscuous mode [ 1209.807751][T14303] hsr_slave_1: entered promiscuous mode [ 1209.828969][T14509] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1209.901026][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.832417][T13038] Bluetooth: hci4: command tx timeout [ 1211.097740][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1211.164971][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.165964][T14302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.763470][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.764035][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.789802][T14492] wlan0 speed is unknown, defaulting to 1000 [ 1212.915112][T13038] Bluetooth: hci4: command tx timeout [ 1214.227558][T14590] raw_sendmsg: syz.4.1696 forgot to set AF_INET. Fix it! [ 1214.284521][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1214.994345][T13038] Bluetooth: hci4: command tx timeout [ 1215.942266][ T3193] bridge_slave_1: left allmulticast mode [ 1215.942295][ T3193] bridge_slave_1: left promiscuous mode [ 1215.942513][ T3193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.089662][ T3193] bridge_slave_0: left allmulticast mode [ 1216.089700][ T3193] bridge_slave_0: left promiscuous mode [ 1216.091541][ T3193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.082418][T13038] Bluetooth: hci4: command tx timeout [ 1217.671565][ T3193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.839138][ T3193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.928722][ T3193] bond0 (unregistering): Released all slaves [ 1219.372206][ T3193] hsr_slave_0: left promiscuous mode [ 1219.676572][ T3193] hsr_slave_1: left promiscuous mode [ 1219.677834][ T3193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.719174][ T3193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.129617][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1220.197191][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1220.235366][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1220.241540][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1220.244021][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1221.264223][ T3193] team0 (unregistering): Port device team_slave_1 removed [ 1221.345775][ T3193] team0 (unregistering): Port device team_slave_0 removed [ 1221.771848][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1222.379335][T14492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.381265][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.381601][T14492] bridge_slave_0: entered allmulticast mode [ 1222.426226][T14492] bridge_slave_0: entered promiscuous mode [ 1222.430896][T14492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.431246][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.431487][T14492] bridge_slave_1: entered allmulticast mode [ 1222.466304][T14492] bridge_slave_1: entered promiscuous mode [ 1222.513887][ T61] Bluetooth: hci5: command tx timeout [ 1223.329567][T14492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.442793][T14492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.533509][T14492] team0: Port device team_slave_0 added [ 1224.592380][ T61] Bluetooth: hci5: command tx timeout [ 1224.610698][T14656] wlan0 speed is unknown, defaulting to 1000 [ 1224.627565][T14492] team0: Port device team_slave_1 added [ 1225.037650][T14492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.037665][T14492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.037685][T14492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.135027][T14492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.135041][T14492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.135062][T14492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.280696][T14303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1225.325217][T14303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1225.406098][T14303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1225.438029][T14303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1225.552330][T14303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1225.599359][T14303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.379835][T14303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1226.484610][T14303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.676791][ T61] Bluetooth: hci5: command tx timeout [ 1226.685130][T14492] hsr_slave_0: entered promiscuous mode [ 1226.693342][T14492] hsr_slave_1: entered promiscuous mode [ 1226.708191][T14492] debugfs: 'hsr0' already exists in 'hsr' [ 1226.708272][T14492] Cannot create hsr debugfs directory [ 1227.342218][T14479] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1227.502217][T14479] usb 4-1: Using ep0 maxpacket: 32 [ 1227.504941][T14479] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1227.506157][T14479] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.506182][T14479] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 1227.508551][T14479] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1227.508579][T14479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.508598][T14479] usb 4-1: Product: syz [ 1227.508612][T14479] usb 4-1: Manufacturer: syz [ 1227.508631][T14479] usb 4-1: SerialNumber: syz [ 1227.655796][ T5623] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1227.797115][T14737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.798853][T14737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.812240][ T5623] usb 5-1: Using ep0 maxpacket: 8 [ 1227.840177][ T5623] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1227.843998][ T5623] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.844181][ T5623] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1227.880635][ T5623] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 1227.880663][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.880733][ T5623] usb 5-1: Product: syz [ 1227.880747][ T5623] usb 5-1: Manufacturer: syz [ 1227.884161][ T5623] usb 5-1: SerialNumber: syz [ 1227.977134][T14741] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 1228.034919][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 1228.543955][T14741] bond10: entered promiscuous mode [ 1228.546324][T14741] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1228.681225][T14742] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1228.685216][T14742] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1228.685242][T14742] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1228.722098][T14742] bond10: (slave ip6gre1): making interface the new active one [ 1228.722124][T14742] ip6gre1: entered promiscuous mode [ 1228.748373][T14742] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 1228.753010][ T61] Bluetooth: hci5: command tx timeout [ 1228.835728][T14479] usb 4-1: USB disconnect, device number 38 [ 1229.090699][ T5623] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1229.130538][ T5623] usb 5-1: 0:1 : does not exist [ 1229.130626][ T5623] usb 5-1: unit 8 not found! [ 1229.345603][ T5623] usb 5-1: USB disconnect, device number 35 [ 1229.479680][T14094] udevd[14094]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.271577][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1230.972980][T14656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.974654][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.974985][T14656] bridge_slave_0: entered allmulticast mode [ 1231.016338][T14479] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1231.043845][T14656] bridge_slave_0: entered promiscuous mode [ 1231.071249][T14656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.071585][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.071943][T14656] bridge_slave_1: entered allmulticast mode [ 1231.096670][T14656] bridge_slave_1: entered promiscuous mode [ 1231.185445][T14479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.185466][T14479] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1231.185531][T14479] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.185560][T14479] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.233037][T14479] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.233070][T14479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.233091][T14479] usb 5-1: Product: syz [ 1231.233106][T14479] usb 5-1: Manufacturer: syz [ 1231.233121][T14479] usb 5-1: SerialNumber: syz [ 1231.308293][T14479] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1231.308344][T14479] cdc_ncm 5-1:1.0: bind() failure [ 1231.705674][T14656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.736526][T14656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.442278][ T3193] bridge_slave_1: left allmulticast mode [ 1232.442316][ T3193] bridge_slave_1: left promiscuous mode [ 1232.442699][ T3193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.603977][ T3193] bridge_slave_0: left allmulticast mode [ 1232.604015][ T3193] bridge_slave_0: left promiscuous mode [ 1232.604322][ T3193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.516109][ T3193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.599074][ T3193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.666222][ T3193] bond0 (unregistering): Released all slaves [ 1233.680290][ T5957] usb 5-1: USB disconnect, device number 36 [ 1233.714889][T14656] team0: Port device team_slave_0 added [ 1233.761936][T14656] team0: Port device team_slave_1 added [ 1234.367675][T14656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.367690][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.367710][T14656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.429078][T14656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.429099][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.429134][T14656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.601687][T14827] sg_write: data in/out 452414/136 bytes for SCSI command 0x0-- guessing data in; [ 1234.601687][T14827] program syz.3.1741 not setting count and/or reply_len properly [ 1234.662182][ T3193] hsr_slave_0: left promiscuous mode [ 1234.702291][ T3193] hsr_slave_1: left promiscuous mode [ 1234.703628][ T3193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.744849][ T3193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.245322][T14846] sg_write: data in/out 452414/136 bytes for SCSI command 0x0-- guessing data in; [ 1235.245322][T14846] program syz.4.1749 not setting count and/or reply_len properly [ 1235.402166][T14479] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1235.572727][ T3193] team0 (unregistering): Port device team_slave_1 removed [ 1235.582319][T14479] usb 4-1: Using ep0 maxpacket: 16 [ 1235.585954][T14479] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.585988][T14479] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.586029][T14479] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1235.586054][T14479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.713157][ T3193] team0 (unregistering): Port device team_slave_0 removed [ 1236.120765][T14479] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1236.682654][T14303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.710343][T14479] usb 4-1: USB disconnect, device number 39 [ 1236.780468][T14656] hsr_slave_0: entered promiscuous mode [ 1236.782627][T14656] hsr_slave_1: entered promiscuous mode [ 1236.784158][T14656] debugfs: 'hsr0' already exists in 'hsr' [ 1236.784183][T14656] Cannot create hsr debugfs directory [ 1237.199010][T14303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.644521][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.644687][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.052734][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.052999][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.236816][T14878] sg_write: data in/out 452414/136 bytes for SCSI command 0x0-- guessing data in; [ 1238.236816][T14878] program syz.3.1757 not setting count and/or reply_len properly [ 1238.796298][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1238.903701][T14893] capability: warning: `syz.3.1762' uses 32-bit capabilities (legacy support in use) [ 1238.936746][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.936865][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.031059][T14492] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1239.116793][T14492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1239.120798][T14492] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1239.199421][T14492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1239.269473][T14492] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1239.414667][T14492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1240.037976][T14492] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1240.076846][T14492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1241.961023][T14492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.070867][T14492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.198323][ T3193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.198493][ T3193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.376271][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.376445][T13409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.883039][T14303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.734001][T14656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1243.808496][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1243.826631][T14656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1243.960209][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.979852][T14656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1244.033159][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1244.107415][T14656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1244.187695][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1244.514577][T14999] tipc: Resetting bearer [ 1245.033263][T13656] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1245.087869][T14303] veth0_vlan: entered promiscuous mode [ 1245.140504][T14492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.202211][T13656] usb 5-1: Using ep0 maxpacket: 8 [ 1245.215130][T13656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.215187][T13656] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1245.215235][T13656] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1245.215261][T13656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.266628][T13656] usb 5-1: config 0 descriptor?? [ 1245.295218][T14303] veth1_vlan: entered promiscuous mode [ 1245.746845][T13656] usb 5-1: USB disconnect, device number 37 [ 1245.821598][T14656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.865741][T14303] veth0_macvtap: entered promiscuous mode [ 1246.011727][T14303] veth1_macvtap: entered promiscuous mode [ 1246.230367][T14656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.348875][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.349155][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.433511][T14303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.491919][ T3191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.509262][ T3191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.600257][T14303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.755478][ T3191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.861690][ T3191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.891214][ T3191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.035567][ T3191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.265766][T14492] veth0_vlan: entered promiscuous mode [ 1247.861063][T14492] veth1_vlan: entered promiscuous mode [ 1248.875101][T15067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.875127][T15067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.382407][T15093] tipc: Resetting bearer [ 1249.389104][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.389127][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.454551][T14492] veth0_macvtap: entered promiscuous mode [ 1249.598166][T14492] veth1_macvtap: entered promiscuous mode [ 1249.923574][T14492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.066070][T14492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.187510][T15068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.202329][T15068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.203286][T15068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.208972][T15075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.458867][T15127] siw: device registration error -23 [ 1251.315529][T14656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.226529][T15068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.226545][T15068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.469831][T15163] binder: 15162:15163 ioctl c0306201 0 returned -14 [ 1252.939033][T15067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.939057][T15067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.074517][T15187] ip6erspan0: entered allmulticast mode [ 1254.449340][T15198] binder: 15197:15198 ioctl c0306201 0 returned -14 [ 1254.745572][T14656] veth0_vlan: entered promiscuous mode [ 1254.939672][T14656] veth1_vlan: entered promiscuous mode [ 1255.754161][T14656] veth0_macvtap: entered promiscuous mode [ 1255.859644][T14656] veth1_macvtap: entered promiscuous mode [ 1256.509095][T14656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.667674][T14656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.824354][T15075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.882858][T15075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.909917][T15071] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.914014][T15071] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.592286][ T61] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1258.592620][ T61] Bluetooth: hci4: Injecting HCI hardware error event [ 1258.599452][T13038] Bluetooth: hci4: hardware error 0x00 [ 1259.754272][T15267] ip6erspan0: entered allmulticast mode [ 1259.897171][T15074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1259.897194][T15074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.414629][T15282] bridge0: port 3(macvlan2) entered blocking state [ 1260.417156][T15282] bridge0: port 3(macvlan2) entered disabled state [ 1260.418032][T15282] macvlan2: entered allmulticast mode [ 1260.418072][T15282] ip6gretap0: entered allmulticast mode [ 1260.440337][T15282] macvlan2: entered promiscuous mode [ 1260.495576][T15282] bridge0: port 3(macvlan2) entered blocking state [ 1260.538386][T15282] bridge0: port 3(macvlan2) entered forwarding state [ 1260.739839][T15073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.739862][T15073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.952124][ T37] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1260.997206][T15294] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 1261.097775][T15294] bond6: entered promiscuous mode [ 1261.101795][T15294] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1261.111594][ T37] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1261.121243][ T37] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.121271][ T37] usb 7-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1261.149377][ T37] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1261.149411][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.149435][ T37] usb 7-1: Product: syz [ 1261.149446][ T37] usb 7-1: Manufacturer: syz [ 1261.149457][ T37] usb 7-1: SerialNumber: syz [ 1261.375578][T15298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1261.378981][T15298] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1261.378999][T15298] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1261.448372][T15298] bond6: (slave ip6gre2): making interface the new active one [ 1261.448465][T15298] ip6gre2: entered promiscuous mode [ 1261.462486][ T5957] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1261.482403][T13038] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1261.513659][T15298] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 1261.613389][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 1261.623177][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1261.647239][ T5957] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.647270][ T5957] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.714991][ T5957] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 1261.715095][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.715124][ T5957] usb 6-1: Product: syz [ 1261.715140][ T5957] usb 6-1: Manufacturer: syz [ 1261.715155][ T5957] usb 6-1: SerialNumber: syz [ 1262.187800][T15286] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1262.413700][ T37] usb 7-1: USB disconnect, device number 2 [ 1262.718244][T15300] syzkaller0: entered promiscuous mode [ 1262.718294][T15300] syzkaller0: entered allmulticast mode [ 1263.057630][ T5957] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1263.102536][ T5957] usb 6-1: 0:1 : does not exist [ 1263.102634][ T5957] usb 6-1: unit 8 not found! [ 1263.317007][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1263.366823][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1263.443557][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1263.477982][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1263.484551][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1263.673917][ T5957] usb 6-1: USB disconnect, device number 2 [ 1263.769545][T14094] udevd[14094]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1265.322269][T15322] wlan0 speed is unknown, defaulting to 1000 [ 1265.632934][T13038] Bluetooth: hci0: command tx timeout [ 1266.060044][T15370] tipc: Enabling of bearer rejected, failed to enable media [ 1266.429372][T15384] sg_write: data in/out 386878/136 bytes for SCSI command 0x0-- guessing data in; [ 1266.429372][T15384] program syz.5.1857 not setting count and/or reply_len properly [ 1267.450342][T15417] sg_write: data in/out 386878/136 bytes for SCSI command 0x0-- guessing data in; [ 1267.450342][T15417] program syz.5.1869 not setting count and/or reply_len properly [ 1267.643540][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.645982][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.646342][T15322] bridge_slave_0: entered allmulticast mode [ 1267.682565][T15322] bridge_slave_0: entered promiscuous mode [ 1267.726698][ T61] Bluetooth: hci0: command tx timeout [ 1267.794527][T15322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.794897][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.795426][T15322] bridge_slave_1: entered allmulticast mode [ 1267.838777][T15322] bridge_slave_1: entered promiscuous mode [ 1268.061273][T15322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.113750][T15322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.300118][T15322] team0: Port device team_slave_0 added [ 1268.355153][T15322] team0: Port device team_slave_1 added [ 1268.750590][T15322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.750610][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.750640][T15322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.840572][T15322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.840585][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.840606][T15322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.486660][T15322] hsr_slave_0: entered promiscuous mode [ 1269.501745][T15322] hsr_slave_1: entered promiscuous mode [ 1269.516923][T15322] debugfs: 'hsr0' already exists in 'hsr' [ 1269.516949][T15322] Cannot create hsr debugfs directory [ 1269.675394][T15453] sg_write: data in/out 386878/136 bytes for SCSI command 0x0-- guessing data in; [ 1269.675394][T15453] program syz.4.1880 not setting count and/or reply_len properly [ 1269.792314][ T61] Bluetooth: hci0: command tx timeout [ 1270.152513][T15460] tipc: Enabling of bearer rejected, already enabled [ 1270.451093][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1886'. [ 1270.747208][T15471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1271.390729][T15477] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode [ 1271.470232][T15477] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 1271.529302][T15493] KVM: debugfs: duplicate directory 15493-5 [ 1271.884204][ T61] Bluetooth: hci0: command tx timeout [ 1272.740333][T15322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.109426][T15508] tipc: Enabling of bearer rejected, failed to enable media [ 1273.188225][T15524] ip6erspan0: entered allmulticast mode [ 1273.655899][T15322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.746969][T15544] KVM: debugfs: duplicate directory 15544-5 [ 1274.708594][T15322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.024142][T15575] tipc: Enabling of bearer rejected, failed to enable media [ 1275.238729][T15558] netlink: 'syz.7.1915': attribute type 4 has an invalid length. [ 1275.313367][T15567] netlink: 'syz.7.1915': attribute type 4 has an invalid length. [ 1275.991584][T15322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.964885][ T5623] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1277.138405][ T5623] usb 6-1: Using ep0 maxpacket: 32 [ 1277.153559][ T5623] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1277.155307][ T5623] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.155337][ T5623] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 1277.195728][ T5623] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1277.195758][ T5623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.195780][ T5623] usb 6-1: Product: syz [ 1277.195794][ T5623] usb 6-1: Manufacturer: syz [ 1277.195808][ T5623] usb 6-1: SerialNumber: syz [ 1277.482753][T15600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.484995][T15600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.550203][ T5623] usb 6-1: USB disconnect, device number 3 [ 1278.819490][T15322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1278.971457][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1278.984268][T15322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1279.096788][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.100582][T15322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1279.314463][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1279.332772][T15637] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1941'. [ 1279.379805][T15633] ip6erspan1: entered allmulticast mode [ 1279.422890][T15322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1279.466445][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1279.971404][T15322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.038429][T15322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.096688][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.096989][T13409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.320038][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.320867][T13409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.456926][T15671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1955'. [ 1280.504666][T15665] ip6erspan1: entered allmulticast mode [ 1280.510480][T15673] netlink: 'syz.7.1954': attribute type 1 has an invalid length. [ 1282.323099][T15712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1967'. [ 1282.558115][T15721] vlan2: entered promiscuous mode [ 1282.558138][T15721] bridge0: entered promiscuous mode [ 1283.016198][T15322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.085418][ T5748] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1283.313067][ T5748] usb 6-1: Using ep0 maxpacket: 8 [ 1283.320716][ T5748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1283.340755][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.340782][ T5748] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1283.470417][ T5748] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 1283.470451][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.470473][ T5748] usb 6-1: Product: syz [ 1283.470488][ T5748] usb 6-1: Manufacturer: syz [ 1283.470505][ T5748] usb 6-1: SerialNumber: syz [ 1283.531639][T15322] veth0_vlan: entered promiscuous mode [ 1283.734653][T15730] syzkaller0: entered promiscuous mode [ 1283.734681][T15730] syzkaller0: entered allmulticast mode [ 1283.842171][ T822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1283.990561][T15322] veth1_vlan: entered promiscuous mode [ 1284.023912][ T822] usb 7-1: Using ep0 maxpacket: 16 [ 1284.029971][ T822] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.030220][ T822] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.030439][ T822] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1284.030638][ T822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.341904][ T5748] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1284.427926][ T5748] usb 6-1: 0:1 : does not exist [ 1284.428080][ T5748] usb 6-1: unit 8 not found! [ 1284.645497][ T822] usbhid 7-1:128.0: can't add hid device: -71 [ 1284.645635][ T822] usbhid 7-1:128.0: probe with driver usbhid failed with error -71 [ 1284.689282][ T822] usb 7-1: USB disconnect, device number 3 [ 1284.868999][ T5748] usb 6-1: USB disconnect, device number 4 [ 1285.045933][T14094] udevd[14094]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1285.222199][T15322] veth0_macvtap: entered promiscuous mode [ 1285.386163][T15322] veth1_macvtap: entered promiscuous mode [ 1285.572749][T15322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.670288][T15322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.724946][T15071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.729337][T15071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.730798][T15071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.735440][T15071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.071836][T15802] KVM: debugfs: duplicate directory 15802-5 [ 1287.222621][T15069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.222640][T15069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.705336][ T38] audit: type=1804 audit(1782887289.316:2): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2000" name="/newroot/55/file1" dev="tmpfs" ino=295 res=1 errno=0 [ 1287.834583][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.834616][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.362237][ T5839] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1288.522495][T15080] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1288.564999][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 1288.566858][ T5839] usb 7-1: config 0 has no interfaces? [ 1288.568676][ T5839] usb 7-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice=5f.40 [ 1288.568696][ T5839] usb 7-1: New USB device strings: Mfr=217, Product=141, SerialNumber=237 [ 1288.568711][ T5839] usb 7-1: Product: syz [ 1288.568725][ T5839] usb 7-1: Manufacturer: syz [ 1288.568736][ T5839] usb 7-1: SerialNumber: syz [ 1288.610384][ T5839] usb 7-1: config 0 descriptor?? [ 1288.702229][T15080] usb 8-1: Using ep0 maxpacket: 32 [ 1288.705169][T15080] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1288.709254][T15080] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.709341][T15080] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1288.709387][T15080] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 7 [ 1288.709429][T15080] usb 8-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1288.709457][T15080] usb 8-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 1288.792413][T15080] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 1288.792445][T15080] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.792467][T15080] usb 8-1: Product: syz [ 1288.792482][T15080] usb 8-1: Manufacturer: syz [ 1288.792497][T15080] usb 8-1: SerialNumber: syz [ 1289.388835][T15080] usb 8-1: USB disconnect, device number 2 [ 1289.559010][T15831] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 1289.590276][T14094] udevd[14094]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.695738][T13038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1289.756657][T13038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1289.761827][T13038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1289.781728][T13038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1289.816861][T13038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1289.835863][T10063] usb 7-1: USB disconnect, device number 4 [ 1290.576709][ T5614] syz_tun (unregistering): left allmulticast mode [ 1291.323532][T15832] wlan0 speed is unknown, defaulting to 1000 [ 1292.124148][T13038] Bluetooth: hci2: command tx timeout [ 1293.663464][T15832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.663718][T15832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.664016][T15832] bridge_slave_0: entered allmulticast mode [ 1293.668935][T15832] bridge_slave_0: entered promiscuous mode [ 1293.801521][T15832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.803582][T15832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.805381][T15832] bridge_slave_1: entered allmulticast mode [ 1293.812612][T15832] bridge_slave_1: entered promiscuous mode [ 1293.923460][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2029'. [ 1293.969954][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2029'. [ 1293.988374][T15832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.024199][T15832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.202643][T13038] Bluetooth: hci2: command tx timeout [ 1294.208283][T15832] team0: Port device team_slave_0 added [ 1294.244096][T15832] team0: Port device team_slave_1 added [ 1294.717973][T15832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.717992][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.718023][T15832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.796562][T15923] ip6erspan0: entered allmulticast mode [ 1294.946954][T15832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.946973][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.947004][T15832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.178211][T15832] hsr_slave_0: entered promiscuous mode [ 1295.191004][T15832] hsr_slave_1: entered promiscuous mode [ 1295.200850][T15832] debugfs: 'hsr0' already exists in 'hsr' [ 1295.200880][T15832] Cannot create hsr debugfs directory [ 1295.879757][T14479] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1296.072045][T14479] usb 6-1: Using ep0 maxpacket: 8 [ 1296.075305][T14479] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1296.077928][T14479] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.078044][T14479] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1296.115654][T14479] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 1296.115686][T14479] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.115707][T14479] usb 6-1: Product: syz [ 1296.115721][T14479] usb 6-1: Manufacturer: syz [ 1296.115737][T14479] usb 6-1: SerialNumber: syz [ 1296.272123][T13038] Bluetooth: hci2: command tx timeout [ 1296.404524][T15939] syzkaller0: entered promiscuous mode [ 1296.404552][T15939] syzkaller0: entered allmulticast mode [ 1296.817684][T14479] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1296.855453][T14479] usb 6-1: 0:1 : does not exist [ 1296.855557][T14479] usb 6-1: unit 8 not found! [ 1296.963393][T14479] usb 6-1: USB disconnect, device number 5 [ 1297.056352][T14094] udevd[14094]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.347804][T15832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.362188][T13038] Bluetooth: hci2: command tx timeout [ 1298.935029][T15967] ip6erspan1: entered allmulticast mode [ 1299.957154][T15832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.022433][ T5748] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1300.179151][ T5748] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1300.179181][ T5748] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1300.179204][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.179224][ T5748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1300.179246][ T5748] usb 4-1: config 1 has no interface number 0 [ 1300.179293][ T5748] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1300.179319][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.357003][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.357122][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.358377][ T5748] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1300.424093][T16004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1300.455501][ T5748] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1300.455839][ T5748] snd_usb_pod 4-1:1.1: invalid control EP [ 1300.455856][ T5748] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1300.456563][ T5748] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1300.456975][ T5748] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1301.390158][T16009] fuse: Unknown parameter '0x0000000000000009' [ 1301.391811][T15832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.680944][T15997] wlan0 speed is unknown, defaulting to 1000 [ 1302.567047][T15990] block device autoloading is deprecated and will be removed. [ 1302.619145][T15832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.328475][T16045] bond1: option min_links: invalid value (18446744073709551612) [ 1304.328504][T16045] bond1: option min_links: allowed values 0 - 2147483647 [ 1304.381853][T16045] bond1 (unregistering): Released all slaves [ 1304.545561][T13656] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1304.766299][T13656] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1304.770521][T13656] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.770550][T13656] usb 7-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1304.808114][T13656] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1304.808144][T13656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.808166][T13656] usb 7-1: Product: syz [ 1304.808180][T13656] usb 7-1: Manufacturer: syz [ 1304.808194][T13656] usb 7-1: SerialNumber: syz [ 1305.109342][T13656] usb 7-1: USB disconnect, device number 5 [ 1305.548941][ T5839] usb 4-1: USB disconnect, device number 40 [ 1305.575696][T15832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1305.644484][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1305.645974][T15832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1305.726632][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.727769][T15832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1305.770421][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1305.783852][T15832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1305.854316][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1306.309585][T15832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.399285][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2084'. [ 1306.399601][T16087] openvswitch: netlink: Flow actions attr not present in new flow. [ 1306.585981][T15832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.681411][T15066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.681565][T15066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.902574][T15066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.902745][T15066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.733872][ T822] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1308.919596][ T822] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1308.926822][ T822] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.926852][ T822] usb 7-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1308.941376][ T822] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1308.941427][ T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.941477][ T822] usb 7-1: Product: syz [ 1308.941518][ T822] usb 7-1: Manufacturer: syz [ 1308.941569][ T822] usb 7-1: SerialNumber: syz [ 1309.504951][ T822] usb 7-1: USB disconnect, device number 6 [ 1310.514834][T15832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.995838][T15832] veth0_vlan: entered promiscuous mode [ 1312.257238][T15832] veth1_vlan: entered promiscuous mode [ 1312.576993][T15832] veth0_macvtap: entered promiscuous mode [ 1312.655259][T15832] veth1_macvtap: entered promiscuous mode [ 1312.852987][ T822] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1312.937451][T15832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.055367][T15832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.115486][ T822] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1313.116944][ T822] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.116971][ T822] usb 8-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1313.120147][ T822] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1313.120177][ T822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.120197][ T822] usb 8-1: Product: syz [ 1313.120212][ T822] usb 8-1: Manufacturer: syz [ 1313.120231][ T822] usb 8-1: SerialNumber: syz [ 1313.176721][T15068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.208878][T15068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.217373][T13409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.257992][T13409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.498148][ T822] usb 8-1: USB disconnect, device number 3 [ 1315.406054][T15070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.406077][T15070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.865131][T15068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.865154][T15068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.375736][T16228] bridge0: port 3(macvlan2) entered blocking state [ 1316.380221][T16228] bridge0: port 3(macvlan2) entered disabled state [ 1316.380605][T16228] macvlan2: entered allmulticast mode [ 1316.380622][T16228] ip6gretap0: entered allmulticast mode [ 1316.399327][T16228] macvlan2: entered promiscuous mode [ 1316.518410][T16228] bridge0: port 3(macvlan2) entered blocking state [ 1316.518611][T16228] bridge0: port 3(macvlan2) entered forwarding state [ 1316.592329][ T5748] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1316.742053][ T5748] usb 4-1: Using ep0 maxpacket: 32 [ 1316.744724][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1316.746094][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.746171][ T5748] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1316.746211][ T5748] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 7 [ 1316.746232][ T5748] usb 4-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1316.746251][ T5748] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 1316.749042][ T5748] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 1316.749070][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.749090][ T5748] usb 4-1: Product: syz [ 1316.749104][ T5748] usb 4-1: Manufacturer: syz [ 1316.749123][ T5748] usb 4-1: SerialNumber: syz [ 1316.890451][T16236] kvm: emulating exchange as write [ 1317.414748][ T5748] usb 4-1: USB disconnect, device number 41 [ 1317.533043][ T198] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1317.691095][ T198] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1317.701814][ T198] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.704559][ T198] usb 8-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1317.714766][ T198] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1317.714796][ T198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.714818][ T198] usb 8-1: Product: syz [ 1317.714833][ T198] usb 8-1: Manufacturer: syz [ 1317.714848][ T198] usb 8-1: SerialNumber: syz [ 1317.872208][T13038] Bluetooth: hci3: command 0x0406 tx timeout [ 1317.987423][ T198] usb 8-1: USB disconnect, device number 4 [ 1318.587603][T16262] bridge0: port 3(macvlan2) entered blocking state [ 1318.591546][T16262] bridge0: port 3(macvlan2) entered disabled state [ 1318.591917][T16262] macvlan2: entered allmulticast mode [ 1318.592140][T16262] ip6gretap0: entered allmulticast mode [ 1318.657671][T16262] macvlan2: entered promiscuous mode [ 1318.659574][T16262] bridge0: port 3(macvlan2) entered blocking state [ 1318.666402][T16262] bridge0: port 3(macvlan2) entered forwarding state [ 1320.897322][ T198] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1321.073901][ T198] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1321.099610][ T198] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.099640][ T198] usb 7-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1321.137382][ T198] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1321.137416][ T198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.137438][ T198] usb 7-1: Product: syz [ 1321.137453][ T198] usb 7-1: Manufacturer: syz [ 1321.137468][ T198] usb 7-1: SerialNumber: syz [ 1321.447831][ T198] usb 7-1: USB disconnect, device number 7 [ 1323.302707][T16376] binder: 16375:16376 ioctl 4018620d 0 returned -22 [ 1324.882707][ T198] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1325.051148][ T198] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1325.065059][ T198] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.065090][ T198] usb 6-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1325.099002][ T198] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1325.099034][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.099054][ T198] usb 6-1: Product: syz [ 1325.099068][ T198] usb 6-1: Manufacturer: syz [ 1325.099083][ T198] usb 6-1: SerialNumber: syz [ 1325.222198][T16405] binder: 16404:16405 ioctl 4018620d 0 returned -22 [ 1325.392222][ T198] usb 6-1: USB disconnect, device number 6 [ 1325.922231][ T198] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1326.082024][ T198] usb 8-1: Using ep0 maxpacket: 32 [ 1326.087730][ T198] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1326.089724][ T198] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.089806][ T198] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1326.089848][ T198] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 7 [ 1326.089875][ T198] usb 8-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1326.089901][ T198] usb 8-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 1326.174155][ T198] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 1326.174188][ T198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.174210][ T198] usb 8-1: Product: syz [ 1326.174226][ T198] usb 8-1: Manufacturer: syz [ 1326.174241][ T198] usb 8-1: SerialNumber: syz [ 1326.775303][T16433] binder: 16432:16433 ioctl 4018620d 0 returned -22 [ 1326.924058][ T198] usb 8-1: USB disconnect, device number 5 [ 1326.983831][T16430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1327.053556][T14094] udevd[14094]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.331483][T16471] binder: 16470:16471 ioctl c0306201 0 returned -14 [ 1328.332420][ T822] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1328.543547][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 1328.560897][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1328.579194][ T822] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1328.579225][ T822] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1328.579248][ T822] usb 4-1: config 14 has no interface number 0 [ 1328.579265][ T822] usb 4-1: config 14 has no interface number 1 [ 1328.579340][ T822] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1328.579366][ T822] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1328.579393][ T822] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1328.579421][ T822] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1328.579451][ T822] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1328.579479][ T822] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1328.579509][ T822] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1328.579528][ T822] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1328.721137][ T822] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1328.721167][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.721188][ T822] usb 4-1: Product: syz [ 1328.721202][ T822] usb 4-1: Manufacturer: syz [ 1328.721217][ T822] usb 4-1: SerialNumber: syz [ 1329.275995][ T822] legousbtower 4-1:14.57: interrupt endpoints not found [ 1329.678180][ T822] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1329.915940][ T822] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1330.455867][T16504] [U]  [ 1330.455908][T16504] [U] K{ [ 1330.466100][T16504] [U] T 1ŠFFˊ`GJǘGO/MC [ 1330.503062][T16504] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1330.503613][T16504] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1330.511914][T16504] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1330.619263][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1330.639213][T14479] usb 4-1: USB disconnect, device number 42 [ 1330.675297][T16504] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1330.676141][T16504] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1330.678073][T16504] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1330.685871][T16504] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1330.713012][T16504] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1330.802813][T16504] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1330.803023][T16504] [U] 22Ʃ۩X?0;3U [ 1330.862630][T16504] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1330.888053][T16504] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1330.924059][T16504] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1330.924386][T16504] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1330.925134][T16504] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1330.925180][T16504] [U] EC [ 1330.926034][T16504] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1331.010732][T14479] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1331.056860][T16501] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1331.424137][T16516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1331.662138][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 1331.662164][T16530] openvswitch: netlink: Flow actions attr not present in new flow. [ 1331.808675][T16532] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2249'. [ 1332.688818][T16553] syz_tun: entered allmulticast mode [ 1333.903642][T16561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.289833][T16563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1334.444906][T16571] [U]  [ 1335.137463][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 1335.775621][T16571] syz_tun (unregistering): left allmulticast mode [ 1336.206960][T16599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.958708][T16613] netlink: zone id is out of range [ 1337.958964][T16613] netlink: zone id is out of range [ 1337.958972][T16613] netlink: zone id is out of range [ 1337.958978][T16613] netlink: get zone limit has 8 unknown bytes [ 1338.209137][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2278'. [ 1338.209161][T16622] openvswitch: netlink: Flow actions attr not present in new flow. [ 1338.298284][T16615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1340.192202][T13656] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1340.382093][T13656] usb 4-1: Using ep0 maxpacket: 16 [ 1340.389198][T13656] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.389224][T13656] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.389252][T13656] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1340.389268][T13656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.958287][T13656] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1341.790779][T13656] usb 4-1: USB disconnect, device number 43 [ 1342.280275][T16651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1343.066939][T16683] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2303'. [ 1343.153777][T16676] input: syz0 as /devices/virtual/input/input8 [ 1343.392534][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 1344.170468][T16704] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1344.350145][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2315'. [ 1344.398259][T16716] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2316'. [ 1345.303944][T16745] netlink: 'syz.6.2324': attribute type 10 has an invalid length. [ 1346.536938][T16768] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2332'. [ 1346.619473][T16761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1346.945616][T16758] input: syz0 as /devices/virtual/input/input9 [ 1350.375919][T16842] ip6erspan0: entered allmulticast mode [ 1350.704123][T16858] tipc: Enabling of bearer rejected, failed to enable media [ 1351.582794][ T822] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1351.735285][ T822] usb 7-1: Using ep0 maxpacket: 32 [ 1351.744391][ T822] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1351.746796][ T822] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.746821][ T822] usb 7-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 1351.791614][ T822] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1351.791647][ T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.791662][ T822] usb 7-1: Product: syz [ 1351.791673][ T822] usb 7-1: Manufacturer: syz [ 1351.791684][ T822] usb 7-1: SerialNumber: syz [ 1352.108182][T16869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.122087][T16869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.253177][T16877] netlink: 'syz.6.2368': attribute type 1 has an invalid length. [ 1352.919216][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2375'. [ 1353.412786][ T822] usb 7-1: USB disconnect, device number 8 [ 1353.882449][T16900] tipc: Enabling of bearer rejected, failed to enable media [ 1355.153669][ T822] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1355.313838][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 1355.317254][ T822] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.317279][ T822] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.317306][ T822] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1355.317322][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.855465][ T822] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1356.271214][ T822] usb 5-1: USB disconnect, device number 38 [ 1357.926760][T16976] [U]  [ 1357.926817][T16976] [U] K{ [ 1357.927506][T16976] [U] T 1ŠFFˊ`GJǘGO/MC [ 1357.937076][T16976] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1357.941584][T16976] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1357.979513][T16976] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1358.054844][T16976] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1358.057857][T16976] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1358.078799][T16976] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1358.108142][T16976] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1358.264480][T16976] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1358.312358][T16976] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1358.324827][T16976] [U] 22Ʃ۩X?0;3U [ 1358.368443][T16976] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1358.392418][T16976] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1358.402971][T16976] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1358.416021][T16976] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1358.426884][T16976] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1358.426946][T16976] [U] EC [ 1358.472398][T16976] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1358.508027][T16975] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1358.937148][T16999] netlink: 'syz.5.2416': attribute type 10 has an invalid length. [ 1359.082177][ T198] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1359.234168][ T198] usb 8-1: Using ep0 maxpacket: 32 [ 1359.250981][ T198] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1359.275733][ T198] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.275764][ T198] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 1359.286327][ T198] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1359.286360][ T198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.286383][ T198] usb 8-1: Product: syz [ 1359.286400][ T198] usb 8-1: Manufacturer: syz [ 1359.286416][ T198] usb 8-1: SerialNumber: syz [ 1359.586232][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.626329][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.756529][T17013] netlink: 'syz.7.2413': attribute type 1 has an invalid length. [ 1360.428247][T17013] bond1: entered promiscuous mode [ 1360.450112][T17013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1360.710733][ T198] usb 8-1: USB disconnect, device number 6 [ 1360.824766][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'. [ 1361.805398][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.805481][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.091208][T17073] [U]  [ 1362.091223][T17073] [U] K{ [ 1362.091238][T17073] [U] t 1ŠFfˊ`GJgo/mC [ 1362.091278][T17073] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1362.091309][T17073] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1362.091370][T17073] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1362.091479][T17073] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1362.091518][T17073] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1362.091539][T17073] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1362.091587][T17073] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1362.091862][T17073] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1362.099995][T17073] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1362.100025][T17073] [U] 22Ʃx?0;3u [ 1362.100083][T17073] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1362.100115][T17073] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1362.100135][T17073] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1362.100148][T17073] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1362.100173][T17073] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1362.100207][T17073] [U] ec [ 1362.100218][T17073] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1362.100675][T17072] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1362.671534][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2442'. [ 1364.613137][T17127] [U]  [ 1364.613148][T17127] [U] K{ [ 1364.613161][T17127] [U] t 1ŠFfˊ`GJgo/mC [ 1364.613197][T17127] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1364.613225][T17127] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1364.613282][T17127] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1364.613373][T17127] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1364.613406][T17127] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1364.613424][T17127] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1364.613463][T17127] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1364.613679][T17127] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1364.613717][T17127] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1364.613732][T17127] [U] 22Ʃx?0;3u [ 1364.613790][T17127] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1364.613820][T17127] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1364.613841][T17127] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1364.613854][T17127] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1364.613878][T17127] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1364.613908][T17127] [U] ec [ 1364.613918][T17127] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1364.618343][T17124] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1366.561258][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'. [ 1366.561285][T17168] openvswitch: netlink: Flow actions attr not present in new flow. [ 1368.960136][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2488'. [ 1368.960154][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2488'. [ 1369.165918][T15067] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1369.181276][T15067] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1369.181391][T15067] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1369.181434][T15067] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.082154][ T5748] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1370.242132][ T5748] usb 8-1: Using ep0 maxpacket: 8 [ 1370.245328][ T5748] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1370.247037][ T5748] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1370.253333][ T5748] usb 8-1: string descriptor 0 read error: -22 [ 1370.253436][ T5748] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1370.253463][ T5748] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1370.293472][ T5748] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1370.419139][ T5748] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1370.419542][ T5748] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1370.419597][ T5748] usb 8-1: media controller created [ 1370.469297][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1370.587280][ T5748] zl10353_read_register: readreg error (reg=127, ret==0) [ 1370.656979][ T5748] usb 8-1: USB disconnect, device number 7 [ 1371.031609][T17272] ip6erspan0: entered allmulticast mode [ 1371.602250][T13656] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1371.760430][T13656] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1371.763583][T13656] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.763612][T13656] usb 4-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 1371.800961][T13656] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1371.800995][T13656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.801018][T13656] usb 4-1: Product: syz [ 1371.801032][T13656] usb 4-1: Manufacturer: syz [ 1371.801047][T13656] usb 4-1: SerialNumber: syz [ 1372.176264][T13656] usb 4-1: USB disconnect, device number 44 [ 1372.750302][T17321] netlink: 'syz.4.2524': attribute type 2 has an invalid length. [ 1373.342425][ T198] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1373.513644][ T198] usb 8-1: Using ep0 maxpacket: 32 [ 1373.522215][ T198] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1373.561078][ T198] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.561149][ T198] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1373.561187][ T198] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 7 [ 1373.561223][ T198] usb 8-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1373.561249][ T198] usb 8-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 1373.647187][ T198] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 1373.647209][ T198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.647222][ T198] usb 8-1: Product: syz [ 1373.647231][ T198] usb 8-1: Manufacturer: syz [ 1373.647255][ T198] usb 8-1: SerialNumber: syz [ 1373.871277][T17321] : entered promiscuous mode [ 1374.053614][ C1] ================================================================== [ 1374.053640][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.053686][ C1] Read of size 2 at addr ffff88816029b474 by task syz.5.2528/17337 [ 1374.053708][ C1] [ 1374.053741][ C1] CPU: 1 UID: 0 PID: 17337 Comm: syz.5.2528 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1374.053774][ C1] Tainted: [L]=SOFTLOCKUP [ 1374.053783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1374.053805][ C1] Call Trace: [ 1374.053818][ C1] [ 1374.053828][ C1] dump_stack_lvl+0xe8/0x150 [ 1374.053861][ C1] print_address_description+0x55/0x1e0 [ 1374.053892][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.053922][ C1] print_report+0x58/0x70 [ 1374.053949][ C1] kasan_report+0x117/0x150 [ 1374.053994][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.054028][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.054064][ C1] __dev_queue_xmit+0x275/0x3890 [ 1374.054102][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1374.054128][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1374.054150][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1374.054174][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1374.054206][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1374.054250][ C1] ? br_nf_post_routing+0x160/0xee0 [ 1374.054283][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 1374.054309][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.054333][ C1] NF_HOOK+0x360/0x3f0 [ 1374.054355][ C1] ? net_generic+0x1e/0x240 [ 1374.054382][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1374.054409][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.054452][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.054483][ C1] br_forward_finish+0xd3/0x130 [ 1374.054506][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.054532][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.054557][ C1] NF_HOOK+0x360/0x3f0 [ 1374.054582][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1374.054605][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.054630][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.054658][ C1] ? br_handle_vlan+0x5e/0x530 [ 1374.054697][ C1] __br_forward+0x397/0x540 [ 1374.054721][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.054760][ C1] br_flood+0x3e6/0x8d0 [ 1374.054791][ C1] br_handle_frame_finish+0x1175/0x1990 [ 1374.054826][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.054854][ C1] ? net_generic+0x1e/0x240 [ 1374.054879][ C1] ? net_generic+0x1e/0x240 [ 1374.054902][ C1] ? net_generic+0x1e/0x240 [ 1374.054927][ C1] ? ccm_rx_timer_start+0xc0/0x160 [ 1374.054953][ C1] ? br_nf_pre_routing+0xc41/0x14b0 [ 1374.054985][ C1] br_handle_frame+0x81e/0x1520 [ 1374.055017][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1374.055045][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.055074][ C1] ? macvlan_handle_frame+0xd2e/0x1370 [ 1374.055115][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1374.055141][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 1374.055202][ C1] ? gro_cells_receive+0x50/0x7c0 [ 1374.055226][ C1] ? gro_cells_receive+0x50/0x7c0 [ 1374.055247][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1374.055282][ C1] ? gro_cells_receive+0x379/0x7c0 [ 1374.055303][ C1] ? gro_cells_receive+0x50/0x7c0 [ 1374.055330][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1374.055366][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 1374.055475][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 1374.055506][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1374.055535][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 1374.055562][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1374.055586][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1374.055611][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1374.055630][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1374.055647][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1374.055674][ C1] napi_complete_done+0x299/0x730 [ 1374.055700][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 1374.055723][ C1] ? rt_spin_unlock+0x157/0x200 [ 1374.055748][ C1] ? rt_spin_unlock+0x163/0x200 [ 1374.055772][ C1] gro_cell_poll+0x1d3/0x200 [ 1374.055791][ C1] __napi_p[ 1374.055791][ C1] __napi_poll+0xae/0x550 [ 1374.055816][ C1] net_rx_action+0x621/0xd70 [ 1374.055836][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1374.055849][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1374.055870][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1374.055893][ C1] handle_softirqs+0x1d9/0x6c0 [ 1374.055917][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1374.055934][ C1] ? tun_rx_batched+0x194/0x760 [ 1374.055950][ C1] tun_rx_batched+0x5e3/0x760 [ 1374.055967][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 1374.055985][ C1] ? tun_get_user+0x26f8/0x4380 [ 1374.056000][ C1] ? tun_get_user+0x26f8/0x4380 [ 1374.056016][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1374.056033][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1374.056052][ C1] tun_get_user+0x2b3b/0x4380 [ 1374.056067][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1374.056086][ C1] ? tun_get_user+0x26f8/0x4380 [ 1374.056103][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1374.056131][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 1374.056144][ C1] ? rt_spin_unlock+0x157/0x200 [ 1374.056170][ C1] ? rt_spin_unlock+0x163/0x200 [ 1374.056194][ C1] ? save_netdev_trace_buffer+0x4ae/0x5e0 [ 1374.056220][ C1] ? ref_tracker_alloc+0x353/0x4c0 [ 1374.056237][ C1] ? tun_get+0x157/0x2f0 [ 1374.056249][ C1] ? tun_chr_write_iter+0x63/0x210 [ 1374.056275][ C1] ? vfs_write+0x61e/0xbb0 [ 1374.056299][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1374.056318][ C1] ? tun_get+0x1c/0x2f0 [ 1374.056333][ C1] ? tun_get+0x1c/0x2f0 [ 1374.056346][ C1] ? tun_get+0x1c/0x2f0 [ 1374.056361][ C1] tun_chr_write_iter+0x119/0x210 [ 1374.056388][ C1] vfs_write+0x61e/0xbb0 [ 1374.056420][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1374.056448][ C1] ? __fget_files+0x2a/0x420 [ 1374.056472][ C1] ksys_write+0x156/0x270 [ 1374.056497][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1374.056524][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.056541][ C1] do_syscall_64+0x174/0x580 [ 1374.056559][ C1] ? trace_irq_disable+0x3b/0x140 [ 1374.056583][ C1] ? clear_bhb_loop+0x40/0x90 [ 1374.056601][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.056617][ C1] RIP: 0033:0x7ff64035de59 [ 1374.056638][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.056652][ C1] RSP: 002b:00007ff63e5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1374.056669][ C1] RAX: ffffffffffffffda RBX: 00007ff6405e5fa0 RCX: 00007ff64035de59 [ 1374.056682][ C1] RDX: 000000000000fdef RSI: 0000200000000500 RDI: 0000000000000006 [ 1374.056692][ C1] RBP: 00007ff6403f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 1374.056702][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.056712][ C1] R13: 00007ff6405e6038 R14: 00007ff6405e5fa0 R15: 00007ffdb2d60ec8 [ 1374.056731][ C1] [ 1374.056766][ C1] [ 1374.056773][ C1] The buggy address belongs to the physical page: [ 1374.056790][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16029b [ 1374.056814][ C1] flags: 0x500000000000000(node=1|zone=2) [ 1374.056849][ C1] raw: 0500000000000000 ffffea000580a6c8 ffffea000580a6c8 0000000000000000 [ 1374.056863][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1374.056888][ C1] page dumped because: kasan: bad access detected [ 1374.056904][ C1] page_owner info is not present (never set?) [ 1374.056910][ C1] [ 1374.056914][ C1] Memory state around the buggy address: [ 1374.056923][ C1] ffff88816029b300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1374.056934][ C1] ffff88816029b380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1374.056945][ C1] >ffff88816029b400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1374.056953][ C1] ^ [ 1374.056962][ C1] ffff88816029b480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1374.056972][ C1] ffff88816029b500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1374.056980][ C1] ================================================================== [ 1374.524525][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1374.524557][ C1] CPU: 1 UID: 0 PID: 17337 Comm: syz.5.2528 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1374.524588][ C1] Tainted: [L]=SOFTLOCKUP [ 1374.524597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1374.524610][ C1] Call Trace: [ 1374.524619][ C1] [ 1374.524627][ C1] vpanic+0x56c/0xa60 [ 1374.524664][ C1] ? __pfx_vpanic+0x10/0x10 [ 1374.524701][ C1] panic+0xc5/0xd0 [ 1374.524730][ C1] ? __pfx_panic+0x10/0x10 [ 1374.524762][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1374.524787][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.524819][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1374.524842][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.524871][ C1] check_panic_on_warn+0x89/0xb0 [ 1374.524905][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.524935][ C1] end_report+0x73/0x170 [ 1374.524966][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.524995][ C1] kasan_report+0x128/0x150 [ 1374.525027][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.525061][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1374.525097][ C1] __dev_queue_xmit+0x275/0x3890 [ 1374.525133][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1374.525158][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1374.525180][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1374.525204][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1374.525236][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1374.525280][ C1] ? br_nf_post_routing+0x160/0xee0 [ 1374.525315][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 1374.525340][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.525365][ C1] NF_HOOK+0x360/0x3f0 [ 1374.525387][ C1] ? net_generic+0x1e/0x240 [ 1374.525423][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1374.525444][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.525468][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.525499][ C1] br_forward_finish+0xd3/0x130 [ 1374.525540][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.525565][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.525591][ C1] NF_HOOK+0x360/0x3f0 [ 1374.525618][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1374.525641][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.525666][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.525694][ C1] ? br_handle_vlan+0x5e/0x530 [ 1374.525732][ C1] __br_forward+0x397/0x540 [ 1374.525756][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.525783][ C1] br_flood+0x3e6/0x8d0 [ 1374.525815][ C1] br_handle_frame_finish+0x1175/0x1990 [ 1374.525851][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.525881][ C1] ? net_generic+0x1e/0x240 [ 1374.525907][ C1] ? net_generic+0x1e/0x240 [ 1374.525933][ C1] ? net_generic+0x1e/0x240 [ 1374.525959][ C1] ? ccm_rx_timer_start+0xc0/0x160 [ 1374.525987][ C1] ? br_nf_pre_routing+0xc41/0x14b0 [ 1374.526020][ C1] br_handle_frame+0x81e/0x1520 [ 1374.526054][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1374.526083][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.526112][ C1] ? macvlan_handle_frame+0xd2e/0x1370 [ 1374.526153][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1374.526181][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 1374.526224][ C1] ? gro_cells_receive+0x50/0x7c0 [ 1374.526248][ C1] ? gro_cells_receive+0x50/0x7c0 [ 1374.526270][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1374.526305][ C1] ? gro_cells_receive+0x379/0x7c0 [ 1374.526328][ C1] ? gro_cells_receive+0x50/0x7c0 [ 1374.526355][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1374.526394][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 1374.526443][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 1374.526486][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1374.526528][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 1374.526566][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1374.526602][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1374.526639][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1374.526666][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1374.526693][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1374.526731][ C1] napi_complete_done+0x299/0x730 [ 1374.526779][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 1374.526813][ C1] ? rt_spin_unlock+0x157/0x200 [ 1374.526847][ C1] ? rt_spin_unlock+0x163/0x200 [ 1374.526881][ C1] gro_cell_poll+0x1d3/0x200 [ 1374.526907][ C1] __napi_poll+0xae/0x550 [ 1374.526943][ C1] net_rx_action+0x621/0xd70 [ 1374.526970][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1374.526990][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1374.527017][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1374.527048][ C1] handle_softirqs+0x1d9/0x6c0 [ 1374.527076][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1374.527099][ C1] ? tun_rx_batched+0x194/0x760 [ 1374.527121][ C1] tun_rx_batched+0x5e3/0x760 [ 1374.527143][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 1374.527167][ C1] ? tun_get_user+0x26f8/0x4380 [ 1374.527186][ C1] ? tun_get_user+0x26f8/0x4380 [ 1374.527205][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1374.527226][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1374.527254][ C1] tun_get_user+0x2b3b/0x4380 [ 1374.527275][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1374.527302][ C1] ? tun_get_user+0x26f8/0x4380 [ 1374.527327][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1374.527365][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 1374.527384][ C1] ? rt_spin_unlock+0x157/0x200 [ 1374.527427][ C1] ? rt_spin_unlock+0x163/0x200 [ 1374.527461][ C1] ? save_netdev_trace_buffer+0x4ae/0x5e0 [ 1374.527497][ C1] ? ref_tracker_alloc+0x353/0x4c0 [ 1374.527520][ C1] ? tun_get+0x157/0x2f0 [ 1374.527539][ C1] ? tun_chr_write_iter+0x63/0x210 [ 1374.527574][ C1] ? vfs_write+0x61e/0xbb0 [ 1374.527607][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1374.527633][ C1] ? tun_get+0x1c/0x2f0 [ 1374.527655][ C1] ? tun_get+0x1c/0x2f0 [ 1374.527674][ C1] ? tun_get+0x1c/0x2f0 [ 1374.527697][ C1] tun_chr_write_iter+0x119/0x210 [ 1374.527733][ C1] vfs_write+0x61e/0xbb0 [ 1374.527770][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1374.527806][ C1] ? __fget_files+0x2a/0x420 [ 1374.527838][ C1] ksys_write+0x156/0x270 [ 1374.527871][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1374.527909][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.527933][ C1] do_syscall_64+0x174/0x580 [ 1374.527958][ C1] ? trace_irq_disable+0x3b/0x140 [ 1374.527992][ C1] ? clear_bhb_loop+0x40/0x90 [ 1374.528018][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.528040][ C1] RIP: 0033:0x7ff64035de59 [ 1374.528061][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.528082][ C1] RSP: 002b:00007ff63e5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1374.528106][ C1] RAX: ffffffffffffffda RBX: 00007ff6405e5fa0 RCX: 00007ff64035de59 [ 1374.528124][ C1] RDX: 000000000000fdef RSI: 0000200000000500 RDI: 0000000000000006 [ 1374.528139][ C1] RBP: 00007ff6403f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 1374.528153][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.528167][ C1] R13: 00007ff6405e6038 R14: 00007ff6405e5fa0 R15: 00007ffdb2d60ec8 [ 1374.528193][ C1] [ 1374.528800][ C1] Kernel Offset: disabled