last executing test programs: 4m51.512986919s ago: executing program 2 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x2000, 0x1}, 0x10) timerfd_create(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x7a500, 0x0) syz_open_dev$MSR(&(0x7f0000001180), 0x6, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x40002019}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000003c0)="aa7742d1fd451005faed417201883804b19abd7cc919ab4713e3458f4f82db64ec27104aede175f5d48b06721925533b9ebf0c37c1274277718343222856b8498763163dacbde25510", 0x49}], 0x1, &(0x7f0000001d40)=[@assoc={0x10, 0x117, 0x4, 0x9}], 0x10, 0x40014}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80), 0x0, 0x24004850}, {0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f0000002100)}], 0x2, 0x0, 0x0, 0x80}], 0x3, 0x10) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m48.953481897s ago: executing program 2 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000858000580050019a103000000050005000000000005000ca100000000050007000000000005000a11000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x24044898}, 0x4040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x7, 0x7f, 0x5, @private0, @mcast1, 0x0, 0x1, 0x6, 0x41}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x4006, 0x3d, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast2, 0x40, 0x7800, 0xfffffffc}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) accept4$nfc_llcp(r2, &(0x7f00000001c0), &(0x7f00000002c0)=0x58, 0x100800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) openat$fb1(0xffffff9c, &(0x7f0000000280), 0x100, 0x0) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f00000000c0)=""/84) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r11 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="2c63616368653d6d6d61702c002ad1a3271e927d06242c5d2a199af7a04045ace9de0a40bd27ea4b43b0530138114074c8a77e778ff3cd91b2fedae4fcd837657aa2aeda9d0314f4bf"]) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0062da47930e1d000040001901feffffff00000000017c0000040042802000018006000e00800a001014001a8010004780040046800400b5800400"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m47.1251152s ago: executing program 2 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7e) inotify_init1(0x800) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0xb702, 0x9, 0x0, 0x2000002, 0x7, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r1 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x408210, 0x8, 0x8000, 0x80042}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m45.523649473s ago: executing program 2 (id=122): r0 = openat$audio(0xffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000280)={[0xb000, 0x41000, 0x9000, 0xfec00000], 0xfffffffffffffffa, 0x8, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0x3}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000000340)) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4m45.393940986s ago: executing program 2 (id=123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000040)={'veth0_to_bond\x00'}) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000200)={0x0, 0x0, {0x6, 0x18, 0x80000000, 0x7fff}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x9, 0x2, 0x6}]}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405ddffff6010b3000000000000000000009500000002000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = syz_open_dev$evdev(&(0x7f00000003c0), 0xc89, 0x650100) ioctl$EVIOCREVOKE(r11, 0x40044591, &(0x7f0000000400)=0xf) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r15, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x20c098, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@index_off}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m44.773680209s ago: executing program 2 (id=127): rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x18a}}, 0x20, 0x1, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @empty, @void, {@llc_tr={0x11, {@llc={0x0, 0x1, "ed58", "016cd261"}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x288, 0x616, 0xf83, 0xf08]}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x400c002) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000340), 0x105000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1aa, 0x1aa, 0x5, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @union={0x7, 0x6, 0x0, 0x5, 0x0, 0x200, [{0x4, 0x0, 0x76f0}, {0x7, 0x3, 0x8}, {0xc, 0x4, 0xfffffffd}, {0x10, 0x5, 0x1}, {0x7, 0x0, 0x19}, {0xb, 0x5, 0x6461}]}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x5, 0x5}, {0x10, 0x8, 0x3}, {0x6, 0xf, 0xd}, {0x6, 0x400, 0x5}, {0x7, 0x4, 0x7}]}, @union={0x9, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x9, 0x2, 0x73}, {0x2, 0x3, 0x2}, {0x5, 0x1, 0x7}]}, @datasec={0x10, 0x8, 0x0, 0xf, 0x2, [{0x4, 0x1ff, 0x8}, {0x4, 0x2, 0x2}, {0x2, 0x5, 0x9}, {0x5, 0xd, 0x3ff}, {0x1}, {0x4, 0x5, 0x4}, {0x3, 0x1, 0x98}, {0x1, 0xffffffc0, 0xda9}], "dc69"}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x1b6, [{0xf, 0x1, 0x3}, {0x3, 0x0, 0x7e89cf2d}, {0xb, 0x5, 0x9}, {0x7, 0x3, 0xfffffff7}]}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x53, 0x5}]}, {0x0, [0x61, 0x0, 0xb0eca802e4f16f29]}}, &(0x7f0000000880)=""/4096, 0x1c9, 0x1000, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000001a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x39, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x10, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query, @jmp={0x5, 0x0, 0x8, 0x5, 0xb, 0x30, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x81}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f8}]}, &(0x7f0000001cc0)='syzkaller\x00', 0x13, 0x0, 0x0, 0x41000, 0x41, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001d40)={0x1, 0xa, 0xad, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001dc0)=[{0x0, 0x1, 0x6, 0x7}, {0x3, 0x3, 0x8}], 0x10, 0x8}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ec0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', r3, r2, 0x1, 0x5, 0x2}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f40)={0xffffffffffffffff, 0x2}, 0xc) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x90f, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x11, 0x22, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a2, 0x0, 0x0, 0x0, 0xdff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x3, 0x9, 0x1, 0xfffffffffffffff4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x83, 0x9f, &(0x7f00000005c0)=""/159, 0x41100, 0xa, '\x00', r3, @fallback=0x25, r6, 0x8, &(0x7f00000018c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x400, 0x8}, 0x10, r8, r9, 0x7, &(0x7f0000002000)=[0x1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r12, 0xffffffffffffffff], &(0x7f0000002040)=[{0x1, 0x5, 0x0, 0xa}, {0x0, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x9, 0x8}, {0x3, 0x1, 0x1, 0x9}, {0x0, 0x4, 0x6}, {0x1, 0x3, 0x6, 0x1}, {0x5, 0x1, 0xd, 0x4}], 0x10, 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$unix(r11, &(0x7f0000002180)=@abs, &(0x7f0000002200)=0x6e, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002340)={@ifindex=r7, 0x2f, 0x1, 0x0, &(0x7f0000002240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r13, r3, 0x25, 0x12, @val=@tcx={@void, @value=r4, @void, @void, r14}}, 0x1c) io_pgetevents(r0, 0x10, 0x4, &(0x7f00000023c0)=[{}, {}, {}, {}], &(0x7f0000002440)={0x77359400}, &(0x7f00000024c0)={&(0x7f0000002480)={[0x8, 0x3]}, 0x8}) read$FUSE(r4, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x3, &(0x7f0000004540)={0x0, 0x5, 0x4, @tid=r17}, &(0x7f0000004580)) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000004600), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000004740)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004700)={&(0x7f0000004640)={0x88, r18, 0x0, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004780)={0xffffffffffffffff, r4}, 0xc) bind$inet(r4, &(0x7f00000047c0)={0x2, 0x4e24, @broadcast}, 0x10) sendto$phonet(r4, &(0x7f0000004800)="41667a95d3847ab966bae28349dd3baadeb415402731b6970a7cc1cc67cfac074e0949042c0f7e4f94893f0cbeedf7104b179532697a08103595e50be3b003baf03f4c39924646ec95d5e8dbf992676e7a5fd6cbcc5b713a8a262611a8d2d998", 0x60, 0x40040, 0x0, 0x0) mount$9p_unix(&(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)='./file0\x00', &(0x7f0000004900), 0x183006, &(0x7f0000004940)={'trans=unix,', {[{@uname={'uname', 0x3d, 'syzkaller\x00'}}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r15}}, {@fscache}, {@ignoreqv}, {@version_L}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x3, 0x39, 0x33, 0x62, 0x35, 0x30, 0x32], 0x2d, [0xf, 0x31, 0x65, 0x39], 0x2d, [0x33, 0x38, 0x32, 0x8], 0x2d, [0x31, 0x63, 0x33, 0x62], 0x2d, [0x62, 0x3a, 0x65, 0x5d, 0x63, 0x38, 0x30, 0x37]}}}, {@subj_user}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r15}}, {@hash}, {@fowner_gt={'fowner>', r15}}, {@uid_eq={'uid', 0x3d, r15}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) setgroups(0x6, &(0x7f0000004b40)=[r16, r16, r16, r16, r16, 0x0]) 4m44.278261781s ago: executing program 32 (id=127): rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x18a}}, 0x20, 0x1, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @empty, @void, {@llc_tr={0x11, {@llc={0x0, 0x1, "ed58", "016cd261"}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x288, 0x616, 0xf83, 0xf08]}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x400c002) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000340), 0x105000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1aa, 0x1aa, 0x5, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @union={0x7, 0x6, 0x0, 0x5, 0x0, 0x200, [{0x4, 0x0, 0x76f0}, {0x7, 0x3, 0x8}, {0xc, 0x4, 0xfffffffd}, {0x10, 0x5, 0x1}, {0x7, 0x0, 0x19}, {0xb, 0x5, 0x6461}]}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x5, 0x5}, {0x10, 0x8, 0x3}, {0x6, 0xf, 0xd}, {0x6, 0x400, 0x5}, {0x7, 0x4, 0x7}]}, @union={0x9, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x9, 0x2, 0x73}, {0x2, 0x3, 0x2}, {0x5, 0x1, 0x7}]}, @datasec={0x10, 0x8, 0x0, 0xf, 0x2, [{0x4, 0x1ff, 0x8}, {0x4, 0x2, 0x2}, {0x2, 0x5, 0x9}, {0x5, 0xd, 0x3ff}, {0x1}, {0x4, 0x5, 0x4}, {0x3, 0x1, 0x98}, {0x1, 0xffffffc0, 0xda9}], "dc69"}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x1b6, [{0xf, 0x1, 0x3}, {0x3, 0x0, 0x7e89cf2d}, {0xb, 0x5, 0x9}, {0x7, 0x3, 0xfffffff7}]}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x53, 0x5}]}, {0x0, [0x61, 0x0, 0xb0eca802e4f16f29]}}, &(0x7f0000000880)=""/4096, 0x1c9, 0x1000, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000001a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x39, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x10, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query, @jmp={0x5, 0x0, 0x8, 0x5, 0xb, 0x30, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x81}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f8}]}, &(0x7f0000001cc0)='syzkaller\x00', 0x13, 0x0, 0x0, 0x41000, 0x41, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001d40)={0x1, 0xa, 0xad, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001dc0)=[{0x0, 0x1, 0x6, 0x7}, {0x3, 0x3, 0x8}], 0x10, 0x8}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ec0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', r3, r2, 0x1, 0x5, 0x2}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f40)={0xffffffffffffffff, 0x2}, 0xc) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x90f, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x11, 0x22, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a2, 0x0, 0x0, 0x0, 0xdff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x3, 0x9, 0x1, 0xfffffffffffffff4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x83, 0x9f, &(0x7f00000005c0)=""/159, 0x41100, 0xa, '\x00', r3, @fallback=0x25, r6, 0x8, &(0x7f00000018c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x400, 0x8}, 0x10, r8, r9, 0x7, &(0x7f0000002000)=[0x1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r12, 0xffffffffffffffff], &(0x7f0000002040)=[{0x1, 0x5, 0x0, 0xa}, {0x0, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x9, 0x8}, {0x3, 0x1, 0x1, 0x9}, {0x0, 0x4, 0x6}, {0x1, 0x3, 0x6, 0x1}, {0x5, 0x1, 0xd, 0x4}], 0x10, 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$unix(r11, &(0x7f0000002180)=@abs, &(0x7f0000002200)=0x6e, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002340)={@ifindex=r7, 0x2f, 0x1, 0x0, &(0x7f0000002240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r13, r3, 0x25, 0x12, @val=@tcx={@void, @value=r4, @void, @void, r14}}, 0x1c) io_pgetevents(r0, 0x10, 0x4, &(0x7f00000023c0)=[{}, {}, {}, {}], &(0x7f0000002440)={0x77359400}, &(0x7f00000024c0)={&(0x7f0000002480)={[0x8, 0x3]}, 0x8}) read$FUSE(r4, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x3, &(0x7f0000004540)={0x0, 0x5, 0x4, @tid=r17}, &(0x7f0000004580)) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000004600), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000004740)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004700)={&(0x7f0000004640)={0x88, r18, 0x0, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004780)={0xffffffffffffffff, r4}, 0xc) bind$inet(r4, &(0x7f00000047c0)={0x2, 0x4e24, @broadcast}, 0x10) sendto$phonet(r4, &(0x7f0000004800)="41667a95d3847ab966bae28349dd3baadeb415402731b6970a7cc1cc67cfac074e0949042c0f7e4f94893f0cbeedf7104b179532697a08103595e50be3b003baf03f4c39924646ec95d5e8dbf992676e7a5fd6cbcc5b713a8a262611a8d2d998", 0x60, 0x40040, 0x0, 0x0) mount$9p_unix(&(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)='./file0\x00', &(0x7f0000004900), 0x183006, &(0x7f0000004940)={'trans=unix,', {[{@uname={'uname', 0x3d, 'syzkaller\x00'}}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r15}}, {@fscache}, {@ignoreqv}, {@version_L}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x3, 0x39, 0x33, 0x62, 0x35, 0x30, 0x32], 0x2d, [0xf, 0x31, 0x65, 0x39], 0x2d, [0x33, 0x38, 0x32, 0x8], 0x2d, [0x31, 0x63, 0x33, 0x62], 0x2d, [0x62, 0x3a, 0x65, 0x5d, 0x63, 0x38, 0x30, 0x37]}}}, {@subj_user}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r15}}, {@hash}, {@fowner_gt={'fowner>', r15}}, {@uid_eq={'uid', 0x3d, r15}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) setgroups(0x6, &(0x7f0000004b40)=[r16, r16, r16, r16, r16, 0x0]) 1m24.585095916s ago: executing program 1 (id=1199): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006800e97800000000160000000a000000000000000c0002000100000000000000"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680001000200ffff7f00000000000000000c0002110100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x80000) lseek(r3, 0x851, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000500"/18], 0x3c}, 0x1, 0x11}, 0x0) 1m23.604947335s ago: executing program 1 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x300}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m23.508938984s ago: executing program 1 (id=1203): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x44) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x44) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) 1m23.390658042s ago: executing program 1 (id=1205): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x0, 0x10}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$dsp(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x24008010) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300ee04b092978d0927632f99a6076e5e3781a9afee0f508538f8cf6db7090000000000000028b50a9703c2c6e6306b812351ea8a67769f9e2ab800fd32402699c85ed4f105ab77974fd9081948464fecbbd8a83caee8e5fc16ef42123cc11158aa38184fac10b09eac5e71ba9b1f9e489d4e0e", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r9, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4003b81, 0x0, 0x0) 1m23.18975926s ago: executing program 1 (id=1206): socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000ebffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x7, 0xa9, 0x5, 0x2, 0x1}) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) 1m23.050880728s ago: executing program 1 (id=1207): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r4, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x2}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) 1m22.709251079s ago: executing program 33 (id=1207): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r4, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x2}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) 4.389998686s ago: executing program 5 (id=1586): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x200042, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000140)=0xe648, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x8800) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06464ce, &(0x7f0000000340)={0x0, 0xc, 0x9, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x2, 0xc, 0xffffffff, 0x7ff], [0xff, 0x3, 0x800], [0x5103b9d4, 0x60e, 0x8, 0x4]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06464b8, &(0x7f0000000400)={0x0, 0x400, 0x2, 0xfffff805, 0x3, [0x0, 0x0, r8, r9], [0x3, 0x8001, 0x3, 0x4], [0x1, 0x80000000, 0x1, 0xf2ad], [0x0, 0x4, 0xfff]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 3.539045011s ago: executing program 3 (id=1592): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x1}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f00000001c0), 0x8) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r2, 0xd81, 0x6, 0xa) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x3, &(0x7f0000003e80)={0x0, 0x2, 0xed57, 0xb, r3}) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r5 = socket(0x28, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'veth1_virt_wifi\x00', @random="8dffffff0600"}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x2, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x8cd, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x7, 0x7fff, 0x0, 0x1, 0xb, 0x6, 0xffffffffffffffff, 0x9}, &(0x7f00000009c0)={0x0, 0x989680}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r9, 0x0, {0x2, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x814) vmsplice(r7, 0x0, 0x0, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x2005}, 0x4) 3.389301109s ago: executing program 5 (id=1595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) poll(&(0x7f00000002c0)=[{r1, 0x8000}], 0x1, 0xec) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@multicast2, 0x0, 0x0, 0x10, 0x0, [{@remote}]}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0x9, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30002584af9182189427aa815f0000004000ffff0900010073797a30000000000900020073797a310000000014"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.387667341s ago: executing program 3 (id=1596): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000001100)=ANY=[@ANYBLOB="cc6adb11a19c47344b22c55001f7f59582fb14434548ce3c0e4502af26f1b829bfc694458bf19786f79dbdc95e7382952e2772d7410ebd845306e9c634cd8a02412df2fb22befdef46df", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB="10005080040005000500020000000000"], 0x2c}}, 0x2a7447395cefd1d8) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044095}, 0x40090) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 3.228222689s ago: executing program 3 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$I2C_TIMEOUT(r3, 0x702, 0x81) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000000000000008000000ff00000000000000", @ANYRES32, @ANYBLOB="ddffffffffffffff4e000000008188207150757dcf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0xb, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000010401040300000000000000000000080500405bc7ebd09bc9db26d372c80100030000008e6650fc91c45e34146011217455800975afb20066cab5f04b50305fb0fba80fac043e0d1f4b1aeacda782c2a626dbd1fb3620f6af17eae2d993eae50c16e2c2c58479b1d7927a027962e4df18a89b99a5c119ad64b9414b57c65fd90ff176caf1f64153bb85e1046561e6"], 0x1c}}, 0x24008880) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000060002004e240000080006000001000005000d00000000000800060009000000080004000901"], 0x48}}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4ac, 0x2d8, 0x111, 0x4b4, 0x2d8, 0xd4feffff, 0x3e4, 0x20a, 0x278, 0x3e4, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x21, 0xe}, 0x0, 0x2b4, 0x2d8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffe, 0x81, 0x26, 0x1, 0x7, 0x1, 0x9, 0x20, 0x18}, {0x7c012f2}}}, @common=@unspec=@string={{0xc0}, {0x1, 0x0, 'kmp\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xe}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0x0, 0xffffffff], 'hsr0\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f00000005c0)="08ed281864c7be4faf6947351e55a6d66848f1582591a3f03b6776bb229d6302fbcb6bdb94017fb2e003a165c41430ff472bd00914a56f3d3d10d3cfaa4310ea5010a6cd1cd0bb5e9fd2fcd0a2cbf9712ae58335be17145bf972b70ef530560efd2ba0d471d365f480b763baaf969d9a06fe9b8001702259b45a530a5ba3743ef6703ed9f635a80e45d13b79c8b9c2c8a00af510fca0dfd50cfe1cabc8ef6bd643"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 3.045723209s ago: executing program 5 (id=1601): unshare(0x64000a00) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), 0x0, 0x5, 0x0, 0x0, r1}) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sendto$inet6(r2, &(0x7f0000000880)="3fa07f39ab48136d9639a0edba7e9a0c0e52e4b6b25fdd2a974f418bad6962a0f63a0f2ecddb5d427edb4f44c2ecc98f9fede0a86897208403382a0d5c4ed147fee5ad7956d2d28f255a4db41202f874ed81a08990927e657f0df482a3778d52c77e1aa9db64eb081e8c50d20ded5616c8287da66a40cde8d6e42a0e85c0d75ab6aff5f76495516e466028ba8e98e029b8c82ad7390cddc5ca91c8b8196c4e2eec896deae91f74325fd2eeb40091172d00e25c55ce497fa848ee9ea64db5341e6c1025cd6c070e760c414f739033aa5faf1fd6b3d317189dcd2cde74a1c9e7b546eb992e022508be5af0b774fa6c43c17bc956ee2ade09f3fe9fb551481d110fa113135a4b36924a7b6472a7fabd3df26f4c11884aaca1e117d38ad43307eb715635b5be6588543c0f23c957fdd4e3ea4b26fd3080b49821e4ee8cab97fd91dcdde3f3f9b0723e8bda0e47f1c35504012f6da5a9976ea1c8651a19b639fdfbac0af8910fe9b27093c17e6402eec3b2f93030ec75dc2cc086388290752d8784a0126eb8d6d1e9498749678cf8c77b52291ad718b2bf50890065329dd91f2291e8c19a346dfcd45f0a73d348d21066d58ecbf7e7db430b572c090b624763dd21500cffc17e4ff3b3aa3943db7446f086af3d79f9aaee9d0cef97368dd04a3e5d14c45318801b23d621a4023891dfa8d151f803b33c3a32091a3691fdd263d54a4e34330a00e5b396dfad551f66de44e69ebd96ee2cbcacc888b28d3c8bbc239ec086a1c1173a85b4806d42d3f92ed0e4fe87d47e1a1276a15843b16902b61fdc80d89c426cccb8ad239cde2779af41b90d3111fed6b4ccf2f76702e9b5e4260943a2afa650f1aadb37010508d335d40a09feefae436ec7dd08e2030a116b5064a833405fba50396f3e6187c65361f717238ef216206ef16d4dc07474e94799c3510ec7516f8591e0ae5ab3e7afdc17977f6a6223c4ff7b39de186756ec499db89d0ce6a0c23f2f1476b959de6f34baf3e97889a52bbf1cdb898e645260351e4a3d5f32705e40400c534fc0f01b692a6816dcee2b528cf8e9a0b26cba52fd2dd6bddb65ee9c5bae6469ec2546fd647a024b319188d849655cdecd4bfb6c1c126352aee2635a33ca23d5c90201ccbe67824de05c54952e522282ac4cb674c316862bea2103813f1a35fc49fb25636ffae157492e8a6c4ad5ababc2522f7097c0515a21456b4a0c46176e5bd9a9e37221187890b337f1fc938bf20b8bda3bdb2045613fb4ae14ccc204ec2cac5a07e64f3bafcf3070e06ee95b542ced335d51f2d3f40781ebc793ac7c475b0765383e4b9af3beb371e8dd275a45c8746920add8c3a278fc720d77700efb5d7c6945b0fb96e9cef95b7defffb54df84acf0bf7b85a06573060761408a425f11b5c19dc8747641478e52faec9407285ed9a0f3efb132ab0115b2726eb025c74fb3ecab8d2bba2b5c24032a8b3db6d744f6caadb85ca0f4af20fd7ccfc109521a8c0425da3c2a0cca88d51f83fb9bb0b56d34c0b1c7b46a1f8dc70b90473c784e5dd951d94687e2e9d5d3db349346c8e46ce8839b948168b532e7020e0b45800e1b80db47d5f0ef00f7128f7d5cec9fc9765650711e29e1951ca7276b113f935df85080cbf1ecd35becec08a6d1a489e96af1127c3cf134b119d3c981b0cf7325467e29f0aff040505579f9386a3e44944bd495e478f3ca265046292b95f5b4ad1489ef4b8e2c292263fe0d55579f1fe678ed59614a4ca292db3abb75e3e17d5be9d31030edbe9f86d51cf68825564996504a3b3a0d9562c65e76bc18e779b256d9d7627d67a7d8cd3d55ba260c91bc4cae788687170c88855848061bd2995c752bfa064cf6e4299f01ecff4a8869ef97309f561a8e021d33c06ce920492097cfc723c7673325835cc4b6868a2a526333e37dac3f45243e41d3ab9ec18b22191d54332033b057aa7132c78d67cbf82a4fc4ed52018d00ef15469a4f21baa98ccfd6324cc895fc2fa6ee7f9c59933c045eb54491f93eb09ef383f0edbbf6a6343c3fa1f0b081a1841d67ee71244c7ce4961c4fea3f0652149715064e6aaf4febef328306b76c01ff0da5701f51eac6ae7240d23bf3a192177403a0ca3d942a69d586f7424d1c373fa990e219512b36b05081cef23d603e36ae434e47be5c9b16cff9e42ef4d9397099e4ec5921bd3400f8f8e4a4fea79f279fee04dccb15b26972e0f9884fe5a3ec2e4d27480170a22df975eb659bfd5c673fa6733d798cd77ba568de67da80cf499b86cb597d27618f7170bb1378a9ee26991f471536bff19217209efad7f970705244fe36cc7862770fd7f1fb7cd4b506cb7eaf874e612e12b653fab78e2b89cb67ea661e4acd6b6ee9f496f4048d001bbd7dea0fd3960b7a5238171dd87111aa64c76f358102bf8a9124c33d8531fa66c6f479fc8c69dc8b0026f797c02fe5530bb994739b474f19523592f424d15da71ba4dcdb20917e1496d2d1ae3de084ee04601c57abe21e03c4d6a9637f3e40f8598d6a63da10ae5c06ceabbf923da08e9c283c76a1ec913f62a49fc8a7e8a36fd0e00e07ef1771e12582e820331ad0b19b9dfb5a245a25a8d2504a5ac29c9836c758f89d3bf2edfe07dc861c534a8ce34c4c9cfb52dfd67ddbffa408656ff395a81232d440f6d9b86948e3287b1072bb63fec97d11d86c4e409fb71601d48205c8aa5b0a0965d4d79309ee3ee2610e4408b87dea0fb850b55345ba05459048bd9bd4c386576b553b260dbc0e373a005ce063f4742a25f94f5dcfd44662fcbf637e106620b0b31bdceed444f6edecec6b999e71d1b884941c4ffd78f914d10efaa995f8b62e44c40eff94726b9a110104858b41267e5c95dcd9db64cadcfe7f7872054dc85e42265a3366c759f520c25e50480e8ea04705447846b8eac5e44247a392669725f1d87061f5bb5734b9e7b11540ff6ff2a5b5f421f7cedbd1c53244c54c5838fe4eb40b3fc9928776f9cc41d7a97249c862a34e8fd6cec37c81813b268a944b57ede6a677b02e98e1aee08d7a846b54918507d2b14dedd1d00a48129968cb8482d431ef3f4a17f70ba5c0a042fff25c8abb83ce4d8e6f7a2c4ed84dfa7be5e776e733f62e31bd849614e9d444572e40bdb8fac6abe11124a81550997c27793b342bc8007feccaac4fd37d01a86c4722a9132a2ba4d0cfc1dba2e3b7ea4915c032e6974a704aa50714ae9c76e51fa4338399b3bdf3968886e89a3cbe727f8b14bc89c6f804e0f93d4bfe98d44fd13acecb0ddcc77ef6945c9bef878952da349af87cd2056b6fee790aab475df14815f1ee650b3ab5f4e9d0388250f365e21c100160ca5cc703960cbc56b336a4d193f41b1c4288d1d93d11c5b7f225cf421d5c6a66beba1d3b8651012d101d5353014637e92d594b0788c681951eb16d889c4a7c13662d55997e20ecb0cbd3a094c2ffeeb87d143f79a4da8393ec98094b9d2e4f78a99b9ad3aab2c4a922149a877748c75d650fe5c23a22f489aa81f6773b7f478771541f8f199c452ac0c48835a49b03a06a18a02702cc80d1d945bbf37640887dfacd25930fb232e9f6ec605833258893abfa902a5ffa976d5c384bb8960baee8c4e9bbafa4bfb0e8f71d1276f3b54aa5c924c7d9375c39fb5206e4a601fb71e6dabb9bc3fd8239785b1127d4abfd1f8c9911f2e459034a19a5f0e3fa0e3446b2640acf286083f13986e68ea7089a7ca74d94382bde72fb2bdf353bf2a9e246316685ef992322328806526dcdc0cda36fbb2700c6165c455374b3afc9fa374810698f4ef65ecd70695623f26cf89ef03207982524754fe61f05812008cdb13ea2b3bcedd2011bd45fd5c4417b956580f2b729626997173445d448af3ed2cf26bdf3dcc0045b2bc1d517251651dbdcf44f6a22a1fd50e9a69d3d6a3d53ca377f458fa962b82e0e7251721c35ae5000fc0c4c484b951d3bf10b27e168564faa1cbc99ca2c5daef60f7141909f7a0943b4a9bf70cadcd44cd5118263449ba227e102b639118285772fa70cfa733bc8bb1eac028f8c6b85c9251d20456a3d94eed3b6d7096ca7fb7da1e6809b00883d81ddfa60579157bf491e2de8096619bbb514439f427521691a6184001f0676c164f02308e58c73f5bf11ca11592ca258b94a75652686ef4f10f79ca1760bb5bbd89c534b1f8438d6874fd16cbc161e8cfa0fba8ede9bcb2121a6a955ba62c40ce8cd812b85861ae3c6d3c68595066ec7ffdc3fbcc454f8ca9844545337abb0751ab854074ee458daecc0e09684bdb2ac57e06a7ccfbc102e4daa6260ee0ef043a8efec69bf131792b1926ee97b57d2ccaf79a597d72be647e1e5231fc278df9f16f781cc7f8c6670a37fba033817cae940db25fdceffd4692977a5e60aa8e936b5d85b2b5660145f165908ecc8fdf98c5129196938229c2db8b32c09809d9d632d727fa17733bc9292db0e2ecc53a683dc6aa2d42c0736177032153b0a7059df066add78672bac7da315b39af4b51862434bdade94a98a062f376ceb392dd89f7845e387680aefe2993aad8d856009f9f29af05e0a47f4bcc7c0d6b7fb531ea8f9914d4eb70a7a3e1c5d85de81ad0ca6432a34170b2eb94d165eda28e362d72c6b5f8766bd9a7b450febc90802f195e7cd2b21d3463543165b56170488e1a6419c89f7f291e42160045caff390e6dcb1724b93a947811423671178332af6fd385da220df0a30b30d8c27c97bcef15baec5c4fb6e9c83e782327896df2989f3a7ed9045589fcc50ce1fb6a500135e6310a60b57f48e0e8e22d167cb1522675dfa886d6561b4cd3fc82eb3eb1d61e6ed478fda0c49cdc4e2a292041c9ebe465cfa48761a13aef8eb82ec91b4888fa61281b019111689e9b123ad5a12be0e308dc380ef5e6a6b002f433b4c57b24576c2b7732f2cfce400066d848fbb388e1d9d9bc7fcfb57ef62073ddae5b8d01e051ed3cd3d309fc3e863849fa06d94e5087e61a6762319938f14786ee070334585cb9066d0c4adfdacd99c4c9c8d3f13c8bd7e74106631678f0bda662cb2c32aa76ea0415718c69e5d055306bdb25a5654e3b58f0377192f6264eb073d971d4989ceed049d5ef533f30b4b51d08af1277f76766719dc3a52e56ed453131f1b9cec264b98481d0514bfea9e788227831f03921bf09265171795a14fb54041467d0533fd643e054c8dab1511bd41d3ad864175f44f11968bc6243586224c1744b6793fadc57e73d913836214fa9277cf2168ecd85a1b346786ae48c77ca646dbbc07bceefc9a58969d072de8065745e84fd2e9e039e2d0942090a2993882ae879c24a17a067ac1176f2579776fe020b35067e4154eaab597bb706616aa533b625a0d7ac1bd8144c7c31d9543afdbcba9611e2533d65a682cb8ed8f72c6ea2a02af2db2b009747e70895c3bd39b4ce4be26495068319ea5dfc1089b21b09c8c3407530b36efc31a8247e8bf8b39d1668a7010b62a4c8bf40c9faf380b371ae89df2cd5733a188fd127f960bba2a6a27a80d332dc2d5804aaee9361feefb1875b879ebc51467943bbc982bc908513d737c4d6a3d819f950d0f8d30b8a14976cda29ee1f03bb93a70331fbdb6780eb92b30deaa211d4e0ac71395744171cbafa28b2d948982d3a20fc27614c11a2f47cb794309f2354c61fc1d53ccdf5c9be164b7cf3d1a79ca463c9e59034334ad55215cdde92ee9f0109e60105aa866192468b06972f9942e5fc14f817ca40360bd114992e7c0fbb11bebbfd7e260c080078e012", 0x1000, 0x10, &(0x7f0000001880)={0xa, 0x4e22, 0xfffffff4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40801) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000140)={0x10001, 0x1, 0x3, 0x1, 0x6a, 0x3d, 0x2}) r6 = openat$full(0xffffff9c, &(0x7f0000000100), 0x100, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000000e06050000000000000000000200000705000100070000000900020073797a31000000000900020073797a300000000000000000070000000500010007000000baa14ac003bb12d0b1139f1a9794b74a7b45a0c56a03bdb4417ca54a18b7071e6ed3d524f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8020840) (async) epoll_create1(0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000001a9e46, 0x0) dup(r7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') 2.68985312s ago: executing program 4 (id=1603): fanotify_init(0x1200, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000580)) (async, rerun: 32) getsockopt$inet6_int(r0, 0x29, 0xa, 0x0, &(0x7f0000000000)) (rerun: 32) 2.569723324s ago: executing program 5 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x241}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x3ff, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x81}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2.569195572s ago: executing program 4 (id=1605): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, &(0x7f0000003b00)=0x2000000) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x701180, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x99) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000380)='./file0\x00', 0x10000041) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r1, r3, 0x0, 0x20000000000006) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x116) epoll_create(0x6) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) close(0x3) 2.337396131s ago: executing program 3 (id=1606): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r1, 0x407, 0x2000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @local}}, @NHA_OIF={0x8, 0x5, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000340)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$inet(0x2, 0x2, 0x1) 2.049763801s ago: executing program 0 (id=1607): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', &(0x7f0000000640), &(0x7f00000007c0)={[&(0x7f0000000a00)='&-@^\bV\f\xc6s\xb2%\xfa8@:\'/}\x00/\xed\xf7\xa0\x86k9E\x92\x99\xef@\'\x9f\t5\n\b|O0e\xc2@\x06\xf8N\xf7\xaf\xbdE\xf1$\xd7FYc\x9c\x03\x84@\x10\xd4\xb4\x9e\x81\x01g3IW\x8dW->\xfd\xbars\xd3\\09~/X,\xc1\xcf\xb1\x06%\xa4\xa3d\xbe\xb5V\xde\\\x1aW\x11\x17\\\x03\xce\xa6o\x1a\xd9\xcb\xd1 \rW\xd0D]\x1c\xfd\xd8\x13\x00\x94\xdd\xb2\xcb\x12\xd1\x1a/Vd\x00l\xeb\xea\a}\x1a\xb8\xcc\x865\xd9\r\x81J\xacw\xa9K\x8dKV3\x02\xce\xcf\x97\xb6\x8c\xc1B\x87c\x15\xda\x10\xb6\xa4\x9c\x10*\x15\xda\xfa\x10\x05\xebP3|\xa2fC\xec\x7fO\xfea\x06;\x00Hi\x04\xc1\xd5\xbf\xe1\bb\xed\xb3', &(0x7f0000000480)='\\}\a\x00', &(0x7f0000000900)='0\x01\x15\x00\x00\x00\xb2\xd59\xf4\xb9L`b\x85\xf6\xff6r\x90\xbfG\xee\xdc\x94\xa0Sa\xcb\xcfF\x92O*6\v\xfaPH\x8b9\x7f%\xc9\x1c}F\xf2g\xc9\xc9\x86\xea,-Q\x8e\x10\xb8\xce\x06FM\x89\xc5({7\x9f\xc2\x94\xa7A~\x837`\"$\xf2\xa8\xc9\xa46E\x86\x1cw\x94\xb3;h5\x88\xd0\v\x9e\x04\x9d\xdc\xfa\xc5\x0e\xc4ng\xc9X\xb0j\xda\v\xa6o\xceCX\xbd\xfd\xce\x1e-W\x7fM\xe28?\x9f\xa9\xb3yJ6\xe7\xb4Us\xe6F\x99\x17s\xb9\xa1\x04\xef\xda\xcaP\xd51`Y|\xa5\t\xb9\xc0X?7\rd\x9d\xd56\x81Z<\xac\x99W\xbd\x01~a\xe6L\xcc\x1b\x9d\x14\x197\xd8\xa7\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000780)='bic']}, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 1.799438074s ago: executing program 5 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioprio_get$pid(0x62d7529d8be91220, 0x0) socket$kcm(0x21, 0x7, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3e, 0x0, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001c00070c002000000000000002000000", @ANYRES32=r6, @ANYBLOB="080010001400010000000000005c4700"/38], 0x3c}}, 0x20024090) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x40000030, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x4, 0xa8}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.55949361s ago: executing program 4 (id=1609): symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000bb3a6c53ed4b558e32ffcf82e9c3d483236ffac0f5d1528b2f84cb4079878710608bc2c86eef92c10059fbb78bf891fabec850c0fb5087344f84e916d49bfb1edbddf784b7627f58b54dee15eb6de73982c4cc53d754fd40fba5357659f69b23a04b5a3bd8d0a383b883d4e1bb5656d1c87578330d9163ea8c023076b32d645da2793783d9c650ac0eb735db51db15945f7197ed441ae81c0754d72f3ac82be83b3e9fd3965992dae0554f681e02106193005e1b3ce63dbf25e30fd73bdfd1887c1d984441ad2235021384525834de18d4b12e7d896791c386276ce666a017e8e2d9ddbb91ff1e"], 0x8) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="1b", 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x200000c4) (rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000075c0)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0xc718, 0x40, 0x409, 0x400, 0x6, 0x1}) (async) unshare(0x62020600) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) (async, rerun: 32) r8 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000)=0x8080, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2b637075736574db4e9bec67e2b3a7cd8b52515a20"], 0x8) 1.120961065s ago: executing program 0 (id=1610): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x8401}, {0x9, 0x8, 0x8, 0x1}}}, @TCF_EM_U32={0x38, 0x2, 0x0, 0x0, {{0x7800, 0x3, 0xa}, {0x9, 0x0, 0x1, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.018178962s ago: executing program 4 (id=1611): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000100)={0x0, 0x16, 0xb6}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {}, 0xff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) r4 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x40880) sendmsg$key(r4, 0x0, 0x4008000) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/134, 0x86) 1.016172651s ago: executing program 0 (id=1612): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00,\x00\x00\x00', @ANYRES32, @ANYBLOB="bcf13499be74fb206342248e1561d1975db5774f0e09e1fe4d493c70e675c35fbee157e2836c75a7e1a03df09e861bf49957186118e3a88adcc61fd84b9caa774c85b2a35f4e7d64e2e2768bc0dddc52a9ec04924727d1fad3de40aeee6ba8c554d6c29cfe3aaf949e1a91d7be5471e3efbd75f69853dd32dcf6a0a1ba95002c46d32ac8d656536467", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ffffffff00000000fe0100008508005a180000009500d2000000e00000"], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file3\x00', 0x0, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000003340)=0x7f, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x74, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450b0024000000000073907800000300ac141b89977f2a50d1b7bcb26f8ee414aa0000007f049a2aae2d31425bbbe3b7a6efad13780c7f8b7add77e22d5df7bcb38cebc89b8c98c8428cf75fa2aa56ed6b5aeb5a47bad1418c3afde3b771364b62ead2dfad94c2081644b7ab5fa60e4ad29122339acd18480c70489f8acb27dc65503b109d930e7e4a48de43f11e8304f7dd231900"/175], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a00)=@raw={'raw\x00', 0x8, 0x3, 0x1208, 0x10e4, 0x11, 0x148, 0x0, 0x0, 0x1174, 0x2a8, 0x2a8, 0x1174, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffffff, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {0xff}, {}, 0x67, 0x3, 0x2}, 0x0, 0x10c4, 0x10e4, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.net/syz0\x00', 0x0, {0xe000000}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1264) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0xfffffffffffffff8}], 0x20000000000001b5) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) 366.429485ms ago: executing program 0 (id=1613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000020601080000000000000000000000030d0003006c6973743a736574000000000500050000000000050001000700050000000400000000000900020073797a32000000000c0007800800174000000100"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079101300000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async, rerun: 32) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) (rerun: 32) 309.424712ms ago: executing program 3 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x1) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 305.784257ms ago: executing program 0 (id=1615): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) r2 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000100)={0x10004, "6a1f624176f1253d604ac74a3e858ca23d704163d1a392ebe27490f7af556005", 0x3}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x9, 0x1, 0x0, 0x5, 0x4}) 229.017003ms ago: executing program 0 (id=1616): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000480)="357601000000", 0x6}, {&(0x7f0000000500)='\x00'/10, 0xa}, {&(0x7f0000000540)="7710d9ed4a758736203f825ed62fd03019797dfaccc4828fabe101537c42c09650b988e83c3c1a70b630927c9f609d044ba47f1b2eef8fde8d2bf6dbefd4238e464daeb1ddb17a292bebc475bbfd03b84e265101da452aaf9d72c197b8b87b2db3e5bd403a9fd3fb179c17ad86c5dd1fdbe99023", 0x74}, {&(0x7f0000000b80)="f7d611fd051fddd39299679bd49fe460f7d7d263f1d870623ecbc45284c7b371fa692b918c3094064c125ccc240aece33816959f8c10949454d85bfebbf80fe05b65e44768288334413738a5bb24a4f4659d74d6cfa27581193d544e37078a0170cb83a377b30b7221316cac8254864384f0cdb3528a29ac9a6dc7bb2c", 0x7d}, {&(0x7f0000000b00)="2afd79caf4fc946b2d13d5c757d5a2e0b07efe5a272bc1182820b5a98514572be65c5eebc7d87a64c8110f23a8f501c208ee3f5e13bb4c4ba9c5", 0x3a}, {&(0x7f0000000a80)="c26d0df4d0327731bf0f", 0xa}, {&(0x7f0000000ac0)="5445051257186c330421098f75016e44394ac61889bc539f32739bc047fb2e1b16fe947e6c", 0x25}], 0x7) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c52451ba5abc1044990b6d53f87b45e2d4474bd7139e5b14d776da51f", 0xb4}, {&(0x7f00000003c0)="87348b520f8a493ad8a047181df6537bdb1a05021f46d8199da66dd518ae99529927d7ba3d466263445843914d169d37b43a394b7f72563bb2b3f4d7d82ce7f5fd8465297d841e964f9ebefcab497fd319e92f52", 0x54}, {&(0x7f00000005c0)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241e65d197e16cc0f83b426f50b2e198556fb3093a6c773014485fa3d250498d3c37886f01e28967891c211476b81d48e0d8c0e00a702dc058b1ea7a3379e60ec24f132994e5e71486e475fbd0bc45120c98a1f481eeed303a49c3715c922f20115a81e65ff34d2b6d903525677b13dc5a7a0dcf0d9fefab6f10ac3943b6fa40", 0x94}, {0x0, 0xf}], 0x4, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f0000000340)='./file0/../file0\x00', 0x81) open(&(0x7f0000000440)='./file0/../file0\x00', 0x4008040, 0x26) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xe824, 0x0, 0x3}, 0x18, 0x2) landlock_restrict_self(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x40000000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0/../file0\x00'}, 0x6e) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f00000002c0)="fe", 0xfdef) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000640)={{@my=0x0, 0x1}, {@local, 0xc}, 0x400, "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"}, 0x418, 0x7}) 166.835249ms ago: executing program 5 (id=1617): setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xbc, 0x1, 0x62, "d29f0a17fc0df32970e1588b6de4e03f", "40c782ad561be0ebe720be31b6394de42aeb58c293bee21445ccb0a9ef373090130f1e5b2c5d5ad7f402884a608e05b64a92529ea53e7583b031e03967e69c2cf1ae20940d546c89c2888441a2d55875d580361b00032f6f4ca4ae6f11639987757a1d9f382b3a97dd87032aa270151558ae9ebe9bfec01d1e9951c3de32b8ac76062fe6fd1531062b63ce303eb4d4ad1dce53b5ef583b0f714255d0e45996839f916c60e2c531"}, 0xbc, 0x2) r0 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x200080, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x935, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x350, 0x50, 0x1, {0x22, 0x3e8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x2b, 0xfd}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x8, 0x3, 0x20, 0x8}, 0x193, &(0x7f0000000200)={0x5, 0xf, 0x193, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0x6, 0x1, 0xb6, 0x3}, @generic={0xbd, 0x10, 0x3, "086508cf38ede567ab88e083f3f1ec41f0b1b6e0cc9990466ceb995c5b87b660260a36916515516364588a2eec032aba5feffe43c7ce5681f2a6345477e64b7445035ce551c3330e791bfd9116ec66d347a403ae896909ede2bbaa8b3c40c929a571a559e0e8579f392ee1f2522b458524536fb6358c49ceccfb63959531babf2f79e73085b673d14fdd71ee09c2fc71771c6750faef211eae1f4f0283b32a354981ddfde2e5679337f9b0d50aca8888e53c26053105d7dee153"}, @generic={0x93, 0x10, 0x4, "aee69cde988b7d985e9ad2e2abb617fe2aff45aab984efe15170a10719e99bafe76301ccf00f8079e48e0c5751560a367665c9582e9db63eab8aee3249df9c5dec4520f04393d13815a042106be4e5409598e3470c409308e2b878f67936a17eb76d2b5fec2eecaa601c0c8d68f0c80ca763831435e571b9c514f174886b5c3547741947057182f5d5a4a11c95ba85a8"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "56946e9def9075b8b919073707c789e0"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xa9, 0x4, 0x3, 0xf880, 0xcf6, [0x0, 0x3f00, 0x3f, 0x0]}]}, 0x4, [{0xe7, &(0x7f00000003c0)=@string={0xe7, 0x3, "f40beb05cb1dc09236cf7737cb6a5ce6e48616009b9d8842117e7ba9a417a4d20cf1a2291654e98df06f9fff6d442feb9b5b2f04f075849701373f8e1b885ffc56d9c0abcc2a07cacb2e9fc52a0fddc98f973c355be40c6d8e2e9d849b60b42ab9a69e0f94ff8e7ac0c2e396a1584b08e006d283f38ea27b68b7cde8624af9ba4c65766c612dec3ca2985d2c007eb75fc486953710737359b010c0d79f9e5bab0abe2b4c5fea867fa50ef3195fdc129d1f8e78d5d140338c5b27284a865adee0422b9886b2987d73b3223cd74f6136b7973f698f6721497c96287d4ceb49705965c21deeec"}}, {0x45, &(0x7f00000004c0)=@string={0x45, 0x3, "7aae59524ccc8e006e612e03259cefb1a725ceca8181becd0f2e2b1e8fccbecac78bea3134853f9965cbed22bcf9c118c1ca6311f08039543d4b8de56b553d741311da"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x3e, &(0x7f0000000580)=@string={0x3e, 0x3, "6a615ea9c16ab6a70703ab29f4119432b75139c24246bda97e34d7a29133be3fc47c04a98fb398c206b59d6d3b33c3edc0db95298afc481c15678d3b"}}]}) syz_usb_connect$uac1(0x2, 0xb9, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x7, 0x18, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x3, "dd81c6953edfa040ff"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7f, 0x81, 0x4, {0x7, 0x25, 0x1, 0x8, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x6, 0x5, 0x7}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x4, "11506de3297a74"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x0, 0x3, 0x4, 0x3}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x2}, @as_header={0x7, 0x24, 0x1, 0x34, 0x81, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x42, 0xff, 0x2, {0x7, 0x25, 0x1, 0x4, 0x8, 0xaa}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0xff, 0x7, 0x1, 0x10, 0x6}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x6478}}]}) fcntl$setpipe(r0, 0x407, 0x2eac) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000028c0)={0x50, 0x0, r1, {0x7, 0x2d, 0x400, 0x20000, 0x0, 0x6, 0xf0, 0x9, 0x0, 0x0, 0x1, 0x8}}, 0x50) r2 = syz_open_dev$vcsn(&(0x7f0000002940), 0xfffffffe, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000002980)=0x2) syz_usb_connect$uac3(0x5, 0x11b, &(0x7f00000029c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0x1, 0x40, 0x81, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3e, 0x1cc0d88d}, [@selector_unit={0x9, 0x24, 0xc, 0xe, 0x4, "252219f7"}, @cluster_info_segment={0x6, 0x20, 0x0, 0x8c, 0x3}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x0, 0x895, 0x7, 0x1}, @feature_unit={0x19, 0x24, 0x7, 0x4, 0x6, [0x7, 0x4, 0xa, 0x10, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x7f, 0x5, 0x3, 0x2, 0x7, 0x0, 0x6c0a, 0xff}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x1, 0x6, "ad854fd9"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x10, 0x8, 0x80, "bd374f", "d7"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe1f0, 0xfffd, 0x2, "c182916074a820"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xb, 0x7, 0x19, {0xa, 0x25, 0x25, 0x0, 0x0, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x6, 0x5, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xabc2, 0x1, 0x3, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb3, 0x2, 0x5, 0x5, "98c5f29ab5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x5, 0x5, {0xa, 0x25, 0x25, 0x9, 0x4, 0x3cf}}}}}}}}]}}, &(0x7f0000002d00)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x300, 0xf, 0x63, 0xa, 0x20, 0x3}, 0xf, &(0x7f0000002b40)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x6, 0x934}, @ptm_cap={0x3}]}, 0x2, [{0xea, &(0x7f0000002b80)=@string={0xea, 0x3, "f488b7cddc23cb5eaf421ef27c8a95e9bdcab689a6e1ae1d5a5917fada772c582e3d819fd48ef18bbc894a71066deffa0b2c2f35158312d71c543e34278e56fc7e6ec76608868eef548b9247773054f0b2c89420ad0b0d16625e2450531635705ff5a7144fc189a42675f760beb79c1af718c1a0fb27dba42d2b405977fdc315f4fe70c10078fe08761cb177717b5f2a68851d630c505f4cb97ce21a80704ccf1a2fbe6d36052d0d8c85245ccc0ed8025fddb2afed28d88a3aa61418b11c096d06d7e28169312da2184b64ac7115dbaaf4b5209d05b3f4a5d07824b44b97715f8b900915c584f375"}}, {0x64, &(0x7f0000002c80)=@string={0x64, 0x3, "cb62a853da08cb7d6e57e717b8b45369c0a22487f1dbc2a72972686ad654f46c80236d1cb11e9a065170900b2a76958da1228c80dd7c527905976571198d485bb93572f4daeb07eead6cf98e6f9939a07f76939e69c118d1df54f36aef609f050f5f"}}]}) r3 = openat$uinput(0xffffff9c, &(0x7f0000002d40), 0x802, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002d80)) syz_usb_connect$cdc_ncm(0x4, 0x78, &(0x7f0000002e00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0xfa, 0x50, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "269ba6"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x0, 0x28}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x1, 0xf8}]}, {{0x9, 0x5, 0x81, 0x3, 0x979ee72bfef8986c, 0x7, 0x5a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x8}}}}}}}]}}, &(0x7f0000003240)={0xa, &(0x7f0000002e80)={0xa, 0x6, 0x200, 0x5, 0xe3, 0x6, 0x10, 0xd}, 0x7b, &(0x7f0000002ec0)={0x5, 0xf, 0x7b, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0x8, 0x8}, @generic={0x5d, 0x10, 0x4, "772b572ba82a1b57b00f3ef32e226573be5cfbf13dfbd66be921f216fc39244162eeb8dd1fa716c8159b123b5328bed64e65265ed48e8182ed82892dad88cacd3021330ba2dd9c1f381079ff94d51e811bb734b1094c8e43400b"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x6, 0xf00f, 0x200}]}, 0x5, [{0x98, &(0x7f0000002f40)=@string={0x98, 0x3, "4e9c569ced85d2b0987eb962a77da6a771d0289f184a0561ddbca24b6d2874f428c8b2da9db9820ce67122105f784d169b39ecf32bbdf184a660852dbf7d7f508f69204e2223fe40cc36b66460acfc60db9d55df61b76d5943bf0138f4ae30089a9f67d1e6a37414f9d546fd64be129af884aa5a7c549a28a295e01771788162a87facd200052489d471458f9181fb5ec5e3b004b407"}}, {0xbc, &(0x7f0000003000)=@string={0xbc, 0x3, "d3a0b0e55232ca730b9fb7edc4f4606256891fc7a257650ad6242c30105ab16b8f414f689412a6d9bde9d7a82eb919c8c3ef2187fde297e36023d259fd1b1b08071121c84281d1ae7eed9aceef9ad670795b3809ffd91331003e15c5012d85975fa6dd10abc48d76541386432f048f55f41ca442928e699fbec4882aeefeea87912386a1b58a7f5a8a0dc371a008cb269439620b92f3e3d69d3aa696aaee0928b0bc236e1bd25d1d7b9f4f375efdd0d03b16200806b32ee7e420"}}, {0x77, &(0x7f00000030c0)=@string={0x77, 0x3, "2bbc988cbea220f5973cd87234dd41134a102d788929a0447db41ded5dd9aa840f637e6c8149270efcb85dd7227073294045e5a5fe7e7c1fbe4f660fa4b827ed6d451adc81edbfef23cb6d5a56a1fa5cb731b712d9252e73a701bb2fbd4ce10c725b0958b5a2fad6d994f4df77dfd9ba6e90a7e355"}}, {0xa3, &(0x7f0000003140)=@string={0xa3, 0x3, "3a4a3ab00971565652cdc3fc91362c50e09bfeb129c446235fc2310736b0f313f2abf6c9e0d7d147e5455afc15d54d5542a0047ddf4c2dae27bc7922e718b6352b62eb6a8dd81ed7770a27cbbf3cf1698cf4a95efaa1c823b15b961bb51f55790b297ba6511117b4d8796d232052948b9cea71fd77f6a1d79d27a0ff038637c2ab489c8d70a4267f49777f56a30acad46af20b55f13c76d2393f3430724994af87"}}, {0x4, &(0x7f0000003200)=@lang_id={0x4}}]}) syz_emit_vhci(&(0x7f0000003280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xb, 0xa}, {0xfffc, 0x4, 0x1, 0x5, 0x40}}}}, 0x17) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000032c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) setxattr$trusted_overlay_opaque(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340), &(0x7f0000003380), 0x2, 0x1) r6 = openat$ttyS3(0xffffff9c, &(0x7f00000033c0), 0x58000, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000003400), 0x20, 0x80) writev(r7, &(0x7f00000057c0)=[{&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="9f211a3861b55b3171a30cdae1ecb7a14e6db7163f0be8c3c4d6c0edd8afd86403f0dd016ea489afe80e75d78ea2c724bbee28911072b2e50955a65a7ea4420e9b5a8b79bbc382ad10001d2edb25f213c5989043c9e0dca7ace31775b73a3b4cf537d669a949fe08d0a39788afd9d87ae8a669ca6619a48c932f0c81dbd13e5192b451bdd4e6b2bb591d85c7b16ff7b42de670a7a211790f274bad4320018c4f74b241000ed0752305e0ba72032f8435168d607e3c9e584636070e218c7d403d601c9d25398c0d", 0xc7}, {&(0x7f0000005540)="4dccce525b6ec3c3a903b2dfe800c4cadceea5a10af6cf8b0451a928d06ab438a0b87e675d800cec506d4f4aa08117037bc637ccb262e7d8908f703116b55b4efcb0ea5e8dd1ee689b4f4f22696563cf987efeb86f595b7ffb3a615333b168f8769f35f79b6188bc03696b1d37efe7568b7d0acca5be685669ad823b63138813366a204efe86d483772e282d50ef2f27d221ce6a252a78320316d26f2077c3cac586e9bb96", 0xa5}, {&(0x7f0000005600)="b73bf7ef7a34ddd23e908e556711317533c28d112696998ec7bcd7f4f6344f2def2c843a39e1549efcc60c33e3fed17f3074dd82a070cf0050e3030230b2faeaf7b8877a52aa5760e668dc3f567c0ea27a2dcffddecc848268c06583c2549a21783801a03ddbc3d892faabed8edb2bf45617eb782bdcd9d8f887b9fcf8484de215d97f67b9d7d59a1242ce12322a32df7d28c06ad18d4c777dc20a6612002c0a0d21b72d7d6300a09cb232dd01fcbe7840984a5aaab3c3c42546f37f33ef86a99395baebee6584afbde0336e30db9208ec139301b50532fa8c9cc9c0f55d76cfd0f060ad87ea1eb962eb144b169ea8eebbd9e3835fc2923b02", 0xf9}, {&(0x7f0000005700)="0b749730494322bb32e44e84b89d36c1209a9360fa26e0809f624352a9cc33567a22005a0744343ff72feb3fe846601a02918edba7aaef06e84ae171cdd8ecff46a89661c3f955ba294d54e676071d3e4f25ead153a0018683234defe89642b4b93f22786de146748a72fc91044391a4d45509ebde4c1fb45c96f948a0446aa3a1bcc29c9bf8", 0x86}], 0x6) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000005800)={0x30000, 0x90000}) r8 = openat(r2, &(0x7f0000005840)='./file0\x00', 0x101000, 0x93) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000005880)={0x0, 0x80000000, [0xd9bd, 0x6, 0xfff, 0x2, 0x400, 0x6]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005900), r2) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000005a00)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)={0x48, r10, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x27de}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8001}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x45c4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x48}}, 0x4000001) sendmsg$nl_route(r5, &(0x7f0000005b00)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a80)=@getnexthop={0x20, 0x6a, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000005b40)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000005c00)={0x8, 0x50, [0xb, 0x9, 0x1, 0x400], &(0x7f0000005b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close_range(r8, r4, 0x0) 121.256765ms ago: executing program 3 (id=1618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 59.124963ms ago: executing program 4 (id=1619): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x4, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[{}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1, 0x6, 0x2, 0x0, r0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000000340)=""/248) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$hpet(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xb83a, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x7, 0xfffffffffffffef0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0xc95, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x38, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0xc, 0x1, 0x46}, 0x10, r5, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000640)=[{0x3, 0x5, 0xd, 0x1}, {0x1, 0x3, 0x6, 0x5}], 0x10, 0x5}, 0x94) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8000, 0x2d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x70}, 0x1, 0x0, 0x0, 0x2040000}, 0x20000000) (async, rerun: 64) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000900)=[0x3e5f]) (async, rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000001c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000980)={0x1234, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfc, {0x1e}, [@generic="ca", @nested={0x16a, 0x15, 0x0, 0x1, [@generic="9247a0d1b808c227f314a9b67a3690525f2653ed1ea8ee0f1e3a4b40db89ed9fd9211baab3b3113b7093b1ce5ac87aa95257d62a49864f568e016eb4363a503b4c46921c6edc215f5f9a18f41769143048", @typed={0x8, 0xf, 0x0, 0x0, @u32=0xfff}, @generic="f9c3cec4144ce6fb6f8f2526600c347864464868424a6a8a8c9e1b786319b50777d06543bcb4fd2280208e6798dddafd7ebb66dbd8f3b72bfa9e55f59e9d90b93ed8a56f12f72ec20b598e7874993cdea4d45049ecbb9d9153e35ccdccd43e0f1c4c80e663a20a859a3e3506f15a4ae307695f9482d3545c420dfe7bcf72078f245e2472c58d9c210a35f388dd5ab16b51694005ab", @generic="dfa683671c38ede6b50610d66b8edb0405752dcce9f23dfaf40aa8c4bc34c1665a3d50bc0e81e9007a7fb97edc1897d1c800b104863b4f1cf92883ac5b771f2342bad40f3436df8479a1c0393ef29c63ebb4670c58fc2b48b1c699583281c79147319aad38e146d995af352042f61d4c39a71f17acf48bc2"]}, @generic="9e2228989527a05f177e1df0b207b4374ec214c38377dbb82f7949ad88e2688cf4ec77a3d01805b3518344b9571eb010345c87046921058a36946b2f752d6889f86857824a644d9a3eeb6afbeaf348afe05909db0838563722c266c9c9eb1b69c073f84df91bc3f29c09b4db4b268e9042f72127166d1d8a1dcf3ce7adf4acbe76fbf3125004ede507fd68d11a0573eb86e835d20783c6f8", @nested={0x1004, 0x6a, 0x0, 0x1, [@generic="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"]}, @generic="6ae621210996906388c04702f328343d517f46b594"]}, 0x1234}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xa4, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4014}, 0x4010) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f0000001e00)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001e40)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000001e80)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001ec0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001f00)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000001f40)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001f80)={0x0, 0x1, r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000001fc0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000002040)={&(0x7f0000002000)=[r9, r10, 0x0, r11, r12, r13, r14, r15, r16], 0x9}) (async) r17 = getpgrp(0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r17, 0x2, 0x4002) r18 = openat$mice(0xffffff9c, &(0x7f0000002080), 0x200) write$binfmt_elf64(r18, &(0x7f00000020c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4b, 0x7, 0x8, 0x7, 0x3, 0x3, 0x8, 0x100, 0x40, 0x3d5, 0x10000, 0xf, 0x38, 0x1, 0x4, 0x80, 0x7}, [{0x6474e551, 0x8, 0x9, 0x2, 0x5, 0x629e19e, 0x3, 0x2}], "aa0a2429dfc48b166d9bb08ec35cd1aad90110059c1612762c7501f2219943ae3e831b954f2d29386972707223af2af78ff65063bd2f6bef037a46de676cf08a5b323eaf874829e2646a880b604a679c3226290c706dedec5e602092a0e0adf4a3142035a6089badf1f45d4b2a94888eb58688694186e1a603c4c77fbdb97c5d9290eb25d29239267460d41d0ab6c30a1595158ec1caf04563ad452e2375", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x616) (async) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000002700)=@generic={0x1, 0x8000, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r18, 0xc01064bd, &(0x7f0000003740)={&(0x7f0000002740)="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", 0x1000}) 0s ago: executing program 4 (id=1620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="00000002000000002800127468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="00000002000000002800127468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) (async) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) (async) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x541a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) kernel console output (not intermixed with test programs): 44939][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.447337][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.455667][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.459387][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.467451][ T1040] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 187.484381][ T469] bridge0: port 3(vlan2) entered blocking state [ 187.486734][ T469] bridge0: port 3(vlan2) entered forwarding state [ 187.516034][ T5922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.519137][ T5922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.531785][ T5922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.540272][ T5922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.719532][ T5531] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 187.760064][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 187.934557][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.067314][ T8191] lo speed is unknown, defaulting to 1000 [ 188.359573][ T8192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 189.013276][ T469] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.252505][ T469] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.392340][ T5750] Bluetooth: hci0: command 0x0406 tx timeout [ 189.872335][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.925403][ T8208] fuse: Bad value for 'fd' [ 190.650185][ T5757] Bluetooth: hci3: Malformed LE Event: 0x1b [ 190.940158][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 190.949150][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 193.302305][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.777192][ T8281] can0: slcan on ttynull. [ 193.975900][ T8280] can0 (unregistered): slcan off ttynull. [ 194.197029][ T8296] xt_CONNSECMARK: invalid mode: 5 [ 194.228331][ T8297] 9p: Bad value for 'rfdno' [ 195.401206][ T8318] lo speed is unknown, defaulting to 1000 [ 195.643269][ T8318] 9p: Bad value for 'wfdno' [ 196.313367][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 196.403502][ T8338] sctp: [Deprecated]: syz.3.571 (pid 8338) Use of int in max_burst socket option deprecated. [ 196.403502][ T8338] Use struct sctp_assoc_value instead [ 197.539576][ T8346] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 197.544824][ T8342] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 197.547269][ T8342] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.565614][ T8342] vhci_hcd vhci_hcd.0: Device attached [ 197.634454][ T8344] random: crng reseeded on system resumption [ 197.728291][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.731774][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.832235][ T843] usb 40-1: SetAddress Request (2) to port 0 [ 197.834365][ T843] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 197.872487][ T8348] vhci_hcd: connection reset by peer [ 197.883381][ T60] vhci_hcd vhci_hcd.1: stop threads [ 197.885305][ T60] vhci_hcd vhci_hcd.1: release socket [ 197.887314][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 199.305251][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.309301][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.003548][ T5931] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 200.163967][ T5931] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.168777][ T5931] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.173646][ T5931] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.178755][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.189296][ T8377] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.222796][ T5931] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.471601][ T5931] usb 8-1: USB disconnect, device number 4 [ 201.030177][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 201.265142][ T8427] netlink: 6 bytes leftover after parsing attributes in process `syz.0.587'. [ 201.273934][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.278117][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.282817][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.285636][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.323119][ T8430] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 201.325686][ T8430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.588'. [ 201.328452][ T8430] netlink: 658 bytes leftover after parsing attributes in process `syz.1.588'. [ 201.334667][ T8430] netlink: 1 bytes leftover after parsing attributes in process `syz.1.588'. [ 201.527304][ T8433] bond2: Unable to set down delay as MII monitoring is disabled [ 201.533535][ T8433] bond2 (unregistering): Released all slaves [ 201.863340][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 202.145975][ T8441] lo speed is unknown, defaulting to 1000 [ 202.902267][ T843] usb 40-1: device descriptor read/8, error -110 [ 203.360379][ T843] usb usb40-port1: attempt power cycle [ 203.594139][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 204.089715][ T8470] fuse: Unknown parameter '' [ 204.325434][ T843] usb usb40-port1: unable to enumerate USB device [ 205.611399][ T8495] netlink: 36 bytes leftover after parsing attributes in process `syz.3.604'. [ 205.878994][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.606'. [ 206.000705][ T8511] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 206.003493][ T8511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.030460][ T8511] vhci_hcd vhci_hcd.0: Device attached [ 206.214756][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 206.243836][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 206.312316][ T843] usb 40-1: SetAddress Request (6) to port 0 [ 206.315282][ T843] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 206.583407][ T8512] vhci_hcd: connection reset by peer [ 206.591521][ T469] vhci_hcd vhci_hcd.1: stop threads [ 206.596333][ T469] vhci_hcd vhci_hcd.1: release socket [ 206.599133][ T469] vhci_hcd vhci_hcd.1: disconnect device [ 206.902473][ T8525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.027765][ T8535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.275693][ T8581] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 211.277859][ T8581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.291048][ T8581] vhci_hcd vhci_hcd.0: Device attached [ 211.640461][ T8592] fuse: fd is not a fuse device [ 213.667851][ T8594] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 213.681279][ T8594] netlink: 'syz.0.628': attribute type 10 has an invalid length. [ 213.688045][ T8594] ipvlan0: entered allmulticast mode [ 213.691421][ T8594] veth0_vlan: entered allmulticast mode [ 213.842971][ T8582] vhci_hcd: connection reset by peer [ 213.843297][ T100] vhci_hcd vhci_hcd.1: stop threads [ 213.843319][ T100] vhci_hcd vhci_hcd.1: release socket [ 213.844577][ T843] usb 40-1: device descriptor read/8, error -110 [ 213.870986][ T100] vhci_hcd vhci_hcd.1: disconnect device [ 214.350150][ T8607] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 214.388566][ T8607] bond2: entered promiscuous mode [ 214.399731][ T8607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.498203][ T8607] ipvlan2: entered allmulticast mode [ 214.503656][ T8607] bond2: entered allmulticast mode [ 215.041153][ T8615] vxfs: WRONG superblock magic 00000000 at 1 [ 215.073611][ T8617] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 215.075269][ T8615] vxfs: WRONG superblock magic 00000000 at 8 [ 215.114611][ T8615] vxfs: can't find superblock. [ 215.133026][ T843] usb usb40-port1: attempt power cycle [ 215.144604][ T8617] bond2: entered promiscuous mode [ 215.156786][ T8617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.214637][ T8621] bond2: (slave bridge2): making interface the new active one [ 215.217187][ T8621] bridge2: entered promiscuous mode [ 215.220315][ T8621] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 215.782315][ T843] usb usb40-port1: unable to enumerate USB device [ 217.222512][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.154724][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.649'. [ 218.372203][ T843] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 218.532389][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 218.539125][ T843] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 218.544898][ T843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 218.553325][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.562154][ T843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 218.570004][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 218.581129][ T843] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.593915][ T843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.600154][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.843078][ T843] usb 8-1: usb_control_msg returned -32 [ 218.845839][ T843] usbtmc 8-1:16.0: can't read capabilities [ 218.980349][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 218.991794][ T5931] usb 8-1: USB disconnect, device number 5 [ 219.411705][ T8699] netlink: 'syz.1.657': attribute type 8 has an invalid length. [ 220.047464][ T46] tipc: Subscription rejected, illegal request [ 220.846876][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.666'. [ 220.866315][ T8741] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 221.020609][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.352212][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 224.352225][ T40] audit: type=1326 audit(224.222:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.669" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x0 [ 224.371574][ T8747] lo: entered allmulticast mode [ 224.417048][ T46] tipc: Subscription rejected, illegal request [ 224.429899][ T8759] netlink: 'syz.0.671': attribute type 13 has an invalid length. [ 225.199817][ T1191] tipc: Subscription rejected, illegal request [ 226.667405][ T100] tipc: Subscription rejected, illegal request [ 227.459172][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 227.601829][ T1191] tipc: Subscription rejected, illegal request [ 227.872715][ T5757] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 227.984597][ T8861] bond3: entered allmulticast mode [ 227.987360][ T8861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.233556][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.704'. [ 228.314632][ T8874] kAFS: unable to lookup cell '({^@' [ 230.314999][ T843] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 230.392250][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 230.462752][ T843] usb 8-1: Using ep0 maxpacket: 32 [ 230.466061][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.475149][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.481476][ T843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 230.491240][ T843] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 230.499178][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.508628][ T843] usb 8-1: config 0 descriptor?? [ 230.762843][ T5844] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 230.835446][ T843] usbhid 8-1:0.0: can't add hid device: -71 [ 230.837469][ T843] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 230.848639][ T843] usb 8-1: USB disconnect, device number 6 [ 230.942643][ T5830] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 230.974768][ T5844] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.980964][ T5844] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.990702][ T5844] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.997007][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.023637][ T8908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.035136][ T5844] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.103830][ T5830] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.117144][ T5830] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 231.132044][ T5830] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.140748][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.156741][ T8912] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 231.202986][ T5830] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.421957][ T5830] usb 6-1: USB disconnect, device number 7 [ 231.727647][ T843] usb 9-1: USB disconnect, device number 6 [ 232.271869][ T8934] futex_wake_op: syz.1.719 tries to shift op by -1; fix this program [ 232.276824][ C2] sd 0:0:0:0: [sda] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 232.280079][ C2] sd 0:0:0:0: [sda] tag#21 CDB: Test Unit Ready [ 233.094331][ T8939] wg2 speed is unknown, defaulting to 1000 [ 233.103434][ T8943] 9pnet_virtio: no channels available for device syz [ 233.173496][ T8939] wg2 speed is unknown, defaulting to 1000 [ 233.281086][ T8939] wg2 speed is unknown, defaulting to 1000 [ 233.567419][ T29] wg2 speed is unknown, defaulting to 1000 [ 233.571386][ T8939] infiniband syz2: set active [ 233.573928][ T8939] infiniband syz2: added wg2 [ 233.599376][ T8939] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 233.606075][ T8939] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 233.613272][ T8955] lo speed is unknown, defaulting to 1000 [ 233.614528][ T8939] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 233.621722][ T8955] wg2 speed is unknown, defaulting to 1000 [ 233.643848][ T8939] RDS/IB: syz2: added [ 233.651945][ T8939] smc: adding ib device syz2 with port count 1 [ 233.655193][ T8939] smc: ib device syz2 port 1 has no pnetid [ 233.665559][ T29] wg2 speed is unknown, defaulting to 1000 [ 233.807094][ T8939] wg2 speed is unknown, defaulting to 1000 [ 234.064064][ T8939] wg2 speed is unknown, defaulting to 1000 [ 234.243625][ T8939] wg2 speed is unknown, defaulting to 1000 [ 234.257797][ T8951] 9pnet_fd: p9_fd_create_tcp (8951): problem connecting socket to 127.0.0.1 [ 234.370404][ T8953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.390849][ T8953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.400106][ T8953] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.508499][ T8953] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.532941][ T8953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.541582][ T8953] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.550904][ T8953] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.553421][ T8953] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.567108][ T8939] wg2 speed is unknown, defaulting to 1000 [ 234.573031][ T8953] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.883058][ T8977] geneve2: left promiscuous mode [ 234.885368][ T8977] geneve2: left allmulticast mode [ 234.894554][ T8977] bridge1: left promiscuous mode [ 234.897551][ T8977] bridge1: left allmulticast mode [ 234.903353][ T1191] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.917631][ T1191] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.925261][ T1191] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.937118][ T1191] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.622329][ T5757] Bluetooth: hci0: command 0x0406 tx timeout [ 236.432242][ T5757] Bluetooth: hci1: command 0x0406 tx timeout [ 236.582335][ T5757] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.584991][ T5757] Bluetooth: hci3: command 0x2016 tx timeout [ 238.167138][ T9015] ceph: No mds server is up or the cluster is laggy [ 238.181904][ T29] libceph: connect (1)[c::]:6789 error -101 [ 238.187963][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 238.233176][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 238.237891][ T9025] veth0_macvtap: Caught tx_queue_len zero misconfig [ 238.240772][ T9025] netem: invalid attributes len -8 [ 238.243226][ T9025] netem: change failed [ 238.399452][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 238.408018][ T9013] fuse: Unknown parameter 'X$XPvW}BzS뇹2᭟u' [ 238.502192][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 238.757182][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.773522][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.848604][ T5750] Bluetooth: hci3: command 0x2016 tx timeout [ 238.851195][ T5757] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.853556][ T9044] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 238.879482][ T9042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 238.882338][ T9042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.885997][ T9042] vhci_hcd vhci_hcd.0: Device attached [ 239.067604][ T9048] netlink: 108 bytes leftover after parsing attributes in process `syz.0.747'. [ 239.172382][ T29] usb 40-1: SetAddress Request (10) to port 0 [ 239.175440][ T29] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 239.255440][ T9045] vhci_hcd: connection reset by peer [ 239.261773][ T469] vhci_hcd vhci_hcd.1: stop threads [ 239.266372][ T469] vhci_hcd vhci_hcd.1: release socket [ 239.268730][ T9054] tipc: Enabled bearer , priority 9 [ 239.269088][ T469] vhci_hcd vhci_hcd.1: disconnect device [ 239.400485][ T9061] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 239.400508][ T9062] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 239.436916][ T9061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.467714][ T9062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.471567][ T9062] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.477530][ T9062] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 239.507843][ T9061] gretap1: entered promiscuous mode [ 239.517055][ T9061] bond1: (slave gretap1): making interface the new active one [ 239.522356][ T9061] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 239.534053][ T9061] macvlan2: entered promiscuous mode [ 239.536597][ T9061] macvlan2: entered allmulticast mode [ 239.539503][ T9061] bond1: entered promiscuous mode [ 239.545901][ T9061] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.551139][ T9061] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 239.557943][ T9061] bond1: left promiscuous mode [ 239.605714][ T9067] netlink: 'syz.3.752': attribute type 21 has an invalid length. [ 239.610834][ T9068] netlink: 'syz.0.753': attribute type 3 has an invalid length. [ 239.899278][ T9081] lo speed is unknown, defaulting to 1000 [ 239.904041][ T9081] wg2 speed is unknown, defaulting to 1000 [ 240.012212][ T5901] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 240.182275][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 240.189115][ T5901] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.193164][ T5901] usb 9-1: config 0 has no interface number 0 [ 240.198993][ T5901] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 240.204121][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.207528][ T5901] usb 9-1: Product: syz [ 240.209606][ T5901] usb 9-1: Manufacturer: syz [ 240.211881][ T5901] usb 9-1: SerialNumber: syz [ 240.221305][ T5901] usb 9-1: config 0 descriptor?? [ 240.234526][ T5901] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 240.508546][ T5901] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 240.593568][ T5757] Bluetooth: hci1: command 0x0406 tx timeout [ 240.610067][ T5901] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 240.654636][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 240.784211][ C3] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 240.788254][ T5901] usb 9-1: USB disconnect, device number 7 [ 240.812231][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 240.822020][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 240.827123][ T5901] quatech2 9-1:0.51: device disconnected [ 240.873755][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 240.909157][ T5757] Bluetooth: hci3: command 0x2016 tx timeout [ 240.942287][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 241.134701][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 241.216561][ T9138] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 241.238952][ T9138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.271399][ T9125] bond3: (slave geneve2): making interface the new active one [ 241.276948][ T9125] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 241.280693][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.287113][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.290279][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.298676][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.307102][ T9149] tipc: Enabling of bearer rejected, failed to enable media [ 241.369009][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 241.531026][ T9161] lo speed is unknown, defaulting to 1000 [ 241.534338][ T9161] wg2 speed is unknown, defaulting to 1000 [ 242.182616][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 243.112379][ T9229] fuse: fd is not a fuse device [ 243.363316][ T9233] Cannot find add_set index 2 as target [ 243.583931][ T40] audit: type=1326 audit(243.462:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.595066][ T40] audit: type=1326 audit(243.462:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.610328][ T40] audit: type=1326 audit(243.462:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.618454][ T40] audit: type=1326 audit(243.462:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.627058][ T40] audit: type=1326 audit(243.462:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.635305][ T40] audit: type=1326 audit(243.462:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.645805][ T40] audit: type=1326 audit(243.462:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.654490][ T40] audit: type=1326 audit(243.462:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.663342][ T40] audit: type=1326 audit(243.462:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 243.671077][ T40] audit: type=1326 audit(243.462:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x7ffc0000 [ 244.262415][ T29] usb 40-1: device descriptor read/8, error -110 [ 245.243293][ T29] usb usb40-port1: attempt power cycle [ 245.268494][ T9268] lo speed is unknown, defaulting to 1000 [ 245.274940][ T9268] wg2 speed is unknown, defaulting to 1000 [ 245.543122][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 246.512775][ T29] usb usb40-port1: unable to enumerate USB device [ 246.662262][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.819589][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 247.298414][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 247.304726][ T9303] block nbd0: Unsupported socket: should be TCP or UNIX. [ 247.713198][ T9311] netlink: 'syz.1.811': attribute type 20 has an invalid length. [ 247.716678][ T9311] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.584920][ T9341] lo speed is unknown, defaulting to 1000 [ 248.593932][ T9341] wg2 speed is unknown, defaulting to 1000 [ 248.835745][ T5757] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 250.222184][ T857] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.342136][ T9364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'. [ 250.405846][ T857] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.410438][ T857] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 250.421360][ T857] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.425885][ T857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.429543][ T857] usb 6-1: Product: syz [ 250.431401][ T857] usb 6-1: Manufacturer: syz [ 250.434163][ T857] usb 6-1: SerialNumber: syz [ 250.447723][ T857] cdc_mbim 6-1:1.0: skipping garbage [ 250.655019][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.273321][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.279086][ T857] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 251.288965][ T857] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 251.327238][ T857] wwan wwan0: port wwan0mbim0 attached [ 251.386530][ T857] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 56:6e:a7:12:53:50 [ 251.480552][ C3] wdm_int_callback: 10135 callbacks suppressed [ 251.480572][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.485558][ C3] wdm_int_callback: 10135 callbacks suppressed [ 251.485574][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.490719][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.493755][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.497042][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.500192][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.503062][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.505678][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.508356][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.511282][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.518729][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.521042][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.525053][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.527324][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.529959][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.532599][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.535763][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.538076][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.540230][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 251.542368][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 251.566089][ T9378] netlink: 112 bytes leftover after parsing attributes in process `syz.3.830'. [ 251.569404][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 251.577036][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 251.617469][ T9383] fuse: Unknown parameter 'group_i[3P']d' [ 251.842726][ T5454] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 251.888966][ T5531] usb 6-1: USB disconnect, device number 8 [ 251.901907][ T5531] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 251.989348][ T857] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 252.143551][ T5531] wwan wwan0: port wwan0mbim0 disconnected [ 252.146891][ T857] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.146915][ T857] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.146937][ T857] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.146950][ T857] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.209031][ T9390] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.301204][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 254.014207][ T857] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.642565][ T5531] usb 9-1: USB disconnect, device number 8 [ 254.809494][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 255.383853][ T9450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.656737][ T5750] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 255.980252][ T100] tipc: Subscription rejected, illegal request [ 256.034881][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 256.067541][ T9476] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 256.084702][ T9475] IPVS: stopping master sync thread 9476 ... [ 256.129476][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.850'. [ 256.802546][ T5844] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 256.972178][ T5844] usb 9-1: Using ep0 maxpacket: 8 [ 256.979574][ T5844] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 256.986570][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.992183][ T5844] usb 9-1: Product: syz [ 256.993893][ T5844] usb 9-1: Manufacturer: syz [ 256.998721][ T5844] usb 9-1: SerialNumber: syz [ 257.006129][ T5844] usb 9-1: config 0 descriptor?? [ 257.029011][ T5844] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 257.035144][ T5844] dvb-usb: bulk message failed: -22 (2/0) [ 257.053329][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.062138][ T5844] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 257.071715][ T5844] usb 9-1: media controller created [ 257.094828][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.134517][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 257.134535][ T40] audit: type=1326 audit(257.012:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.148712][ T40] audit: type=1326 audit(257.012:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.158751][ T40] audit: type=1326 audit(257.012:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.203652][ T9514] fuse: blksize only supported for fuseblk [ 257.205358][ T40] audit: type=1326 audit(257.012:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.257971][ T40] audit: type=1326 audit(257.012:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.266906][ T40] audit: type=1326 audit(257.012:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.302749][ T9494] dvb-usb: bulk message failed: -22 (4/0) [ 257.302882][ T40] audit: type=1326 audit(257.022:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.327644][ T40] audit: type=1326 audit(257.022:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.336323][ T40] audit: type=1326 audit(257.022:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.344577][ T40] audit: type=1326 audit(257.082:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 257.355696][ T5844] cxusb: set interface failed [ 257.357535][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 257.382773][ T5844] DVB: Unable to find symbol mt352_attach() [ 257.385142][ T5844] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 257.452168][ T5844] rc_core: IR keymap rc-dvico-portable not found [ 257.454638][ T5844] Registered IR keymap rc-empty [ 257.461642][ T5844] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 257.470454][ T5844] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input22 [ 257.478219][ T5844] dvb-usb: schedule remote query interval to 100 msecs. [ 257.483822][ T5844] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 257.494347][ T5844] usb 9-1: USB disconnect, device number 9 [ 257.583664][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 257.614569][ T5844] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 257.655649][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 257.666386][ T9531] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 257.673163][ T9531] ALSA: mixer_oss: invalid index 137438 [ 258.735288][ T9557] binder: 9552:9557 ioctl c0285840 80000000 returned -22 [ 258.766064][ T9559] x_tables: duplicate underflow at hook 1 [ 258.888828][ T9559] hub 8-0:1.0: USB hub found [ 259.115116][ T9559] hub 8-0:1.0: 1 port detected [ 259.784141][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 260.438267][ T9563] bond2: Unable to set down delay as MII monitoring is disabled [ 260.443525][ T9563] bond2 (unregistering): Released all slaves [ 260.717060][ T9575] binder: 9572:9575 ioctl c00c620f 800003c0 returned -22 [ 260.743881][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.748125][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.935491][ T9588] syz.4.876 (9588): drop_caches: 2 [ 260.978809][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 261.254198][ T9609] Scaler: ================= START STATUS ================= [ 261.257171][ T9609] Scaler: ================== END STATUS ================== [ 261.489748][ T9626] XFS (nullb0): Invalid superblock magic number [ 261.772210][ T5531] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 261.925393][ T5531] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 261.928639][ T5531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.931709][ T5531] usb 6-1: Product: syz [ 261.933495][ T5531] usb 6-1: Manufacturer: syz [ 261.935332][ T5531] usb 6-1: SerialNumber: syz [ 261.939427][ T5531] usb 6-1: config 0 descriptor?? [ 262.260047][ T5750] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 262.327862][ T29] usb 6-1: USB disconnect, device number 9 [ 262.436323][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 263.082211][ T9667] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 263.084330][ T9667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.087423][ T9667] vhci_hcd vhci_hcd.0: Device attached [ 263.202429][ T9668] vhci_hcd: connection closed [ 263.202717][ T1191] vhci_hcd vhci_hcd.3: stop threads [ 263.212211][ T1191] vhci_hcd vhci_hcd.3: release socket [ 263.217859][ T1191] vhci_hcd vhci_hcd.3: disconnect device [ 263.782205][ T9693] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 263.784815][ T9693] netlink: 'syz.1.905': attribute type 2 has an invalid length. [ 263.939648][ T9707] ip6t_srh: unknown srh invflags B520 [ 263.941658][ T9705] ip6t_srh: unknown srh invflags B520 [ 264.350761][ T9743] loop5: detected capacity change from 0 to 7 [ 264.371525][ T9743] Dev loop5: unable to read RDB block 7 [ 264.374360][ T9743] loop5: unable to read partition table [ 264.378305][ T9743] loop5: partition table beyond EOD, truncated [ 264.381464][ T9743] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 264.402910][ T9743] binder: 9739:9743 ioctl c0285840 80000000 returned -22 [ 264.834550][ T9752] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 264.972397][ T9753] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.696690][ T9782] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 266.636030][ T9799] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 266.639252][ T9799] netlink: 'syz.4.929': attribute type 7 has an invalid length. [ 266.641784][ T9799] netlink: 'syz.4.929': attribute type 8 has an invalid length. [ 266.646033][ T9799] netlink: 208 bytes leftover after parsing attributes in process `syz.4.929'. [ 266.651690][ T9799] NCSI netlink: No device for ifindex 119 [ 266.904076][ T9809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 266.906379][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.910587][ T9809] vhci_hcd vhci_hcd.0: Device attached [ 266.919996][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 267.384877][ T857] hid_parser_main: 4 callbacks suppressed [ 267.384901][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.395637][ T9837] ip6_vti0: entered promiscuous mode [ 267.398060][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 267.401850][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.409465][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.413070][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.416514][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.421516][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.426877][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.429959][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.432837][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.435662][ T857] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 267.447303][ T857] hid-generic 0006:0004:0009.0006: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 267.508054][ T9841] fido_id[9841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.622874][ T100] tipc: Subscription rejected, illegal request [ 267.806736][ T9852] netlink: 'syz.3.942': attribute type 3 has an invalid length. [ 267.875314][ T9831] lo speed is unknown, defaulting to 1000 [ 267.880555][ T9831] wg2 speed is unknown, defaulting to 1000 [ 268.126990][ T843] usb 40-1: SetAddress Request (14) to port 0 [ 268.130283][ T9810] vhci_hcd: connection closed [ 268.130676][ T843] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 268.132628][ T90] vhci_hcd vhci_hcd.1: stop threads [ 268.138787][ T90] vhci_hcd vhci_hcd.1: release socket [ 268.148479][ T90] vhci_hcd vhci_hcd.1: disconnect device [ 268.360232][ T9866] 9p: Bad value for 'rfdno' [ 269.899351][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 269.899366][ T40] audit: type=1326 audit(269.772:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.4.953" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15f7c code=0x0 [ 270.637387][ T9899] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20003 [ 270.674376][ T9899] lo speed is unknown, defaulting to 1000 [ 270.683325][ T9899] wg2 speed is unknown, defaulting to 1000 [ 270.819550][ T40] audit: type=1326 audit(270.692:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.0.959" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x0 [ 270.838027][ T9914] lo speed is unknown, defaulting to 1000 [ 270.867588][ T9914] wg2 speed is unknown, defaulting to 1000 [ 270.939238][ T9920] dlm: no locking on control device [ 271.094428][ T9912] Set syz1 is full, maxelem 6117 reached [ 271.140428][ T9933] tmpfs: Unknown parameter 'grpquosjta_block_hardlimit' [ 271.400447][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.965'. [ 271.402477][ T857] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 271.404761][ T9938] netlink: 90 bytes leftover after parsing attributes in process `syz.4.965'. [ 271.415900][ T9938] netlink: 90 bytes leftover after parsing attributes in process `syz.4.965'. [ 271.530453][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 271.564034][ T857] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.568275][ T857] usb 8-1: config 0 has no interfaces? [ 271.573795][ T857] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 271.578157][ T857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.581579][ T857] usb 8-1: Product: syz [ 271.585189][ T857] usb 8-1: Manufacturer: syz [ 271.587286][ T857] usb 8-1: SerialNumber: syz [ 271.604261][ T857] usb 8-1: config 0 descriptor?? [ 271.820823][ T29] usb 8-1: USB disconnect, device number 7 [ 271.829270][ T40] audit: type=1800 audit(271.702:207): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.970" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 272.373427][ T9960] netlink: 6 bytes leftover after parsing attributes in process `syz.1.972'. [ 272.775889][ T9962] random: crng reseeded on system resumption [ 273.112435][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 273.253534][ T843] usb 40-1: device descriptor read/8, error -110 [ 273.603749][ T9988] binder: Bad value for 'max' [ 273.680301][ T843] usb usb40-port1: attempt power cycle [ 273.736682][ T1256] tipc: Subscription rejected, illegal request [ 274.102239][ T5844] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 274.262145][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 274.269326][ T5844] usb 9-1: config 0 has no interfaces? [ 274.275757][ T5844] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 274.281730][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.285794][ T843] usb usb40-port1: unable to enumerate USB device [ 274.290280][ T5844] usb 9-1: Product: syz [ 274.293738][ T5844] usb 9-1: Manufacturer: syz [ 274.295700][ T5844] usb 9-1: SerialNumber: syz [ 274.309161][ T5844] r8152-cfgselector 9-1: Unknown version 0x0000 [ 274.311840][ T5844] r8152-cfgselector 9-1: config 0 descriptor?? [ 274.537882][ T843] r8152-cfgselector 9-1: USB disconnect, device number 10 [ 274.990263][T10009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.008549][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 275.032274][T10009] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 275.154604][T10022] tmpfs: Bad value for 'mpol' [ 275.376557][T10019] bridge0: port 3(macvlan2) entered blocking state [ 275.384893][T10019] bridge0: port 3(macvlan2) entered disabled state [ 275.393185][T10019] macvlan2: entered allmulticast mode [ 275.398883][T10019] ip6gretap0: entered allmulticast mode [ 275.409045][T10019] macvlan2: entered promiscuous mode [ 275.453521][T10016] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 275.459008][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.3.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.459029][T10016] Tainted: [L]=SOFTLOCKUP [ 275.459034][T10016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.459043][T10016] Call Trace: [ 275.459075][T10016] [ 275.459081][T10016] dump_stack_lvl+0x100/0x190 [ 275.459100][T10016] sysfs_warn_dup.cold+0x1c/0x28 [ 275.459122][T10016] sysfs_do_create_link_sd+0x113/0x140 [ 275.459138][T10016] sysfs_create_link+0x61/0xc0 [ 275.459152][T10016] device_add+0x675/0x1950 [ 275.459192][T10016] ? __pfx_device_add+0x10/0x10 [ 275.459209][T10016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.459227][T10016] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 275.459247][T10016] wiphy_register+0x1edd/0x2d90 [ 275.459263][T10016] ? __rtnl_unlock+0xb9/0xf0 [ 275.459282][T10016] ? __pfx_wiphy_register+0x10/0x10 [ 275.459298][T10016] ? __asan_memset+0x23/0x50 [ 275.459317][T10016] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 275.459336][T10016] ieee80211_register_hw+0x3055/0x4570 [ 275.459356][T10016] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 275.459368][T10016] ? __pfx___debug_object_init+0x10/0x10 [ 275.459405][T10016] ? find_held_lock+0x2b/0x80 [ 275.459422][T10016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.459439][T10016] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 275.459478][T10016] ? __hrtimer_setup+0x208/0x330 [ 275.459494][T10016] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 275.459521][T10016] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 275.459537][T10016] ? __asan_memcpy+0x3c/0x60 [ 275.459556][T10016] hwsim_new_radio_nl+0xc5f/0x1370 [ 275.459572][T10016] ? rcu_is_watching+0x12/0xc0 [ 275.459588][T10016] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 275.459606][T10016] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 275.459619][T10016] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 275.459634][T10016] genl_family_rcv_msg_doit+0x214/0x300 [ 275.459648][T10016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.459659][T10016] ? genl_get_cmd+0x3e7/0x760 [ 275.459673][T10016] ? bpf_lsm_capable+0x9/0x10 [ 275.459686][T10016] ? security_capable+0x80/0x260 [ 275.459725][T10016] ? ns_capable+0xd2/0xf0 [ 275.459741][T10016] genl_rcv_msg+0x560/0x800 [ 275.459796][T10016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.459816][T10016] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 275.459834][T10016] ? __lock_acquire+0x4a5/0x2630 [ 275.459849][T10016] netlink_rcv_skb+0x159/0x420 [ 275.459867][T10016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.459881][T10016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.459906][T10016] ? netlink_deliver_tap+0x1ae/0xcc0 [ 275.459930][T10016] genl_rcv+0x28/0x40 [ 275.459940][T10016] netlink_unicast+0x585/0x850 [ 275.459960][T10016] ? __pfx_netlink_unicast+0x10/0x10 [ 275.459981][T10016] netlink_sendmsg+0x8b0/0xda0 [ 275.460003][T10016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.460024][T10016] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 275.460090][T10016] ____sys_sendmsg+0x9e1/0xb70 [ 275.460107][T10016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.460128][T10016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.460153][T10016] ___sys_sendmsg+0x190/0x1e0 [ 275.460174][T10016] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.460200][T10016] ? rcu_is_watching+0x12/0xc0 [ 275.460224][T10016] __sys_sendmsg+0x170/0x220 [ 275.460238][T10016] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.460258][T10016] ? rcu_is_watching+0x12/0xc0 [ 275.460273][T10016] __do_fast_syscall_32+0xe7/0x950 [ 275.460288][T10016] do_fast_syscall_32+0x32/0x70 [ 275.460299][T10016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.460314][T10016] RIP: 0023:0xf7f53f7c [ 275.460326][T10016] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 275.460337][T10016] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 275.460349][T10016] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 275.460355][T10016] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.460362][T10016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.460368][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.460374][T10016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.460389][T10016] [ 275.658453][ T90] tipc: Subscription rejected, illegal request [ 276.078913][ T1256] tipc: Subscription rejected, illegal request [ 276.238172][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.997'. [ 276.537699][ T40] audit: type=1326 audit(276.412:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.542996][T10053] netlink: 56 bytes leftover after parsing attributes in process `syz.0.999'. [ 276.548151][ T40] audit: type=1326 audit(276.412:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.548203][ T40] audit: type=1326 audit(276.412:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71261ab code=0x7ffc0000 [ 276.548239][ T40] audit: type=1326 audit(276.412:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71261ab code=0x7ffc0000 [ 276.548275][ T40] audit: type=1326 audit(276.412:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.548312][ T40] audit: type=1326 audit(276.412:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.548347][ T40] audit: type=1326 audit(276.412:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.548385][ T40] audit: type=1326 audit(276.412:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.548420][ T40] audit: type=1326 audit(276.412:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 276.548456][ T40] audit: type=1326 audit(276.412:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.0.999" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 277.421101][T10070] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 277.427088][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1004'. [ 277.431218][T10070] team0: entered promiscuous mode [ 277.435516][T10070] team_slave_0: entered promiscuous mode [ 277.440013][T10070] team_slave_1: entered promiscuous mode [ 277.442867][T10070] bridge0: port 4(team0) entered blocking state [ 277.445202][T10070] bridge0: port 4(team0) entered disabled state [ 277.447424][T10070] team0: entered allmulticast mode [ 277.450858][T10070] team_slave_0: entered allmulticast mode [ 277.453401][T10070] team_slave_1: entered allmulticast mode [ 277.459385][T10070] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 277.516525][ T100] tipc: Subscription rejected, illegal request [ 277.761123][T10079] 9p: Bad value for 'rfdno' [ 277.844446][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 277.939967][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 278.361027][T10088] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 278.369239][T10088] team0: Device ipvlan0 is already an upper device of the team interface [ 278.794922][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 278.991395][T10106] lo speed is unknown, defaulting to 1000 [ 278.995828][T10106] wg2 speed is unknown, defaulting to 1000 [ 280.578292][T10131] syzkaller1: entered promiscuous mode [ 280.581293][T10131] syzkaller1: entered allmulticast mode [ 280.912662][T10141] tipc: Started in network mode [ 280.914821][T10141] tipc: Node identity 62b1ff931a6d, cluster identity 4711 [ 280.921264][T10141] tipc: Enabled bearer , priority 0 [ 280.926565][T10141] syzkaller0: entered promiscuous mode [ 280.929010][T10141] syzkaller0: entered allmulticast mode [ 281.075012][T10145] tipc: Resetting bearer [ 281.282203][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 281.422157][ T29] usb 6-1: device descriptor read/64, error -71 [ 281.673992][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 281.721247][T10140] tipc: Resetting bearer [ 281.751210][T10140] tipc: Disabling bearer [ 281.756266][ T1191] tipc: Subscription rejected, illegal request [ 281.812356][ T29] usb 6-1: device descriptor read/64, error -71 [ 281.890599][T10157] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1031'. [ 281.922906][ T29] usb usb6-port1: attempt power cycle [ 282.234197][T10174] Set syz0 is full, maxelem 0 reached [ 282.272062][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 282.305032][ T29] usb 6-1: device descriptor read/8, error -71 [ 282.419435][T10180] No control pipe specified [ 282.552511][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 282.596249][ T29] usb 6-1: device descriptor read/8, error -71 [ 282.725285][ T29] usb usb6-port1: unable to enumerate USB device [ 283.122197][ T857] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 283.298774][ T857] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 283.306893][ T857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.319244][ T857] usb 8-1: Product: syz [ 283.323794][ T857] usb 8-1: Manufacturer: syz [ 283.333917][ T857] usb 8-1: SerialNumber: syz [ 283.345979][ T857] usb 8-1: config 0 descriptor?? [ 283.615381][T10202] syzkaller0: entered promiscuous mode [ 283.618563][T10202] syzkaller0: entered allmulticast mode [ 283.950873][ T857] usb 8-1: USB disconnect, device number 8 [ 284.321384][T10227] netlink: 'syz.1.1052': attribute type 2 has an invalid length. [ 284.388151][T10227] #{6c: entered promiscuous mode [ 284.719485][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 285.247650][T10274] nbd: must specify a size in bytes for the device [ 285.378115][ T5750] Bluetooth: hci0: Invalid handle: 0xffff > 0x0eff [ 285.863884][T10294] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 285.866237][T10294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.869313][T10294] vhci_hcd vhci_hcd.0: Device attached [ 285.942304][T10295] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 285.977833][ T60] vhci_hcd vhci_hcd.1: stop threads [ 285.980445][ T60] vhci_hcd vhci_hcd.1: release socket [ 285.982362][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 286.154836][T10299] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 286.251123][T10300] lo speed is unknown, defaulting to 1000 [ 286.254044][T10300] wg2 speed is unknown, defaulting to 1000 [ 287.532937][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 287.532954][ T40] audit: type=1326 audit(287.412:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.1.1070" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x0 [ 289.006622][T10345] xt_policy: output policy not valid in PREROUTING and INPUT [ 289.304158][T10368] sch_fq: defrate 2 ignored. [ 289.361109][T10371] lo speed is unknown, defaulting to 1000 [ 289.364958][T10371] wg2 speed is unknown, defaulting to 1000 [ 289.510672][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1091'. [ 289.749446][ T469] tipc: Subscription rejected, illegal request [ 289.956089][T10407] 9p: Bad value for 'wfdno' [ 290.002814][ T843] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 290.162455][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 290.175746][ T843] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 290.181902][ T843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.195441][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.199621][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.205430][ T843] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.218116][ T843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.224450][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.427472][T10413] lo speed is unknown, defaulting to 1000 [ 290.430674][T10413] wg2 speed is unknown, defaulting to 1000 [ 290.445265][ T843] usb 8-1: usb_control_msg returned -32 [ 290.448380][ T843] usbtmc 8-1:16.0: can't read capabilities [ 290.766353][T10430] 9p: Bad value for 'sq' [ 290.795218][T10429] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1105'. [ 290.799839][T10429] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 290.830544][T10399] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 290.831794][ T58] usb 8-1: USB disconnect, device number 9 [ 290.841865][T10423] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -19 [ 290.936153][ T1191] tipc: Subscription rejected, illegal request [ 291.095191][T10444] lo speed is unknown, defaulting to 1000 [ 291.098080][T10444] wg2 speed is unknown, defaulting to 1000 [ 291.944862][T10450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.976335][T10452] xt_cgroup: path and classid specified [ 292.241030][T10461] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 292.319630][T10463] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 293.189398][T10477] lo speed is unknown, defaulting to 1000 [ 293.192847][T10477] wg2 speed is unknown, defaulting to 1000 [ 293.737083][T10490] lo speed is unknown, defaulting to 1000 [ 293.739935][T10490] wg2 speed is unknown, defaulting to 1000 [ 295.002405][ T5830] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 295.154297][ T5830] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.159348][ T5830] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.164510][ T5830] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.168739][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.177936][T10505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.186662][ T5830] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.227814][T10520] tipc: Resetting bearer [ 295.230410][T10520] tipc: Resetting bearer [ 295.250661][T10520] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.257011][T10520] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.271148][T10523] netlink: 'syz.4.1127': attribute type 16 has an invalid length. [ 295.275932][T10523] netlink: 'syz.4.1127': attribute type 17 has an invalid length. [ 295.276804][ T1040] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.294970][T10520] bridge0: port 3(vlan2) entered disabled state [ 295.316491][T10523] tipc: Resetting bearer [ 295.337225][T10523] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.340617][T10523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.345585][ T6593] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.348924][T10523] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.351864][T10523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.380968][T10523] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 295.402376][ T90] bridge0: port 3(vlan2) entered blocking state [ 295.402462][ T90] bridge0: port 3(vlan2) entered forwarding state [ 295.425971][T10522] lo speed is unknown, defaulting to 1000 [ 295.428703][T10522] wg2 speed is unknown, defaulting to 1000 [ 295.435227][ T5844] usb 6-1: USB disconnect, device number 14 [ 295.547266][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1128'. [ 295.673141][T10532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.850034][T10532] bond5 (unregistering): Released all slaves [ 296.342486][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.487187][ T40] audit: type=1326 audit(296.362:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.0.1132" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef7c code=0x0 [ 297.232346][ T5844] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 297.388276][ T5844] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.395864][ T5844] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.404586][ T5844] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.412306][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.426537][T10565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 297.447006][ T5844] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.553260][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1140'. [ 297.561008][T10594] tmpfs: Unknown parameter 'noinode32' [ 297.569019][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1142'. [ 297.674918][ T5844] usb 9-1: USB disconnect, device number 11 [ 297.702198][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 297.727477][T10599] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 297.730613][T10599] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 297.853684][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.857957][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.861971][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.865919][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.891481][T10590] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.898062][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.003944][T10603] fuse: fd is not a fuse device [ 298.114151][T10610] overlayfs: failed to clone upperpath [ 298.125654][ T5531] usb 8-1: USB disconnect, device number 10 [ 299.036709][T10610] pim6reg: entered allmulticast mode [ 300.114689][T10624] random: crng reseeded on system resumption [ 300.294409][ T40] audit: type=1326 audit(300.172:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.0.1155" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x0 [ 300.932346][ T58] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 301.105691][ T58] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.110835][ T58] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.118814][ T58] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.128961][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.240368][T10647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.247810][ T58] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.571805][ T5844] usb 9-1: USB disconnect, device number 12 [ 302.445656][T10653] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1162'. [ 302.523181][T10654] 9p: Bad value for 'wfdno' [ 302.555586][T10657] 9pnet_virtio: no channels available for device syz [ 302.595673][T10658] overlayfs: overlapping lowerdir path [ 302.620860][T10654] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 302.624480][T10654] overlayfs: overlapping lowerdir path [ 302.915425][T10663] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 302.942589][T10664] ptrace attach of ""[10665] was attempted by "/syz-executor exec"[10664] [ 303.168985][ T40] audit: type=1800 audit(303.042:263): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1164" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 303.742357][T10683] /dev/sr0: Can't open blockdev [ 303.748690][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1171'. [ 304.789774][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 306.822358][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.028031][T10750] lo speed is unknown, defaulting to 1000 [ 308.030730][T10750] wg2 speed is unknown, defaulting to 1000 [ 309.894388][T10755] overlayfs: failed to clone upperpath [ 310.246158][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 310.251168][T10759] bond1: option mode: unable to set because the bond device has slaves [ 310.257137][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 310.261122][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 310.266675][T10759] netlink: 'syz.1.1190': attribute type 10 has an invalid length. [ 310.271441][T10759] bridge0: port 3(macvlan2) entered blocking state [ 310.274047][T10759] bridge0: port 3(macvlan2) entered forwarding state [ 310.290271][T10759] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 310.471632][T10770] loop8: detected capacity change from 0 to 8 [ 310.502975][T10770] Dev loop8: unable to read RDB block 8 [ 310.507059][T10770] loop8: unable to read partition table [ 310.510923][T10770] loop8: partition table beyond EOD, truncated [ 310.517498][T10770] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 312.258159][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 312.369679][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 313.423672][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 313.430347][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 313.437080][T10811] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 313.440819][T10811] bridge0: port 3(macvlan2) entered disabled state [ 314.295993][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.308282][ T5757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.312784][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.320557][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.323860][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.913231][T10824] lo speed is unknown, defaulting to 1000 [ 314.916334][T10824] wg2 speed is unknown, defaulting to 1000 [ 315.188299][T10844] ufs: You didn't specify the type of your ufs filesystem [ 315.188299][T10844] [ 315.188299][T10844] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 315.188299][T10844] [ 315.188299][T10844] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 315.200768][T10844] ufs: ufstype=old is supported read-only [ 315.751999][ T100] team0: left allmulticast mode [ 315.755375][ T100] team_slave_0: left allmulticast mode [ 315.764208][ T100] team_slave_1: left allmulticast mode [ 315.772981][ T100] bridge0: port 4(team0) entered disabled state [ 315.832767][ T100] macvlan2: left allmulticast mode [ 315.835395][ T100] ip6gretap0: left allmulticast mode [ 315.850002][ T100] macvlan2: left promiscuous mode [ 315.859773][ T100] bridge0: port 3(macvlan2) entered disabled state [ 315.896593][ T100] bridge_slave_1: left allmulticast mode [ 315.898508][ T100] bridge_slave_1: left promiscuous mode [ 315.900493][ T100] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.007918][ T100] bridge_slave_0: left allmulticast mode [ 316.010322][ T100] bridge_slave_0: left promiscuous mode [ 316.017071][ T100] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.073060][ T100] lo: left allmulticast mode [ 316.342318][ T5757] Bluetooth: hci2: command tx timeout [ 316.538481][ T100] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 316.733938][T10868] netlink: 'syz.4.1219': attribute type 20 has an invalid length. [ 316.737524][T10868] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.741077][T10868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.746336][T10868] IPv6: NLM_F_CREATE should be set when creating new route [ 316.781502][T10872] netlink: 'syz.0.1220': attribute type 10 has an invalid length. [ 316.833606][T10878] netlink: 'syz.0.1220': attribute type 10 has an invalid length. [ 316.881370][ T100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.887139][ T100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.892335][ T100] bond0 (unregistering): Released all slaves [ 316.908367][ T100] bond1 (unregistering): (slave lo): Releasing backup interface [ 316.913979][ T100] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 316.924308][ T100] bond1 (unregistering): Released all slaves [ 316.933507][T10887] netlink: zone id is out of range [ 316.948174][T10887] netlink: zone id is out of range [ 316.954539][T10887] netlink: zone id is out of range [ 316.956807][T10887] netlink: zone id is out of range [ 316.959338][T10887] netlink: zone id is out of range [ 316.980598][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 317.061684][T10878] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 317.095851][ T5901] lo speed is unknown, defaulting to 1000 [ 317.101203][ T58] lo speed is unknown, defaulting to 1000 [ 317.103461][ T5901] syz0: Port: 1 Link DOWN [ 317.117523][ T100] #{6c: left promiscuous mode [ 317.132972][ T5531] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 317.290969][T10893] fuse: fd is not a fuse device [ 317.312347][ T100] tipc: Left network mode [ 317.319777][ T5531] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.332183][ T5531] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.342415][ T5531] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.346891][ T5531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.392404][T10883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.399043][ T5531] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.611425][ T57] usb 9-1: USB disconnect, device number 13 [ 317.624435][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 317.843258][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.848758][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.859207][T10824] bridge_slave_0: entered allmulticast mode [ 317.868473][T10824] bridge_slave_0: entered promiscuous mode [ 317.872357][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.875953][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.878878][T10824] bridge_slave_1: entered allmulticast mode [ 317.883386][T10824] bridge_slave_1: entered promiscuous mode [ 317.937363][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.941808][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.975482][ T100] hsr_slave_0: left promiscuous mode [ 317.978128][ T100] hsr_slave_1: left promiscuous mode [ 317.980535][ T100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.987293][ T100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.258437][ T100] team_slave_1 (unregistering): left promiscuous mode [ 318.261843][ T100] team0 (unregistering): Port device team_slave_1 removed [ 318.272413][ T100] team_slave_0 (unregistering): left promiscuous mode [ 318.275863][ T100] team0 (unregistering): Port device team_slave_0 removed [ 318.390209][ T469] smbdirect: ib_dev[syz0] removed [ 318.421148][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 318.426908][ T5757] Bluetooth: hci2: command tx timeout [ 318.428755][T10938] tipc: New replicast peer: 172.30.0.4 [ 318.433237][T10938] tipc: Enabled bearer , priority 10 [ 318.442866][T10824] team0: Port device team_slave_0 added [ 318.447280][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 318.460773][T10939] tipc: Disabling bearer [ 318.477382][T10824] team0: Port device team_slave_1 added [ 318.499587][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.502265][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.511059][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.516854][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.531369][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.540950][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.583311][T10824] hsr_slave_0: entered promiscuous mode [ 318.586184][T10824] hsr_slave_1: entered promiscuous mode [ 318.588927][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 318.590865][T10824] Cannot create hsr debugfs directory [ 319.479107][T10960] overlayfs: failed to clone upperpath [ 319.509242][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.511632][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.548262][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.557111][T10960] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 319.567573][T10824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.586089][T10960] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 319.587679][T10824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.591842][T10960] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 319.602247][T10960] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 319.613052][T10824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.627255][T10824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.645807][T10824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.673982][T10824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.676933][T10824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.691995][T10824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.695144][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.698292][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.699013][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 319.716550][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.724186][T10960] wg1 speed is unknown, defaulting to 1000 [ 319.838600][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 319.929317][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 320.262570][T10986] xt_TCPMSS: Only works on TCP SYN packets [ 320.265401][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.340644][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.379211][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.381855][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.415397][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.417730][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.502249][ T5757] Bluetooth: hci2: command tx timeout [ 320.787254][T11009] libceph: resolve ' [ 320.787254][T11009] -&fYǝa2i [ 320.787254][T11009] .?&*&' (ret=-3): failed [ 320.925288][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.028162][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'. [ 321.109854][T10824] veth0_vlan: entered promiscuous mode [ 321.118762][T10824] veth1_vlan: entered promiscuous mode [ 321.144959][T10824] veth0_macvtap: entered promiscuous mode [ 321.150207][T10824] veth1_macvtap: entered promiscuous mode [ 321.165895][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.175877][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.184038][ T1256] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.188728][ T1256] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.196815][ T1256] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.203048][ T1256] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.323905][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.329521][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.346370][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.350342][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.758325][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 322.196751][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.199999][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.334557][T11050] zonefs: Unknown parameter './binderfs/binder0' [ 322.431382][ T40] audit: type=1326 audit(322.302:264): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.1255" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15f7c code=0x0 [ 322.591779][ T5757] Bluetooth: hci2: command tx timeout [ 322.927388][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 322.933890][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 322.957085][T11079] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1261'. [ 322.962882][T11079] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.968605][T11079] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 322.974426][T11079] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 322.983473][T11079] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 323.320140][T11099] netlink: 'syz.5.1266': attribute type 21 has an invalid length. [ 323.324105][T11099] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.328185][T11099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.330874][T11099] IPv6: NLM_F_CREATE should be set when creating new route [ 323.333294][T11099] IPv6: NLM_F_CREATE should be set when creating new route [ 323.335602][T11099] IPv6: NLM_F_CREATE should be set when creating new route [ 323.371598][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 323.382361][ T5901] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 323.542959][ T5901] usb 8-1: too many configurations: 36, using maximum allowed: 8 [ 323.557475][ T5901] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 323.561272][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.565117][ T5901] usb 8-1: Product: syz [ 323.566915][ T5901] usb 8-1: Manufacturer: syz [ 323.568916][ T5901] usb 8-1: SerialNumber: syz [ 323.580501][ T5901] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 323.635087][ T58] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 323.819736][T11105] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1268'. [ 324.270844][T11116] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 324.330038][T11124] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1273'. [ 324.375500][T11116] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 324.605433][ T5531] usb 8-1: USB disconnect, device number 11 [ 324.744624][ T58] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 324.750044][ T58] ath9k_htc: Failed to initialize the device [ 324.763206][ T5531] usb 8-1: ath9k_htc: USB layer deinitialized [ 326.525287][T11165] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 326.530197][T11165] netlink: 'syz.0.1280': attribute type 2 has an invalid length. [ 326.534711][T11165] netlink: 'syz.0.1280': attribute type 2 has an invalid length. [ 326.692250][T11176] wg2 speed is unknown, defaulting to 1000 [ 326.894373][T11176] wg1 speed is unknown, defaulting to 1000 [ 327.052691][ T6593] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 327.084178][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 327.204542][ T6593] usb 9-1: config 0 has no interfaces? [ 327.206709][ T6593] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 327.209620][ T6593] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.220919][ T6593] usb 9-1: config 0 descriptor?? [ 327.245125][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 327.286365][ T6593] IPVS: starting estimator thread 0... [ 327.293672][T11198] dvmrp0: entered allmulticast mode [ 327.373911][T11201] IPVS: using max 43 ests per chain, 103200 per kthread [ 327.442877][ T5901] usb 9-1: USB disconnect, device number 14 [ 327.626107][T11214] erspan1: entered allmulticast mode [ 327.880284][ T6593] libceph: connect (1)[c::]:6789 error -101 [ 327.886312][ T6593] libceph: mon0 (1)[c::]:6789 connect error [ 327.914366][T11226] ceph: No mds server is up or the cluster is laggy [ 328.429067][T11243] fuse: Unknown parameter 'uid' [ 328.454087][T11249] netlink: get zone limit has 4 unknown bytes [ 328.491951][ T1191] tipc: Subscription rejected, illegal request [ 329.261193][T11280] sctp: [Deprecated]: syz.4.1308 (pid 11280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.261193][T11280] Use struct sctp_sack_info instead [ 329.271012][T11280] sctp: [Deprecated]: syz.4.1308 (pid 11280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.271012][T11280] Use struct sctp_sack_info instead [ 329.293525][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 329.451759][ T1162] tipc: Subscription rejected, illegal request [ 329.554413][T11298] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 329.706362][T11304] comedi: valid board names for 8255 driver are: [ 329.710484][T11304] 8255 [ 329.711745][T11304] comedi: valid board names for vmk80xx driver are: [ 329.716141][T11304] vmk80xx [ 329.717675][T11304] comedi: valid board names for usbduxsigma driver are: [ 329.720764][T11304] usbduxsigma [ 329.722822][T11304] comedi: valid board names for usbduxfast driver are: [ 329.725314][T11304] usbduxfast [ 329.727272][T11304] comedi: valid board names for usbdux driver are: [ 329.731358][T11304] usbdux [ 329.732757][T11304] comedi: valid board names for ni6501 driver are: [ 329.735714][T11304] ni6501 [ 329.737310][T11304] comedi: valid board names for dt9812 driver are: [ 329.741991][T11304] dt9812 [ 329.746045][T11304] comedi: valid board names for ni_labpc_cs driver are: [ 329.753576][T11304] ni_labpc_cs [ 329.755684][T11304] comedi: valid board names for ni_daq_700 driver are: [ 329.759364][T11304] ni_daq_700 [ 329.760714][T11304] comedi: valid board names for labpc_pci driver are: [ 329.764016][T11304] labpc_pci [ 329.766498][T11304] comedi: valid board names for adl_pci9118 driver are: [ 329.786760][T11304] pci9118dg [ 329.788306][T11304] pci9118hg [ 329.789738][T11304] pci9118hr [ 329.791566][T11304] comedi: valid board names for 8255_pci driver are: [ 329.802371][T11304] 8255_pci [ 329.803517][T11304] comedi: valid board names for s526 driver are: [ 329.805762][T11304] s526 [ 329.807102][T11304] comedi: valid board names for multiq3 driver are: [ 329.810443][T11304] multiq3 [ 329.811790][T11304] comedi: valid board names for pcmuio driver are: [ 329.815726][T11304] pcmuio48 [ 329.817020][T11304] pcmuio96 [ 329.819440][T11304] comedi: valid board names for pcmmio driver are: [ 329.823201][T11304] pcmmio [ 329.826051][T11304] comedi: valid board names for pcmda12 driver are: [ 329.829285][T11304] pcmda12 [ 329.830834][T11304] comedi: valid board names for pcmad driver are: [ 329.834269][T11304] pcmad12 [ 329.835646][T11304] pcmad16 [ 329.836929][T11304] comedi: valid board names for ni_labpc driver are: [ 329.839945][T11304] lab-pc-1200 [ 329.841472][T11304] lab-pc-1200ai [ 329.844167][T11304] lab-pc+ [ 329.846081][T11304] comedi: valid board names for atmio16 driver are: [ 329.851600][T11304] atmio16 [ 329.855299][T11304] atmio16d [ 329.856738][T11304] comedi: valid board names for ni_at_ao driver are: [ 329.859644][T11304] at-ao-6 [ 329.861161][T11304] at-ao-10 [ 329.865106][T11304] comedi: valid board names for ni_at_a2150 driver are: [ 329.867891][T11304] ni_at_a2150 [ 329.869235][T11304] comedi: valid board names for adq12b driver are: [ 329.872028][T11304] adq12b [ 329.873873][T11304] comedi: valid board names for mpc624 driver are: [ 329.877110][T11304] mpc624 [ 329.878393][T11304] comedi: valid board names for c6xdigio driver are: [ 329.880986][T11304] c6xdigio [ 329.882524][T11304] comedi: valid board names for aio_iiro_16 driver are: [ 329.884961][T11304] aio_iiro_16 [ 329.886326][T11304] comedi: valid board names for aio_aio12_8 driver are: [ 329.889243][T11304] aio_aio12_8 [ 329.890957][T11304] aio_ai12_8 [ 329.892745][T11304] aio_ao12_4 [ 329.894574][T11304] comedi: valid board names for fl512 driver are: [ 329.897247][T11304] fl512 [ 329.898439][T11304] comedi: valid board names for dmm32at driver are: [ 329.900998][T11304] dmm32at [ 329.902425][T11304] comedi: valid board names for dt282x driver are: [ 329.905573][T11304] dt2821 [ 329.906590][T11304] dt2821-f [ 329.907843][T11304] dt2821-g [ 329.909212][T11304] dt2823 [ 329.910537][T11304] dt2824-pgh [ 329.914074][T11304] dt2824-pgl [ 329.915678][T11304] dt2825 [ 329.916903][T11304] dt2827 [ 329.918090][T11304] dt2828 [ 329.919184][T11304] dt2829 [ 329.920196][T11304] dt21-ez [ 329.921458][T11304] dt23-ez [ 329.922995][T11304] dt24-ez [ 329.923643][T11308] CIFS mount error: No usable UNC path provided in device string! [ 329.923643][T11308] [ 329.924279][T11304] dt24-ez-pgl [ 329.930523][T11304] comedi: valid board names for dt2817 driver are: [ 329.941577][T11308] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 329.946203][T11304] dt2817 [ 329.947537][T11304] comedi: valid board names for dt2815 driver are: [ 329.951714][T11304] dt2815 [ 329.953387][T11304] comedi: valid board names for dt2814 driver are: [ 329.956537][T11304] dt2814 [ 329.958080][T11304] comedi: valid board names for dt2811 driver are: [ 329.961204][T11304] dt2811-pgh [ 329.963018][T11304] dt2811-pgl [ 329.964014][T11304] comedi: valid board names for dt2801 driver are: [ 329.966390][T11304] dt2801 [ 329.967588][T11304] comedi: valid board names for das6402 driver are: [ 329.970142][T11304] das6402-12 [ 329.971467][T11304] das6402-16 [ 329.973395][T11304] comedi: valid board names for das1800 driver are: [ 329.976142][T11304] das-1701st [ 329.977684][T11304] das-1701st-da [ 329.979321][T11304] das-1702st [ 329.980844][T11304] das-1702st-da [ 329.982813][T11304] das-1702hr [ 329.984242][T11304] das-1702hr-da [ 329.985421][T11304] das-1701ao [ 329.986586][T11304] das-1702ao [ 329.987928][T11304] das-1801st [ 329.989358][T11304] das-1801st-da [ 329.990938][T11304] das-1802st [ 329.994909][T11304] das-1802st-da [ 329.997331][T11304] das-1802hr [ 329.998712][T11304] das-1802hr-da [ 330.000193][T11304] das-1801hc [ 330.001543][T11304] das-1802hc [ 330.004011][T11304] das-1801ao [ 330.005243][T11304] das-1802ao [ 330.006340][T11304] comedi: valid board names for das800 driver are: [ 330.009130][T11304] das-800 [ 330.010709][T11304] cio-das800 [ 330.012539][T11304] das-801 [ 330.013767][T11304] cio-das801 [ 330.019119][T11304] das-802 [ 330.020144][T11304] cio-das802 [ 330.024574][T11304] cio-das802/16 [ 330.028186][T11304] comedi: valid board names for isa-das08 driver are: [ 330.039499][T11304] isa-das08 [ 330.040598][T11304] das08-pgm [ 330.046561][T11304] das08-pgh [ 330.051764][T11304] das08-pgl [ 330.055533][T11304] das08-aoh [ 330.059565][T11304] das08-aol [ 330.060696][T11304] das08-aom [ 330.064381][T11304] das08/jr-ao [ 330.066081][T11304] das08jr-16-ao [ 330.070247][T11304] pc104-das08 [ 330.071492][T11304] das08jr/16 [ 330.074381][T11304] comedi: valid board names for das16m1 driver are: [ 330.076931][T11304] das16m1 [ 330.078013][T11304] comedi: valid board names for dac02 driver are: [ 330.080186][T11304] dac02 [ 330.081147][T11304] comedi: valid board names for rti802 driver are: [ 330.084353][T11304] rti802 [ 330.086448][T11304] comedi: valid board names for rti800 driver are: [ 330.089636][T11304] rti800 [ 330.091035][T11304] rti815 [ 330.092668][T11304] comedi: valid board names for pcm3724 driver are: [ 330.095346][T11304] pcm3724 [ 330.096556][T11304] comedi: valid board names for pcl818 driver are: [ 330.099474][T11304] pcl818l [ 330.100486][T11304] pcl818h [ 330.101845][T11304] pcl818hd [ 330.104629][T11304] pcl818hg [ 330.106398][T11304] pcl818 [ 330.108103][T11304] pcl718 [ 330.109348][T11304] pcm3718 [ 330.110558][T11304] comedi: valid board names for pcl816 driver are: [ 330.114193][T11304] pcl816 [ 330.115440][T11304] pcl814b [ 330.116497][T11304] comedi: valid board names for pcl812 driver are: [ 330.118790][T11304] pcl812 [ 330.119956][T11304] pcl812pg [ 330.121224][T11304] acl8112pg [ 330.123256][T11304] acl8112dg [ 330.124418][T11304] acl8112hg [ 330.125785][T11304] a821pgl [ 330.127203][T11304] a821pglnda [ 330.128750][T11304] a821pgh [ 330.129946][T11304] a822pgl [ 330.131172][T11304] a822pgh [ 330.133147][T11304] a823pgl [ 330.134627][T11304] a823pgh [ 330.135919][T11304] pcl813 [ 330.136892][T11304] pcl813b [ 330.137849][T11304] acl8113 [ 330.138899][T11304] iso813 [ 330.140067][T11304] acl8216 [ 330.141293][T11304] a826pg [ 330.145140][T11304] comedi: valid board names for pcl730 driver are: [ 330.147860][T11304] pcl730 [ 330.149085][T11304] iso730 [ 330.151438][T11304] acl7130 [ 330.154352][T11304] pcm3730 [ 330.156094][T11304] pcl725 [ 330.157311][T11304] p8r8dio [ 330.158551][T11304] acl7225b [ 330.159562][T11304] p16r16dio [ 330.160591][T11304] pcl733 [ 330.161642][T11304] pcl734 [ 330.163327][T11304] opmm-1616-xt [ 330.164769][T11304] pearl-mm-p [ 330.166916][T11304] ir104-pbf [ 330.168774][T11304] comedi: valid board names for pcl726 driver are: [ 330.171612][T11304] pcl726 [ 330.173672][T11304] pcl727 [ 330.174985][T11304] pcl728 [ 330.176199][T11304] acl6126 [ 330.177621][T11304] acl6128 [ 330.178855][T11304] comedi: valid board names for pcl724 driver are: [ 330.181177][T11304] pcl724 [ 330.182334][T11304] pcl722 [ 330.183416][T11304] pcl731 [ 330.185101][T11304] acl7122 [ 330.186373][T11304] acl7124 [ 330.188096][T11304] pet48dio [ 330.189787][T11304] pcmio48 [ 330.191552][T11304] onyx-mm-dio [ 330.193800][T11304] comedi: valid board names for pcl711 driver are: [ 330.196519][T11304] pcl711 [ 330.197689][T11304] pcl711b [ 330.199149][T11304] acl8112hg [ 330.200929][T11304] acl8112dg [ 330.202016][T11304] comedi: valid board names for amplc_pc263 driver are: [ 330.205034][T11304] pc263 [ 330.208894][T11304] comedi: valid board names for amplc_pc236 driver are: [ 330.215787][T11304] pc36at [ 330.217136][T11304] comedi: valid board names for amplc_dio200 driver are: [ 330.221972][T11304] pc212e [ 330.225051][T11304] pc214e [ 330.226018][T11304] pc215e [ 330.227269][T11304] pc218e [ 330.228424][T11304] pc272e [ 330.229700][T11304] comedi: valid board names for comedi_parport driver are: [ 330.237649][T11304] comedi_parport [ 330.239132][T11304] comedi: valid board names for comedi_test driver are: [ 330.246431][T11304] comedi_test [ 330.250459][T11304] comedi: valid board names for comedi_bond driver are: [ 330.258429][T11304] comedi_bond [ 330.619035][ T5757] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 330.877139][T11347] tc_dump_action: action bad kind [ 333.238833][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1331'. [ 334.665583][ T5757] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 334.670359][ T5757] Bluetooth: hci0: Injecting HCI hardware error event [ 334.677213][ T5757] Bluetooth: hci0: hardware error 0x00 [ 335.181764][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 335.268873][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 336.742613][ T5757] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 337.202247][ T5531] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 337.362489][ T5531] usb 10-1: Using ep0 maxpacket: 32 [ 337.375612][ T5531] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 337.383118][ T5531] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 337.393067][ T5531] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.403001][ T5531] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 337.417176][ T5531] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 337.421541][ T5531] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.424439][ T5531] usb 10-1: Product: syz [ 337.426196][ T5531] usb 10-1: Manufacturer: syz [ 337.428161][ T5531] usb 10-1: SerialNumber: syz [ 337.439569][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 337.449421][ T5531] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input32 [ 337.573809][ T40] audit: type=1326 audit(337.452:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 337.587580][ T40] audit: type=1326 audit(337.452:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 337.601397][ T40] audit: type=1326 audit(337.462:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 337.610038][ T40] audit: type=1326 audit(337.462:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 337.620280][ T40] audit: type=1326 audit(337.462:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 337.632717][ T40] audit: type=1326 audit(337.462:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 337.672310][ T5531] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 337.676746][ T5531] (id 0x00) [ 337.715818][T11474] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 337.754554][ T5531] rc_core: IR keymap rc-imon-pad not found [ 337.758321][ T5531] Registered IR keymap rc-empty [ 337.760265][ T5531] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 337.764810][ T5531] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 337.774992][T11474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.848785][T11476] bond5: (slave veth3): Enslaving as an active interface with a down link [ 337.866256][ T5531] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 337.879650][ T5531] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input33 [ 337.880870][T11478] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1351'. [ 337.890274][ T5531] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:2> initialized [ 338.049309][T11464] imon:vfd_write: invalid payload size [ 338.100950][T11464] wg2 speed is unknown, defaulting to 1000 [ 338.215219][T11482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.219350][T11482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.318643][T11464] wg1 speed is unknown, defaulting to 1000 [ 338.543562][ T843] usb 10-1: USB disconnect, device number 2 [ 338.830634][T11491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.937884][T11491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.088695][T11491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.205397][T11491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.457000][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.471312][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.497059][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.537757][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.790228][T11504] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 339.793002][T11504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 339.798927][T11504] vhci_hcd vhci_hcd.0: Device attached [ 339.831080][T11504] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.875415][T11504] macvlan2: entered promiscuous mode [ 339.877890][T11504] bridge0: entered promiscuous mode [ 340.072376][ T6593] usb 48-1: SetAddress Request (2) to port 0 [ 340.075194][ T6593] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 340.493122][T11505] vhci_hcd: connection reset by peer [ 340.497892][ T46] vhci_hcd vhci_hcd.5: stop threads [ 340.500080][ T46] vhci_hcd vhci_hcd.5: release socket [ 340.502525][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 341.512412][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8e000) [ 341.924511][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 341.930671][ T1129] ata1: failed to read log page 10h (errno=-5) [ 341.938904][ T1129] ata1.00: NCQ disabled due to excessive errors [ 341.946713][ T1129] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 341.958953][ T1129] ata1.00: irq_stat 0x40000008 [ 341.960626][ T1129] ata1.00: failed command: WRITE FPDMA QUEUED [ 341.966630][ T1129] ata1.00: cmd 61/70:f0:c6:ec:09/04:00:00:00:00/40 tag 30 ncq dma 581632 out [ 341.966630][ T1129] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 341.980240][ T1129] ata1.00: status: { DRDY } [ 341.982495][ T1129] ata1.00: error: { ABRT } [ 341.987882][ T1129] ata1.00: configured for UDMA/100 [ 341.998807][ T857] libceph: connect (1)[c::]:6789 error -101 [ 342.001384][ T857] libceph: mon0 (1)[c::]:6789 connect error [ 342.007849][ T857] libceph: connect (1)[c::]:6789 error -101 [ 342.011532][ T857] libceph: mon0 (1)[c::]:6789 connect error [ 342.082564][ T1129] ata1: EH complete [ 342.274041][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 342.276677][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 342.350024][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 342.656285][T11542] openvswitch: netlink: Key type 124 is out of range max 32 [ 342.782487][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 342.785374][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 342.788568][T11546] x_tables: duplicate underflow at hook 3 [ 343.050506][T11529] ceph: No mds server is up or the cluster is laggy [ 343.162253][ T5531] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 343.258626][T11557] input: syz0 as /devices/virtual/input/input36 [ 343.263622][T11554] bridge_slave_1: left allmulticast mode [ 343.287822][T11554] bridge_slave_1: left promiscuous mode [ 343.295718][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.314242][ T5531] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.325942][ T5531] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.334096][ T5531] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.334334][T11557] binder: Bad value for 'max' [ 343.342364][ T5531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.343311][T11556] binder: Bad value for 'max' [ 343.360113][T11554] bridge_slave_0: left allmulticast mode [ 343.362926][T11554] bridge_slave_0: left promiscuous mode [ 343.366426][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.374482][T11550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 343.402128][ T5531] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.595730][ T5844] usb 9-1: USB disconnect, device number 15 [ 345.495082][ T5830] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 345.498377][ T6593] usb 48-1: device descriptor read/8, error -110 [ 345.663862][ T5830] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.667889][ T5830] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 345.678923][ T5830] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.682909][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.686954][ T5830] usb 10-1: Product: syz [ 345.688405][ T5830] usb 10-1: Manufacturer: syz [ 345.689987][ T5830] usb 10-1: SerialNumber: syz [ 345.697554][ T5830] cdc_mbim 10-1:1.0: skipping garbage [ 345.721269][T11579] fuse: fd is not a fuse device [ 345.904976][ T6593] usb usb48-port1: attempt power cycle [ 345.914956][T11563] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 346.090621][T11601] netlink: 876 bytes leftover after parsing attributes in process `syz.4.1380'. [ 346.094001][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 346.096663][T11601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'. [ 346.338818][ T5757] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 346.588313][ T6593] usb usb48-port1: unable to enumerate USB device [ 349.377599][ T5830] cdc_mbim 10-1:1.0: bind() failure [ 349.386913][ T5830] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 349.400495][ T5830] cdc_ncm 10-1:1.1: bind() failure [ 349.413926][ T5830] usb 10-1: USB disconnect, device number 3 [ 349.490623][T11629] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 349.495357][T11629] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 349.593322][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.607405][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.451272][T11657] wg2 speed is unknown, defaulting to 1000 [ 350.544645][T11657] wg1 speed is unknown, defaulting to 1000 [ 351.375667][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 351.462258][ T5830] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 351.622297][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 351.626079][ T5830] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 351.629026][ T5830] usb 8-1: config 0 has no interface number 0 [ 351.631557][ T5830] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.635517][ T5830] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 351.639654][ T5830] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.645850][ T5830] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 351.649956][ T5830] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.656179][ T5830] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 351.660867][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.668478][ T5830] usb 8-1: config 0 descriptor?? [ 351.685159][ T5830] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 351.882427][T11672] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 352.499299][T11699] overlayfs: failed to clone upperpath [ 352.507589][T11699] overlayfs: failed to clone upperpath [ 352.516081][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 354.293523][ T5844] usb 8-1: USB disconnect, device number 12 [ 354.302818][ T5844] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 355.396604][T11736] tipc: Enabling of bearer rejected, failed to enable media [ 356.751229][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1422'. [ 356.755433][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1422'. [ 356.823936][T11768] virtio-fs: tag not found [ 356.952900][T11775] syzkaller1: tun_chr_ioctl cmd 35108 [ 357.270325][T11778] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 357.725456][T11794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.142190][ T5931] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 358.272264][ T5931] usb 8-1: device descriptor read/64, error -71 [ 358.418297][T11803] bridge_slave_0: Caught tx_queue_len zero misconfig [ 358.441948][T11803] netlink: 77 bytes leftover after parsing attributes in process `syz.0.1434'. [ 358.444853][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1433'. [ 358.513246][ T5931] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 358.652276][ T5931] usb 8-1: device descriptor read/64, error -71 [ 358.762679][ T5931] usb usb8-port1: attempt power cycle [ 359.112706][ T5931] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 359.139652][ T5931] usb 8-1: device descriptor read/8, error -71 [ 359.328282][T11823] tipc: Enabling of bearer rejected, failed to enable media [ 359.442254][ T5931] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 359.466307][ T5931] usb 8-1: device descriptor read/8, error -71 [ 359.630416][ T5931] usb usb8-port1: unable to enumerate USB device [ 359.645228][T11826] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 359.903666][T11832] pimreg: entered allmulticast mode [ 360.096595][T11836] program syz.4.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.987144][T11855] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 360.991147][T11855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1446'. [ 361.119061][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'. [ 362.028759][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'. [ 362.100829][T11891] netlink: 'syz.0.1456': attribute type 16 has an invalid length. [ 362.104889][T11891] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1456'. [ 362.116121][T11888] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.658723][T11912] tipc: Enabling of bearer rejected, failed to enable media [ 362.756678][T11920] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1463'. [ 362.765492][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 362.780338][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 362.783265][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 362.783299][T11921] netlink: 'syz.0.1463': attribute type 11 has an invalid length. [ 362.788454][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 362.798147][T11920] netlink: 'syz.0.1463': attribute type 11 has an invalid length. [ 362.943340][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 363.200062][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1467'. [ 364.136279][T11949] overlayfs: missing 'lowerdir' [ 364.143783][T11949] overlayfs: missing 'lowerdir' [ 364.172654][T11949] overlayfs: missing 'lowerdir' [ 364.176762][T11949] overlayfs: missing 'lowerdir' [ 364.180517][T11949] overlayfs: missing 'lowerdir' [ 364.185913][T11949] overlayfs: missing 'lowerdir' [ 364.188683][T11949] overlayfs: missing 'lowerdir' [ 364.191193][T11949] overlayfs: missing 'lowerdir' [ 364.194660][T11949] overlayfs: missing 'lowerdir' [ 364.200107][T11949] overlayfs: missing 'lowerdir' [ 364.204171][T11949] overlayfs: missing 'lowerdir' [ 364.206372][T11949] overlayfs: missing 'lowerdir' [ 364.210233][T11949] overlayfs: missing 'lowerdir' [ 364.214032][T11949] overlayfs: missing 'lowerdir' [ 364.218315][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 364.219906][T11949] overlayfs: missing 'lowerdir' [ 364.230880][T11949] overlayfs: missing 'lowerdir' [ 364.252814][T11949] overlayfs: missing 'lowerdir' [ 364.255810][T11949] overlayfs: missing 'lowerdir' [ 364.260572][T11949] overlayfs: missing 'lowerdir' [ 364.265976][T11949] overlayfs: missing 'lowerdir' [ 364.277996][T11949] overlayfs: missing 'lowerdir' [ 364.286662][T11949] overlayfs: missing 'lowerdir' [ 364.293638][T11949] overlayfs: missing 'lowerdir' [ 364.301148][T11949] overlayfs: missing 'lowerdir' [ 364.311170][T11949] overlayfs: missing 'lowerdir' [ 364.355750][T11949] overlayfs: missing 'lowerdir' [ 364.817715][T11949] overlayfs: missing 'lowerdir' [ 365.123063][T11949] overlayfs: missing 'lowerdir' [ 365.640245][T11976] ntfs3(nullb0): Primary boot signature is not NTFS. [ 365.653715][T11976] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 368.213673][T11996] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 368.593985][T11990] __nla_validate_parse: 2 callbacks suppressed [ 368.594270][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 368.643522][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 369.331179][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 369.374509][T12014] fuse: fd is not a fuse device [ 370.470489][T12018] fuse: fd is not a fuse device [ 371.425682][T12033] /dev/sr0: Can't open blockdev [ 371.430982][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 372.097376][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1497'. [ 373.235327][T12058] pim6reg: entered allmulticast mode [ 375.643288][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 375.695180][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 376.199837][T12102] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 376.207007][T12102] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 376.495899][T12104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.499032][T12102] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 380.692855][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 380.714392][T12159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.736778][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 380.739969][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 380.755118][T12159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.761724][T12159] bond2: (slave bond0): making interface the new active one [ 380.766348][T12159] bond2: (slave bond0): Enslaving as an active interface with an up link [ 380.793816][T12159] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 380.797196][T12159] bridge0: port 3(vlan2) entered disabled state [ 380.799461][T12159] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.802008][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.808052][T12159] bridge0: port 3(vlan2) entered blocking state [ 380.810661][T12159] bridge0: port 3(vlan2) entered forwarding state [ 380.812966][T12159] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.815452][T12159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.817993][T12159] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.820938][T12159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.828797][T12159] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 382.009882][ T40] audit: type=1326 audit(381.882:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.1537" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15f7c code=0x0 [ 382.133861][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1537'. [ 383.072309][T12207] syz_tun: entered allmulticast mode [ 383.091097][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.096328][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.332229][ T5531] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 383.477729][T12206] bridge_slave_1: left promiscuous mode [ 383.481143][T12206] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.503011][ T5531] usb 10-1: Using ep0 maxpacket: 8 [ 383.528538][ T5531] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 383.533496][ T5531] usb 10-1: config 0 has no interface number 0 [ 383.542780][ T5531] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 383.547538][T12206] bridge_slave_0: left allmulticast mode [ 383.552881][ T5531] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.557738][T12206] bridge_slave_0: left promiscuous mode [ 383.561457][ T5531] usb 10-1: Product: syz [ 383.566572][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.566664][ T5531] usb 10-1: Manufacturer: syz [ 383.576795][ T5531] usb 10-1: SerialNumber: syz [ 383.630963][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.634089][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.642500][ T5531] usb 10-1: config 0 descriptor?? [ 383.835050][ T40] audit: type=1326 audit(383.712:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.843841][ T40] audit: type=1326 audit(383.722:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.854800][ T5531] uvcvideo 10-1:0.31: probe with driver uvcvideo failed with error -22 [ 383.859412][ T40] audit: type=1326 audit(383.732:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.880743][ T5531] usb 10-1: USB disconnect, device number 4 [ 383.884433][ T40] audit: type=1326 audit(383.732:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.918292][ T40] audit: type=1326 audit(383.732:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.943510][ T40] audit: type=1326 audit(383.812:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.967879][ T40] audit: type=1326 audit(383.842:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 383.978403][ T40] audit: type=1326 audit(383.852:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 384.041022][ T40] audit: type=1326 audit(383.912:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf7f15f7c code=0x7ffc0000 [ 385.445416][T12244] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.458404][T12244] wg2 speed is unknown, defaulting to 1000 [ 385.543150][T12244] wg1 speed is unknown, defaulting to 1000 [ 386.416740][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1556'. [ 386.838848][T12269] SET target dimension over the limit! [ 387.645646][T12284] Bluetooth: MGMT ver 1.23 [ 389.965651][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 390.159912][T12311] xt_TCPMSS: Only works on TCP SYN packets [ 390.229569][ T46] tipc: Subscription rejected, illegal request [ 390.878132][T12331] tipc: Started in network mode [ 390.879668][T12331] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 390.883913][T12331] tipc: Enabled bearer , priority 10 [ 391.026013][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 391.340713][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 391.666587][T12338] veth5: entered allmulticast mode [ 391.762905][T12338] bond6: (slave veth5): Enslaving as an active interface with an up link [ 391.966725][T12337] veth7: entered allmulticast mode [ 392.042602][T12337] bond6: (slave veth7): Enslaving as an active interface with an up link [ 392.047772][ T1256] tipc: Subscription rejected, illegal request [ 392.116146][T12340] bond6 (unregistering): (slave veth5): Releasing backup interface [ 392.126845][T12340] bond6 (unregistering): (slave veth7): Releasing backup interface [ 392.136141][T12340] bond6 (unregistering): Released all slaves [ 392.166160][T12343] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 392.171911][ T6593] tipc: Node number set to 10005162 [ 392.238011][T12352] x_tables: duplicate underflow at hook 1 [ 393.310197][T12396] input: syz0 as /devices/virtual/input/input44 [ 393.507699][T12412] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.1595'. [ 393.585131][T12418] overlayfs: failed to resolve './file1': -2 [ 394.867948][T12443] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 394.871167][T12443] bridge1: entered promiscuous mode [ 394.875392][T12443] bridge1: entered allmulticast mode [ 395.049492][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1608'. [ 395.342492][ T6593] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 395.494398][ T6593] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 395.497655][ T6593] usb 10-1: config 0 has no interface number 0 [ 395.500150][ T6593] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 395.504556][ T6593] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 395.508445][ T6593] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 395.514466][ T6593] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 395.519238][ T6593] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 395.525617][ T6593] usb 10-1: Product: syz [ 395.527630][ T6593] usb 10-1: SerialNumber: syz [ 395.537263][ T6593] usb 10-1: config 0 descriptor?? [ 395.544595][ T6593] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 395.551002][ T6593] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input45 [ 395.766526][T12460] syzkaller0: entered promiscuous mode [ 395.768748][T12460] syzkaller0: entered allmulticast mode [ 395.874672][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.881785][ T58] usb 10-1: USB disconnect, device number 5 [ 395.881884][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.887343][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 395.895114][ T58] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 396.461745][T12481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1613'. [ 396.521302][T12485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.545823][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 396.802206][T12496] nbd1: detected capacity change from 0 to 63 [ 396.811418][ T5753] [ 396.812307][ T5760] block nbd1: Receive control failed (result -32) [ 396.812885][ T5753] ====================================================== [ 396.812897][ T5753] WARNING: possible circular locking dependency detected [ 396.812909][ T5753] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 396.812923][ T5753] ------------------------------------------------------ [ 396.829309][ T5753] udevd/5753 is trying to acquire lock: [ 396.831701][ T5753] ffff88804ddc7a68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 396.835677][ T5753] [ 396.835677][ T5753] but task is already holding lock: [ 396.838777][ T5753] ffff8880272951f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 396.842967][ T5753] [ 396.842967][ T5753] which lock already depends on the new lock. [ 396.842967][ T5753] [ 396.848693][ T5753] [ 396.848693][ T5753] the existing dependency chain (in reverse order) is: [ 396.852411][ T5753] [ 396.852411][ T5753] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 396.855600][ T5753] __mutex_lock+0x1a4/0x1b10 [ 396.857834][ T5753] nbd_queue_rq+0xba/0x1080 [ 396.859980][ T5753] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 396.862856][ T5753] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 396.866393][ T5753] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 396.869692][ T5753] blk_mq_run_hw_queue+0x23c/0x670 [ 396.872152][ T5753] blk_mq_dispatch_list+0x51d/0x1360 [ 396.874799][ T5753] blk_mq_flush_plug_list+0x130/0x600 [ 396.877417][ T5753] __blk_flush_plug+0x2c4/0x4b0 [ 396.879970][ T5753] __submit_bio+0x584/0x6c0 [ 396.882573][ T5753] submit_bio_noacct_nocheck+0x543/0xbf0 [ 396.885836][ T5753] submit_bio_noacct+0xd18/0x2000 [ 396.888284][ T5753] submit_bh_wbc+0x681/0x890 [ 396.890566][ T5753] block_read_full_folio+0x264/0x8e0 [ 396.893113][ T5753] filemap_read_folio+0xfc/0x3b0 [ 396.895531][ T5753] do_read_cache_folio+0x2d7/0x6b0 [ 396.898355][ T5753] read_part_sector+0xd1/0x370 [ 396.901568][ T5753] adfspart_check_ICS+0x91/0x7d0 [ 396.904471][ T5753] bdev_disk_changed+0x7a3/0x1250 [ 396.906901][ T5753] blkdev_get_whole+0x187/0x290 [ 396.909212][ T5753] bdev_open+0x2c7/0xe40 [ 396.911335][ T5753] blkdev_open+0x34e/0x4f0 [ 396.913516][ T5753] do_dentry_open+0x6d8/0x1660 [ 396.915934][ T5753] vfs_open+0x82/0x3f0 [ 396.918097][ T5753] path_openat+0x208c/0x31a0 [ 396.920621][ T5753] do_file_open+0x20e/0x430 [ 396.923539][ T5753] do_sys_openat2+0x10d/0x1e0 [ 396.926553][ T5753] __x64_sys_openat+0x12d/0x210 [ 396.928958][ T5753] do_syscall_64+0x10b/0xf80 [ 396.931224][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.934104][ T5753] [ 396.934104][ T5753] -> #5 (set->srcu){.+.+}-{0:0}: [ 396.937145][ T5753] __synchronize_srcu+0xa2/0x300 [ 396.939524][ T5753] blk_mq_quiesce_queue+0x149/0x1c0 [ 396.942051][ T5753] elevator_switch+0x17b/0x7e0 [ 396.944424][ T5753] elevator_change+0x352/0x530 [ 396.947260][ T5753] elevator_set_default+0x29e/0x360 [ 396.950785][ T5753] blk_register_queue+0x48e/0x630 [ 396.953238][ T5753] __add_disk+0x73f/0xe40 [ 396.955536][ T5753] add_disk_fwnode+0x118/0x5c0 [ 396.957804][ T5753] nbd_dev_add+0x77a/0xb10 [ 396.959723][ T5753] nbd_init+0x291/0x2b0 [ 396.961816][ T5753] do_one_initcall+0x121/0x750 [ 396.962219][ T6593] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 396.964278][ T5753] kernel_init_freeable+0x6ea/0x7b0 [ 396.970173][ T5753] kernel_init+0x1f/0x1e0 [ 396.972563][ T5753] ret_from_fork+0x72b/0xd50 [ 396.974844][ T5753] ret_from_fork_asm+0x1a/0x30 [ 396.977118][ T5753] [ 396.977118][ T5753] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 396.980448][ T5753] __mutex_lock+0x1a4/0x1b10 [ 396.982970][ T5753] elevator_change+0x1bc/0x530 [ 396.986378][ T5753] elevator_set_none+0x92/0xf0 [ 396.989203][ T5753] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 396.991935][ T5753] nbd_start_device+0x1a6/0xbd0 [ 396.994401][ T5753] nbd_genl_connect+0xff2/0x1a40 [ 396.996834][ T5753] genl_family_rcv_msg_doit+0x214/0x300 [ 396.999622][ T5753] genl_rcv_msg+0x560/0x800 [ 397.001914][ T5753] netlink_rcv_skb+0x159/0x420 [ 397.004539][ T5753] genl_rcv+0x28/0x40 [ 397.006918][ T5753] netlink_unicast+0x585/0x850 [ 397.009666][ T5753] netlink_sendmsg+0x8b0/0xda0 [ 397.012079][ T5753] ____sys_sendmsg+0x9e1/0xb70 [ 397.014428][ T5753] ___sys_sendmsg+0x190/0x1e0 [ 397.016541][ T5753] __sys_sendmsg+0x170/0x220 [ 397.018771][ T5753] __do_fast_syscall_32+0xe7/0x950 [ 397.021268][ T5753] do_fast_syscall_32+0x32/0x70 [ 397.024195][ T5753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.028518][ T5753] [ 397.028518][ T5753] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 397.032186][ T5753] blk_alloc_queue+0x610/0x790 [ 397.034512][ T5753] blk_mq_alloc_queue+0x174/0x290 [ 397.036922][ T5753] __blk_mq_alloc_disk+0x29/0x120 [ 397.039235][ T5753] nbd_dev_add+0x492/0xb10 [ 397.041468][ T5753] nbd_init+0x291/0x2b0 [ 397.043626][ T5753] do_one_initcall+0x121/0x750 [ 397.046689][ T5753] kernel_init_freeable+0x6ea/0x7b0 [ 397.049990][ T5753] kernel_init+0x1f/0x1e0 [ 397.052247][ T5753] ret_from_fork+0x72b/0xd50 [ 397.054540][ T5753] ret_from_fork_asm+0x1a/0x30 [ 397.056885][ T5753] [ 397.056885][ T5753] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 397.059974][ T5753] fs_reclaim_acquire+0xc4/0x100 [ 397.062574][ T5753] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 397.065614][ T5753] __alloc_skb+0x140/0x710 [ 397.067986][ T5753] tcp_stream_alloc_skb+0x34/0x660 [ 397.070459][ T5753] tcp_sendmsg_locked+0x13cd/0x4500 [ 397.072968][ T5753] tcp_sendmsg+0x2e/0x50 [ 397.075229][ T5753] inet_sendmsg+0xb9/0x140 [ 397.077629][ T5753] sock_write_iter+0x4ea/0x5a0 [ 397.080480][ T5753] vfs_write+0x6ac/0x1070 [ 397.083004][ T5753] ksys_write+0x1f8/0x250 [ 397.085286][ T5753] do_syscall_64+0x10b/0xf80 [ 397.087542][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.089981][ T5753] [ 397.089981][ T5753] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 397.093217][ T5753] lock_sock_nested+0x41/0xf0 [ 397.095526][ T5753] inet_shutdown+0x67/0x410 [ 397.097928][ T5753] nbd_mark_nsock_dead+0xae/0x5c0 [ 397.101281][ T5753] recv_work+0x5fb/0x8c0 [ 397.103609][ T5753] process_one_work+0xa0e/0x1980 [ 397.106049][ T5753] worker_thread+0x5ef/0xe50 [ 397.108253][ T5753] kthread+0x370/0x450 [ 397.110331][ T5753] ret_from_fork+0x72b/0xd50 [ 397.112872][ T5753] ret_from_fork_asm+0x1a/0x30 [ 397.115590][ T5753] [ 397.115590][ T5753] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 397.119233][ T5753] __lock_acquire+0x14b8/0x2630 [ 397.121573][ T5753] lock_acquire+0x1b1/0x370 [ 397.123789][ T5753] __mutex_lock+0x1a4/0x1b10 [ 397.126055][ T5753] nbd_queue_rq+0x428/0x1080 [ 397.128405][ T5753] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 397.131636][ T5753] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 397.135313][ T5753] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 397.138166][ T5753] blk_mq_run_hw_queue+0x23c/0x670 [ 397.140523][ T5753] blk_mq_dispatch_list+0x51d/0x1360 [ 397.143020][ T5753] blk_mq_flush_plug_list+0x130/0x600 [ 397.145371][ T5753] __blk_flush_plug+0x2c4/0x4b0 [ 397.148336][ T5753] __submit_bio+0x584/0x6c0 [ 397.150992][ T5753] submit_bio_noacct_nocheck+0x543/0xbf0 [ 397.154147][ T5753] submit_bio_noacct+0xd18/0x2000 [ 397.156693][ T5753] submit_bh_wbc+0x681/0x890 [ 397.158999][ T5753] block_read_full_folio+0x264/0x8e0 [ 397.161493][ T5753] filemap_read_folio+0xfc/0x3b0 [ 397.163961][ T5753] do_read_cache_folio+0x2d7/0x6b0 [ 397.166431][ T5753] read_part_sector+0xd1/0x370 [ 397.168992][ T5753] adfspart_check_ICS+0x91/0x7d0 [ 397.172252][ T5753] bdev_disk_changed+0x7a3/0x1250 [ 397.175164][ T5753] blkdev_get_whole+0x187/0x290 [ 397.177512][ T5753] bdev_open+0x2c7/0xe40 [ 397.179730][ T5753] blkdev_open+0x34e/0x4f0 [ 397.181952][ T5753] do_dentry_open+0x6d8/0x1660 [ 397.184365][ T5753] vfs_open+0x82/0x3f0 [ 397.186651][ T5753] path_openat+0x208c/0x31a0 [ 397.189123][ T5753] do_file_open+0x20e/0x430 [ 397.191511][ T5753] do_sys_openat2+0x10d/0x1e0 [ 397.194045][ T5753] __x64_sys_openat+0x12d/0x210 [ 397.196542][ T5753] do_syscall_64+0x10b/0xf80 [ 397.198872][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.201693][ T5753] [ 397.201693][ T5753] other info that might help us debug this: [ 397.201693][ T5753] [ 397.206537][ T5753] Chain exists of: [ 397.206537][ T5753] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 397.206537][ T5753] [ 397.212044][ T5753] Possible unsafe locking scenario: [ 397.212044][ T5753] [ 397.212528][ T6593] usb 10-1: Using ep0 maxpacket: 32 [ 397.215481][ T5753] CPU0 CPU1 [ 397.215495][ T5753] ---- ---- [ 397.215500][ T5753] lock(&cmd->lock); [ 397.215518][ T5753] lock(set->srcu); [ 397.215533][ T5753] lock(&cmd->lock); [ 397.215545][ T5753] lock(&nsock->tx_lock); [ 397.215559][ T5753] [ 397.215559][ T5753] *** DEADLOCK *** [ 397.215559][ T5753] [ 397.215563][ T5753] 3 locks held by udevd/5753: [ 397.215576][ T5753] #0: ffff88802719d350 (&disk->open_mutex){+.+.}-{4:4} [ 397.221086][ T6593] usb 10-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.223087][ T5753] , at: bdev_open+0x41a/0xe40 [ 397.223123][ T5753] #1: ffff888026bd3898 [ 397.224821][ T6593] usb 10-1: config 1 interface 0 has no altsetting 0 [ 397.227398][ T5753] (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 397.227443][ T5753] #2: ffff8880272951f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 397.231474][ T6593] usb 10-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.40 [ 397.231625][ T5753] [ 397.231625][ T5753] stack backtrace: [ 397.234620][ T6593] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.237786][ T5753] CPU: 3 UID: 0 PID: 5753 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 397.237832][ T5753] Tainted: [L]=SOFTLOCKUP [ 397.237842][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.237861][ T5753] Call Trace: [ 397.237875][ T5753] [ 397.237888][ T5753] dump_stack_lvl+0x100/0x190 [ 397.237926][ T5753] print_circular_bug.cold+0x178/0x1c7 [ 397.238006][ T5753] check_noncircular+0x146/0x160 [ 397.238057][ T5753] __lock_acquire+0x14b8/0x2630 [ 397.238092][ T5753] lock_acquire+0x1b1/0x370 [ 397.238119][ T5753] ? nbd_queue_rq+0x428/0x1080 [ 397.238158][ T5753] ? __pfx___might_resched+0x10/0x10 [ 397.238190][ T5753] ? rcu_is_watching+0x12/0xc0 [ 397.238225][ T5753] __mutex_lock+0x1a4/0x1b10 [ 397.238252][ T5753] ? nbd_queue_rq+0x428/0x1080 [ 397.238288][ T5753] ? nbd_queue_rq+0x428/0x1080 [ 397.238319][ T5753] ? __pfx___mutex_lock+0x10/0x10 [ 397.238341][ T5753] ? __lock_acquire+0x4a5/0x2630 [ 397.238373][ T5753] ? __bfs+0x150/0x2a0 [ 397.238411][ T5753] ? __lock_acquire+0x4a5/0x2630 [ 397.238440][ T5753] ? nbd_queue_rq+0x428/0x1080 [ 397.238479][ T5753] nbd_queue_rq+0x428/0x1080 [ 397.238523][ T5753] ? __pfx_nbd_queue_rq+0x10/0x10 [ 397.238567][ T5753] ? lockdep_unlock+0x5a/0xc0 [ 397.238611][ T5753] ? __lock_acquire+0xd73/0x2630 [ 397.238639][ T5753] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 397.238689][ T5753] ? sbitmap_get+0x1d7/0x360 [ 397.238786][ T5753] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 397.238826][ T5753] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 397.238865][ T5753] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 397.238903][ T5753] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 397.238949][ T5753] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 397.238984][ T5753] blk_mq_run_hw_queue+0x23c/0x670 [ 397.239015][ T5753] ? blk_mq_run_hw_queue+0x22e/0x670 [ 397.239044][ T5753] blk_mq_dispatch_list+0x51d/0x1360 [ 397.239085][ T5753] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 397.239112][ T5753] ? update_io_ticks+0x137/0x2a0 [ 397.239132][ T5753] ? __pfx_update_io_ticks+0x10/0x10 [ 397.239154][ T5753] blk_mq_flush_plug_list+0x130/0x600 [ 397.239176][ T5753] ? trace_block_plug+0x70/0x220 [ 397.239204][ T5753] ? blk_add_rq_to_plug+0x30a/0x540 [ 397.239226][ T5753] ? __pfx_wbt_track+0x10/0x10 [ 397.239281][ T5753] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 397.239305][ T5753] ? blk_mq_submit_bio+0x994/0x2f10 [ 397.239330][ T5753] __blk_flush_plug+0x2c4/0x4b0 [ 397.239352][ T5753] ? __pfx___blk_flush_plug+0x10/0x10 [ 397.239374][ T5753] __submit_bio+0x584/0x6c0 [ 397.239394][ T5753] ? __pfx___submit_bio+0x10/0x10 [ 397.239413][ T5753] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 397.239438][ T5753] ? find_held_lock+0x2b/0x80 [ 397.239463][ T5753] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 397.239484][ T5753] submit_bio_noacct_nocheck+0x543/0xbf0 [ 397.239505][ T5753] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 397.239529][ T5753] ? __pfx___might_resched+0x10/0x10 [ 397.239553][ T5753] submit_bio_noacct+0xd18/0x2000 [ 397.239577][ T5753] submit_bh_wbc+0x681/0x890 [ 397.239612][ T5753] block_read_full_folio+0x264/0x8e0 [ 397.239634][ T5753] ? __pfx_blkdev_get_block+0x10/0x10 [ 397.239662][ T5753] ? __pfx_blkdev_read_folio+0x10/0x10 [ 397.239683][ T5753] filemap_read_folio+0xfc/0x3b0 [ 397.239714][ T5753] ? __pfx_filemap_read_folio+0x10/0x10 [ 397.239744][ T5753] do_read_cache_folio+0x2d7/0x6b0 [ 397.239762][ T5753] ? __pfx_blkdev_read_folio+0x10/0x10 [ 397.239786][ T5753] read_part_sector+0xd1/0x370 [ 397.239804][ T5753] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 397.239823][ T5753] adfspart_check_ICS+0x91/0x7d0 [ 397.239845][ T5753] ? __pfx_seq_buf_printf+0x10/0x10 [ 397.239872][ T5753] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 397.239894][ T5753] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 397.239915][ T5753] bdev_disk_changed+0x7a3/0x1250 [ 397.239937][ T5753] ? nbd_open+0x320/0x700 [ 397.239960][ T5753] ? __pfx_bdev_disk_changed+0x10/0x10 [ 397.239983][ T5753] blkdev_get_whole+0x187/0x290 [ 397.240005][ T5753] bdev_open+0x2c7/0xe40 [ 397.240028][ T5753] blkdev_open+0x34e/0x4f0 [ 397.240052][ T5753] do_dentry_open+0x6d8/0x1660 [ 397.240076][ T5753] ? __pfx_blkdev_open+0x10/0x10 [ 397.240099][ T5753] vfs_open+0x82/0x3f0 [ 397.240124][ T5753] path_openat+0x208c/0x31a0 [ 397.240150][ T5753] ? __pfx_path_openat+0x10/0x10 [ 397.240176][ T5753] do_file_open+0x20e/0x430 [ 397.240200][ T5753] ? __pfx_do_file_open+0x10/0x10 [ 397.240230][ T5753] ? alloc_fd+0x476/0x790 [ 397.240252][ T5753] ? do_getname+0x191/0x390 [ 397.240278][ T5753] do_sys_openat2+0x10d/0x1e0 [ 397.240304][ T5753] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.240332][ T5753] ? __sys_recvmsg+0x18c/0x220 [ 397.240354][ T5753] ? __pfx___sys_recvmsg+0x10/0x10 [ 397.240376][ T5753] __x64_sys_openat+0x12d/0x210 [ 397.240404][ T5753] ? __pfx___x64_sys_openat+0x10/0x10 [ 397.240431][ T5753] ? rcu_is_watching+0x12/0xc0 [ 397.240455][ T5753] do_syscall_64+0x10b/0xf80 [ 397.240472][ T5753] ? clear_bhb_loop+0x40/0x90 [ 397.240494][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.240515][ T5753] RIP: 0033:0x7f85bc6a7407 [ 397.240536][ T5753] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 397.240554][ T5753] RSP: 002b:00007ffd522bea00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 397.240575][ T5753] RAX: ffffffffffffffda RBX: 00007f85bcdbe880 RCX: 00007f85bc6a7407 [ 397.240588][ T5753] RDX: 00000000000a0800 RSI: 0000555761851d40 RDI: ffffffffffffff9c [ 397.240603][ T5753] RBP: 0000555761851910 R08: 0000000000000000 R09: 0000000000000000 [ 397.240615][ T5753] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555761874be0 [ 397.240627][ T5753] R13: 0000555761869410 R14: 0000000000000000 R15: 0000555761874be0 [ 397.240643][ T5753] [ 397.242527][ T5753] block nbd1: Dead connection, failed to find a fallback [ 397.266413][ T6593] usb 10-1: Product: ఉ [ 397.284294][ T5753] block nbd1: shutting down sockets [ 397.326648][ T6593] usb 10-1: Manufacturer: 깺剙챌Ž慮̮鰥뇯▧쫎膁춾⸏ḫ첏쪾诇㇪蔴餿쭥⋭寮ᣁ쫁ᅣ胰吹䬽啫琽ᄓ [ 397.372211][ T5753] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.374048][ T6593] usb 10-1: SerialNumber: 慪꥞櫁Ꞷ̇⦫ᇴ㊔冷숹䙂ꦽ㑾ꋗ㎑㾾糄꤄뎏슘딆涝㌻⦕ﲊ᱈朕㮍 [ 397.377454][ T5753] Buffer I/O error on dev nbd1, logical block 0, async page read [ 397.551547][ T5753] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.556218][ T5753] Buffer I/O error on dev nbd1, logical block 1, async page read [ 397.560398][ T5753] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.565661][ T5753] Buffer I/O error on dev nbd1, logical block 2, async page read [ 397.569173][ T5753] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.573154][ T5753] Buffer I/O error on dev nbd1, logical block 3, async page read [ 397.576774][ T5753] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.581713][ T5753] Buffer I/O error on dev nbd1, logical block 0, async page read [ 397.585907][ T5753] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.589722][ T5753] Buffer I/O error on dev nbd1, logical block 1, async page read [ 397.593105][ T5753] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.597009][ T5753] Buffer I/O error on dev nbd1, logical block 2, async page read [ 397.600612][ T5753] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.605018][ T5753] Buffer I/O error on dev nbd1, logical block 3, async page read [ 397.608425][ T5753] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.613825][ T5753] Buffer I/O error on dev nbd1, logical block 0, async page read [ 397.618008][ T5753] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.621858][ T5753] Buffer I/O error on dev nbd1, logical block 1, async page read [ 397.628013][ T5753] ldm_validate_partition_table(): Disk read failed. [ 397.632349][ T5753] Dev nbd1: unable to read RDB block 0 [ 397.636190][ T5753] nbd1: unable to read partition table [ 397.642630][ T5753] ldm_validate_partition_table(): Disk read failed. [ 397.647338][ T5753] Dev nbd1: unable to read RDB block 0 [ 397.651080][ T5753] nbd1: unable to read partition table [ 397.685889][T12491] syz_tun (unregistering): left allmulticast mode [ 397.815449][ T6593] usb 10-1: can't set config #1, error -71 [ 397.818342][ T6593] usb 10-1: USB disconnect, device number 6 [ 397.824457][ T5922] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.940183][ T5922] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.997388][ T5922] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.076989][ T5922] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.210725][ T5922] bridge_slave_1: left allmulticast mode [ 398.214447][ T5922] bridge_slave_1: left promiscuous mode [ 398.216542][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.220535][ T5922] bridge_slave_0: left allmulticast mode [ 398.223302][ T5922] bridge_slave_0: left promiscuous mode [ 398.226455][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.232193][ T5922] pimreg: left allmulticast mode [ 398.405139][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.410507][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.414577][ T5922] bond0 (unregistering): Released all slaves [ 398.418068][ T5922] bond1 (unregistering): Released all slaves [ 398.498526][ T5922] tipc: Disabling bearer [ 398.515995][ T5922] tipc: Left network mode [ 398.551137][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 398.698056][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 398.812526][ T5922] hsr_slave_0: left promiscuous mode [ 398.815986][ T5922] hsr_slave_1: left promiscuous mode [ 398.819231][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.823554][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.826754][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.829565][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.837046][ T5922] veth1_macvtap: left promiscuous mode [ 398.838984][ T5922] veth0_macvtap: left promiscuous mode [ 398.841212][ T5922] veth1_vlan: left promiscuous mode [ 398.843530][ T5922] veth0_vlan: left promiscuous mode [ 398.904316][ T5922] team0 (unregistering): Port device team_slave_1 removed [ 398.909452][ T5922] team0 (unregistering): Port device team_slave_0 removed [ 398.945396][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 399.119606][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 399.445645][ T5922] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.486426][ T5922] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.535100][ T5922] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.585084][ T5922] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.697831][ T5922] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 399.777617][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.779236][T11459] smbdirect: ib_dev[syz1] removed [ 399.786573][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.791182][ T5922] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 399.795645][ T5922] bond0 (unregistering): Released all slaves [ 399.799695][ T5922] bond1 (unregistering): Released all slaves [ 399.806885][ T5922] bond2 (unregistering): Released all slaves [ 399.812354][ T5922] bond3 (unregistering): Released all slaves [ 399.818021][ T5922] bond4 (unregistering): Released all slaves [ 399.823914][ T5922] bond5 (unregistering): (slave veth3): Releasing active interface [ 399.828093][ T5922] bond5 (unregistering): Released all slaves [ 400.010001][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 400.169230][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 400.254129][ T5922] veth1_macvtap: left promiscuous mode [ 400.256398][ T5922] veth0_macvtap: left promiscuous mode [ 400.258688][ T5922] veth1_vlan: left promiscuous mode [ 400.260699][ T5922] veth0_vlan: left promiscuous mode [ 400.365833][ T5922] pim6reg (unregistering): left allmulticast mode [ 400.457903][ T12] smc: removing ib device syz2 [ 400.466182][T11459] smbdirect: ib_dev[syz0] removed [ 400.467903][ T12] smbdirect: ib_dev[syz2] removed [ 400.494473][ T843] wg1 speed is unknown, defaulting to 1000 [ 400.497004][ T843] infiniband syz0: ib_query_port failed (-19) [ 400.500552][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 400.511168][ T5894] wg2 speed is unknown, defaulting to 1000 [ 400.513789][ T5894] syz2: Port: 1 Link DOWN [ 400.658465][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17