last executing test programs: 23m36.385657538s ago: executing program 32 (id=3): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006080000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#'], &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, 0x0) 23m33.769466386s ago: executing program 33 (id=9): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f00000002c0)) close_range(r3, r6, 0x0) 23m23.392312179s ago: executing program 34 (id=15): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 21m4.802224804s ago: executing program 35 (id=190): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 19m49.93235495s ago: executing program 36 (id=291): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb", 0x3f}], 0x1) open$dir(0x0, 0x1, 0x162) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = syz_clone(0x840980, &(0x7f00000002c0), 0x0, &(0x7f0000000100), &(0x7f0000000380), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000bc0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xfffffffffffffec7) sendmsg$nl_generic(r4, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8], 0x125c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) 18m27.905220265s ago: executing program 37 (id=405): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x14337f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) sched_setattr(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xc5e4, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0], 0x70}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0x2}]}, 0x2c}}, 0x0) 18m18.678604299s ago: executing program 38 (id=417): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="00000f00000009003d140f3c369117d096471914"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000000040)={0x1, 0x3, 0xbdd, 0x4d0, 0xfffffc01}) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 16m23.852278383s ago: executing program 39 (id=566): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006080000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#'], &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 14m18.868875166s ago: executing program 40 (id=698): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r4 = socket(0x2b, 0x1, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 13m22.421842129s ago: executing program 0 (id=718): socket$inet(0x2, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x11, 0x303000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r4, @ANYBLOB="08e0c7c1d5df8eaa5cdc6c112e291df18af4a1318724e8149b0ab8bbfd19e973bb749134d7ec447ba256d7eb28f37c54913b53d50366c7747618098d0b561b2d9c98be69dd019f0eead393688a833260c77139171ab69fa01bd0db29c59a58158e9cab99827e868d851769535cdc1c37046a12031a76317fe48d44906579c6b66d13267238155a6036dc6b0f47bf846ae1c5854da7dd7945053cd03bf21716"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 13m14.861144327s ago: executing program 0 (id=811): write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) 13m14.319804523s ago: executing program 0 (id=814): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x7800, 0x7800, 0x800, 0x4, {{0x39, 0x4, 0x1, 0x3a, 0xe4, 0x66, 0x0, 0x7, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x24, 0x0, 0xf}, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x0, [0xa, 0x1, 0xfff]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2]}, @lsrr={0x83, 0x2b, 0x5e, [@remote, @empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @multicast2, @local, @local]}, @end, @cipso={0x86, 0x4a, 0x3, [{0x5, 0x10, "94ed22edcdf3d29f448f534b6b18"}, {0x5, 0x3, "f4"}, {0x5, 0xb, "473a2984140ac75060"}, {0x5, 0xd, "6cf8e58114ff4eacad06ab"}, {0x5, 0x8, "3a300301f2d9"}, {0x6, 0xc, "7d0eb90b9431095881d2"}, {0x5, 0x5, "51eb59"}]}, @rr={0x7, 0x1f, 0x64, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x48, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100, 0x0, [{0x39}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) 13m9.780939394s ago: executing program 0 (id=822): unshare(0x200) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8fb90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 13m8.268626946s ago: executing program 0 (id=826): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001", 0xcb}], 0x1}, 0x894) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x24040010) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000740), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/233) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x40480923, 0x200000000005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) setregid(0x0, 0xffffffffffffffff) ioctl$TIOCGPTPEER(r5, 0x932, 0x200000000005) 13m6.566408417s ago: executing program 0 (id=831): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r4, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(r0) r5 = socket(0x2b, 0x1, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x23, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 12m51.156442403s ago: executing program 41 (id=831): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r4, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(r0) r5 = socket(0x2b, 0x1, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x23, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 12m6.597442539s ago: executing program 5 (id=925): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 11m59.991361496s ago: executing program 5 (id=936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/20], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESHEX, @ANYBLOB=',audit,\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) 11m54.580994015s ago: executing program 5 (id=947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) unshare(0x26020480) r4 = socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x4}, &(0x7f0000000100)=0x28) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) 11m48.611113394s ago: executing program 5 (id=960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34d}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x3f00, 0x0, 0x0, 0x0) 11m45.637030404s ago: executing program 5 (id=964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000002c0)) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 11m33.304649724s ago: executing program 5 (id=980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 11m17.982654777s ago: executing program 42 (id=980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 10m3.9030458s ago: executing program 4 (id=1125): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) syz_open_procfs$namespace(0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x9) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r4, &(0x7f0000007340)=[{{&(0x7f0000000a40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8014) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x5, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), 0x0) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m1.1932352s ago: executing program 4 (id=1130): write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9m59.490524744s ago: executing program 4 (id=1136): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 9m50.940833497s ago: executing program 4 (id=1149): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)={0x51, 0x4, 0x2, {0x2, 0x5}, {0xa, 0x1}, @ramp={0x0, 0x7, {0x2, 0x8, 0x3}}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) pipe2$9p(&(0x7f0000000140), 0x80000) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) getrlimit(0x2, &(0x7f0000000280)) 9m47.956813046s ago: executing program 4 (id=1155): socket$inet(0x2, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x11, 0x303000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r4, @ANYBLOB="08e0c7c1d5df8eaa5cdc6c112e291df18af4a1318724e8149b0ab8bbfd19e973bb749134d7ec447ba256d7eb28f37c54913b53d50366c7747618098d0b561b2d9c98be69dd019f0eead393688a833260c77139171ab69fa01bd0db29c59a58158e9cab99827e868d851769535cdc1c37046a12031a76317fe48d44906579c6b66d13267238155a6036dc6b0f47bf846ae1c5854da7dd7945053cd03bf21716"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) pipe(0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 9m35.908234915s ago: executing program 4 (id=1169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f00000002c0)) close_range(r3, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 9m19.254786249s ago: executing program 43 (id=1169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f00000002c0)) close_range(r3, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5m42.607615088s ago: executing program 2 (id=1513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f00000002c0)) close_range(r3, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5m37.150385997s ago: executing program 2 (id=1522): socket$inet(0x2, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x11, 0x303000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r4, @ANYBLOB="08e0c7c1d5df8eaa5cdc6c112e291df18af4a1318724e8149b0ab8bbfd19e973bb749134d7ec447ba256d7eb28f37c54913b53d50366c7747618098d0b561b2d9c98be69dd019f0eead393688a833260c77139171ab69fa01bd0db29c59a58158e9cab99827e868d851769535cdc1c37046a12031a76317fe48d44906579c6b66d13267238155a6036dc6b0f47bf846ae1c5854da7dd7945053cd03bf21716"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 5m30.137903204s ago: executing program 2 (id=1529): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009e80)=[{{&(0x7f0000001f80), 0x6e, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x34}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000087c0)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}}, {{0x0, 0x0, &(0x7f0000009e40)=[{&(0x7f0000009d80)=""/113, 0x71}], 0x1}}], 0x3, 0x40000103, &(0x7f0000009f00)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 5m27.630875629s ago: executing program 2 (id=1536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 5m24.685644313s ago: executing program 2 (id=1538): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x7800, 0x7800, 0x800, 0x4, {{0x3c, 0x4, 0x1, 0x3a, 0xf0, 0x66, 0x0, 0x7, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x24, 0x0, 0xf}, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x0, [0xa, 0x1, 0xfff]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2]}, @lsrr={0x83, 0x2b, 0x5e, [@remote, @empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @multicast2, @local, @local]}, @end, @cipso={0x86, 0x52, 0x3, [{0x5, 0x10, "94ed22edcdf3d29f448f534b6b18"}, {0x5, 0x3, "f4"}, {0x5, 0xb, "473a2984140ac75060"}, {0x5, 0xd, "6cf8e58114ff4eacad06ab"}, {0x5, 0x8, "3a300301f2d9"}, {0x6, 0xc, "7d0eb90b9431095881d2"}, {0x5, 0x2}, {0x1, 0xb, "8ad56e5035d41638c0"}]}, @rr={0x7, 0x23, 0x64, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x48, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100, 0x0, [{0x39}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m21.213840014s ago: executing program 2 (id=1546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) 5m6.018645773s ago: executing program 44 (id=1546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) 50.71597365s ago: executing program 9 (id=1948): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="6e657720723a73797a2030df8bd503303bc330303030303430393300"/48], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 40.92201724s ago: executing program 9 (id=1964): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 32.209558548s ago: executing program 9 (id=1982): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 31.25567788s ago: executing program 9 (id=1986): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 28.53093389s ago: executing program 6 (id=1988): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/20], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[]) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) 27.459915989s ago: executing program 3 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xb}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9b3, 0x5, 0xa, 0xffffffff, 0xb2}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.288040301s ago: executing program 9 (id=1991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r3, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f00000002c0)) close_range(0xffffffffffffffff, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007926000000000000bf670800000000005607000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f153bf0f5bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae625a14bddcf5b3e72b420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d6287805319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8098f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b39a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d57158dc308c08dc0a8dc99bdfeaff43eb24134e63a5efd08c6c2d51983265b60afcc5effad8f52ec152ab4ed39c2dbd04e3fefd9217a0246660301d5b7d7a9ea72c2cdec5a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 26.280268343s ago: executing program 3 (id=1993): write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 24.466530567s ago: executing program 3 (id=1995): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 22.464190494s ago: executing program 7 (id=1996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0xa, 0x2) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r3, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r2, 0x0, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f00000002c0)) close_range(r2, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 21.3165524s ago: executing program 1 (id=1999): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x1, 0x100) listen(r2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009e80)=[{{&(0x7f0000001f80), 0x6e, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x34}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000087c0)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}}, {{0x0, 0x0, &(0x7f0000009e40)=[{&(0x7f0000009d80)=""/113, 0x71}], 0x1}}], 0x3, 0x40000103, &(0x7f0000009f00)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) process_vm_writev(0x0, &(0x7f0000000880)=[{&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000001ac0)=""/211, 0xd3}], 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x6e, 0x0, 0x0, 0x10, 0x1}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) 21.301167863s ago: executing program 6 (id=2000): unshare(0x200) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8fb90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 20.899395912s ago: executing program 9 (id=2002): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 19.464124375s ago: executing program 6 (id=2003): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 17.180565812s ago: executing program 1 (id=2004): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x7800, 0x7800, 0x800, 0x4, {{0x3b, 0x4, 0x1, 0x3a, 0xec, 0x66, 0x0, 0x7, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x24, 0x0, 0xf}, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x0, [0xa, 0x1, 0xfff]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2]}, @lsrr={0x83, 0x2b, 0x5e, [@remote, @empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @multicast2, @local, @local]}, @end, @cipso={0x86, 0x52, 0x3, [{0x5, 0x10, "94ed22edcdf3d29f448f534b6b18"}, {0x5, 0xb, "473a2984140ac75060"}, {0x5, 0xd, "6cf8e58114ff4eacad06ab"}, {0x5, 0x8, "3a300301f2d9"}, {0x6, 0xc, "7d0eb90b9431095881d2"}, {0x5, 0x5, "51eb59"}, {0x1, 0xb, "8ad56e5035d41638c0"}]}, @rr={0x7, 0x1f, 0x64, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x48, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100, 0x0, [{0x39}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) 16.115701277s ago: executing program 1 (id=2006): unshare(0x200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8fb90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 15.956259874s ago: executing program 6 (id=2007): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 15.752194393s ago: executing program 7 (id=2009): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 14.562907938s ago: executing program 1 (id=2010): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 13.234273787s ago: executing program 6 (id=2012): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/20], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESHEX]) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) 12.745092235s ago: executing program 7 (id=2013): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.168578449s ago: executing program 7 (id=2015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x868, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x83c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_BURST={0x8, 0x6, 0xe4f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x868}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 11.152917944s ago: executing program 3 (id=2016): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x1, 0x100) listen(r2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009e80)=[{{&(0x7f0000001f80), 0x6e, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x34}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000087c0)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}}, {{0x0, 0x0, &(0x7f0000009e40)=[{&(0x7f0000009d80)=""/113, 0x71}], 0x1}}], 0x3, 0x40000103, &(0x7f0000009f00)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) process_vm_writev(0x0, &(0x7f0000000880)=[{&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000001ac0)=""/211, 0xd3}], 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x6e, 0x0, 0x0, 0x10, 0x1}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) 10.868988912s ago: executing program 8 (id=2017): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() syz_emit_ethernet(0xe, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 9.427847615s ago: executing program 8 (id=2018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, 0x0, 0x0) 9.273931303s ago: executing program 3 (id=2019): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) 5.556078673s ago: executing program 8 (id=2020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x80c0) 5.309010042s ago: executing program 45 (id=2002): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 5.285238667s ago: executing program 7 (id=2022): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) 5.283496614s ago: executing program 3 (id=2023): unshare(0x200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8fb90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 4.721528625s ago: executing program 8 (id=2024): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 4.120924005s ago: executing program 8 (id=2025): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.519018194s ago: executing program 1 (id=2026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.221165826s ago: executing program 6 (id=2027): write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 286.737532ms ago: executing program 1 (id=2028): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 219.76144ms ago: executing program 8 (id=2029): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000040)={0x51, 0x4, 0x2, {0x2, 0x5}, {0xa, 0x1}, @ramp={0x0, 0x7, {0x2, 0x8, 0x3}}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) memfd_secret(0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) pipe2$9p(&(0x7f0000000140), 0x80000) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) getrlimit(0x2, &(0x7f0000000280)) 0s ago: executing program 7 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff0001}]}]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200410d4}, 0x0) kernel console output (not intermixed with test programs): er_driver returned -16 [ 831.070920][ T144] usb 10-1: Failed to submit usb control message: -110 [ 831.078071][ T144] usb 10-1: unable to send the bmi data to the device: -110 [ 831.329421][ T144] usb 10-1: unable to get target info from device [ 831.354892][ T144] usb 10-1: could not get target info (-110) [ 831.383310][ T144] usb 10-1: could not probe fw (-110) [ 831.887891][ T5980] usb 10-1: USB disconnect, device number 3 [ 839.582599][T11071] bond0: (slave bond_slave_0): interface is now down [ 839.630656][T11071] bond0: (slave bond_slave_1): interface is now down [ 839.680650][T10451] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 839.722157][T11071] bond0: now running without any active interface! [ 840.020640][T10451] usb 3-1: Using ep0 maxpacket: 8 [ 840.054721][T10451] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 840.095051][T10451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.182000][T10451] usb 3-1: Product: syz [ 840.193512][T10451] usb 3-1: Manufacturer: syz [ 840.210998][T10451] usb 3-1: SerialNumber: syz [ 840.281750][T10451] usb 3-1: config 0 descriptor?? [ 840.517155][T10451] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 841.071792][T10451] gspca_sonixj: reg_r err -110 [ 842.522710][T10451] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 842.548895][ T30] audit: type=1326 audit(1771093211.424:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.1.979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f041c99bf79 code=0x0 [ 843.020416][ T5905] usb 3-1: USB disconnect, device number 5 [ 843.730655][T10451] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 843.763158][T11501] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 843.813119][T11501] block device autoloading is deprecated and will be removed. [ 843.882163][T11496] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 843.923330][T10451] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 843.931261][T11496] block device autoloading is deprecated and will be removed. [ 843.979566][T10451] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.021874][T10451] usb 4-1: config 0 has no interface number 0 [ 844.038029][T10451] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 844.079911][T10451] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 844.270617][T10451] usb 4-1: config 0 interface 106 has no altsetting 0 [ 844.843719][T10451] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 844.927983][T10451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.971659][T11507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.986'. [ 845.002247][T10451] usb 4-1: config 0 descriptor?? [ 845.184353][T10451] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 846.108343][T11526] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 846.252659][T11071] usb 4-1: Failed to submit usb control message: -110 [ 846.272692][T11071] usb 4-1: unable to send the bmi data to the device: -110 [ 846.280052][T11071] usb 4-1: unable to get target info from device [ 846.286620][T11071] usb 4-1: could not get target info (-110) [ 846.295031][T11071] usb 4-1: could not probe fw (-110) [ 846.995593][ T5905] usb 4-1: USB disconnect, device number 17 [ 848.850649][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 848.955648][T11557] input: syz0 as /devices/virtual/input/input28 [ 849.082858][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 849.247391][ T5905] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 849.385192][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.543886][ T5905] usb 2-1: Product: syz [ 849.631382][ T5905] usb 2-1: Manufacturer: syz [ 849.686337][ T5905] usb 2-1: SerialNumber: syz [ 849.921887][ T5905] usb 2-1: config 0 descriptor?? [ 849.942759][ T5905] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 852.942745][T11589] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 853.921163][ T5927] usb 2-1: USB disconnect, device number 3 [ 854.501047][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 854.738805][ T5927] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 854.770593][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.887856][ T5927] usb 2-1: config 0 has no interface number 0 [ 854.945132][ T5927] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 855.010845][ T5927] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 855.092847][ T5927] usb 2-1: config 0 interface 106 has no altsetting 0 [ 855.099715][ T5927] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 855.187308][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.253973][ T5927] usb 2-1: config 0 descriptor?? [ 855.312284][ T5927] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 855.702594][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1005'. [ 856.332487][ T58] usb 2-1: Failed to submit usb control message: -110 [ 856.339761][ T58] usb 2-1: unable to send the bmi data to the device: -110 [ 856.419168][ T58] usb 2-1: unable to get target info from device [ 856.443828][ T58] usb 2-1: could not get target info (-110) [ 856.496706][ T58] usb 2-1: could not probe fw (-110) [ 856.638129][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 856.654711][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 856.666977][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 856.722447][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 856.731274][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 857.651298][ T5927] usb 2-1: USB disconnect, device number 4 [ 858.370107][T11622] chnl_net:caif_netlink_parms(): no params data found [ 858.810847][T10135] Bluetooth: hci6: command tx timeout [ 859.201565][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1014'. [ 860.890625][T10135] Bluetooth: hci6: command tx timeout [ 861.846206][T11657] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 861.871508][T11657] block (null): Could not allocate knbd recv work queue. [ 862.415413][T11657] nbd: failed to add new device [ 863.170716][T10135] Bluetooth: hci6: command tx timeout [ 864.447454][T11622] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.778629][T11622] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.940906][T11622] bridge_slave_0: entered allmulticast mode [ 864.949362][T11622] bridge_slave_0: entered promiscuous mode [ 865.235676][T10135] Bluetooth: hci6: command tx timeout [ 865.250831][T11622] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.259493][T11622] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.322475][T11622] bridge_slave_1: entered allmulticast mode [ 865.383398][T11622] bridge_slave_1: entered promiscuous mode [ 865.726945][T11622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.805358][T11622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.315347][T11622] team0: Port device team_slave_0 added [ 866.419136][T11622] team0: Port device team_slave_1 added [ 866.639598][T11622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.683034][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.238405][T11622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.690032][T11622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.719608][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.810782][T11622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.910772][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 868.118358][ T29] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 868.169364][T11722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1024'. [ 868.179036][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.179087][ T29] usb 10-1: config 0 has no interface number 0 [ 868.179137][ T29] usb 10-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 868.179200][ T29] usb 10-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 868.179250][ T29] usb 10-1: config 0 interface 106 has no altsetting 0 [ 868.393330][ T29] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 868.441667][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.459509][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.509579][ T29] usb 10-1: config 0 descriptor?? [ 868.630458][ T29] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 869.546313][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.553620][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.701467][ T58] usb 10-1: Failed to submit usb control message: -110 [ 869.708683][ T58] usb 10-1: unable to send the bmi data to the device: -110 [ 869.846564][ T58] usb 10-1: unable to get target info from device [ 869.876248][ T58] usb 10-1: could not get target info (-110) [ 869.913514][ T58] usb 10-1: could not probe fw (-110) [ 869.968140][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.064288][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1030'. [ 870.997277][T11622] hsr_slave_0: entered promiscuous mode [ 871.097743][T11622] hsr_slave_1: entered promiscuous mode [ 871.189198][T11622] debugfs: 'hsr0' already exists in 'hsr' [ 871.635881][T11622] Cannot create hsr debugfs directory [ 871.636408][T11741] usb 10-1: USB disconnect, device number 4 [ 873.133106][T11686] udevd[11686]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 873.454800][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 875.092994][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.358353][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.111727][T11802] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 878.765567][T11807] kAFS: unparsable volume name [ 882.004056][ T144] bridge_slave_1: left allmulticast mode [ 882.023482][ T144] bridge_slave_1: left promiscuous mode [ 882.023792][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.151981][ T144] bridge_slave_0: left allmulticast mode [ 882.157710][ T144] bridge_slave_0: left promiscuous mode [ 882.211154][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.178693][T11833] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1048'. [ 885.660112][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.720196][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.781433][ T144] bond0 (unregistering): Released all slaves [ 886.891297][T10135] Bluetooth: hci0: command 0x0406 tx timeout [ 887.569305][ T144] hsr_slave_0: left promiscuous mode [ 887.614397][ T144] hsr_slave_1: left promiscuous mode [ 887.645686][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.675424][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.718825][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.551149][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.611579][ T144] veth1_macvtap: left promiscuous mode [ 888.617934][ T144] veth0_macvtap: left promiscuous mode [ 888.627192][ T144] veth1_vlan: left promiscuous mode [ 888.641075][ T144] veth0_vlan: left promiscuous mode [ 892.038916][T11895] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 892.937113][ T144] team0 (unregistering): Port device team_slave_1 removed [ 893.084711][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1061'. [ 894.176781][ T144] team0 (unregistering): Port device team_slave_0 removed [ 897.078426][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 901.501405][T11622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 901.549049][T11622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 901.598355][T11622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 901.684936][T11622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 902.745254][T11622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.908272][T11622] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.371673][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.378899][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.593967][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.601237][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.084092][T11622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.168478][T12025] loop8: detected capacity change from 0 to 4096 [ 906.333329][T12030] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.294225][T11622] veth0_vlan: entered promiscuous mode [ 907.395534][T11622] veth1_vlan: entered promiscuous mode [ 907.523058][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'. [ 908.483860][T11622] veth0_macvtap: entered promiscuous mode [ 908.595022][T11622] veth1_macvtap: entered promiscuous mode [ 908.829388][T11755] udevd[11755]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 908.872341][T11622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.918593][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 909.003879][T11622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.085551][T11071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.126235][T11071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.156738][T11071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.248830][T11071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.809146][T12065] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 910.109315][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.137527][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.628126][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.175114][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.054559][ T5919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 915.328599][ T5919] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 915.355213][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.438153][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1099'. [ 916.057904][ T5919] usb 3-1: config 0 has no interface number 0 [ 916.065546][ T5919] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 916.076660][ T5919] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 916.091202][ T5919] usb 3-1: config 0 interface 106 has no altsetting 0 [ 916.098020][ T5919] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 916.107416][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.147725][ T5919] usb 3-1: config 0 descriptor?? [ 916.215507][ T5919] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 916.474985][T12140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.492391][T12140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.291211][ T6077] usb 3-1: Failed to submit usb control message: -110 [ 917.308999][ T6077] usb 3-1: unable to send the bmi data to the device: -110 [ 917.355080][ T6077] usb 3-1: unable to get target info from device [ 917.402328][ T6077] usb 3-1: could not get target info (-110) [ 917.426402][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 917.476810][ T6077] usb 3-1: could not probe fw (-110) [ 917.494817][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 917.950276][ T29] usb 3-1: USB disconnect, device number 6 [ 920.805676][T12166] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 926.642215][ T5919] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 926.832843][ T5919] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 927.236031][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.296512][ T5919] usb 4-1: config 0 has no interface number 0 [ 927.320603][ T5919] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 927.780706][ T5919] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 927.884169][ T5919] usb 4-1: config 0 interface 106 has no altsetting 0 [ 927.910642][ T5919] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 927.919769][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.008036][ T5919] usb 4-1: config 0 descriptor?? [ 928.310250][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.319259][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.338998][ T5919] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 929.378619][ T82] usb 4-1: Failed to submit usb control message: -110 [ 929.401656][ T82] usb 4-1: unable to send the bmi data to the device: -110 [ 929.422866][ T82] usb 4-1: unable to get target info from device [ 929.610467][ T82] usb 4-1: could not get target info (-110) [ 929.616554][ T82] usb 4-1: could not probe fw (-110) [ 931.095132][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.102090][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.851312][T11741] usb 4-1: USB disconnect, device number 18 [ 932.769516][T12278] Bluetooth: MGMT ver 1.23 [ 932.978603][T12275] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 938.276162][T12333] kAFS: unparsable volume name [ 941.022012][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 942.054834][T12346] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 942.313788][ T29] usb 3-1: device descriptor read/all, error -71 [ 945.351553][T12374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1150'. [ 947.033779][T12406] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1157'. [ 947.063687][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 947.845350][T12412] binder: 12409:12412 ioctl 8008662c 200000000240 returned -22 [ 947.860263][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1158'. [ 949.142908][T12417] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 949.269746][ T5905] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 949.473109][ T5905] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 949.483802][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.560373][ T5905] usb 4-1: config 0 has no interface number 0 [ 949.582216][ T5905] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 950.860167][ T5905] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 951.201627][ T5905] usb 4-1: config 0 interface 106 has no altsetting 0 [ 951.227686][ T5905] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 951.245377][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.257673][ T5905] usb 4-1: config 0 descriptor?? [ 951.542452][ T5905] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 951.663984][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.800787][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.490792][T12450] kAFS: unparsable volume name [ 954.167494][ T139] usb 4-1: Failed to submit usb control message: -110 [ 954.246134][ T139] usb 4-1: unable to send the bmi data to the device: -110 [ 954.450608][ T139] usb 4-1: unable to get target info from device [ 954.456990][ T139] usb 4-1: could not get target info (-110) [ 954.469284][ T139] usb 4-1: could not probe fw (-110) [ 956.762669][ T9] usb 4-1: USB disconnect, device number 19 [ 957.809498][T12468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1167'. [ 959.593853][T12469] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 960.350720][ T5980] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 960.555761][ T5980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.642343][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 960.790578][ T5980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 960.799536][ T5980] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.045815][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 962.708644][ T5980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 963.632873][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.669077][ T5980] usb 4-1: Product: syz [ 963.699614][ T5980] usb 4-1: Manufacturer: syz [ 963.720428][ T5980] usb 4-1: SerialNumber: syz [ 963.929515][ T5980] usb 4-1: can't set config #1, error -71 [ 964.380811][ T5980] usb 4-1: USB disconnect, device number 20 [ 965.850640][ T5980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 968.629909][ T5980] usb 4-1: device descriptor read/all, error -71 [ 969.145764][T12533] kAFS: unparsable volume name [ 971.688489][T12548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1186'. [ 971.822164][ T5980] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 972.070254][ T5980] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.288635][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 972.364675][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 972.453268][ T5980] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 972.553389][ T5980] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 972.570246][ T5980] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 972.622043][ T5980] usb 9-1: Manufacturer: syz [ 972.709791][ T5980] usb 9-1: config 0 descriptor?? [ 973.289467][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 973.643630][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 974.500621][ T5980] rc_core: IR keymap rc-hauppauge not found [ 974.517534][ T5980] Registered IR keymap rc-empty [ 974.573642][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 974.612471][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 974.672787][ T5980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 974.753508][ T5980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input29 [ 975.017801][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 975.235840][T10135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 975.248606][T10135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 975.252718][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 975.262758][T10135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 975.280082][T10135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 975.287284][ T5905] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 975.300389][T10135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 975.383797][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 975.443397][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 975.800751][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.840723][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 975.865965][ T5905] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 976.503963][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 976.542774][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 976.581335][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 976.588569][ T5905] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 976.730933][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 976.780789][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.801530][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 976.810267][ T5905] usb 3-1: Product: syz [ 976.840639][ T5905] usb 3-1: Manufacturer: syz [ 976.849930][ T5980] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 976.871032][ T5905] usb 3-1: SerialNumber: syz [ 976.966593][ T5905] usb 3-1: bad CDC descriptors [ 977.056630][ T5980] mceusb 9-1:0.0: Registered à – with mce emulator interface version 1 [ 977.080792][ T5980] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 977.200815][ T5919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 977.371236][ T5836] Bluetooth: hci2: command tx timeout [ 977.628167][ T5919] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 977.630865][T12575] loop2: detected capacity change from 0 to 1024 [ 977.667927][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.686870][ T5980] usb 9-1: USB disconnect, device number 5 [ 977.702040][ T5919] usb 2-1: config 0 has no interface number 0 [ 977.729749][ T5919] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 977.781157][ T5919] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 979.497758][ T5836] Bluetooth: hci2: command tx timeout [ 979.929605][ T5919] usb 2-1: config 0 interface 106 has no altsetting 0 [ 980.419186][T12606] hfsplus: b-tree write err: -5, ino 2 [ 981.711507][ T5919] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 981.810848][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.840786][ T5836] Bluetooth: hci2: command tx timeout [ 981.892193][ T5919] usb 2-1: config 0 descriptor?? [ 981.960669][ T5919] usb 2-1: can't set config #0, error -71 [ 982.011218][ T5919] usb 2-1: USB disconnect, device number 5 [ 982.155423][ T5905] usb 3-1: USB disconnect, device number 9 [ 982.409535][ T6073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.437839][T11071] hfsplus: b-tree write err: -5, ino 25 [ 983.567697][T11071] hfsplus: b-tree write err: -5, ino 4 [ 983.574886][T11071] hfsplus: b-tree write err: -5, ino 2 [ 983.580612][T11071] hfsplus: b-tree write err: -5, ino 26 [ 983.850637][ T5836] Bluetooth: hci2: command tx timeout [ 985.561166][T12641] binder: 12636:12641 ioctl 8008662c 200000000240 returned -22 [ 985.577736][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1205'. [ 985.632672][ T6073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.603744][T12652] kAFS: unparsable volume name [ 989.412747][ T6073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.115785][T12672] loop9: detected capacity change from 0 to 4096 [ 990.450557][T12679] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 992.441203][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.447591][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.002292][ T6073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.501071][T12577] chnl_net:caif_netlink_parms(): no params data found [ 994.349086][T12706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1216'. [ 995.515359][T12715] kAFS: unparsable volume name [ 996.161659][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.168815][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.194670][T12577] bridge_slave_0: entered allmulticast mode [ 996.203065][T12577] bridge_slave_0: entered promiscuous mode [ 996.230083][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 996.868884][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.882553][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.889845][T12577] bridge_slave_1: entered allmulticast mode [ 996.898575][T12577] bridge_slave_1: entered promiscuous mode [ 997.250442][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 997.257691][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.298813][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.374389][ T6073] bridge_slave_1: left allmulticast mode [ 997.380078][ T6073] bridge_slave_1: left promiscuous mode [ 997.518048][T12736] binder: 12733:12736 ioctl 8008662c 200000000240 returned -22 [ 997.537713][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 998.285626][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.634091][ T6073] bridge_slave_0: left allmulticast mode [ 998.639776][ T6073] bridge_slave_0: left promiscuous mode [ 999.359761][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.408650][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.478962][T12767] loop9: detected capacity change from 0 to 4096 [ 1001.502419][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.102536][ T6073] bond0 (unregistering): Released all slaves [ 1002.173644][T12776] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1002.395441][T12577] team0: Port device team_slave_0 added [ 1003.233591][T12577] team0: Port device team_slave_1 added [ 1005.492849][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.520744][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.650635][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.755847][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.840685][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.074912][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.564586][T12823] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.1240'. [ 1007.632745][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 1007.937726][ T6073] hsr_slave_0: left promiscuous mode [ 1007.978240][ T6073] hsr_slave_1: left promiscuous mode [ 1008.002565][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.036758][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.165521][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.193554][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.269861][ T6073] veth1_macvtap: left promiscuous mode [ 1008.286535][ T6073] veth0_macvtap: left promiscuous mode [ 1008.304251][ T6073] veth1_vlan: left promiscuous mode [ 1008.370806][ T6073] veth0_vlan: left promiscuous mode [ 1009.923775][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1010.023118][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1011.352501][T12577] hsr_slave_0: entered promiscuous mode [ 1011.359055][T12577] hsr_slave_1: entered promiscuous mode [ 1011.395727][T12577] debugfs: 'hsr0' already exists in 'hsr' [ 1011.419721][T12577] Cannot create hsr debugfs directory [ 1012.344519][T12867] loop8: detected capacity change from 0 to 4096 [ 1012.680622][T12874] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.872816][T12891] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1016.525703][T12904] binder: 12894:12904 ioctl 8008662c 200000000240 returned -22 [ 1023.419368][T12577] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1024.552022][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1263'. [ 1024.675205][T12577] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1024.771740][T12577] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1024.817909][T12577] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1025.204170][T12943] orangefs_mount: mount request failed with -4 [ 1025.253033][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1025.315866][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1025.620321][T12577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.727950][T12577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.754130][T12969] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1267'. [ 1025.910438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.917666][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.156117][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.163335][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.490684][T10451] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1027.640799][T10451] usb 2-1: Using ep0 maxpacket: 8 [ 1027.660813][T10451] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1027.692089][T10451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.733149][T10451] usb 2-1: Product: syz [ 1027.754838][T10451] usb 2-1: Manufacturer: syz [ 1027.782033][T10451] usb 2-1: SerialNumber: syz [ 1027.821783][T10451] usb 2-1: config 0 descriptor?? [ 1027.897960][T10451] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1028.970106][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.127760][T13000] loop9: detected capacity change from 0 to 4096 [ 1029.244558][T13010] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1030.209171][T13023] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1276'. [ 1031.200924][ T5980] usb 2-1: USB disconnect, device number 6 [ 1031.801289][T13034] SQUASHFS error: Failed to read block 0x0: -5 [ 1032.766243][T11755] udevd[11755]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1032.886013][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1032.917975][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 1033.165657][T12577] veth0_vlan: entered promiscuous mode [ 1033.264506][T12577] veth1_vlan: entered promiscuous mode [ 1033.362489][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1033.416330][T11772] udevd[11772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1034.472032][T12577] veth0_macvtap: entered promiscuous mode [ 1034.516879][T12577] veth1_macvtap: entered promiscuous mode [ 1034.595411][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.661299][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.145338][T13064] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1284'. [ 1036.382636][T10135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1036.436608][T10135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1036.460655][T10135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1036.480738][T10135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1036.510441][T10135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1037.076519][T10451] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1037.650617][T10451] usb 4-1: Using ep0 maxpacket: 8 [ 1037.660990][T13093] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1290'. [ 1038.444560][T10451] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1038.457038][T10451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.465684][T10451] usb 4-1: Product: syz [ 1038.472315][T10451] usb 4-1: Manufacturer: syz [ 1038.476931][T10451] usb 4-1: SerialNumber: syz [ 1038.499827][T10451] usb 4-1: config 0 descriptor?? [ 1038.528551][T10451] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1038.580665][T10135] Bluetooth: hci6: command tx timeout [ 1039.104080][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1039.204938][T11764] udevd[11764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1040.187630][T13079] chnl_net:caif_netlink_parms(): no params data found [ 1040.651161][T10135] Bluetooth: hci6: command tx timeout [ 1042.260776][T13127] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1042.267621][T13127] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1043.232148][T10135] Bluetooth: hci6: command tx timeout [ 1043.534991][ T5980] usb 4-1: USB disconnect, device number 23 [ 1045.132665][T13141] SQUASHFS error: Failed to read block 0x0: -5 [ 1045.610571][T10135] Bluetooth: hci6: command tx timeout [ 1046.050838][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.136025][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.209106][T13079] bridge_slave_0: entered allmulticast mode [ 1046.373606][T13079] bridge_slave_0: entered promiscuous mode [ 1046.574731][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.670520][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.763554][T13079] bridge_slave_1: entered allmulticast mode [ 1046.918691][T13079] bridge_slave_1: entered promiscuous mode [ 1047.605664][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.635035][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.502144][T13079] team0: Port device team_slave_0 added [ 1048.603989][ T3547] bridge_slave_1: left allmulticast mode [ 1048.630851][ T3547] bridge_slave_1: left promiscuous mode [ 1048.636786][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.832006][ T3547] bridge_slave_0: left allmulticast mode [ 1048.888615][ T3547] bridge_slave_0: left promiscuous mode [ 1048.931619][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.640698][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1049.830684][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1049.844762][ T29] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1049.866335][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.905396][ T29] usb 3-1: Product: syz [ 1049.909704][ T29] usb 3-1: Manufacturer: syz [ 1049.936212][ T29] usb 3-1: SerialNumber: syz [ 1049.968402][ T29] usb 3-1: config 0 descriptor?? [ 1049.996671][ T29] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1050.517166][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.596129][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.682716][ T3547] bond0 (unregistering): Released all slaves [ 1050.757424][T13079] team0: Port device team_slave_1 added [ 1051.973775][ T3547] hsr_slave_0: left promiscuous mode [ 1051.985929][ T3547] hsr_slave_1: left promiscuous mode [ 1052.020622][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.048173][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.120800][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.142721][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.184704][ T3547] veth1_macvtap: left promiscuous mode [ 1052.211836][ T3547] veth0_macvtap: left promiscuous mode [ 1052.230348][ T3547] veth1_vlan: left promiscuous mode [ 1052.265662][ T3547] veth0_vlan: left promiscuous mode [ 1052.682631][ T5980] usb 3-1: USB disconnect, device number 10 [ 1054.111995][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.711211][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.519722][T13231] binder_alloc: 13228: binder_alloc_buf, no vma [ 1057.993016][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 1058.121390][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 1058.812228][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.839633][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.409946][T13250] orangefs_mount: mount request failed with -4 [ 1059.423731][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.584847][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.640618][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.808362][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.153402][T13079] hsr_slave_0: entered promiscuous mode [ 1061.160095][T13079] hsr_slave_1: entered promiscuous mode [ 1061.180971][ T5905] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1061.213507][T13079] debugfs: 'hsr0' already exists in 'hsr' [ 1061.231241][T13079] Cannot create hsr debugfs directory [ 1061.360642][ T5905] usb 9-1: Using ep0 maxpacket: 8 [ 1062.369577][ T5905] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1062.381883][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.390934][ T5905] usb 9-1: Product: syz [ 1062.395119][ T5905] usb 9-1: Manufacturer: syz [ 1062.400009][ T5905] usb 9-1: SerialNumber: syz [ 1062.501298][ T5905] usb 9-1: config 0 descriptor?? [ 1062.581902][ T5905] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1063.760847][ T5905] gspca_sonixj: reg_r err -110 [ 1063.766368][ T5905] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 1066.326987][T13311] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1067.441235][T13319] binder: 13316:13319 ioctl 8008662c 200000000240 returned -22 [ 1067.518358][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1334'. [ 1069.350567][T13079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1069.418494][T13079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1069.684377][T13333] input: syz0 as /devices/virtual/input/input30 [ 1069.696888][T13079] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1069.832512][T13079] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1069.924719][ T5980] usb 9-1: USB disconnect, device number 6 [ 1072.378133][T13360] binder: 13349:13360 ioctl 8008662c 200000000240 returned -22 [ 1073.887665][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.023364][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.093653][T13370] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1075.565553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.572727][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.709065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.716286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.660855][T13409] SQUASHFS error: Failed to read block 0x0: -5 [ 1079.693554][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.400598][T11741] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1081.410580][T11741] usb 2-1: Using ep0 maxpacket: 8 [ 1081.446598][T11741] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1081.480689][T11741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.520601][T11741] usb 2-1: Product: syz [ 1081.740532][T11741] usb 2-1: Manufacturer: syz [ 1081.745904][T11741] usb 2-1: SerialNumber: syz [ 1082.787827][T11741] usb 2-1: config 0 descriptor?? [ 1083.401756][T11741] usb 2-1: can't set config #0, error -71 [ 1083.502142][T11741] usb 2-1: USB disconnect, device number 7 [ 1085.815819][T13455] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1086.169066][T13079] veth0_vlan: entered promiscuous mode [ 1086.260344][T13079] veth1_vlan: entered promiscuous mode [ 1087.311864][T13079] veth0_macvtap: entered promiscuous mode [ 1087.362054][T13079] veth1_macvtap: entered promiscuous mode [ 1087.738088][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.828583][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.915164][ T82] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.978132][ T82] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.368018][T13478] SQUASHFS error: Failed to read block 0x0: -5 [ 1089.198079][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.250549][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.554590][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.584099][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.800625][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.832147][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.560535][ T5948] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1095.920553][ T5948] usb 10-1: Using ep0 maxpacket: 8 [ 1095.958540][ T5948] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1095.989836][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.005690][ T5948] usb 10-1: Product: syz [ 1096.009990][ T5948] usb 10-1: Manufacturer: syz [ 1096.020610][ T5948] usb 10-1: SerialNumber: syz [ 1096.078601][ T5948] usb 10-1: config 0 descriptor?? [ 1096.137110][ T5948] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1097.903794][T13539] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1098.647724][T13541] trusted_key: encrypted_key: insufficient parameters specified [ 1098.948119][T13544] md: superblock version 12389 not known [ 1098.970992][T13544] md: couldn't set array info. -22 [ 1099.035313][T13544] md: md2 stopped. [ 1099.772338][T13558] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1099.827018][T13558] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1100.382572][T13570] kAFS: unparsable volume name [ 1109.534439][T13602] usb 10-1: USB disconnect, device number 5 [ 1109.610916][ T5918] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1110.910653][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.639261][T13617] SQUASHFS error: Failed to read block 0x0: -5 [ 1111.677476][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1111.708786][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1111.725037][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1111.752488][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1111.769327][ T5918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1111.886637][ T5918] usb 2-1: Manufacturer: syz [ 1111.903183][ T5918] usb 2-1: config 0 descriptor?? [ 1112.494502][ T5918] rc_core: IR keymap rc-hauppauge not found [ 1112.503566][ T5918] Registered IR keymap rc-empty [ 1112.631409][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1113.344990][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1114.476187][T13649] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1114.712015][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1114.729880][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 1114.820929][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.225238][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.225714][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.260846][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.325424][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.451876][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.600498][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.663484][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.723351][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.782180][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.848577][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1115.942578][T13666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 1115.983533][ T5918] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1116.249751][ T5918] mceusb 2-1:0.0: Registered à – with mce emulator interface version 1 [ 1116.435599][ T5918] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1116.870953][ T5918] usb 2-1: USB disconnect, device number 8 [ 1119.827431][T13635] udevd[13635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1120.909663][T13548] udevd[13548]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1120.943921][T13692] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1121.068603][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1121.786657][T13701] fuse: Bad value for 'fd' [ 1122.980799][ T5980] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1123.181995][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.322431][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1123.357029][T13723] trusted_key: encrypted_key: insufficient parameters specified [ 1123.390487][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1123.406288][T13719] loop3: detected capacity change from 0 to 4096 [ 1123.436076][ T5980] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1123.477020][ T5980] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1123.503479][ T5980] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1123.513552][T13725] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1123.549923][ T5980] usb 2-1: Manufacturer: syz [ 1123.628775][ T5980] usb 2-1: config 0 descriptor?? [ 1124.375383][ T5980] rc_core: IR keymap rc-hauppauge not found [ 1124.500970][ T5980] Registered IR keymap rc-empty [ 1124.548226][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1124.612910][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1124.660900][ T5980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1124.975340][ T5980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 1125.786314][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1125.971122][T13732] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1126.371697][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1126.391684][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1127.639098][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1127.661410][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1127.682891][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1127.717694][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1127.981375][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1128.049783][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1128.135192][ T5980] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1128.915112][ T5980] mceusb 2-1:0.0: Registered à – with mce emulator interface version 1 [ 1128.926925][ T5980] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1129.018750][ T5980] usb 2-1: USB disconnect, device number 9 [ 1136.234728][T13819] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1428'. [ 1138.045074][T13548] udevd[13548]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1141.059850][T13851] loop1: detected capacity change from 0 to 4096 [ 1141.307161][T13860] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1142.367847][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'. [ 1143.810746][T13883] SQUASHFS error: Failed to read block 0x0: -5 [ 1144.618957][T13877] input: syz0 as /devices/virtual/input/input33 [ 1147.766667][T13921] trusted_key: encrypted_key: insufficient parameters specified [ 1153.439159][ T29] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1153.696341][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.739850][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1153.840627][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1153.900655][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1153.976254][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.012915][ T29] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.116502][ T29] usb 2-1: Manufacturer: syz [ 1154.151324][T13964] loop6: detected capacity change from 0 to 4096 [ 1154.313188][ T29] usb 2-1: config 0 descriptor?? [ 1154.970483][T13976] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.371667][ T29] rc_core: IR keymap rc-hauppauge not found [ 1155.386553][ T29] Registered IR keymap rc-empty [ 1155.419973][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1155.490333][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1155.515328][T13982] input: syz0 as /devices/virtual/input/input35 [ 1155.566624][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1155.637840][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 1156.354466][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1156.403131][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1156.461117][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1156.507105][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1156.573398][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1157.522487][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1157.551312][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1157.578186][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1157.599157][T14001] input: syz0 as /devices/virtual/input/input36 [ 1157.600898][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1157.640935][ T29] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1157.683052][ T29] mceusb 2-1:0.0: Registered à – with mce emulator interface version 1 [ 1157.780532][ T29] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1157.900964][ T29] usb 2-1: USB disconnect, device number 10 [ 1163.460082][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 1164.840582][ T5905] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1164.981939][T14058] trusted_key: encrypted_key: insufficient parameters specified [ 1165.053995][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.087121][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1165.117569][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1165.160494][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1165.238520][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1165.333934][ T5905] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1165.361086][ T5905] usb 4-1: Manufacturer: syz [ 1165.388924][ T5905] usb 4-1: config 0 descriptor?? [ 1166.670546][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1166.676610][ T5905] Registered IR keymap rc-empty [ 1166.691850][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1166.752294][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1166.819291][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1166.848202][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 1167.040596][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1167.100662][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1167.148577][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1167.234566][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1167.291482][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1167.348093][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1168.666346][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1168.691106][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1169.031036][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1169.253037][ T5905] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1170.050921][ T5905] mceusb 4-1:0.0: Registered à – with mce emulator interface version 1 [ 1170.069420][ T5905] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1170.171328][ T5905] usb 4-1: USB disconnect, device number 24 [ 1171.293173][T14109] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1176.907853][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.917814][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.640669][T14025] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1177.670818][ T5919] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1178.034789][ T5919] usb 10-1: Using ep0 maxpacket: 8 [ 1178.057208][T14025] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.318121][T14025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1179.289789][ T5919] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1179.360316][T14025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1179.373033][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.420604][ T5919] usb 10-1: Product: syz [ 1180.274454][T14025] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1180.351870][ T5919] usb 10-1: Manufacturer: syz [ 1180.401894][ T5919] usb 10-1: SerialNumber: syz [ 1180.415278][T14025] usb 3-1: string descriptor 0 read error: -71 [ 1180.466756][ T5919] usb 10-1: config 0 descriptor?? [ 1180.475091][T14025] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1180.546626][ T5919] usb 10-1: can't set config #0, error -71 [ 1180.570631][T14025] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1180.636872][T14025] usb 3-1: config 0 descriptor?? [ 1180.665867][T14025] usb 3-1: can't set config #0, error -71 [ 1180.709910][ T5919] usb 10-1: USB disconnect, device number 6 [ 1180.746913][T14025] usb 3-1: USB disconnect, device number 11 [ 1181.261079][ T5919] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1181.953802][ T5919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.075877][ T5919] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1182.085422][ T5919] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1182.103229][ T5919] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1182.114228][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.123095][ T5919] usb 10-1: Product: syz [ 1182.127993][ T5919] usb 10-1: Manufacturer: syz [ 1182.150593][ T5919] usb 10-1: SerialNumber: syz [ 1182.171891][ T5919] usb 10-1: bad CDC descriptors [ 1182.547815][T14170] loop9: detected capacity change from 0 to 1024 [ 1183.263063][T14184] SQUASHFS error: Failed to read block 0x0: -5 [ 1186.245494][ T9] usb 10-1: USB disconnect, device number 7 [ 1187.515217][ T58] hfsplus: b-tree write err: -5, ino 25 [ 1188.480486][ T58] hfsplus: b-tree write err: -5, ino 4 [ 1188.494319][ T58] hfsplus: b-tree write err: -5, ino 2 [ 1189.738014][T14207] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1507'. [ 1192.207661][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1192.207868][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1192.400630][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1192.428248][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1192.545716][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1192.579824][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.226444][ T9] usb 7-1: Product: syz [ 1193.231878][ T9] usb 7-1: Manufacturer: syz [ 1193.236537][ T9] usb 7-1: SerialNumber: syz [ 1193.251797][ T9] usb 7-1: config 0 descriptor?? [ 1193.505145][T14239] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1193.531751][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1193.538571][T14239] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1194.502470][ T9] gspca_sonixj: reg_w1 err -110 [ 1194.508224][ T9] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1196.559538][ T5918] usb 7-1: USB disconnect, device number 9 [ 1196.581745][T14025] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1197.632161][T14025] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.669194][T14025] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1197.679070][T14025] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1197.715313][T14025] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1197.725315][T14025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.750490][T14025] usb 2-1: Product: syz [ 1197.760752][T14025] usb 2-1: Manufacturer: syz [ 1197.961360][T14025] usb 2-1: SerialNumber: syz [ 1198.087367][T14025] usb 2-1: bad CDC descriptors [ 1198.418910][T14260] loop1: detected capacity change from 0 to 1024 [ 1201.917343][T14291] hfsplus: b-tree write err: -5, ino 2 [ 1203.774885][T14304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1527'. [ 1204.266339][T14304] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1204.266456][T14304] block (null): Could not allocate knbd recv work queue. [ 1204.400963][T14304] nbd: failed to add new device [ 1204.572654][ T5948] usb 2-1: USB disconnect, device number 11 [ 1204.625410][ T144] hfsplus: b-tree write err: -5, ino 25 [ 1204.632255][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1204.637993][ T144] hfsplus: b-tree write err: -5, ino 2 [ 1204.744024][ T144] hfsplus: b-tree write err: -5, ino 26 [ 1205.126074][T14312] SQUASHFS error: Failed to read block 0x0: -5 [ 1206.379789][ T5948] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1206.737884][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1206.881238][ T5948] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 1206.889588][ T5948] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.033662][ T5948] usb 10-1: config 0 has no interface number 0 [ 1207.040012][ T5948] usb 10-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1207.114992][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1207.154256][ T5948] usb 10-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1207.167987][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1207.197956][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.226086][ T24] usb 4-1: Product: syz [ 1207.236238][ T5948] usb 10-1: config 0 interface 106 has no altsetting 0 [ 1207.266590][ T24] usb 4-1: Manufacturer: syz [ 1207.272938][ T5948] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1207.282277][ T24] usb 4-1: SerialNumber: syz [ 1207.314406][ T24] usb 4-1: config 0 descriptor?? [ 1207.325314][ T5948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.341208][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1207.369651][ T5948] usb 10-1: config 0 descriptor?? [ 1207.552428][ T5948] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1207.673375][T14347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.749349][T14347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.495148][ T139] usb 10-1: Failed to submit usb control message: -110 [ 1208.515600][ T139] usb 10-1: unable to send the bmi data to the device: -110 [ 1208.553652][ T139] usb 10-1: unable to get target info from device [ 1208.596017][ T139] usb 10-1: could not get target info (-110) [ 1208.628675][ T139] usb 10-1: could not probe fw (-110) [ 1209.413747][ T24] usb 10-1: USB disconnect, device number 8 [ 1209.906565][ T24] usb 4-1: USB disconnect, device number 25 [ 1212.070923][T14361] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1213.690106][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1545'. [ 1214.551296][T14409] binder: 14406:14409 ioctl 8008662c 200000000240 returned -22 [ 1214.665849][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1548'. [ 1219.769841][ T5919] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1220.006069][ T5919] usb 9-1: config 0 has an invalid interface number: 106 but max is 0 [ 1220.057089][ T5919] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.107121][ T5919] usb 9-1: config 0 has no interface number 0 [ 1220.331031][ T5919] usb 9-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1220.345834][ T5919] usb 9-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1221.356443][ T5919] usb 9-1: config 0 interface 106 has no altsetting 0 [ 1221.616648][ T5919] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1221.616799][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.653959][ T5919] usb 9-1: config 0 descriptor?? [ 1221.654330][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 1221.654827][ T5919] usb 9-1: can't set config #0, error -32 [ 1221.953742][T14025] usb 9-1: USB disconnect, device number 7 [ 1222.106884][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1553'. [ 1226.972699][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1227.215928][T14478] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1227.470634][ T13] bond0: (slave bond_slave_0): interface is now down [ 1227.519150][ T13] bond0: (slave bond_slave_1): interface is now down [ 1227.549804][ T13] bond0: now running without any active interface! [ 1227.711903][T14488] binder: 14482:14488 ioctl 8008662c 200000000240 returned -22 [ 1227.746071][T14488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1562'. [ 1228.572664][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1229.398952][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1229.412383][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1229.420937][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1229.440191][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1229.560464][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1232.524578][ T5836] Bluetooth: hci2: command tx timeout [ 1233.140833][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1233.365618][ T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1233.746684][T14523] SQUASHFS error: Failed to read block 0x0: -5 [ 1234.536174][T14522] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1234.570524][ T5836] Bluetooth: hci2: command tx timeout [ 1234.577983][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.610657][T14522] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1234.680492][ T9] usb 4-1: config 0 has no interface number 0 [ 1234.687089][ T9] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1234.779352][ T9] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1234.846789][ T9] usb 4-1: config 0 interface 106 has no altsetting 0 [ 1234.886999][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1234.950635][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.042954][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.057337][ T9] usb 4-1: config 0 descriptor?? [ 1235.527106][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.621906][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.679741][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1235.951462][T14501] chnl_net:caif_netlink_parms(): no params data found [ 1236.650892][ T5836] Bluetooth: hci2: command tx timeout [ 1237.387512][ T82] usb 4-1: Failed to submit usb control message: -110 [ 1238.181146][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.187570][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.270543][ T82] usb 4-1: unable to send the bmi data to the device: -110 [ 1238.277805][ T82] usb 4-1: unable to get target info from device [ 1238.379857][ T82] usb 4-1: could not get target info (-110) [ 1238.391127][T10451] usb 4-1: USB disconnect, device number 26 [ 1238.404664][ T82] usb 4-1: could not probe fw (-110) [ 1238.418320][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.730588][ T5836] Bluetooth: hci2: command tx timeout [ 1238.869681][T14551] loop3: detected capacity change from 0 to 4096 [ 1239.020567][T14555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1239.130645][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.891006][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.930265][ T48] bond0: (slave bond_slave_0): interface is now down [ 1239.949345][ T48] bond0: (slave bond_slave_1): interface is now down [ 1240.183709][ T48] bond0: (slave bond_slave_0): interface is now down [ 1240.232590][ T48] bond0: (slave bond_slave_1): interface is now down [ 1240.370509][ T13] bond0: (slave bond_slave_0): interface is now down [ 1240.411307][T14501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.460317][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.480313][ T13] bond0: (slave bond_slave_1): interface is now down [ 1240.498518][T14501] bridge_slave_0: entered allmulticast mode [ 1240.542252][T14501] bridge_slave_0: entered promiscuous mode [ 1240.702482][ T6073] bond0: (slave bond_slave_0): interface is now down [ 1240.709225][ T6073] bond0: (slave bond_slave_1): interface is now down [ 1240.748911][T14501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.833691][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.903655][ T13] bond0: (slave bond_slave_0): interface is now down [ 1240.918393][T14501] bridge_slave_1: entered allmulticast mode [ 1240.950532][ T13] bond0: (slave bond_slave_1): interface is now down [ 1240.979780][T14501] bridge_slave_1: entered promiscuous mode [ 1241.454994][T14580] SQUASHFS error: Failed to read block 0x0: -5 [ 1242.263623][ T144] bond0: (slave bond_slave_0): interface is now down [ 1242.548815][ T144] bond0: (slave bond_slave_1): interface is now down [ 1242.745645][T11071] bond0: (slave bond_slave_0): interface is now down [ 1242.923110][T11071] bond0: (slave bond_slave_1): interface is now down [ 1243.110648][T13836] bond0: (slave bond_slave_0): interface is now down [ 1243.184791][T13836] bond0: (slave bond_slave_1): interface is now down [ 1243.432114][T11071] bond0: (slave bond_slave_0): interface is now down [ 1243.524019][T11071] bond0: (slave bond_slave_1): interface is now down [ 1243.634011][T14501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.716136][T14501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.857488][T11071] bond0: (slave bond_slave_0): interface is now down [ 1243.966691][T14501] team0: Port device team_slave_0 added [ 1243.979734][T14501] team0: Port device team_slave_1 added [ 1244.770431][T11071] bond0: (slave bond_slave_1): interface is now down [ 1244.919749][ T36] bridge_slave_1: left allmulticast mode [ 1245.040434][ T36] bridge_slave_1: left promiscuous mode [ 1245.046268][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.084086][ T13] bond0: (slave bond_slave_0): interface is now down [ 1245.106482][ T13] bond0: (slave bond_slave_1): interface is now down [ 1245.222190][ T36] bridge_slave_0: left allmulticast mode [ 1245.241701][ T36] bridge_slave_0: left promiscuous mode [ 1245.241960][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.264754][ T13] bond0: (slave bond_slave_0): interface is now down [ 1245.295699][ T13] bond0: (slave bond_slave_1): interface is now down [ 1245.471300][T13836] bond0: (slave bond_slave_0): interface is now down [ 1245.478051][T13836] bond0: (slave bond_slave_1): interface is now down [ 1245.560665][T14025] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1245.653157][ T13] bond0: (slave bond_slave_0): interface is now down [ 1245.662351][T14604] binder: 14599:14604 ioctl 8008662c 200000000240 returned -22 [ 1245.724922][ T13] bond0: (slave bond_slave_1): interface is now down [ 1245.988599][ T6073] bond0: (slave bond_slave_0): interface is now down [ 1245.988630][ T6073] bond0: (slave bond_slave_1): interface is now down [ 1246.556013][T13836] bond0: (slave bond_slave_0): interface is now down [ 1246.556056][T13836] bond0: (slave bond_slave_1): interface is now down [ 1246.563482][T14025] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 1246.563522][T14025] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.563557][T14025] usb 10-1: config 0 has no interface number 0 [ 1246.563599][T14025] usb 10-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1246.563660][T14025] usb 10-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1246.563710][T14025] usb 10-1: config 0 interface 106 has no altsetting 0 [ 1246.563760][T14025] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1246.563800][T14025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.619524][T14607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1588'. [ 1246.789886][ T6077] bond0: (slave bond_slave_0): interface is now down [ 1246.853501][T14025] usb 10-1: config 0 descriptor?? [ 1246.877790][ T6077] bond0: (slave bond_slave_1): interface is now down [ 1247.227201][ T6073] bond0: (slave bond_slave_0): interface is now down [ 1247.249619][ T6073] bond0: (slave bond_slave_1): interface is now down [ 1247.266191][T14025] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1247.339713][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.349260][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.395327][T13836] bond0: (slave bond_slave_0): interface is now down [ 1247.402262][T13836] bond0: (slave bond_slave_1): interface is now down [ 1247.542491][ T139] bond0: (slave bond_slave_0): interface is now down [ 1247.629614][ T139] bond0: (slave bond_slave_1): interface is now down [ 1247.675019][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1590'. [ 1247.838895][ T139] bond0: (slave bond_slave_0): interface is now down [ 1247.991183][ T139] bond0: (slave bond_slave_1): interface is now down [ 1248.333078][ T13] usb 10-1: Failed to submit usb control message: -110 [ 1248.474710][ T13] usb 10-1: unable to send the bmi data to the device: -110 [ 1249.322778][ T13] usb 10-1: unable to get target info from device [ 1249.422981][ T139] bond0: (slave bond_slave_0): interface is now down [ 1249.429713][ T139] bond0: (slave bond_slave_1): interface is now down [ 1249.453322][ T13] usb 10-1: could not get target info (-110) [ 1249.502463][ T5905] usb 10-1: USB disconnect, device number 9 [ 1249.520604][ T13] usb 10-1: could not probe fw (-110) [ 1249.685021][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.701602][ T6073] bond0: (slave bond_slave_0): interface is now down [ 1249.741856][ T6073] bond0: (slave bond_slave_1): interface is now down [ 1250.080628][ T6073] bond0: (slave bond_slave_0): interface is now down [ 1250.643285][ T6073] bond0: (slave bond_slave_1): interface is now down [ 1250.687479][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.713817][T14632] trusted_key: encrypted_key: insufficient parameters specified [ 1250.831798][ T144] bond0: (slave bond_slave_0): interface is now down [ 1250.838846][ T144] bond0: (slave bond_slave_1): interface is now down [ 1250.852459][ T36] bond0 (unregistering): Released all slaves [ 1251.025557][ T139] bond0: (slave bond_slave_0): interface is now down [ 1251.059820][ T139] bond0: (slave bond_slave_1): interface is now down [ 1251.260526][ T6077] bond0: (slave bond_slave_0): interface is now down [ 1251.361497][ T6077] bond0: (slave bond_slave_1): interface is now down [ 1251.404692][T14332] udevd[14332]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1251.583851][ T144] bond0: (slave bond_slave_0): interface is now down [ 1254.441097][ T144] bond0: (slave bond_slave_1): interface is now down [ 1254.472459][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1254.484260][T14501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.503820][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.532820][T14501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.581556][T11071] bond0: (slave bond_slave_0): interface is now down [ 1254.583028][T14631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.588499][T11071] bond0: (slave bond_slave_1): interface is now down [ 1254.630528][ T58] bond0: (slave bond_slave_0): interface is now down [ 1254.637283][ T58] bond0: (slave bond_slave_1): interface is now down [ 1254.796841][ T58] bond0: now running without any active interface! [ 1254.843157][T14501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.850137][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.877706][T14650] bond0: (slave bond_slave_0): interface is now down [ 1254.889953][T14650] bond0: (slave bond_slave_1): interface is now down [ 1254.987817][T14501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.073465][T14650] bond0: now running without any active interface! [ 1256.209650][T14501] hsr_slave_0: entered promiscuous mode [ 1256.250916][T14501] hsr_slave_1: entered promiscuous mode [ 1256.272702][T14501] debugfs: 'hsr0' already exists in 'hsr' [ 1256.311394][T14501] Cannot create hsr debugfs directory [ 1259.008018][T14682] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1602'. [ 1260.150605][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1260.256662][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1260.301273][ T36] hsr_slave_0: left promiscuous mode [ 1260.334580][ T36] hsr_slave_1: left promiscuous mode [ 1260.791141][ T29] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 1260.811445][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.818870][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.826159][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.862106][ T29] usb 7-1: config 0 has no interface number 0 [ 1260.878604][ T29] usb 7-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1260.910531][ T29] usb 7-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1260.928869][T14696] loop8: detected capacity change from 0 to 4096 [ 1260.941352][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.954047][ T29] usb 7-1: config 0 interface 106 has no altsetting 0 [ 1260.964209][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.980850][ T29] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1261.007229][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.089664][ T29] usb 7-1: config 0 descriptor?? [ 1261.102267][T14699] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1261.133238][ T36] veth1_macvtap: left promiscuous mode [ 1261.152910][ T36] veth0_macvtap: left promiscuous mode [ 1261.200599][ T36] veth1_vlan: left promiscuous mode [ 1261.209721][ T29] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1261.240326][ T36] veth0_vlan: left promiscuous mode [ 1261.462215][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.550855][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1261.640770][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.763187][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.785680][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1261.824032][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.439631][ T82] usb 7-1: Failed to submit usb control message: -110 [ 1262.439705][ T82] usb 7-1: unable to send the bmi data to the device: -110 [ 1262.439737][ T82] usb 7-1: unable to get target info from device [ 1262.439765][ T82] usb 7-1: could not get target info (-110) [ 1262.439796][ T82] usb 7-1: could not probe fw (-110) [ 1262.448544][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1262.448578][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.448605][ T29] usb 4-1: Product: syz [ 1262.448625][ T29] usb 4-1: Manufacturer: syz [ 1262.448647][ T29] usb 4-1: SerialNumber: syz [ 1262.454048][ T29] usb 4-1: bad CDC descriptors [ 1262.788846][T14705] loop3: detected capacity change from 0 to 1024 [ 1263.141241][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1263.325166][ T5905] usb 7-1: USB disconnect, device number 10 [ 1263.546259][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1265.305514][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1612'. [ 1265.627579][ T24] usb 4-1: USB disconnect, device number 27 [ 1265.726525][ T6077] hfsplus: b-tree write err: -5, ino 25 [ 1265.816525][ T6077] hfsplus: b-tree write err: -5, ino 4 [ 1265.863616][ T6077] hfsplus: b-tree write err: -5, ino 2 [ 1266.665688][T14732] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1267.325207][T14746] SQUASHFS error: Failed to read block 0x0: -5 [ 1268.457262][T14749] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1268.478100][T14749] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1271.244721][T14768] SQUASHFS error: Failed to read block 0x0: -5 [ 1273.051530][T14778] loop8: detected capacity change from 0 to 4096 [ 1273.103232][T14780] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1273.618737][T14501] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1275.820588][ T5905] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1277.143824][T14501] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1277.440772][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1277.448257][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1277.456044][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1277.463650][ T5905] usb 9-1: device descriptor read/all, error -32 [ 1277.495061][T14501] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1277.600461][T14501] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1277.850848][ T976] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1279.944389][ T976] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.960737][ T976] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1279.969706][ T976] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.005689][ T976] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1280.021745][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.029799][ T976] usb 7-1: Product: syz [ 1280.034427][ T976] usb 7-1: Manufacturer: syz [ 1280.039136][ T976] usb 7-1: SerialNumber: syz [ 1280.116352][ T976] usb 7-1: bad CDC descriptors [ 1280.185471][T14501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.269761][T14826] trusted_key: encrypted_key: insufficient parameters specified [ 1280.302591][T14501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.334669][T14800] loop6: detected capacity change from 0 to 1024 [ 1280.359658][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.366888][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.748411][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.755639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.545559][T14830] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1288.017463][ T9] usb 7-1: USB disconnect, device number 11 [ 1288.085780][ T6073] hfsplus: b-tree write err: -5, ino 25 [ 1288.120950][ T6073] hfsplus: b-tree write err: -5, ino 4 [ 1288.143068][ T6073] hfsplus: b-tree write err: -5, ino 2 [ 1289.121659][T10135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1289.202044][T10135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1289.252854][T10135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1289.282064][T10135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1289.293592][T10135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1290.093017][ T29] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1290.512505][ T29] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1290.521011][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.535768][ T29] usb 2-1: config 0 has no interface number 0 [ 1290.561074][ T29] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1290.596969][ T29] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1290.635962][ T29] usb 2-1: config 0 interface 106 has no altsetting 0 [ 1290.673345][ T29] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1290.771519][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.933547][ T29] usb 2-1: config 0 descriptor?? [ 1291.111103][ T29] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1291.302572][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.311599][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.371277][ T5836] Bluetooth: hci5: command tx timeout [ 1292.170822][ T82] usb 2-1: Failed to submit usb control message: -110 [ 1292.179385][ T82] usb 2-1: unable to send the bmi data to the device: -110 [ 1292.193340][ T82] usb 2-1: unable to get target info from device [ 1292.199719][ T82] usb 2-1: could not get target info (-110) [ 1292.210432][ T82] usb 2-1: could not probe fw (-110) [ 1292.415583][T14896] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1292.468667][T14896] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1292.999093][T14869] chnl_net:caif_netlink_parms(): no params data found [ 1293.285399][ T29] usb 2-1: USB disconnect, device number 12 [ 1293.456745][ T5836] Bluetooth: hci5: command tx timeout [ 1293.626236][ T6073] bridge_slave_1: left allmulticast mode [ 1293.643904][ T6073] bridge_slave_1: left promiscuous mode [ 1293.649768][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.819544][ T6073] bridge_slave_0: left allmulticast mode [ 1293.830798][ T6073] bridge_slave_0: left promiscuous mode [ 1293.836670][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.530793][ T5836] Bluetooth: hci5: command tx timeout [ 1296.469238][ T5919] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1296.720498][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 1296.746095][ T5919] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1296.763327][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.844858][ T5919] usb 4-1: Product: syz [ 1296.852979][ T5919] usb 4-1: Manufacturer: syz [ 1296.868666][ T5919] usb 4-1: SerialNumber: syz [ 1296.894274][ T5919] usb 4-1: config 0 descriptor?? [ 1296.915213][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1297.000603][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.032665][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.086519][ T6073] bond0 (unregistering): Released all slaves [ 1297.137380][T14923] loop8: detected capacity change from 0 to 4096 [ 1297.283858][T14925] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1297.609185][ T6073] hsr_slave_0: left promiscuous mode [ 1297.618950][ T5836] Bluetooth: hci5: command tx timeout [ 1298.091532][ T5919] gspca_sonixj: reg_r err -110 [ 1298.131892][ T5919] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1298.505663][ T6073] hsr_slave_1: left promiscuous mode [ 1298.565292][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.642994][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.537381][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.545499][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.740733][ T5919] usb 4-1: USB disconnect, device number 28 [ 1301.621002][ T5918] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1301.699023][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1301.793494][ T5918] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1301.803876][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1301.819221][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.860521][ T5918] usb 4-1: config 0 has no interface number 0 [ 1301.894514][ T5918] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1301.936939][ T5918] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1301.988411][ T5918] usb 4-1: config 0 interface 106 has no altsetting 0 [ 1302.015395][ T5918] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1302.049560][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.082011][ T5918] usb 4-1: config 0 descriptor?? [ 1303.118756][ T5918] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1304.367594][ T144] usb 4-1: Failed to submit usb control message: -110 [ 1304.406622][ T144] usb 4-1: unable to send the bmi data to the device: -110 [ 1304.436448][ T144] usb 4-1: unable to get target info from device [ 1304.460516][ T144] usb 4-1: could not get target info (-110) [ 1304.475233][ T144] usb 4-1: could not probe fw (-110) [ 1304.497809][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.522621][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.774001][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.798694][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.827932][T14869] bridge_slave_0: entered allmulticast mode [ 1304.882635][T14869] bridge_slave_0: entered promiscuous mode [ 1304.996241][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.034843][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.047544][ T9] usb 4-1: USB disconnect, device number 29 [ 1305.235372][T14869] bridge_slave_1: entered allmulticast mode [ 1305.336197][T14869] bridge_slave_1: entered promiscuous mode [ 1306.671032][T14981] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1307.697540][T14869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.044566][T14869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.088057][ T5918] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1309.647541][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1309.813261][ T5918] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1310.044174][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.756622][T14869] team0: Port device team_slave_0 added [ 1311.018889][ T5918] usb 7-1: Product: syz [ 1311.030463][ T5918] usb 7-1: Manufacturer: syz [ 1311.035098][ T5918] usb 7-1: SerialNumber: syz [ 1312.070533][ T5918] usb 7-1: config 0 descriptor?? [ 1312.082426][T14869] team0: Port device team_slave_1 added [ 1312.173744][ T5918] usb 7-1: can't set config #0, error -71 [ 1312.206325][ T5918] usb 7-1: USB disconnect, device number 12 [ 1312.368548][T15014] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.1669'. [ 1312.430631][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1669'. [ 1312.440738][T14869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.460575][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.506411][T15015] binder: 15012:15015 ioctl 8008662c 200000000240 returned -22 [ 1312.599991][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1671'. [ 1312.636971][T14869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.761530][T14869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.832893][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.018020][T14869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.686989][T14869] hsr_slave_0: entered promiscuous mode [ 1313.695306][T14869] hsr_slave_1: entered promiscuous mode [ 1313.780859][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 1313.946350][T14869] debugfs: 'hsr0' already exists in 'hsr' [ 1313.976565][T14869] Cannot create hsr debugfs directory [ 1314.300823][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1673'. [ 1314.960575][ T5918] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1315.187063][ T5918] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 1315.272026][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.312710][ T5918] usb 7-1: config 0 has no interface number 0 [ 1315.457777][ T5918] usb 7-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1315.530630][ T5918] usb 7-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1315.616411][ T5918] usb 7-1: config 0 interface 106 has no altsetting 0 [ 1315.715624][ T5918] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1315.807182][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1317.223681][T15043] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1317.467271][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.481546][ T5918] usb 7-1: config 0 descriptor?? [ 1317.682097][ T5918] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1317.756896][ T6073] usb 7-1: Failed to submit usb control message: -71 [ 1317.757629][ T5918] usb 7-1: USB disconnect, device number 13 [ 1317.764053][ T6073] usb 7-1: unable to send the bmi data to the device: -71 [ 1317.764099][ T6073] usb 7-1: unable to get target info from device [ 1317.764127][ T6073] usb 7-1: could not get target info (-71) [ 1317.764159][ T6073] usb 7-1: could not probe fw (-71) [ 1319.280832][ T5948] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1319.566132][ T5948] usb 10-1: Using ep0 maxpacket: 8 [ 1319.639222][T14869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1319.649834][ T5948] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1319.667038][T15071] trusted_key: encrypted_key: insufficient parameters specified [ 1319.675666][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.706577][ T5948] usb 10-1: Product: syz [ 1319.715628][ T5948] usb 10-1: Manufacturer: syz [ 1319.782951][T14869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1319.795045][ T5948] usb 10-1: SerialNumber: syz [ 1319.824041][ T5948] usb 10-1: config 0 descriptor?? [ 1319.843908][ T5948] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1319.934407][T14869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1320.460966][ T5948] gspca_sonixj: reg_w1 err -110 [ 1320.470601][ T5948] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1320.527362][T14869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1321.016346][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.076869][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1687'. [ 1321.392448][T14869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.506830][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.514047][T10357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.673071][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.680303][T10357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.133471][T15101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1322.150522][T15101] block device autoloading is deprecated and will be removed. [ 1322.192833][T15098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1322.238914][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1322.291876][T15098] block device autoloading is deprecated and will be removed. [ 1322.343412][T15103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1322.409513][T15103] block device autoloading is deprecated and will be removed. [ 1323.279952][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.510826][ T5919] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1323.982530][ T5919] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1324.098336][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.221262][ T5919] usb 4-1: config 0 has no interface number 0 [ 1324.295658][ T5919] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1324.455506][ T5919] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1324.473593][T15116] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1324.760497][ T5919] usb 4-1: config 0 interface 106 has no altsetting 0 [ 1324.767380][ T5919] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1324.821080][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.952070][ T9] usb 10-1: USB disconnect, device number 10 [ 1324.961788][ T5919] usb 4-1: config 0 descriptor?? [ 1325.127715][ T5919] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1326.477324][ T144] usb 4-1: Failed to submit usb control message: -110 [ 1326.502692][T15139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.474028][T15139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.590254][ T144] usb 4-1: unable to send the bmi data to the device: -110 [ 1327.621635][ T144] usb 4-1: unable to get target info from device [ 1328.100542][ T144] usb 4-1: could not get target info (-110) [ 1328.130427][ T144] usb 4-1: could not probe fw (-110) [ 1328.267581][ T9] usb 4-1: USB disconnect, device number 30 [ 1328.897911][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 1329.360279][T14869] veth0_vlan: entered promiscuous mode [ 1329.636169][T14869] veth1_vlan: entered promiscuous mode [ 1330.604246][T14869] veth0_macvtap: entered promiscuous mode [ 1330.609488][T14869] veth1_macvtap: entered promiscuous mode [ 1330.728167][T15177] tipc: Started in network mode [ 1330.810920][T15177] tipc: Node identity 4, cluster identity 4711 [ 1330.923055][T15177] tipc: Node number set to 4 [ 1331.501278][ T5919] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1332.145740][T15184] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1332.426799][T14869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.452872][T14869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.559132][ T6073] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.569039][ T6073] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.581010][ T6073] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.589788][ T6073] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.700450][ T5919] usb 10-1: Using ep0 maxpacket: 8 [ 1332.861172][ T5919] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1332.890579][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.898740][ T5919] usb 10-1: Product: syz [ 1332.942496][ T5919] usb 10-1: Manufacturer: syz [ 1332.947300][ T5919] usb 10-1: SerialNumber: syz [ 1333.028214][T11071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.042153][ T5919] usb 10-1: config 0 descriptor?? [ 1333.067755][T11071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.133657][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1333.309019][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.628211][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.949854][ T5919] gspca_sonixj: reg_r err -110 [ 1334.373502][ T5919] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1334.807513][ T5918] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1334.977405][ T5918] usb 9-1: config 0 has an invalid interface number: 106 but max is 0 [ 1335.019287][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.100478][ T5918] usb 9-1: config 0 has no interface number 0 [ 1335.106630][ T5918] usb 9-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1335.177627][ T5918] usb 9-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1335.304120][ T5918] usb 9-1: config 0 interface 106 has no altsetting 0 [ 1335.312123][ T5918] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1335.322895][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.341161][ T5918] usb 9-1: config 0 descriptor?? [ 1335.508076][ T5918] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1335.618769][T15234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.629715][T15234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.650485][ T5948] usb 10-1: USB disconnect, device number 11 [ 1336.587118][T10357] usb 9-1: Failed to submit usb control message: -110 [ 1336.637389][T10357] usb 9-1: unable to send the bmi data to the device: -110 [ 1336.659313][T10357] usb 9-1: unable to get target info from device [ 1336.710922][T10357] usb 9-1: could not get target info (-110) [ 1336.728414][T10357] usb 9-1: could not probe fw (-110) [ 1337.561586][ T5919] usb 9-1: USB disconnect, device number 10 [ 1338.010726][T15256] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1339.579036][T15261] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1340.909389][T15285] trusted_key: encrypted_key: insufficient parameters specified [ 1341.970453][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1341.980458][ T5918] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1342.153250][ T5918] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1342.190622][ T5918] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1342.253533][ T5918] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1342.300038][ T5918] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1342.391794][ T5918] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1342.469190][ T5918] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1342.502073][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1342.510232][ T5918] usb 10-1: Product: syz [ 1342.586334][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1342.591583][ T5918] usb 10-1: Manufacturer: syz [ 1342.611970][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1342.632486][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.653767][ T5918] cdc_wdm 10-1:1.0: skipping garbage [ 1342.673331][ T5918] cdc_wdm 10-1:1.0: skipping garbage [ 1342.673414][ T24] usb 4-1: Product: syz [ 1342.720398][ T24] usb 4-1: Manufacturer: syz [ 1342.723889][ T5918] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1342.755663][ T5918] cdc_wdm 10-1:1.0: Unknown control protocol [ 1342.810515][ T24] usb 4-1: SerialNumber: syz [ 1342.828414][ T24] usb 4-1: config 0 descriptor?? [ 1342.838745][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1729'. [ 1342.857916][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1344.489292][T15323] overlayfs: failed to resolve './file0': -2 [ 1344.736814][T14025] usb 10-1: USB disconnect, device number 12 [ 1346.329073][T15329] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1346.663935][ T5918] usb 4-1: USB disconnect, device number 31 [ 1355.221864][T14025] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1355.491152][T14025] usb 10-1: Using ep0 maxpacket: 8 [ 1355.529820][T14025] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1355.559644][T14025] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.600413][T14025] usb 10-1: Product: syz [ 1355.604718][T14025] usb 10-1: Manufacturer: syz [ 1355.680975][T15404] trusted_key: encrypted_key: insufficient parameters specified [ 1355.756833][T14025] usb 10-1: SerialNumber: syz [ 1355.808184][T14025] usb 10-1: config 0 descriptor?? [ 1355.883264][T14025] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1357.625260][T14025] gspca_sonixj: reg_r err -110 [ 1357.630240][T14025] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1359.440844][T15409] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1359.511836][ T976] usb 10-1: USB disconnect, device number 13 [ 1361.236282][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.242726][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.799689][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1758'. [ 1367.443825][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1367.670660][T14025] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1368.511145][T14025] usb 4-1: Using ep0 maxpacket: 8 [ 1368.534342][T14025] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1368.590493][T14025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.598599][T14025] usb 4-1: Product: syz [ 1368.792485][T14025] usb 4-1: Manufacturer: syz [ 1368.813771][T14025] usb 4-1: SerialNumber: syz [ 1368.868284][T14025] usb 4-1: config 0 descriptor?? [ 1368.918532][T14025] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1370.210459][T14025] gspca_sonixj: reg_r err -110 [ 1370.645745][T14025] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1373.170918][ T5919] usb 4-1: USB disconnect, device number 32 [ 1374.602387][T15530] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1375.992789][T15546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1774'. [ 1376.021164][T15542] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.1772'. [ 1376.938443][T15561] md: md2 stopped. [ 1377.032626][T15555] md: superblock version 12389 not known [ 1377.038714][T15555] md: couldn't set array info. -22 [ 1378.067697][T15562] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1378.836760][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1378.865843][T10357] bond0: (slave bond_slave_0): interface is now down [ 1378.959478][T10357] bond0: (slave bond_slave_1): interface is now down [ 1379.205619][T10357] bond0: now running without any active interface! [ 1380.808276][T15598] trusted_key: encrypted_key: insufficient parameters specified [ 1384.152311][T15625] overlayfs: failed to resolve './file0': -2 [ 1385.099693][T15629] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1790'. [ 1386.052467][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1792'. [ 1389.204345][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1389.475576][T15658] SQUASHFS error: Failed to read block 0x0: -5 [ 1390.206241][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1391.372289][T15665] SQUASHFS error: Failed to read block 0x0: -5 [ 1399.117227][T15703] loop9: detected capacity change from 0 to 4096 [ 1407.522144][T15775] overlayfs: failed to resolve './file0': -2 [ 1410.237864][T15784] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1821'. [ 1412.058013][T15798] loop8: detected capacity change from 0 to 4096 [ 1412.300734][T15804] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1826'. [ 1412.693667][T15806] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1414.250786][T15802] Bluetooth: hci5: command 0x0406 tx timeout [ 1415.491285][T14169] udevd[14169]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1415.565496][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1415.790977][T15823] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1420.892833][ T976] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1422.313545][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1422.459229][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.477426][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.241456][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1423.347611][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1423.461757][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1841'. [ 1423.482499][T15880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 1424.930189][T15894] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1425.877228][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1425.930660][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1428.325603][T15929] trusted_key: encrypted_key: insufficient parameters specified [ 1429.835834][T15954] SQUASHFS error: Failed to read block 0x0: -5 [ 1431.287879][T15966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1860'. [ 1435.127026][T15970] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1435.825347][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1435.908295][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1436.294406][T15986] loop8: detected capacity change from 0 to 4096 [ 1436.576419][T15995] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1436.904033][T15997] tipc: Enabled bearer , priority 0 [ 1436.964627][T15997] syzkaller0: entered promiscuous mode [ 1437.014321][T15997] syzkaller0: entered allmulticast mode [ 1437.122156][T15997] tipc: Resetting bearer [ 1437.234571][T15996] tipc: Resetting bearer [ 1437.607346][T15996] tipc: Disabling bearer [ 1439.280870][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1871'. [ 1440.607398][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1440.772243][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1441.441105][T16038] trusted_key: encrypted_key: insufficient parameters specified [ 1441.533081][T16039] overlayfs: failed to resolve './file0': -2 [ 1454.989092][T16144] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1897'. [ 1455.940766][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1896'. [ 1456.505160][T16162] overlayfs: failed to resolve './file0': -2 [ 1456.944081][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1457.024137][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1457.299105][T16176] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1901'. [ 1461.175224][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1464.349918][T16225] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.178332][T16281] syzkaller0: entered promiscuous mode [ 1471.216435][T16281] syzkaller0: entered allmulticast mode [ 1471.423115][T16287] loop3: detected capacity change from 0 to 4096 [ 1471.628501][T16292] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1473.331827][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 1473.656801][T16313] overlayfs: failed to resolve './file0': -2 [ 1475.711021][T16331] SQUASHFS error: Failed to read block 0x0: -5 [ 1476.836115][T16337] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1476.865174][T16337] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1481.376256][T16373] loop9: detected capacity change from 0 to 4096 [ 1481.762280][T16378] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1483.856171][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.862620][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.032264][T16394] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1950'. [ 1485.041358][T16394] nbd: must specify at least one socket [ 1485.288641][T16397] trusted_key: encrypted_key: insufficient parameters specified [ 1491.930173][T16440] loop1: detected capacity change from 0 to 4096 [ 1492.064117][T16444] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1494.503021][T16464] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1965'. [ 1494.512110][T16464] nbd: must specify at least one socket [ 1498.512960][T16502] fuse: Unknown parameter 'user_i00000000000000000000' [ 1498.839257][T16507] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1976'. [ 1500.205527][T16519] SQUASHFS error: Failed to read block 0x0: -5 [ 1501.218273][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1501.344275][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1978'. [ 1501.386239][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1501.588609][T16528] binder: 16523:16528 ioctl 8008662c 200000000240 returned -22 [ 1501.941728][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1979'. [ 1502.536046][T16547] overlayfs: failed to resolve './file0': -2 [ 1503.115791][T16553] SQUASHFS error: Failed to read block 0x0: -5 [ 1506.233838][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1506.512975][T16574] tipc: Started in network mode [ 1506.541489][T16574] tipc: Node identity 52559705a3c1, cluster identity 4711 [ 1506.573042][T16574] tipc: Enabled bearer , priority 0 [ 1506.593861][T16576] syzkaller0: entered promiscuous mode [ 1506.599362][T16576] syzkaller0: entered allmulticast mode [ 1506.842708][T16573] tipc: Resetting bearer [ 1506.947923][T16573] tipc: Disabling bearer [ 1507.182426][T16586] tipc: Started in network mode [ 1507.251954][T16586] tipc: Node identity 8ac18bcaa244, cluster identity 4711 [ 1507.263544][T16586] tipc: Enabled bearer , priority 0 [ 1507.313882][T16589] syzkaller0: entered promiscuous mode [ 1507.409823][T16589] syzkaller0: entered allmulticast mode [ 1507.805518][T16579] tipc: Resetting bearer [ 1508.018356][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1993'. [ 1508.030506][T16579] tipc: Disabling bearer [ 1510.131798][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1510.950921][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1512.078280][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1997'. [ 1513.960338][T14145] udevd[14145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1514.148156][T13959] udevd[13959]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1516.867198][T16651] overlayfs: failed to resolve './file1': -2 [ 1517.256120][T16661] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1520.923647][T16689] SQUASHFS error: Failed to read block 0x0: -5 [ 1521.981669][T16698] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2013'. [ 1522.080911][T16691] overlayfs: failed to resolve './file0': -2 [ 1522.771608][T16708] syzkaller0: entered promiscuous mode [ 1522.777133][T16708] syzkaller0: entered allmulticast mode [ 1527.944531][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2019'. [ 1527.953643][T16732] nbd: must specify at least one socket [ 1528.789410][T13602] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1529.027669][T13602] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1529.050958][T13602] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1529.112439][T13602] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1529.183166][T13602] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1529.241015][T13602] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1529.312614][T13602] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1529.330763][T13602] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1529.341043][T15802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1529.352506][T13602] usb 8-1: Product: syz [ 1529.358497][T15802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1529.366385][T13602] usb 8-1: Manufacturer: syz [ 1529.376005][T15802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1529.396269][T15802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1529.404199][T15802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1529.422125][T13602] cdc_wdm 8-1:1.0: skipping garbage [ 1529.427406][T13602] cdc_wdm 8-1:1.0: skipping garbage [ 1529.437366][T13602] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1529.444252][T13602] cdc_wdm 8-1:1.0: Unknown control protocol [ 1530.715884][T13602] usb 8-1: USB disconnect, device number 7 [ 1531.504235][T15802] Bluetooth: hci2: command tx timeout [ 1533.507632][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2027'. [ 1533.530333][T15802] Bluetooth: hci2: command tx timeout [ 1534.486951][T16780] trusted_key: encrypted_key: insufficient parameters specified [ 1534.621720][T16767] ------------[ cut here ]------------ [ 1534.627525][T16767] !rwb [ 1534.627545][T16767] WARNING: block/blk-wbt.c:784 at wbt_init_enable_default+0xcb/0x120, CPU#1: syz.6.2027/16767 [ 1534.640888][T16767] Modules linked in: [ 1534.645021][T16767] CPU: 1 UID: 0 PID: 16767 Comm: syz.6.2027 Not tainted syzkaller #0 PREEMPT(full) [ 1534.654838][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1534.666047][T16767] RIP: 0010:wbt_init_enable_default+0xcb/0x120 [ 1534.673007][T16767] Code: df e8 b9 7a a9 06 4c 89 e7 e8 e1 38 00 00 48 89 df e8 09 04 a9 06 e8 74 ed 23 fd 5b 5d 41 5c e9 d6 c6 2b fc e8 66 ed 23 fd 90 <0f> 0b 90 eb 81 e8 5b ed 23 fd 90 0f 0b 90 48 b8 00 00 00 00 00 fc [ 1534.692986][T16767] RSP: 0018:ffffc900039a71a0 EFLAGS: 00010287 [ 1534.699097][T16767] RAX: 000000000001b769 RBX: ffff88807952f000 RCX: ffffc90013766000 [ 1534.707143][T16767] RDX: 0000000000080000 RSI: ffffffff84e47a3a RDI: ffffffff8c1acf20 [ 1534.715256][T16767] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1534.723312][T16767] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802769a620 [ 1534.731439][T16767] R13: ffff88807952f390 R14: ffff88802769a630 R15: ffff88807952f090 [ 1534.739467][T16767] FS: 00007fa7d5db36c0(0000) GS:ffff888124458000(0000) knlGS:0000000000000000 [ 1534.748515][T16767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1534.755172][T16767] CR2: 00007f0564274230 CR3: 0000000095457000 CR4: 0000000000350ef0 [ 1534.764513][T16767] Call Trace: [ 1534.767882][T16767] [ 1534.771686][T16767] blk_register_queue+0x39e/0x4e0 [ 1534.776785][T16767] __add_disk+0x73f/0xe40 [ 1534.781265][T16767] add_disk_fwnode+0x118/0x5c0 [ 1534.786118][T16767] nbd_dev_add+0x77a/0xb10 [ 1534.790739][T16767] ? find_held_lock+0x2b/0x80 [ 1534.795528][T16767] ? __pfx_nbd_dev_add+0x10/0x10 [ 1534.800598][T16767] ? nbd_genl_connect+0x131a/0x1a40 [ 1534.805915][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.811718][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.817446][T16767] ? __radix_tree_lookup+0x217/0x2b0 [ 1534.822843][T16767] nbd_genl_connect+0xb8d/0x1a40 [ 1534.827829][T16767] ? rcu_is_watching+0x12/0xc0 [ 1534.832672][T16767] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1534.838075][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.843769][T16767] ? __nla_parse+0x40/0x60 [ 1534.848244][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.853943][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.859593][T16767] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1534.867848][T16767] genl_family_rcv_msg_doit+0x214/0x300 [ 1534.874220][T16767] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1534.880385][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.886034][T16767] ? genl_get_cmd+0x3ef/0x720 [ 1534.890830][T16767] ? __dev_queue_xmit+0x7fd/0x4750 [ 1534.895989][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.901663][T16767] ? __radix_tree_lookup+0x217/0x2b0 [ 1534.906979][T16767] genl_rcv_msg+0x560/0x800 [ 1534.911569][T16767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.916643][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.922378][T16767] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1534.927787][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.933503][T16767] netlink_rcv_skb+0x159/0x420 [ 1534.938298][T16767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.943386][T16767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1534.948732][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.954436][T16767] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1534.959740][T16767] genl_rcv+0x28/0x40 [ 1534.963794][T16767] netlink_unicast+0x5aa/0x870 [ 1534.969709][T16767] ? __pfx_netlink_unicast+0x10/0x10 [ 1534.975980][T16767] netlink_sendmsg+0x8b0/0xda0 [ 1534.980937][T16767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.986237][T16767] ? __might_fault+0xa0/0x140 [ 1534.990978][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.996645][T16767] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1535.002324][T16767] ____sys_sendmsg+0xa54/0xc30 [ 1535.007122][T16767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1535.012489][T16767] ? __pfx_futex_wake_mark+0x10/0x10 [ 1535.017791][T16767] ___sys_sendmsg+0x190/0x1e0 [ 1535.022553][T16767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1535.027765][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.033563][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.039235][T16767] __sys_sendmsg+0x170/0x220 [ 1535.043889][T16767] ? __pfx___sys_sendmsg+0x10/0x10 [ 1535.049031][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.055057][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.060936][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.066629][T16767] do_syscall_64+0x106/0xf80 [ 1535.072348][T16767] ? irqentry_exit+0x138/0x670 [ 1535.077147][T16767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.084092][T16767] RIP: 0033:0x7fa7d4f9bf79 [ 1535.088510][T16767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.108397][T16767] RSP: 002b:00007fa7d5db3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.116895][T16767] RAX: ffffffffffffffda RBX: 00007fa7d5216090 RCX: 00007fa7d4f9bf79 [ 1535.124959][T16767] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000007 [ 1535.133191][T16767] RBP: 00007fa7d50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.141386][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1535.149482][T16767] R13: 00007fa7d5216128 R14: 00007fa7d5216090 R15: 00007ffeb9089188 [ 1535.157566][T16767] [ 1535.160652][T16767] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1535.167976][T16767] CPU: 1 UID: 0 PID: 16767 Comm: syz.6.2027 Not tainted syzkaller #0 PREEMPT(full) [ 1535.177355][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1535.187412][T16767] Call Trace: [ 1535.190687][T16767] [ 1535.193612][T16767] dump_stack_lvl+0x100/0x190 [ 1535.198323][T16767] vpanic+0x552/0x970 [ 1535.202342][T16767] ? __pfx_vpanic+0x10/0x10 [ 1535.206859][T16767] panic+0xd1/0xe0 [ 1535.210677][T16767] ? __pfx_panic+0x10/0x10 [ 1535.215133][T16767] check_panic_on_warn.cold+0x19/0x34 [ 1535.220514][T16767] ? wbt_init_enable_default+0xcb/0x120 [ 1535.226065][T16767] __warn.cold+0x191/0x348 [ 1535.230496][T16767] __report_bug+0x296/0x3d0 [ 1535.235004][T16767] ? wbt_init_enable_default+0xcb/0x120 [ 1535.240554][T16767] ? __pfx___report_bug+0x10/0x10 [ 1535.245593][T16767] ? wbt_init_enable_default+0xcb/0x120 [ 1535.251143][T16767] report_bug+0xb2/0x220 [ 1535.255384][T16767] ? wbt_init_enable_default+0xcb/0x120 [ 1535.260934][T16767] handle_bug+0x166/0x2a0 [ 1535.265276][T16767] exc_invalid_op+0x17/0x50 [ 1535.269788][T16767] asm_exc_invalid_op+0x1a/0x20 [ 1535.274678][T16767] RIP: 0010:wbt_init_enable_default+0xcb/0x120 [ 1535.280893][T16767] Code: df e8 b9 7a a9 06 4c 89 e7 e8 e1 38 00 00 48 89 df e8 09 04 a9 06 e8 74 ed 23 fd 5b 5d 41 5c e9 d6 c6 2b fc e8 66 ed 23 fd 90 <0f> 0b 90 eb 81 e8 5b ed 23 fd 90 0f 0b 90 48 b8 00 00 00 00 00 fc [ 1535.300516][T16767] RSP: 0018:ffffc900039a71a0 EFLAGS: 00010287 [ 1535.306589][T16767] RAX: 000000000001b769 RBX: ffff88807952f000 RCX: ffffc90013766000 [ 1535.314558][T16767] RDX: 0000000000080000 RSI: ffffffff84e47a3a RDI: ffffffff8c1acf20 [ 1535.322534][T16767] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1535.330509][T16767] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802769a620 [ 1535.338484][T16767] R13: ffff88807952f390 R14: ffff88802769a630 R15: ffff88807952f090 [ 1535.346553][T16767] ? wbt_init_enable_default+0xca/0x120 [ 1535.352118][T16767] blk_register_queue+0x39e/0x4e0 [ 1535.357256][T16767] __add_disk+0x73f/0xe40 [ 1535.361608][T16767] add_disk_fwnode+0x118/0x5c0 [ 1535.366399][T16767] nbd_dev_add+0x77a/0xb10 [ 1535.370837][T16767] ? find_held_lock+0x2b/0x80 [ 1535.375548][T16767] ? __pfx_nbd_dev_add+0x10/0x10 [ 1535.380530][T16767] ? nbd_genl_connect+0x131a/0x1a40 [ 1535.385764][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.391409][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.397056][T16767] ? __radix_tree_lookup+0x217/0x2b0 [ 1535.402376][T16767] nbd_genl_connect+0xb8d/0x1a40 [ 1535.407337][T16767] ? rcu_is_watching+0x12/0xc0 [ 1535.412198][T16767] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1535.417599][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.423239][T16767] ? __nla_parse+0x40/0x60 [ 1535.427767][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.433440][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.439106][T16767] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1535.446090][T16767] genl_family_rcv_msg_doit+0x214/0x300 [ 1535.451660][T16767] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1535.457740][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.463382][T16767] ? genl_get_cmd+0x3ef/0x720 [ 1535.468078][T16767] ? __dev_queue_xmit+0x7fd/0x4750 [ 1535.473207][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.478845][T16767] ? __radix_tree_lookup+0x217/0x2b0 [ 1535.484162][T16767] genl_rcv_msg+0x560/0x800 [ 1535.488695][T16767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1535.493729][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.499372][T16767] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1535.504766][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.510498][T16767] netlink_rcv_skb+0x159/0x420 [ 1535.515274][T16767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1535.520319][T16767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1535.525650][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.531447][T16767] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1535.536757][T16767] genl_rcv+0x28/0x40 [ 1535.540750][T16767] netlink_unicast+0x5aa/0x870 [ 1535.545526][T16767] ? __pfx_netlink_unicast+0x10/0x10 [ 1535.551273][T16767] netlink_sendmsg+0x8b0/0xda0 [ 1535.556054][T16767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.561355][T16767] ? __might_fault+0xa0/0x140 [ 1535.566052][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.571689][T16767] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1535.577340][T16767] ____sys_sendmsg+0xa54/0xc30 [ 1535.582122][T16767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1535.587425][T16767] ? __pfx_futex_wake_mark+0x10/0x10 [ 1535.592719][T16767] ___sys_sendmsg+0x190/0x1e0 [ 1535.597410][T16767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1535.602623][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.608279][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.613941][T16767] __sys_sendmsg+0x170/0x220 [ 1535.618532][T16767] ? __pfx___sys_sendmsg+0x10/0x10 [ 1535.623647][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.629298][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.634970][T16767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.640613][T16767] do_syscall_64+0x106/0xf80 [ 1535.645206][T16767] ? irqentry_exit+0x138/0x670 [ 1535.649973][T16767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.655864][T16767] RIP: 0033:0x7fa7d4f9bf79 [ 1535.660280][T16767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.679920][T16767] RSP: 002b:00007fa7d5db3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.688347][T16767] RAX: ffffffffffffffda RBX: 00007fa7d5216090 RCX: 00007fa7d4f9bf79 [ 1535.696318][T16767] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000007 [ 1535.704317][T16767] RBP: 00007fa7d50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.712298][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1535.720367][T16767] R13: 00007fa7d5216128 R14: 00007fa7d5216090 R15: 00007ffeb9089188 [ 1535.728476][T16767] [ 1535.731889][T16767] Kernel Offset: disabled [ 1535.736230][T16767] Rebooting in 86400 seconds..