last executing test programs: 8m44.049773092s ago: executing program 32 (id=18): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0xb, 0x31}, 0x80, 0x0}, 0x0) 8m37.554810272s ago: executing program 33 (id=34): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003540)=""/111, 0x6f}, {&(0x7f00000024c0)=""/4085, 0xff5}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f00000035c0)=""/4082, 0xff2}, {&(0x7f0000000340)=""/239, 0xef}], 0x5}, 0x40000022) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 8m34.618208734s ago: executing program 34 (id=10): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0xaf84b4381f27b0f9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002dc0)={{r3}, &(0x7f0000002d40), &(0x7f0000002d80)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m23.758586777s ago: executing program 35 (id=61): socket$inet(0x2b, 0x801, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x400}, 0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x16, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m48.331369163s ago: executing program 36 (id=127): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="f14b9c7d6df4baa88b38d03fd44a8f5dc5395ac9d1e3c2953f18a8797efcc746b84ba421cbf51ead83be0ae2a001209a6f90c3e27e60868b1ad68f0ce5eac6472136960ab95444c9bf6a6b5df851e20be2425bf36ad45aeed19948af2200b214b4d7e04198a1ebad159e58d928c5c1caea580661ed842ae2870ef92e1f01dc2cd88a427c6892021a7d1772f4d3670f49b3103625a6966ac253d75f7024b89a25abe31b7fc104900b70743de9392d230d7617ae9aa76406d0199ecde97296f9c3af00af6b4982b4cf7cba9c7fe1"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10c000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m21.866468422s ago: executing program 1 (id=177): r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x5) 7m20.8002555s ago: executing program 1 (id=181): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 7m20.145291845s ago: executing program 1 (id=183): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)="a22448b821ab5bd6878cd27da768fe66f2899607d7739f98a4042ca64cee434dcbf8cb6d5817dbbf409e671ec3cdb9d2b9f279c701f4073aa7d10ffda0c56cc74f94b7bab8d499a82e4f5b7974c1573db3b9b83fb01b033fe5f9c2456c41997c793e69dc20", 0x65, 0x10, 0x0, 0x0) 7m19.43898211s ago: executing program 1 (id=188): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m19.046250253s ago: executing program 37 (id=187): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x400, 0xfffffff7, 0x6}, 0x0) socket(0x9, 0x80000, 0x1) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="0706675823b8a37f19b37e0f9f120623b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0289ef98886eaac01b08aa753b8726d16773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2555da4ef9035cbfe8dc1e0000000000", 0xbf, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000b40)={r5, r4, r5}, &(0x7f0000000440)=""/251, 0xfb, &(0x7f0000000b80)={&(0x7f0000000100)={'streebog256-generic\x00'}}) 7m18.907962534s ago: executing program 1 (id=191): r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x5) 7m16.977914399s ago: executing program 1 (id=194): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x280000e5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x3, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xed, 0x0, 0x1}}, 0x3c) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000180)=ANY=[]) 7m16.977413838s ago: executing program 6 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x4000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 7m16.588561932s ago: executing program 38 (id=194): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x280000e5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x3, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xed, 0x0, 0x1}}, 0x3c) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000180)=ANY=[]) 7m16.540041822s ago: executing program 6 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x8, 0x800, 0x2) socket$inet6(0xa, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) 7m14.745466345s ago: executing program 6 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32=r1, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) 7m14.332886168s ago: executing program 6 (id=199): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m13.683406613s ago: executing program 6 (id=200): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 7m11.868334397s ago: executing program 6 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0xa, 0xffff) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 7m11.656757049s ago: executing program 39 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0xa, 0xffff) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 6m58.449605808s ago: executing program 9 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32=r2, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) 6m52.099573866s ago: executing program 9 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4100, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) 6m51.298618241s ago: executing program 9 (id=228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0xffffdffe, 0x1}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in=@local, 0x4e21, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe, 0x1}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 6m51.196184392s ago: executing program 9 (id=229): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x110) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, r1}) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x55a7, &(0x7f00000124c0)="$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") 6m49.322109846s ago: executing program 9 (id=231): mkdir(&(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() syz_clone3(&(0x7f00000004c0)={0x1009c1000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56) 6m46.588753367s ago: executing program 9 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32=r2, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) 6m30.422179238s ago: executing program 40 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32=r2, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) 3m46.292140441s ago: executing program 5 (id=708): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002e40)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000000540)="209c3a821c8a36150c03602a32b89a4825bf9fcbf13f62d91a25197ee1b3cc9592223156f8c8dbd67948c95cf3ec15ecc49ac233bd2e19a932f67be00944e4357b0360562f0dda65211b148a6de535ec6670adb6243966a6790e4c740f4a1016019a3cef87b4d2d611760621b4ed835bcc7300a0839bf3d007", 0x79}, {&(0x7f00000001c0)}, {&(0x7f00000005c0)="db9be729236aab5751de6b977d1fcce7df36a3f6d52c9c4f7ab72b00acbf4de7013f07fec0b91ff6a7faea6bdf8440e115c2dd5f32c88d565657faaa67df594c089f8d19c15a59ea339d5b11f81f8a99be6a5d1f1456ced4e50a38cbd006b1122e041ba3f9fca3d257d2f45782db6f0559d730a63a271d5b227a7a75cec6831009473b2d1a0fa0dd8793f50c8f22395db1ac28a0d57202e6807cd93b1feb647755132a450dbc3e1889a5a0c7a99da3a34380", 0xb2}, {&(0x7f00000001c0)="3aa830775db9c5eb71cc0a5052f1263546d78eb21a2acc61e61b3ad7180b642aef670a9c7baf9bb7a34e24e188be35cd5a408f695ae092", 0x37}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="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"/4091, 0xffb}, {&(0x7f00000026c0)="9951ba6b41f6a27b8621b647e8ae6f79362c525a14ad273efe2a030bee6e45bb17e5cd877e2393f65470201e95e6584646f83091f39e56cfe93ac269c5cb246d60082f84a5b1e5fd14bf8fbe63a473f41d3364de8f397523535e62ad1ad47797bc9a5cb7965135c74462cc8df40361c4c71d09e8e764e009d0315174faa6ced298f4295267c7", 0x86}, {&(0x7f0000002780)="93bef266d615205224c78bbbcab567d0e9cc08ad2b4b0df3583059da56b5853f1b3837f01a90bf1012010bdfc3c46cf508b7b0d682c3383acb", 0x39}, {&(0x7f0000002840)="558e93f231c0649dbb08c4219e4429dcc69e2e766755609f8e7d49bdf33c8fced041ab56713ffaf9f9db1498ed427c0073a964384cb2483c14f062f857d3ac9475cee0df84a51cee9b8d00ea62fbac0d9640e498d8cd2447b6bacb4921d3dd6519697a827ba6b61a4706ff00fe7cef220057392e1ecc6e98ddd5c9a1be9fa17bfaf3dec90f20fd73710c63a9c3bc2959d007d5778ed5f74cddae7a16d748dbba8aa13ac12fe0132589cdb6980f9ae5ab42754e70ab945c69cf830a875b20c7ecf6a6240784e9b60925ea", 0xca}], 0x9, &(0x7f00000029c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x78, 0x84}}, {{&(0x7f0000002a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002b00)="1c8dfbf5b6833b3fcea8f447124323b0414487845d355f2d966de5ecccbd98558a5e7caf6d99e85fcb620ad53b31e5eb518a4dd4fee8358ce373b2fd59afd5c3e9c57cd52ece906d0cf852f7b96059ed1686e5f32b3d7fbca24a2dec2914cdb46302461e21ff1c11e64ce120c8d89594bccb72630eb6a213427f4b1f8a0a08cf121251e245866c1031c88e349d25", 0x8e}, {&(0x7f0000002bc0)="67e59a9789a2f33e4b2a714e1b10d560616927f9f20028dd4623d3fe8cd3ca6ba6bc06e54292f2357f1cab41d39241fa44ea926a17fe74db634d", 0x3a}, {&(0x7f0000002c00)="c1d987938dab1cc555cd0463973649f85c654e6eb25744fa1fa672168774c38961c01dd243caa330fe26e06e878ae95e44670c11919ecc61072e898425", 0x3d}, {&(0x7f0000002c40)="75c00aa2afb23c9e31aab805d547a127f14bef406f8a8f4ba3a4", 0x1a}, {&(0x7f00000027c0)="b2734be12b4bdfcf9ccd027f40a5125a3a672fcf3bba3ac50f3ec3b45afa447ce181ff61bbc1fd850b93917203612a", 0x2f}, {&(0x7f0000002d00)="8dfdc4d8095c70e6db737572f2d105cd4ca50fd5ab5c813084ec55c059f0781b0a51b1a244b4ee0031a35acb2971c65b9f7da25ee90d91e7ee5825dedd4f973660ae73b6bcc4562b6f4aed440e9b68c5f403554e7a6f7233fb43ed62d6934eb274035b084f3703453a454058f923a91e3427d4ebcec9dee3b0eb2a365b7f2fa82f7bb6bb4379bb7b34088666f27cdae87d3ed2161f6962c0bd43f6f8ad", 0x9d}], 0x6, 0x0, 0x0, 0x4040005}}], 0x2, 0x4000) syz_emit_ethernet(0x80, &(0x7f00000004c0)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0000e4", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "895a180c"}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=r2], 0x48) r3 = getpid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x17, 0x4, @thr={&(0x7f0000000040)="79c0cfa19b84eee64906", 0x0}}, 0x0) syz_pidfd_open(r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3m44.239132066s ago: executing program 5 (id=721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="4d7e00c300000000000023000000080002"], 0x1c}, 0x4, 0x700000000000000}, 0x0) 3m43.575056181s ago: executing program 5 (id=722): socket$igmp(0x2, 0x3, 0x2) io_uring_setup(0x7c3d, 0x0) setpriority(0xf04494e5e2b9b6cf, 0x0, 0x4) socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x44800) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 3m42.096430723s ago: executing program 5 (id=724): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r3, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m39.995587418s ago: executing program 5 (id=727): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x40011, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002700851600000a00180000000000000000001c005a"], 0x4c}}, 0x4000804) r7 = socket(0x840000000002, 0x3, 0x100) getsockopt$bt_hci(r7, 0x0, 0x30, 0x0, &(0x7f0000000180)=0xfea8) 3m38.616994718s ago: executing program 5 (id=730): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x55c, 0x3, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x8ee1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.308996631s ago: executing program 41 (id=730): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x55c, 0x3, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x8ee1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.968221649s ago: executing program 3 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc182, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0xfffffffffffffffb}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1a, 0x8, @l2={'ib', 0x3a, 'wlan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000000) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000400)={{@any, 0xafc}, 0x3e6, 0x34, 0x100, 0x8}) sendmsg$inet(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r8 = socket$key(0xf, 0x3, 0x2) unshare(0x2c020400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x5, &(0x7f0000000040), 0x4) 2m6.016899734s ago: executing program 3 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x84) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) fsopen(0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)}], 0x1) r3 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x400001) 2m4.175767168s ago: executing program 3 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24) 2m2.968756287s ago: executing program 3 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000880, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2, {}, 0x884d4e09817961eb}, 0x18) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) r6 = getpid() mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) syz_pidfd_open(r6, 0x0) getpgid(0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m0.264607167s ago: executing program 3 (id=961): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xa, 0x4, 0x0, 0x4, {}, {0x0, 0x0, 0x2, 0x1, 0x0, 0x1, "1700"}, 0x0, 0x2, {}, 0x3}) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$notify(r1, 0x402, 0x36) 1m58.684371929s ago: executing program 3 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001400010000000000000000000288310001002348e26ff5ed7a6f13e2f0ba71e4eefe4f0dc164858634d997787b477af40d9fec9269267f239cff01157f591f0000000000"], 0x48}}, 0x4000) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r6, 0x0, 0x400000000000000, 0x5) 1m58.264889802s ago: executing program 42 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001400010000000000000000000288310001002348e26ff5ed7a6f13e2f0ba71e4eefe4f0dc164858634d997787b477af40d9fec9269267f239cff01157f591f0000000000"], 0x48}}, 0x4000) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r6, 0x0, 0x400000000000000, 0x5) 15.183268987s ago: executing program 4 (id=1265): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$notify(r3, 0x402, 0x80000002) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0x0, 0x3}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x22]}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa}, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="050f6e000349100006e754cd1765caf11e44d320635d35e7726afeb5ad6617e3b395fc20da6490b290da9055670bf90ede0f820d9599f5975a151a1668ef66678077b1fa70559d93d06de6c7a85b0c100a00000000000000000014100403a3b7a98f9bd081fe0017d01bac7864d3"], 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) 11.576723803s ago: executing program 7 (id=1280): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0x40, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 8.888487334s ago: executing program 4 (id=1287): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x84}}], 0x1, 0x4000) 8.827240844s ago: executing program 7 (id=1288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0xffffffffffffffe) 8.265724019s ago: executing program 4 (id=1289): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x10000, @private1, 0x5a7}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 8.120338069s ago: executing program 7 (id=1291): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x3979) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x100000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000002b01fe55ab78e940d44b40be6d8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) unlink(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100", @ANYRES32=r0, @ANYRES8], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000140a07030000000000000000020000090900020073797a3000000000080003400000000814000000020a0129149306de0b31b4000000000e146677001100010500000000000000000500000a"], 0x64}}, 0x0) 8.089016969s ago: executing program 4 (id=1292): timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) timer_delete(r0) 8.04784663s ago: executing program 0 (id=1293): socket$inet(0x2, 0x6, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 7.719053092s ago: executing program 4 (id=1294): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x40011, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002700851600000a00180000000000000000001c005a"], 0x4c}}, 0x4000804) r10 = socket(0x840000000002, 0x3, 0x100) getsockopt$bt_hci(r10, 0x0, 0x30, 0x0, &(0x7f0000000180)=0xfea8) 7.025666438s ago: executing program 7 (id=1295): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x3, 0x2, {0x2, 0x2e}}, 0x0}, 0x0) 6.938233099s ago: executing program 0 (id=1297): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$notify(r3, 0x402, 0x80000002) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0x0, 0x3}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x22]}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa}, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="050f6e000349100006e754cd1765caf11e44d320635d35e7726afeb5ad6617e3b395fc20da6490b290da9055670bf90ede0f820d9599f5975a151a1668ef66678077b1fa70559d93d06de6c7a85b0c100a00000000000000000014100403a3b7a98f9bd081fe0017d01bac7864d3"], 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) 6.064497915s ago: executing program 2 (id=1299): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x84}}], 0x1, 0x4000) 6.033141565s ago: executing program 2 (id=1300): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r0, &(0x7f0000000980)={'#! ', './file0', [{0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) open_tree(0xffffffffffffffff, 0x0, 0xc0100) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x2}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xca38, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000700)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 4.897997554s ago: executing program 8 (id=1302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x1}) 4.814005164s ago: executing program 8 (id=1303): mkdir(&(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() syz_clone3(&(0x7f00000004c0)={0x1009c1000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x80284504, &(0x7f0000000000)=""/56) 4.06836209s ago: executing program 2 (id=1304): timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) timer_delete(r0) 4.05650966s ago: executing program 2 (id=1305): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x84, &(0x7f0000000480)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7, @empty, 0x3}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0xb5}]}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.810555592s ago: executing program 0 (id=1306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x4014) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="4d7e00c300000000000023000000080002"], 0x1c}, 0x4, 0x700000000000000}, 0x0) 3.739069362s ago: executing program 8 (id=1307): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x3979) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x100000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000002b01fe55ab78e940d44b40be6d8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) unlink(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100", @ANYRES32=r0, @ANYRES8], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000140a07030000000000000000020000090900020073797a3000000000080003400000000814000000020a0129149306de0b31b4000000000e146677001100010500000000000000000500000a"], 0x64}}, 0x0) 3.715725023s ago: executing program 7 (id=1308): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x3c, 0x4}, @union={0x3, 0x3, 0x0, 0x5, 0x1, 0x4, [{0xd, 0x4, 0x1}, {0xc, 0x1, 0x7c1a}, {0x9, 0x3, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x9}}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000180)=""/98, 0x74, 0x62, 0x0, 0x6, 0x10000, @value=r0}, 0x28) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', '', [{0x20, '\t\t'}, {}]}, 0x8) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xdc, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)={0x0, 0xed4ba00c2bb25f04, 0x5, 0x0, 0x20}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) 3.700024502s ago: executing program 4 (id=1309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x81, 0xfffff024}, {0x20, 0xc, 0x0, 0x200}, {0x6, 0x6, 0x0, 0x4}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb058d000) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x3e80) 2.391958082s ago: executing program 0 (id=1310): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x84}}], 0x1, 0x4000) 2.372042663s ago: executing program 2 (id=1311): openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00001ae000/0x1000)=nil, &(0x7f00003f0000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)="b0", 0x1}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x101) setsockopt(0xffffffffffffffff, 0x6, 0x2000404, 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000200)={0x5, 0x1c0, 0x80, &(0x7f0000001140)=[0x7, 0x9, 0x10001, 0xffffffffffffff80, 0x173, 0x0, 0x923b, 0x479, 0x6, 0x8, 0x80000000, 0x3, 0xbd7, 0x5, 0xf, 0x8, 0x5, 0x37, 0x5, 0x1, 0x40, 0x3, 0x1, 0xb, 0x0, 0xef, 0x8, 0x7, 0x80000000, 0x1, 0x1, 0x1, 0x1ff, 0x1, 0x0, 0xad99, 0x200, 0x8, 0xb1, 0x5, 0x7b29, 0x3, 0x2, 0x4d, 0xffffffffffffffff, 0x9, 0x1cb, 0xfff, 0xf2, 0x0, 0x2, 0x9, 0x2, 0x7, 0x7e, 0x4, 0x6, 0x0, 0x3, 0x2ca, 0x1000, 0x100, 0xdca1, 0x4d9, 0x3, 0x3, 0x4, 0x8000000000000000, 0x5, 0xe62, 0x7, 0x2, 0x7, 0x5, 0x8, 0x2, 0xfffffffffffffff9, 0x81, 0x8, 0x4, 0x387cb164, 0x1, 0x86c, 0x2, 0xffffffffffffffff, 0x1, 0x3, 0xb, 0xbc, 0x7, 0x5, 0x8, 0x2, 0x2, 0x5c552873, 0x7f, 0x0, 0x9, 0x2, 0xcf, 0x2, 0x100000001, 0x0, 0x8, 0x60, 0x9, 0x40, 0x8, 0x6, 0x0, 0x63e, 0xffffffffffffff21, 0x5c6, 0x401, 0x8, 0x9, 0x6, 0x6, 0x4, 0x6, 0x1, 0x5, 0x6, 0x2, 0x401, 0x6, 0xfffffffffffffc01, 0x8]}) fcntl$setstatus(r1, 0x4, 0x5ca5b07e4b87b756) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = socket(0x25, 0x5, 0x5) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30, 0x40000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) 2.293351893s ago: executing program 8 (id=1312): r0 = io_uring_setup(0x4822, &(0x7f0000000180)) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.136279684s ago: executing program 0 (id=1313): openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00001ae000/0x1000)=nil, &(0x7f00003f0000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)="b0", 0x1}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000001c0)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x101) setsockopt(0xffffffffffffffff, 0x6, 0x2000404, 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000200)={0x5, 0x1c0, 0x80, &(0x7f0000001140)=[0x7, 0x9, 0x10001, 0xffffffffffffff80, 0x173, 0x0, 0x923b, 0x479, 0x6, 0x8, 0x80000000, 0x3, 0xbd7, 0x5, 0xf, 0x8, 0x5, 0x37, 0x5, 0x1, 0x40, 0x3, 0x1, 0xb, 0x0, 0xef, 0x8, 0x7, 0x80000000, 0x1, 0x1, 0x1, 0x1ff, 0x1, 0x0, 0xad99, 0x200, 0x8, 0xb1, 0x5, 0x7b29, 0x3, 0x2, 0x4d, 0xffffffffffffffff, 0x9, 0x1cb, 0xfff, 0xf2, 0x0, 0x2, 0x9, 0x2, 0x7, 0x7e, 0x4, 0x6, 0x0, 0x3, 0x2ca, 0x1000, 0x100, 0xdca1, 0x4d9, 0x3, 0x3, 0x4, 0x8000000000000000, 0x5, 0xe62, 0x7, 0x2, 0x7, 0x5, 0x8, 0x2, 0xfffffffffffffff9, 0x81, 0x8, 0x4, 0x387cb164, 0x1, 0x86c, 0x2, 0xffffffffffffffff, 0x1, 0x3, 0xb, 0xbc, 0x7, 0x5, 0x8, 0x2, 0x2, 0x5c552873, 0x7f, 0x0, 0x9, 0x2, 0xcf, 0x2, 0x100000001, 0x0, 0x8, 0x60, 0x9, 0x40, 0x8, 0x6, 0x0, 0x63e, 0xffffffffffffff21, 0x5c6, 0x401, 0x8, 0x9, 0x6, 0x6, 0x4, 0x6, 0x1, 0x5, 0x6, 0x2, 0x401, 0x6, 0xfffffffffffffc01, 0x8]}) fcntl$setstatus(r1, 0x4, 0x5ca5b07e4b87b756) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = socket(0x25, 0x5, 0x5) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30, 0x40000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) 1.670790488s ago: executing program 8 (id=1314): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180), &(0x7f00000001c0)=0x8) poll(&(0x7f0000000080)=[{}], 0x1, 0x100) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000280), 0x10b, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x1) tkill(r0, 0x16) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.552247428s ago: executing program 7 (id=1315): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r0, &(0x7f0000000980)={'#! ', './file0', [{0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) open_tree(0xffffffffffffffff, 0x0, 0xc0100) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x2}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xca38, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000700)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 894.053404ms ago: executing program 2 (id=1316): syz_open_dev$usbfs(&(0x7f0000000180), 0x200, 0x101001) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/59, 0x3b}], 0x1}}], 0x1, 0x2, 0x0) 298.320438ms ago: executing program 0 (id=1317): mkdir(&(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() syz_clone3(&(0x7f00000004c0)={0x1009c1000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x80284504, &(0x7f0000000000)=""/56) 0s ago: executing program 8 (id=1318): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x20000400) kernel console output (not intermixed with test programs): link becomes ready [ 236.130261][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.644007][ T5322] vivid-000: disconnect [ 237.815512][ T5320] vivid-000: reconnect [ 238.469573][ T5329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.255'. [ 238.498770][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 238.561829][ T5329] bridge0: port 3(syz_tun) entered blocking state [ 238.577719][ T5329] bridge0: port 3(syz_tun) entered disabled state [ 238.617756][ T5329] device syz_tun entered promiscuous mode [ 238.680505][ T5329] bridge0: port 3(syz_tun) entered blocking state [ 238.687332][ T5329] bridge0: port 3(syz_tun) entered forwarding state [ 238.998925][ T4574] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 239.499449][ T4574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 239.624126][ T4574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.644428][ T4574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 239.874539][ T4574] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 239.894321][ T4574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.102552][ T4574] usb 6-1: Product: syz [ 242.106769][ T4574] usb 6-1: Manufacturer: syz [ 242.111510][ T4574] usb 6-1: SerialNumber: syz [ 242.232681][ T4574] usb 6-1: config 0 descriptor?? [ 242.258830][ T4574] usb 6-1: can't set config #0, error -71 [ 242.272262][ T4574] usb 6-1: USB disconnect, device number 4 [ 244.922855][ T2239] Bluetooth: hci2: command 0x0405 tx timeout [ 244.937707][ T5384] loop2: detected capacity change from 0 to 256 [ 245.132855][ T4587] Bluetooth: hci5: command 0x0409 tx timeout [ 245.310987][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.274'. [ 246.732296][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 247.199735][ T4243] Bluetooth: hci5: command 0x041b tx timeout [ 248.337173][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 248.402556][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.428721][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.453173][ T5375] device bridge_slave_0 entered promiscuous mode [ 248.521601][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.599900][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.631766][ T5375] device bridge_slave_1 entered promiscuous mode [ 250.188652][ T4243] usb 1-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 250.212257][ T4243] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.239543][ T4243] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 250.249008][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.270088][ T4209] Bluetooth: hci5: command 0x040f tx timeout [ 250.295750][ T4243] usb 1-1: config 0 descriptor?? [ 250.868991][ T4243] usb 1-1: string descriptor 0 read error: -71 [ 251.021731][ T4243] usb 1-1: USB disconnect, device number 2 [ 252.319985][ T4245] Bluetooth: hci5: command 0x0419 tx timeout [ 252.363118][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.411042][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.453323][ T150] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.599277][ T150] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.670270][ T5375] team0: Port device team_slave_0 added [ 252.708269][ T150] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.774684][ T5375] team0: Port device team_slave_1 added [ 253.011477][ T150] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.820662][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.845726][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.897022][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.929587][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.936567][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.902690][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.473733][ T5471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.296'. [ 255.486233][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'. [ 255.543467][ T5375] device hsr_slave_0 entered promiscuous mode [ 255.859126][ T5375] device hsr_slave_1 entered promiscuous mode [ 255.869326][ T5375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.887152][ T5375] Cannot create hsr debugfs directory [ 256.006257][ T5472] Cannot find add_set index 0 as target [ 256.025181][ T5477] loop4: detected capacity change from 0 to 256 [ 257.393419][ T5486] tipc: Started in network mode [ 257.399365][ T5486] tipc: Node identity 7ea141428b08, cluster identity 4711 [ 257.406658][ T5486] tipc: Enabled bearer , priority 0 [ 257.414785][ T5486] device syzkaller0 entered promiscuous mode [ 257.441213][ T5485] tipc: Resetting bearer [ 257.463397][ T5485] tipc: Disabling bearer [ 257.465759][ T4991] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 257.571118][ T5375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.606899][ T5375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.651425][ T5375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.740586][ T4991] usb 1-1: Using ep0 maxpacket: 16 [ 257.741870][ T5375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.858974][ T4991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.888347][ T4991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.958805][ T4991] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 257.978695][ T4991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.050256][ T5497] virtio-fs: tag <(null)> not found [ 258.295802][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.338737][ T4587] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 258.665457][ T4991] usb 1-1: config 0 descriptor?? [ 258.703663][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.740950][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.858947][ T4587] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.877387][ T4587] usb 3-1: config 0 has no interface number 0 [ 258.888496][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.072564][ T4587] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 259.085307][ T4587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.098814][ T4587] usb 3-1: Product: syz [ 259.108706][ T4587] usb 3-1: Manufacturer: syz [ 259.118931][ T4587] usb 3-1: SerialNumber: syz [ 259.178529][ T4587] usb 3-1: config 0 descriptor?? [ 259.381439][ T4991] hid-picolcd 0003:04D8:F002.0002: collection stack underflow [ 259.392052][ T4991] hid-picolcd 0003:04D8:F002.0002: item 0 4 0 12 parsing failed [ 259.408996][ T4991] hid-picolcd 0003:04D8:F002.0002: device report parse failed [ 259.416674][ T4991] hid-picolcd: probe of 0003:04D8:F002.0002 failed with error -22 [ 259.447211][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.456421][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.458754][ T4587] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 259.465266][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.480088][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.501747][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.516018][ T4587] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 259.528176][ T4587] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 259.537935][ T4587] usb 3-1: media controller created [ 259.594492][ T4991] usb 1-1: USB disconnect, device number 3 [ 259.612845][ T4587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.719445][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.737676][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.771387][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.778518][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.813107][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.937888][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.966628][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.981070][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.614441][ T5509] tipc: Started in network mode [ 260.619656][ T5509] tipc: Node identity 7f000001, cluster identity 4711 [ 260.627453][ T5509] tipc: Enabled bearer , priority 10 [ 260.688752][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.726023][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.755493][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.774511][ T150] device hsr_slave_0 left promiscuous mode [ 260.796645][ T150] device hsr_slave_1 left promiscuous mode [ 260.959111][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.115663][ T7] usb 3-1: USB disconnect, device number 2 [ 261.146768][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.153276][ T5519] capability: warning: `syz.2.310' uses 32-bit capabilities (legacy support in use) [ 261.170371][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.178803][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.194793][ T150] device bridge_slave_1 left promiscuous mode [ 261.203847][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.258531][ T5521] netlink: 'syz.2.310': attribute type 3 has an invalid length. [ 261.279078][ T150] device bridge_slave_0 left promiscuous mode [ 261.305250][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.312935][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 261.334699][ T5524] loop5: detected capacity change from 0 to 256 [ 261.360825][ T150] device veth1_macvtap left promiscuous mode [ 261.382960][ T150] device veth0_macvtap left promiscuous mode [ 261.635977][ T4587] tipc: Node number set to 2130706433 [ 261.766068][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.772459][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.634494][ T150] team0 (unregistering): Port device team_slave_1 removed [ 262.693372][ T150] team0 (unregistering): Port device team_slave_0 removed [ 262.726403][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.757595][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.896174][ T150] bond0 (unregistering): Released all slaves [ 263.061049][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.075844][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.122872][ T5375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.212414][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.256281][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.277823][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.369553][ T5540] bridge0: port 4(team0) entered blocking state [ 263.376073][ T5540] bridge0: port 4(team0) entered disabled state [ 263.396570][ T5540] device team0 entered promiscuous mode [ 263.402441][ T5540] device team_slave_0 entered promiscuous mode [ 263.410929][ T5540] device team_slave_1 entered promiscuous mode [ 263.423707][ T5540] bridge0: port 4(team0) entered blocking state [ 263.430360][ T5540] bridge0: port 4(team0) entered forwarding state [ 263.606993][ T5547] loop5: detected capacity change from 0 to 2048 [ 263.957210][ T5551] tipc: Enabled bearer , priority 10 [ 264.959397][ T5547] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 265.365939][ T4210] tipc: Node number set to 4121510210 [ 265.911433][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.944746][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.982222][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.062174][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.086502][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.156893][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.175622][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.198175][ T5375] device veth0_vlan entered promiscuous mode [ 266.215001][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.262866][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.360909][ T5375] device veth1_vlan entered promiscuous mode [ 266.912672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.050322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.195144][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.224671][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.263160][ T5375] device veth0_macvtap entered promiscuous mode [ 267.573133][ T5375] device veth1_macvtap entered promiscuous mode [ 267.906489][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.967922][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.057979][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.072850][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.084281][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.094880][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.115963][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.126738][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.268486][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.285728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.334474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.418523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.454753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.344931][ T5603] loop4: detected capacity change from 0 to 2048 [ 270.522459][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.569529][ T5603] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 270.571377][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.631625][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.874923][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.902177][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.141893][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.328421][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.586779][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.675632][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.715810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.735257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.761104][ T5375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.798602][ T5375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.814778][ T5375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.858623][ T5375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.881557][ T4617] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 272.904196][ T4617] Bluetooth: hci0: Injecting HCI hardware error event [ 273.031498][ T4179] Bluetooth: hci0: hardware error 0x00 [ 273.661176][ T554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.700726][ T554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.736547][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.737006][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.899912][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.922896][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.224479][ T26] audit: type=1326 audit(1741907439.428:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 275.549628][ T26] audit: type=1326 audit(1741907439.428:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 276.298988][ T26] audit: type=1326 audit(1741907439.428:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 276.395248][ T26] audit: type=1326 audit(1741907439.428:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 276.501637][ T26] audit: type=1326 audit(1741907439.448:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 276.688607][ T26] audit: type=1326 audit(1741907439.448:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 276.838610][ T26] audit: type=1326 audit(1741907439.458:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 276.909887][ T26] audit: type=1326 audit(1741907439.458:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 277.479517][ T5671] loop0: detected capacity change from 0 to 256 [ 277.699609][ T26] audit: type=1326 audit(1741907439.468:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 277.827218][ T5680] loop4: detected capacity change from 0 to 2048 [ 277.946577][ T26] audit: type=1326 audit(1741907439.468:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 277.968797][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.146261][ T5690] vivid-000: disconnect [ 278.664388][ T5681] vivid-000: reconnect [ 278.700518][ T5680] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 281.354661][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 281.354681][ T26] audit: type=1326 audit(1741907444.938:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 281.382943][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.536416][ T26] audit: type=1326 audit(1741907444.938:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 281.628159][ T26] audit: type=1326 audit(1741907444.938:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 281.751822][ T26] audit: type=1326 audit(1741907444.938:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 281.905498][ T26] audit: type=1326 audit(1741907444.948:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 281.950410][ T26] audit: type=1326 audit(1741907444.948:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 282.013064][ T26] audit: type=1326 audit(1741907444.958:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 282.036632][ T26] audit: type=1326 audit(1741907444.958:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 282.067566][ T26] audit: type=1326 audit(1741907444.958:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 282.175034][ T5724] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 282.195894][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 282.442391][ T26] audit: type=1326 audit(1741907444.958:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 282.468948][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 282.510466][ T7] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 283.061900][ T5730] loop0: detected capacity change from 0 to 256 [ 283.566949][ T5740] tipc: Started in network mode [ 283.572021][ T5740] tipc: Node identity 7, cluster identity 4711 [ 283.578253][ T5740] tipc: Node number set to 7 [ 283.586226][ T5740] tipc: Cannot configure node identity twice [ 283.978988][ T4209] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 284.168089][ T5738] loop5: detected capacity change from 0 to 2048 [ 284.268956][ T4209] usb 4-1: device descriptor read/64, error -71 [ 284.283298][ T5738] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 284.608838][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 284.628160][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 284.642213][ T7] usb 3-1: Product: syz [ 284.646492][ T7] usb 3-1: Manufacturer: syz [ 284.654046][ T7] usb 3-1: SerialNumber: syz [ 284.688296][ T7] usb 3-1: config 0 descriptor?? [ 284.730402][ T7] usb 3-1: can't set config #0, error -71 [ 284.767711][ T7] usb 3-1: USB disconnect, device number 3 [ 285.098634][ T4209] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 285.452460][ T5757] loop5: detected capacity change from 0 to 128 [ 285.660834][ T5757] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.860891][ T4209] usb 4-1: device descriptor read/64, error -71 [ 285.869685][ T5757] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.107955][ T4209] usb usb4-port1: attempt power cycle [ 286.549715][ T5771] syz.5.375 (pid 5771) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 287.438239][ T4209] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 287.579810][ T4209] usb 4-1: device descriptor read/8, error -71 [ 288.018479][ T4209] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 288.078964][ T5775] vivid-000: disconnect [ 288.196083][ T5774] vivid-000: reconnect [ 288.227454][ T4209] usb 4-1: device descriptor read/8, error -71 [ 288.598389][ T4209] usb usb4-port1: unable to enumerate USB device [ 288.768778][ T5788] loop0: detected capacity change from 0 to 2048 [ 290.365373][ T5788] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 291.170976][ T5795] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.429079][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 291.429214][ T26] audit: type=1326 audit(1741907455.608:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 291.988872][ T5815] loop3: detected capacity change from 0 to 128 [ 292.007292][ T26] audit: type=1326 audit(1741907455.608:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 292.316219][ T26] audit: type=1326 audit(1741907455.608:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 292.412827][ T5826] vivid-000: disconnect [ 292.444574][ T5815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.830511][ T26] audit: type=1326 audit(1741907455.608:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 292.947777][ T5818] vivid-000: reconnect [ 292.961036][ T5815] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.138598][ T26] audit: type=1326 audit(1741907455.618:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 294.721551][ T5837] binder: 5834:5837 ioctl 4018620d 0 returned -22 [ 294.998600][ T26] audit: type=1326 audit(1741907455.618:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 295.347270][ T26] audit: type=1326 audit(1741907455.628:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 295.381129][ T26] audit: type=1326 audit(1741907455.628:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 296.111415][ T5857] loop0: detected capacity change from 0 to 2048 [ 296.148720][ T26] audit: type=1326 audit(1741907455.628:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 297.014963][ T5859] netlink: 224 bytes leftover after parsing attributes in process `syz.4.404'. [ 297.024251][ T5859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 297.043751][ T26] audit: type=1326 audit(1741907455.628:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 297.165100][ T26] audit: type=1326 audit(1741907455.628:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 297.306549][ T5857] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 297.393677][ T26] audit: type=1326 audit(1741907455.628:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 297.721179][ T5874] vivid-000: disconnect [ 298.122319][ T26] audit: type=1326 audit(1741907455.638:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 298.148590][ T5869] vivid-000: reconnect [ 298.414763][ T5880] loop4: detected capacity change from 0 to 128 [ 298.571002][ T26] audit: type=1326 audit(1741907455.638:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 298.600295][ T26] audit: type=1326 audit(1741907455.638:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 299.535602][ T26] audit: type=1326 audit(1741907455.638:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082bb5f169 code=0x7ffc0000 [ 299.584681][ T5880] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.637387][ T5880] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.958744][ T4991] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 300.229859][ T4991] usb 3-1: Using ep0 maxpacket: 32 [ 300.359533][ T4991] usb 3-1: config 0 has an invalid interface number: 218 but max is 0 [ 300.385281][ T4991] usb 3-1: config 0 has no interface number 0 [ 300.808880][ T4991] usb 3-1: New USB device found, idVendor=07ca, idProduct=0335, bcdDevice=ae.e7 [ 300.818105][ T4991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.838838][ T4991] usb 3-1: Product: syz [ 300.844238][ T4991] usb 3-1: Manufacturer: syz [ 300.851294][ T4991] usb 3-1: SerialNumber: syz [ 300.895731][ T4991] usb 3-1: config 0 descriptor?? [ 302.144870][ T5902] loop5: detected capacity change from 0 to 40427 [ 302.463835][ T5902] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 302.471656][ T5902] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 302.789633][ T4991] usb 3-1: USB disconnect, device number 4 [ 302.800356][ T5902] F2FS-fs (loop5): invalid crc value [ 302.890222][ T5902] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 302.907316][ T5902] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 302.990376][ T5902] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 302.997965][ T5902] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 304.304922][ T5921] vivid-000: disconnect [ 304.548867][ T5920] loop2: detected capacity change from 0 to 2048 [ 304.793420][ T5914] vivid-000: reconnect [ 305.186049][ T5920] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 308.329120][ T5960] loop5: detected capacity change from 0 to 40427 [ 308.394375][ T5960] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 308.402686][ T5960] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 308.416007][ T5960] F2FS-fs (loop5): invalid crc value [ 308.483711][ T5960] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 308.509705][ T5960] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 308.575139][ T5960] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 308.583236][ T5960] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 308.827332][ T5971] loop4: detected capacity change from 0 to 128 [ 309.629627][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 309.653661][ T5971] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.492940][ T5984] loop3: detected capacity change from 0 to 2048 [ 311.589355][ T5984] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 316.871555][ T6048] loop2: detected capacity change from 0 to 2048 [ 318.983881][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 319.172610][ T6058] befs: (nullb0): No write support. Marking filesystem read-only [ 319.188848][ T6058] befs: (nullb0): invalid magic header [ 319.831150][ T6071] netlink: 'syz.3.458': attribute type 39 has an invalid length. [ 320.979803][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 323.262468][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.270388][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.385192][ T6104] vivid-000: disconnect [ 323.512907][ T6096] vivid-000: reconnect [ 324.088931][ T6110] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 324.926139][ T6119] vivid-000: disconnect [ 325.484398][ T6113] vivid-000: reconnect [ 325.648670][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 325.704290][ T6118] loop3: detected capacity change from 0 to 2048 [ 326.182077][ T6118] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 327.143356][ T6137] Cannot find del_set index 0 as target [ 329.557593][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.602092][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.642955][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.733617][ T6169] loop0: detected capacity change from 0 to 256 [ 330.866213][ T6171] loop3: detected capacity change from 0 to 2048 [ 330.980035][ T6171] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 331.233705][ T4245] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 331.858866][ T4245] usb 6-1: config 0 has an invalid interface number: 55 but max is 8 [ 331.873946][ T4245] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.913574][ T4245] usb 6-1: config 0 has no interface number 0 [ 331.943288][ T4245] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 331.985982][ T4245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.136484][ T4245] usb 6-1: config 0 descriptor?? [ 332.938458][ T4245] cp210x 6-1:0.55: cp210x converter detected [ 333.188820][ T4245] cp210x 6-1:0.55: failed to get vendor val 0x000e size 3: -71 [ 333.220299][ T6205] befs: (nullb0): No write support. Marking filesystem read-only [ 333.489562][ T4245] usb 6-1: cp210x converter now attached to ttyUSB0 [ 333.504305][ T6205] befs: (nullb0): invalid magic header [ 333.522671][ T4245] usb 6-1: USB disconnect, device number 5 [ 333.538665][ T4245] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.547232][ T4245] cp210x 6-1:0.55: device disconnected [ 334.225074][ T6217] vivid-000: disconnect [ 334.768652][ T6210] vivid-000: reconnect [ 334.877528][ T6213] xt_CT: No such helper "pptp" [ 335.943936][ T6225] loop2: detected capacity change from 0 to 2048 [ 336.156481][ T6225] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 336.695667][ T6232] loop5: detected capacity change from 0 to 256 [ 337.378183][ T6238] kvm: pic: non byte write [ 338.409530][ T6248] mmap: syz.4.506 (6248) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 340.833374][ T6262] ISOFS: Unable to identify CD-ROM format. [ 340.869281][ T6269] loop3: detected capacity change from 0 to 2048 [ 341.001865][ T6269] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 341.142002][ T4175] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 341.152262][ T4175] CPU: 0 PID: 4175 Comm: kworker/u5:3 Not tainted 5.15.179-syzkaller #0 [ 341.160610][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.170684][ T4175] Workqueue: hci2 hci_rx_work [ 341.175419][ T4175] Call Trace: [ 341.178706][ T4175] [ 341.181644][ T4175] dump_stack_lvl+0x1e3/0x2d0 [ 341.186346][ T4175] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 341.191994][ T4175] ? panic+0x860/0x860 [ 341.196089][ T4175] ? sysfs_create_dir_ns+0x282/0x390 [ 341.201406][ T4175] sysfs_create_dir_ns+0x2c6/0x390 [ 341.206542][ T4175] ? sysfs_warn_dup+0xa0/0xa0 [ 341.211240][ T4175] ? do_raw_spin_unlock+0x137/0x8b0 [ 341.216468][ T4175] kobject_add_internal+0x6e0/0xe00 [ 341.221699][ T4175] kobject_add+0x14e/0x210 [ 341.226142][ T4175] ? device_add+0x3c2/0xfd0 [ 341.230675][ T4175] ? kobject_init+0x1d0/0x1d0 [ 341.235413][ T4175] ? __raw_spin_lock_init+0x41/0x100 [ 341.240733][ T4175] ? get_device_parent+0x128/0x400 [ 341.245878][ T4175] device_add+0x476/0xfd0 [ 341.250253][ T4175] hci_conn_add_sysfs+0xe4/0x1f0 [ 341.255212][ T4175] le_conn_complete_evt+0xc15/0x1500 [ 341.260515][ T4175] ? cs_le_create_conn+0x5f0/0x5f0 [ 341.265642][ T4175] hci_le_meta_evt+0xd86/0x3f50 [ 341.270500][ T4175] ? __lock_acquire+0x1ff0/0x1ff0 [ 341.275528][ T4175] ? __mutex_lock_common+0x444/0x25a0 [ 341.280907][ T4175] ? hci_remote_host_features_evt+0x280/0x280 [ 341.287147][ T4175] ? __mutex_unlock_slowpath+0x218/0x750 [ 341.292781][ T4175] ? hci_event_packet+0x3b4/0x1550 [ 341.297897][ T4175] ? mutex_unlock+0x10/0x10 [ 341.302410][ T4175] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 341.308390][ T4175] ? print_irqtrace_events+0x210/0x210 [ 341.313847][ T4175] hci_event_packet+0xc41/0x1550 [ 341.318792][ T4175] ? rcu_lock_release+0x20/0x20 [ 341.323653][ T4175] ? hci_send_to_monitor+0x99/0x4d0 [ 341.328849][ T4175] hci_rx_work+0x237/0xa10 [ 341.333273][ T4175] process_one_work+0x8a1/0x10c0 [ 341.338221][ T4175] ? worker_detach_from_pool+0x260/0x260 [ 341.343854][ T4175] ? _raw_spin_lock_irqsave+0x120/0x120 [ 341.349394][ T4175] ? kthread_data+0x4e/0xc0 [ 341.353897][ T4175] ? wq_worker_running+0x97/0x170 [ 341.358919][ T4175] worker_thread+0xaca/0x1280 [ 341.363625][ T4175] kthread+0x3f6/0x4f0 [ 341.367701][ T4175] ? rcu_lock_release+0x20/0x20 [ 341.372556][ T4175] ? kthread_blkcg+0xd0/0xd0 [ 341.377153][ T4175] ret_from_fork+0x1f/0x30 [ 341.381588][ T4175] [ 341.405521][ T4175] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 341.418868][ T4175] Bluetooth: hci2: failed to register connection device [ 341.736648][ T6285] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 342.869017][ T6294] vivid-000: disconnect [ 343.911694][ T6287] vivid-000: reconnect [ 347.158712][ T4244] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 347.713125][ T6340] vivid-000: disconnect [ 348.250236][ T6333] vivid-000: reconnect [ 348.478614][ T4244] usb 4-1: Using ep0 maxpacket: 16 [ 348.502533][ T6345] loop0: detected capacity change from 0 to 2048 [ 348.730346][ T6315] udc-core: couldn't find an available UDC or it's busy [ 348.737308][ T6315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 349.001275][ T4244] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.225211][ T4244] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 349.271765][ T6344] kvm [6341]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 349.281642][ T6345] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 349.443864][ T4244] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 349.458623][ T4244] usb 4-1: can't read configurations, error -71 [ 350.418874][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 350.788731][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 350.909190][ T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 350.939608][ T7] usb 6-1: config 179 has no interface number 0 [ 350.967055][ T6377] input: syz1 as /devices/virtual/input/input6 [ 350.975650][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 351.046330][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 351.100271][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.152948][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 351.198749][ T7] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 351.256170][ T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 351.303321][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.459239][ T6363] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 352.082536][ T6388] loop4: detected capacity change from 0 to 256 [ 352.099786][ T13] usb 6-1: USB disconnect, device number 6 [ 352.108629][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 352.117481][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.793333][ T6394] loop5: detected capacity change from 0 to 2048 [ 352.999742][ T6394] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 357.184767][ T6445] loop0: detected capacity change from 0 to 2048 [ 357.224280][ T6449] device geneve2 entered promiscuous mode [ 357.806242][ T6445] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 358.188757][ T13] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 358.365015][ T6463] binder: 6462:6463 ioctl 8138ae83 7f736f2aeaa0 returned -22 [ 358.393536][ T6463] binder: 6462:6463 ioctl c00c6211 400000000200 returned -22 [ 359.168854][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.078700][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 360.219257][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 360.237151][ T13] usb 3-1: can't read configurations, error -71 [ 360.273683][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 360.351333][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.451470][ T6483] device bridge_slave_1 left promiscuous mode [ 360.483592][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.362507][ T6503] loop2: detected capacity change from 0 to 2048 [ 362.680807][ T6511] ip6t_rpfilter: unknown options [ 362.689103][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 366.259384][ T4672] Bluetooth: hci5: command 0x0406 tx timeout [ 367.896981][ T6555] loop2: detected capacity change from 0 to 2048 [ 368.216583][ T6562] loop5: detected capacity change from 0 to 256 [ 368.334903][ T6555] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 371.869738][ T26] audit: type=1326 audit(1741907536.068:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 372.182836][ T26] audit: type=1326 audit(1741907536.068:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 372.725190][ T26] audit: type=1326 audit(1741907536.078:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 372.750644][ T26] audit: type=1326 audit(1741907536.078:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 372.773579][ T26] audit: type=1326 audit(1741907536.098:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 372.811008][ T26] audit: type=1326 audit(1741907536.098:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 373.055272][ T26] audit: type=1326 audit(1741907536.108:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 373.096267][ T26] audit: type=1326 audit(1741907536.108:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 373.181139][ T6609] befs: (nullb0): No write support. Marking filesystem read-only [ 373.217246][ T6609] befs: (nullb0): invalid magic header [ 373.226057][ T26] audit: type=1326 audit(1741907536.118:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 373.344995][ T26] audit: type=1326 audit(1741907536.118:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8de895a169 code=0x7ffc0000 [ 375.299676][ T6613] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 375.506350][ T6633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.298697][ T4210] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 377.474647][ T6660] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 378.158015][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 378.398641][ T4210] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 378.406772][ T4210] usb 4-1: config 0 has no interface number 0 [ 378.601454][ T4210] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 378.619957][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.644028][ T4210] usb 4-1: Product: syz [ 378.700470][ T4210] usb 4-1: Manufacturer: syz [ 378.717163][ T4210] usb 4-1: SerialNumber: syz [ 378.854709][ T6672] Cannot find del_set index 0 as target [ 380.282300][ T4210] usb 4-1: config 0 descriptor?? [ 380.308799][ T4210] usb 4-1: can't set config #0, error -71 [ 380.317221][ T4210] usb 4-1: USB disconnect, device number 8 [ 381.731526][ T6698] tipc: Enabling of bearer rejected, already enabled [ 383.794987][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 384.150965][ T6726] binder: Bad value for 'max' [ 384.649864][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.661641][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.875497][ T6731] batman_adv: batadv0: Adding interface: dummy0 [ 384.907316][ T6731] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.607018][ T6731] batman_adv: batadv0: Interface activated: dummy0 [ 385.972647][ T6739] tipc: Started in network mode [ 385.977717][ T6739] tipc: Node identity 7f000001, cluster identity 4711 [ 385.987311][ T6739] tipc: Enabled bearer , priority 10 [ 387.094698][ T4617] tipc: Node number set to 2130706433 [ 388.148974][ T6758] netlink: 56 bytes leftover after parsing attributes in process `syz.3.660'. [ 388.194653][ T6769] loop0: detected capacity change from 0 to 256 [ 388.459576][ T6776] befs: (nullb0): No write support. Marking filesystem read-only [ 390.351740][ T6776] befs: (nullb0): invalid magic header [ 391.657339][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 391.668964][ T26] audit: type=1326 audit(1741907555.838:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 391.691192][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.399665][ T26] audit: type=1326 audit(1741907555.838:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.425776][ T26] audit: type=1326 audit(1741907555.848:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.450692][ T26] audit: type=1326 audit(1741907555.848:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.474708][ T26] audit: type=1326 audit(1741907555.868:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.513194][ T26] audit: type=1326 audit(1741907555.878:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.603257][ T26] audit: type=1326 audit(1741907555.888:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.645629][ T26] audit: type=1326 audit(1741907555.888:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.751895][ T26] audit: type=1326 audit(1741907555.888:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.784754][ T26] audit: type=1326 audit(1741907555.888:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7371447169 code=0x7ffc0000 [ 392.806944][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.888215][ T6806] vivid-000: disconnect [ 393.016826][ T4672] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 393.406909][ T6796] vivid-000: reconnect [ 395.785364][ T4672] usb 1-1: Using ep0 maxpacket: 16 [ 395.948810][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 396.341922][ T6825] loop5: detected capacity change from 0 to 2048 [ 396.386398][ T4672] usb 1-1: device descriptor read/all, error -71 [ 396.458147][ T6825] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 396.639235][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.768580][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.258606][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 397.258765][ T26] audit: type=1326 audit(1741907561.228:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 397.324864][ T21] usb 4-1: Product: syz [ 398.028013][ T21] usb 4-1: Manufacturer: syz [ 398.116443][ T26] audit: type=1326 audit(1741907561.248:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.138944][ T21] usb 4-1: SerialNumber: syz [ 398.147135][ T26] audit: type=1326 audit(1741907561.248:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.178936][ T21] usb 4-1: can't set config #1, error -71 [ 398.196962][ T21] usb 4-1: USB disconnect, device number 9 [ 398.582353][ T26] audit: type=1326 audit(1741907561.248:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.605448][ T26] audit: type=1326 audit(1741907561.258:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.634638][ T26] audit: type=1326 audit(1741907561.258:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.707518][ T26] audit: type=1326 audit(1741907561.258:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.777393][ T26] audit: type=1326 audit(1741907561.258:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.872882][ T26] audit: type=1326 audit(1741907561.258:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 398.962693][ T26] audit: type=1326 audit(1741907561.258:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7193c01169 code=0x7ffc0000 [ 399.316370][ T6858] tipc: Enabling of bearer rejected, already enabled [ 399.669310][ T6857] xt_CT: No such helper "pptp" [ 399.927900][ T6867] vivid-000: disconnect [ 400.173224][ T6869] trusted_key: encrypted_key: key user:syz not found [ 400.362384][ T6862] vivid-000: reconnect [ 403.847949][ T6906] vivid-000: disconnect [ 403.853727][ T6905] vivid-000: reconnect [ 404.299697][ T6916] trusted_key: encrypted_key: key user:syz not found [ 405.965506][ T6925] tipc: Enabling of bearer rejected, already enabled [ 407.085066][ T6936] binder: 6932:6936 ioctl 4018620d 0 returned -22 [ 407.870411][ T6947] vivid-000: disconnect [ 407.879045][ T6946] vivid-000: reconnect [ 408.068624][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 408.196557][ T6955] Device name cannot be null; rc = [-22] [ 408.649569][ T13] usb 3-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 408.928838][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.963050][ T13] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 409.008606][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.071751][ T13] usb 3-1: config 0 descriptor?? [ 409.795690][ T6949] ubi31: attaching mtd0 [ 409.803064][ T6949] ubi31: scanning is finished [ 409.807819][ T6949] ubi31: empty MTD device detected [ 409.848220][ T6949] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 409.855961][ T6949] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 409.863410][ T6949] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 409.870483][ T6949] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 409.877964][ T6949] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 409.884863][ T6949] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 409.893023][ T6949] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3430045698 [ 409.903417][ T6949] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 409.917941][ T6971] ubi31: background thread "ubi_bgt31d" started, PID 6971 [ 409.968640][ T13] usb 3-1: string descriptor 0 read error: -71 [ 410.001755][ T13] usb 3-1: USB disconnect, device number 7 [ 410.432209][ T6977] loop5: detected capacity change from 0 to 256 [ 411.931128][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 411.931148][ T26] audit: type=1804 audit(1741907575.268:380): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.724" name="/newroot/157/file1/file0" dev="loop5" ino=1048718 res=1 errno=0 [ 411.959273][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.921318][ T6991] Device name cannot be null; rc = [-22] [ 414.194004][ T140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.250400][ T7002] loop3: detected capacity change from 0 to 256 [ 414.922259][ T140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.231975][ T26] audit: type=1804 audit(1741907579.488:381): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.737" name="/newroot/80/file1/file0" dev="loop3" ino=1048727 res=1 errno=0 [ 417.148912][ T7028] vivid-000: disconnect [ 417.660155][ T140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.061905][ T7028] vivid-000: reconnect [ 418.287566][ T140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.233938][ T7049] netlink: 'syz.3.747': attribute type 8 has an invalid length. [ 419.784071][ T4245] Bluetooth: hci1: command 0x0409 tx timeout [ 421.215858][ T7060] tipc: Enabled bearer , priority 10 [ 421.333130][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 421.848647][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 422.254429][ T7077] loop4: detected capacity change from 0 to 256 [ 422.660614][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.667718][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.720005][ T7031] device bridge_slave_0 entered promiscuous mode [ 422.931534][ T140] tipc: Disabling bearer [ 422.937118][ T140] tipc: Left network mode [ 422.937419][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.017732][ T7082] vivid-000: disconnect [ 423.112595][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.134438][ T7031] device bridge_slave_1 entered promiscuous mode [ 423.490856][ T7082] vivid-000: reconnect [ 423.876985][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.918754][ T4211] Bluetooth: hci1: command 0x040f tx timeout [ 424.159315][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.413919][ T7031] team0: Port device team_slave_0 added [ 424.491098][ T7031] team0: Port device team_slave_1 added [ 425.336563][ T26] audit: type=1804 audit(1741907589.588:382): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.753" name="/newroot/101/file1/file0" dev="loop4" ino=1048729 res=1 errno=0 [ 425.998590][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 426.039424][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.056681][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.144440][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.239242][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.252180][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.379518][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.955001][ T7115] tipc: Started in network mode [ 426.960056][ T7115] tipc: Node identity 7f000001, cluster identity 4711 [ 426.967463][ T7115] tipc: Enabled bearer , priority 10 [ 427.025986][ T7031] device hsr_slave_0 entered promiscuous mode [ 427.035718][ T7031] device hsr_slave_1 entered promiscuous mode [ 428.252051][ T4209] tipc: Node number set to 2130706433 [ 429.108809][ T4209] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 429.557748][ T140] device hsr_slave_0 left promiscuous mode [ 429.568775][ T4209] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 429.578110][ T140] device hsr_slave_1 left promiscuous mode [ 429.585169][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.625323][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.651224][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.667149][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.682439][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.703954][ T140] device bridge_slave_1 left promiscuous mode [ 429.714340][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.786893][ T4209] usb 1-1: config 0 descriptor?? [ 429.803855][ T140] device bridge_slave_0 left promiscuous mode [ 429.817833][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.037912][ T4209] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 430.364464][ T140] device veth1_macvtap left promiscuous mode [ 430.390494][ T140] device veth0_macvtap left promiscuous mode [ 430.404403][ T140] device veth1_vlan left promiscuous mode [ 430.415103][ T140] device veth0_vlan left promiscuous mode [ 431.245407][ T7153] loop2: detected capacity change from 0 to 40427 [ 431.310529][ T7153] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 431.318439][ T7153] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 431.330046][ T7153] F2FS-fs (loop2): invalid crc value [ 431.387389][ T7153] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 431.404487][ T7153] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 431.470909][ T7153] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 431.478083][ T7153] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 431.547332][ T140] team0 (unregistering): Port device team_slave_1 removed [ 431.622906][ T140] team0 (unregistering): Port device team_slave_0 removed [ 431.655533][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.682006][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.873696][ T140] bond0 (unregistering): Released all slaves [ 431.948725][ T7161] tipc: Enabling of bearer rejected, already enabled [ 432.098839][ T4209] gspca_stv06xx: HDCS-1020 sensor detected [ 432.180038][ T7031] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 432.210226][ T7031] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 432.230839][ T7031] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 432.261223][ T7031] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 432.445835][ T4209] STV06xx: probe of 1-1:0.0 failed with error -71 [ 432.467853][ T4209] usb 1-1: USB disconnect, device number 6 [ 432.504757][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.550782][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.607778][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.640224][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.719576][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.729648][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.777160][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.784317][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.863706][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.872628][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.881306][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.888390][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.900319][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 432.910838][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.924886][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.876664][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.955910][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.075262][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.509427][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.564865][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.822051][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.784369][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.113689][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.159504][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.175199][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.419237][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.437338][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.464771][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.588609][ T4245] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 438.990266][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.019787][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.050042][ T7216] loop3: detected capacity change from 0 to 40427 [ 439.095075][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.111228][ T7216] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 439.119062][ T7216] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 439.146805][ T7216] F2FS-fs (loop3): invalid crc value [ 439.186419][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.219855][ T7216] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 439.235278][ T7216] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 439.290713][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.290992][ T7216] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 439.299277][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.305146][ T7216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 439.338509][ T4245] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 439.366423][ T7031] device veth0_vlan entered promiscuous mode [ 439.431769][ T4245] usb 1-1: can't read configurations, error -71 [ 440.112609][ T7031] device veth1_vlan entered promiscuous mode [ 440.240607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 440.249914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 440.509407][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.786836][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.081023][ T7031] device veth0_macvtap entered promiscuous mode [ 441.291218][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 441.311646][ T7031] device veth1_macvtap entered promiscuous mode [ 441.447450][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.478539][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.514667][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.566328][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.615157][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.683109][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.981122][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.992230][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.004077][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.220068][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.236543][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.609461][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.781021][ T4209] Bluetooth: hci4: command 0xfc11 tx timeout [ 442.845728][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.907469][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.022567][ T4179] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 443.188541][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.230583][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.535302][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.731166][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.956930][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.081345][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.129885][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.178921][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.201452][ T7031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.211099][ T7031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.258640][ T7031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.319984][ T7031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.568869][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 444.959662][ T1108] usb 3-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 445.088253][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.348595][ T1108] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 445.402870][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.452399][ T1108] usb 3-1: config 0 descriptor?? [ 445.497690][ T7274] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 445.507111][ T5001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.536584][ T5001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.084423][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.091594][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.188731][ T1108] usb 3-1: string descriptor 0 read error: -71 [ 446.279528][ T1108] usb 3-1: USB disconnect, device number 8 [ 446.364011][ T7274] team0: Port device wlan1 added [ 446.396266][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.439521][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.461551][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.489521][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.564696][ T4574] Bluetooth: hci1: command 0x0405 tx timeout [ 450.038695][ T7311] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 451.468940][ T4209] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 452.083675][ T4209] usb 9-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 452.102243][ T4209] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.290697][ T4209] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 452.301047][ T4209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.314226][ T4209] usb 9-1: config 0 descriptor?? [ 453.118994][ T4209] usb 9-1: string descriptor 0 read error: -71 [ 453.138680][ T4209] usb 9-1: USB disconnect, device number 2 [ 455.051886][ T7356] tipc: Enabling of bearer rejected, already enabled [ 464.785979][ T4209] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 466.217780][ T4209] usb 1-1: config 7 has an invalid interface number: 109 but max is 0 [ 466.244566][ T4209] usb 1-1: config 7 has no interface number 0 [ 466.283223][ T4209] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 466.336686][ T4209] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 466.394636][ T4209] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 466.447282][ T4209] usb 1-1: config 7 interface 109 altsetting 4 has an invalid endpoint with address 0xAF, skipping [ 466.497636][ T4209] usb 1-1: config 7 interface 109 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 466.560031][ T4209] usb 1-1: config 7 interface 109 has no altsetting 0 [ 466.849339][ T4209] usb 1-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 466.896056][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.896445][ T4209] usb 1-1: Product: syz [ 466.896659][ T4209] usb 1-1: Manufacturer: syz [ 466.896931][ T4209] usb 1-1: SerialNumber: syz [ 466.948995][ T7430] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 467.226994][ T4209] usbhid 1-1:7.109: couldn't find an input interrupt endpoint [ 467.318594][ T4209] usb 1-1: USB disconnect, device number 9 [ 469.253495][ T7464] tipc: Enabling of bearer rejected, already enabled [ 469.260637][ T7468] dccp_close: ABORT with 31 bytes unread [ 470.249526][ T7477] loop0: detected capacity change from 0 to 128 [ 471.019735][ T7477] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.058829][ T7477] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.231891][ T7500] tipc: Enabling of bearer rejected, already enabled [ 472.518717][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 472.630556][ T4209] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 472.808874][ T7515] dccp_close: ABORT with 31 bytes unread [ 473.678590][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 473.838684][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 473.857742][ T7] usb 1-1: config 0 has no interface number 0 [ 474.014348][ T4209] usb 4-1: unable to get BOS descriptor or descriptor too short [ 474.068909][ T4209] usb 4-1: not running at top speed; connect to a high speed hub [ 474.089062][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 474.588598][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.602720][ T4209] usb 4-1: config 1 has an invalid interface number: 33 but max is 0 [ 474.611198][ T7] usb 1-1: Product: syz [ 474.619484][ T7] usb 1-1: Manufacturer: syz [ 474.628580][ T7] usb 1-1: SerialNumber: syz [ 474.654970][ T7] usb 1-1: config 0 descriptor?? [ 474.756129][ T4209] usb 4-1: config 1 has no interface number 0 [ 474.762888][ T4209] usb 4-1: config 1 interface 33 has no altsetting 0 [ 475.269587][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 475.318612][ T7] usb 1-1: qt2_attach - failed to power on unit: -71 [ 475.336418][ T7] quatech2: probe of 1-1:0.51 failed with error -71 [ 475.396081][ T7533] loop2: detected capacity change from 0 to 128 [ 475.418669][ T4209] usb 4-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 475.436868][ T7] usb 1-1: USB disconnect, device number 10 [ 475.458537][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.466588][ T4209] usb 4-1: Product: syz [ 475.723655][ T7541] binder: 7535:7541 ioctl c0046209 400000000080 returned -22 [ 476.497275][ T4209] usb 4-1: can't set config #1, error -71 [ 476.542315][ T4209] usb 4-1: USB disconnect, device number 10 [ 477.478694][ T7533] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 477.529107][ T7533] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.032342][ T7549] tipc: Started in network mode [ 478.037280][ T7549] tipc: Node identity 7f000001, cluster identity 4711 [ 478.044856][ T7549] tipc: Enabled bearer , priority 10 [ 479.023600][ T7563] loop0: detected capacity change from 0 to 256 [ 479.427781][ T4672] tipc: Node number set to 2130706433 [ 481.477980][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.887'. [ 481.629784][ T4617] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 481.899221][ T4617] usb 4-1: device descriptor read/64, error -71 [ 482.853507][ T7591] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 482.870671][ T7592] loop4: detected capacity change from 0 to 128 [ 482.986706][ T7592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 483.829491][ T7592] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.291864][ T7612] tipc: Enabling of bearer rejected, already enabled [ 487.132081][ T4617] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 487.144099][ T7633] loop4: detected capacity change from 0 to 256 [ 487.371570][ T4617] usb 4-1: device descriptor read/64, error -71 [ 487.448745][ T7] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 488.120455][ T4617] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 488.168646][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 488.436512][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.449712][ T4617] usb 4-1: device descriptor read/64, error -71 [ 488.456521][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.467247][ T7] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.483487][ T7] usb 9-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 488.492963][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.614285][ T4617] usb usb4-port1: attempt power cycle [ 488.756978][ T7] usb 9-1: config 0 descriptor?? [ 489.318641][ T4617] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 489.767604][ T7654] loop2: detected capacity change from 0 to 128 [ 489.865826][ T7] usbhid 9-1:0.0: can't add hid device: -71 [ 490.018586][ T7] usbhid: probe of 9-1:0.0 failed with error -71 [ 490.039668][ T7654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 490.071244][ T7654] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.075037][ T7] usb 9-1: USB disconnect, device number 3 [ 493.042461][ T7687] loop8: detected capacity change from 0 to 256 [ 493.255855][ T7688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.368709][ T4617] usb 4-1: device descriptor read/8, error -71 [ 494.186783][ T7688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.238897][ T7699] netlink: 80 bytes leftover after parsing attributes in process `syz.2.922'. [ 494.345036][ T7688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.367982][ T7705] loop2: detected capacity change from 0 to 128 [ 494.508783][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 494.521696][ T7705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.539358][ T7705] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.187635][ T4617] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 495.215321][ T7688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.514359][ T4617] usb 4-1: Using ep0 maxpacket: 16 [ 496.587792][ T7688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.604111][ T7688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.640934][ T7688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.664565][ T7688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.679117][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 496.698905][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.718887][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 496.779118][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 496.986533][ T7718] input: syz0 as /devices/virtual/input/input8 [ 496.996774][ T4672] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 498.698744][ T4617] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 498.708171][ T4617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.719078][ T4617] usb 4-1: Product: syz [ 498.723270][ T4617] usb 4-1: Manufacturer: syz [ 498.727888][ T4617] usb 4-1: SerialNumber: syz [ 498.748426][ T4617] usb 4-1: config 0 descriptor?? [ 498.748863][ T4672] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.758633][ T7] usb 5-1: string descriptor 0 read error: -71 [ 498.797098][ T4617] usb 4-1: can't set config #0, error -71 [ 498.804140][ T4672] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 498.804279][ T4672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.317653][ T4672] usb 9-1: config 0 descriptor?? [ 499.398837][ T4672] option 9-1:0.0: GSM modem (1-port) converter detected [ 499.418083][ T4672] usb 9-1: USB disconnect, device number 4 [ 499.418670][ T7] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 499.433984][ T4672] option 9-1:0.0: device disconnected [ 499.910986][ T7733] loop8: detected capacity change from 0 to 256 [ 499.969054][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.983771][ T4617] usb 4-1: USB disconnect, device number 16 [ 501.091362][ T7] usb 5-1: config 0 descriptor?? [ 501.129681][ T7] usb 5-1: can't set config #0, error -71 [ 501.178196][ T7] usb 5-1: USB disconnect, device number 2 [ 503.004987][ T4617] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 503.038110][ T7750] loop0: detected capacity change from 0 to 128 [ 504.623718][ T7750] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 504.670959][ T7750] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.584770][ T7784] binder: 7783:7784 ioctl c0306201 0 returned -14 [ 507.418814][ T21] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 507.537453][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.546810][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.648779][ T21] usb 5-1: device descriptor read/64, error -71 [ 508.108251][ T7796] loop2: detected capacity change from 0 to 256 [ 508.159202][ T21] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 508.399201][ T21] usb 5-1: device descriptor read/64, error -71 [ 508.640993][ T21] usb usb5-port1: attempt power cycle [ 514.310428][ T7852] netlink: 'syz.8.969': attribute type 10 has an invalid length. [ 514.344928][ T7852] team0: Port device wlan1 added [ 514.376628][ T7854] vivid-000: disconnect [ 514.870819][ T7845] vivid-000: reconnect [ 516.847675][ T4210] Bluetooth: hci4: command 0x0409 tx timeout [ 516.927404][ T7858] chnl_net:caif_netlink_parms(): no params data found [ 518.899657][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.947734][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.020121][ T7858] device bridge_slave_0 entered promiscuous mode [ 519.059916][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.088783][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.097117][ T7858] device bridge_slave_1 entered promiscuous mode [ 519.118598][ T4617] Bluetooth: hci4: command 0x041b tx timeout [ 519.232802][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.276922][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.407912][ T7905] loop2: detected capacity change from 0 to 256 [ 519.512778][ T7858] team0: Port device team_slave_0 added [ 519.561638][ T7858] team0: Port device team_slave_1 added [ 519.666522][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.684473][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.764428][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.804847][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.826129][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.910162][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.068551][ T7858] device hsr_slave_0 entered promiscuous mode [ 520.089662][ T7858] device hsr_slave_1 entered promiscuous mode [ 520.110722][ T7858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.144779][ T7858] Cannot create hsr debugfs directory [ 521.198586][ T4617] Bluetooth: hci4: command 0x040f tx timeout [ 523.108709][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 523.222305][ T7941] binder: 7940:7941 ioctl c0306201 400000000100 returned -14 [ 523.224665][ T7858] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 523.249229][ T7858] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 523.278882][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 523.289349][ T7858] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 523.306557][ T7858] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 523.399422][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 523.534290][ T7946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.997'. [ 523.554308][ T21] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 523.588511][ T21] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 523.603269][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.631135][ T21] usb 3-1: config 0 has no interface number 0 [ 523.637271][ T21] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.669541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.684990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.706716][ T7858] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.852070][ T21] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 523.856888][ T1235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.876249][ T21] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 523.898653][ T21] usb 3-1: Product: syz [ 523.903275][ T21] usb 3-1: SerialNumber: syz [ 523.960420][ T21] usb 3-1: config 0 descriptor?? [ 523.989114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.001421][ T21] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 524.101202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.366207][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.373373][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.431485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.470786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.513491][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.520633][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.615609][ T1235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.753312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.778085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.882054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.903580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.925779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.108851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 525.135217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.183109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.354709][ T1235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.450277][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.467757][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.502350][ T7858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.547410][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.659824][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.684011][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.733549][ T1235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.045397][ T4210] usb 3-1: USB disconnect, device number 9 [ 526.193178][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.202022][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.727286][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.895619][ T1235] tipc: Disabling bearer [ 526.901717][ T1235] tipc: Left network mode [ 527.182361][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 527.195099][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.301502][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 527.316968][ T7992] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 527.324657][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.335845][ T7992] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 527.349203][ T7858] device veth0_vlan entered promiscuous mode [ 527.356749][ T7997] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1007'. [ 527.377220][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.397601][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.462876][ T7858] device veth1_vlan entered promiscuous mode [ 527.784379][ T7858] device veth0_macvtap entered promiscuous mode [ 527.808758][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.827258][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.865783][ T7858] device veth1_macvtap entered promiscuous mode [ 527.885723][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 527.902355][ T8004] vivid-000: disconnect [ 527.908355][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.956733][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.999748][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.035475][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.063859][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.103703][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.137790][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.168262][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.209212][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.243709][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.277608][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.311172][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.354356][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.406364][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.427070][ T8000] vivid-000: reconnect [ 528.441467][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.452258][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.469711][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.496225][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.533728][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.557217][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.579781][ T7858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.716701][ T7858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.022729][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.122552][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.165744][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.190335][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.211628][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.269755][ T7858] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.321967][ T7858] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.355904][ T7858] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.389383][ T7858] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.230921][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.259882][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.329593][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.376035][ T554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.400371][ T554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.420266][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'. [ 530.440451][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.546925][ T1235] device hsr_slave_0 left promiscuous mode [ 530.558131][ T1235] device hsr_slave_1 left promiscuous mode [ 530.575847][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.588925][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.609433][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.622752][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.642814][ T1235] device bridge_slave_1 left promiscuous mode [ 530.655906][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.675001][ T1235] device bridge_slave_0 left promiscuous mode [ 530.688009][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.720350][ T1235] device veth1_macvtap left promiscuous mode [ 530.733329][ T1235] device veth0_macvtap left promiscuous mode [ 530.746443][ T1235] device veth1_vlan left promiscuous mode [ 530.759948][ T1235] device veth0_vlan left promiscuous mode [ 532.884049][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 532.912553][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 532.952004][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.991240][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.523479][ T1235] bond0 (unregistering): Released all slaves [ 535.551469][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 536.025982][ T8085] vivid-000: disconnect [ 536.593430][ T8073] vivid-000: reconnect [ 538.778027][ T8110] tipc: Started in network mode [ 538.783096][ T8110] tipc: Node identity 7, cluster identity 4711 [ 538.789372][ T8110] tipc: Node number set to 7 [ 538.796369][ T8110] tipc: Cannot configure node identity twice [ 539.008764][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 539.148678][ T4587] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 539.469929][ T21] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 539.521254][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.549418][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 539.649137][ T4587] usb 8-1: not running at top speed; connect to a high speed hub [ 539.719467][ T21] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 539.749038][ T4587] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.766765][ T21] usb 3-1: New USB device strings: Mfr=134, Product=211, SerialNumber=0 [ 539.794676][ T4587] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 539.823509][ T21] usb 3-1: Product: syz [ 539.828074][ T21] usb 3-1: Manufacturer: syz [ 539.860279][ T21] usb 3-1: config 0 descriptor?? [ 540.010041][ T4587] usb 8-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 540.020198][ T4587] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.028357][ T4587] usb 8-1: Product: syz [ 540.033698][ T4587] usb 8-1: SerialNumber: syz [ 540.156471][ T4587] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 540.322807][ T4991] Bluetooth: hci1: command 0x0406 tx timeout [ 541.479438][ T4587] usb 8-1: USB disconnect, device number 3 [ 541.527629][ T21] usb 3-1: USB disconnect, device number 10 [ 541.846184][ T8126] tipc: Enabled bearer , priority 10 [ 543.898897][ T8149] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1055'. [ 545.568681][ T4244] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 546.421416][ T4244] usb 9-1: device descriptor read/64, error -71 [ 548.161147][ T4991] libceph: connect (1)[c::]:6789 error -101 [ 548.183095][ T8179] vivid-000: disconnect [ 548.199451][ T4991] libceph: mon0 (1)[c::]:6789 connect error [ 548.296524][ T4991] libceph: connect (1)[c::]:6789 error -101 [ 548.301544][ T8168] ceph: No mds server is up or the cluster is laggy [ 548.308663][ T4991] libceph: mon0 (1)[c::]:6789 connect error [ 548.309569][ T4244] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 548.599972][ T4244] usb 1-1: Using ep0 maxpacket: 16 [ 548.794099][ T8171] vivid-000: reconnect [ 549.480603][ T8188] loop7: detected capacity change from 0 to 40427 [ 549.491246][ T8189] tipc: Enabling of bearer rejected, already enabled [ 549.505083][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.516800][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.527514][ T4244] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.540716][ T4244] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.550058][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.843007][ T8188] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 549.850897][ T8188] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 549.872733][ T8188] F2FS-fs (loop7): invalid crc value [ 549.892490][ T4244] usb 1-1: config 0 descriptor?? [ 549.937162][ T8188] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 549.958840][ T8188] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 550.009745][ T8188] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 550.016940][ T8188] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 550.740676][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 550.791918][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 550.876943][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 550.904315][ T4244] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 550.936474][ T4244] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 550.954674][ T4244] microsoft 0003:045E:07DA.0003: no inputs found [ 550.975570][ T4244] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 551.031261][ T4244] usb 1-1: USB disconnect, device number 11 [ 551.099144][ T8206] kvm: pic: non byte write [ 553.293373][ T8232] pimreg0: tun_chr_ioctl cmd 1074025677 [ 553.348863][ T8232] pimreg0: linktype set to 774 [ 557.594227][ T8266] fuse: Bad value for 'fd' [ 558.178803][ T8275] vivid-000: disconnect [ 558.302518][ T8263] vivid-000: reconnect [ 558.344024][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1089'. [ 558.768767][ T4245] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 559.218751][ T4245] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.356934][ T4245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.365715][ T4245] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 559.375452][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.388052][ T4245] usb 3-1: config 0 descriptor?? [ 560.430499][ T4245] magicmouse 0003:05AC:0269.0004: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 560.524227][ T8299] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 560.556704][ T8283] 9pnet: Insufficient options for proto=fd [ 560.606759][ T4991] usb 3-1: USB disconnect, device number 11 [ 562.488618][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 563.792298][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1103'. [ 563.938586][ T4574] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 564.013825][ T8331] tipc: Enabling of bearer rejected, already enabled [ 564.086355][ T8332] vivid-000: disconnect [ 564.298968][ T4574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.318734][ T4574] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.508734][ T4574] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.564025][ T4574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.589579][ T8324] vivid-000: reconnect [ 564.625497][ T4574] usb 3-1: Product: syz [ 564.648899][ T4574] usb 3-1: Manufacturer: syz [ 564.654572][ T4574] usb 3-1: SerialNumber: syz [ 564.795377][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1109'. [ 564.804568][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1109'. [ 564.861936][ T8342] netlink: 'syz.4.1108': attribute type 10 has an invalid length. [ 565.359570][ T4574] usb 3-1: 0:2 : does not exist [ 566.157531][ T8342] device wlan1 entered promiscuous mode [ 566.180027][ T8342] team0: Port device wlan1 added [ 566.390936][ T4574] usb 3-1: USB disconnect, device number 12 [ 566.513551][ T8348] ISOFS: Unable to identify CD-ROM format. [ 568.973758][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.984687][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.064619][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.519127][ T8386] tipc: Enabling of bearer rejected, already enabled [ 573.422698][ T8425] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 573.437286][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.447935][ T8425] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 573.868384][ T8432] tipc: Enabling of bearer rejected, already enabled [ 574.699409][ T4587] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 574.988689][ T4587] usb 1-1: Using ep0 maxpacket: 32 [ 575.140439][ T8441] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 575.216934][ T8441] team0: Port device wlan1 added [ 575.426538][ T4587] usb 1-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 575.444127][ T4587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.486171][ T4587] usb 1-1: Product: syz [ 575.490975][ T4587] usb 1-1: Manufacturer: syz [ 575.496539][ T4587] usb 1-1: SerialNumber: syz [ 575.724390][ T4587] usb 1-1: config 0 descriptor?? [ 575.770140][ T4587] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 575.781841][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 576.699845][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 576.709540][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 576.721548][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 576.738665][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 576.786753][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 576.812916][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 576.871678][ T4587] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 576.905371][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 577.121584][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 577.203131][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 577.211309][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 577.219646][ T4587] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 577.270256][ T4587] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 577.340287][ T4587] usb 1-1: USB disconnect, device number 12 [ 577.379624][ T4587] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 577.439426][ T4587] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 577.522209][ T4587] keyspan 1-1:0.0: device disconnected [ 577.611782][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.785575][ T8455] bond0: (slave rose0): Enslaving as an active interface with an up link [ 578.368819][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 578.632878][ T8480] tipc: Enabling of bearer rejected, already enabled [ 579.536719][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 579.977250][ T8487] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 584.909386][ T8519] tipc: Enabling of bearer rejected, already enabled [ 585.148730][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 585.157035][ T4574] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 585.400109][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 585.540309][ T7] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 585.558723][ T4574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.570102][ T7] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 585.588497][ T4574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.608571][ T7] usb 5-1: config 0 has no interface number 0 [ 585.614937][ T4574] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 585.634859][ T4574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.664498][ T4574] usb 1-1: config 0 descriptor?? [ 585.808859][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 585.820716][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.834975][ T7] usb 5-1: Product: syz [ 585.851611][ T7] usb 5-1: Manufacturer: syz [ 585.856257][ T7] usb 5-1: SerialNumber: syz [ 585.892780][ T7] usb 5-1: config 0 descriptor?? [ 586.155494][ T8544] vivid-000: disconnect [ 586.565573][ T8534] vivid-000: reconnect [ 587.039739][ T7] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 587.046162][ T7] usb 5-1: No valid video chain found. [ 587.052040][ T4574] usb 1-1: language id specifier not provided by device, defaulting to English [ 587.064848][ T7] usb 5-1: USB disconnect, device number 6 [ 587.458789][ T4574] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 587.595541][ T8557] vivid-000: disconnect [ 587.946401][ T4574] usb 1-1: USB disconnect, device number 13 [ 588.143304][ T8551] vivid-000: reconnect [ 591.119630][ T4574] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 591.678549][ T4574] usb 1-1: Using ep0 maxpacket: 16 [ 591.821738][ T8574] tipc: Enabling of bearer rejected, already enabled [ 591.830110][ T4574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 591.865742][ T4574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 592.068795][ T4574] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 592.132670][ T4574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.955865][ T4574] usb 1-1: config 0 descriptor?? [ 593.206314][ T4574] usb 1-1: can't set config #0, error -71 [ 593.253924][ T8592] netlink: 'syz.2.1185': attribute type 10 has an invalid length. [ 593.397457][ T4574] usb 1-1: USB disconnect, device number 14 [ 593.584224][ T8592] device veth0_vlan left promiscuous mode [ 593.595246][ T8592] device veth0_vlan entered promiscuous mode [ 593.606661][ T8592] team0: Device veth0_vlan failed to register rx_handler [ 594.674994][ T8592] syz.2.1185 (8592) used greatest stack depth: 18328 bytes left [ 594.978760][ T4991] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 595.095323][ T8620] tipc: Enabling of bearer rejected, already enabled [ 596.354919][ T8632] vivid-000: disconnect [ 596.899983][ T8629] vivid-000: reconnect [ 597.108562][ T4991] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 597.116959][ T4991] usb 9-1: config 0 has no interface number 0 [ 597.285371][ T4991] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 597.304608][ T4991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.327069][ T4991] usb 9-1: Product: syz [ 597.338637][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 597.362378][ T4991] usb 9-1: Manufacturer: syz [ 597.377246][ T4991] usb 9-1: SerialNumber: syz [ 597.380415][ T8642] binder: 8641:8642 ioctl c00c6211 0 returned -22 [ 597.407257][ T4991] usb 9-1: config 0 descriptor?? [ 597.750787][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.896367][ T4991] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 598.108931][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 598.117012][ T4991] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 598.144035][ T8644] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 598.167919][ T4991] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 598.188860][ T4991] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 598.229497][ T4991] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 598.269833][ T4991] usb 9-1: USB disconnect, device number 7 [ 598.292540][ T4991] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 598.332929][ T4991] keyspan 9-1:0.133: device disconnected [ 598.368783][ T7] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 598.381148][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.434242][ T7] usb 3-1: Product: syz [ 598.455990][ T7] usb 3-1: Manufacturer: syz [ 598.493056][ T7] usb 3-1: SerialNumber: syz [ 598.520719][ T7] usb 3-1: config 0 descriptor?? [ 599.308352][ T7] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 599.322369][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.348903][ T7] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 599.544678][ T7] usb 3-1: media controller created [ 599.599893][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.462470][ T7] DVB: Unable to find symbol tda10046_attach() [ 601.472123][ T7] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 601.481149][ T7] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 601.508579][ T7] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 601.527282][ T7] usb 3-1: USB disconnect, device number 13 [ 602.724023][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1217'. [ 604.005864][ T8704] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 604.013110][ T8704] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 604.140042][ T8651] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 604.158624][ T8708] device hsr_slave_0 left promiscuous mode [ 604.993106][ T8708] device hsr_slave_1 left promiscuous mode [ 605.184682][ T8651] usb 1-1: Using ep0 maxpacket: 16 [ 605.728936][ T8651] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 605.807732][ T8651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.048040][ T8651] usb 1-1: Product: syz [ 606.059545][ T8651] usb 1-1: Manufacturer: syz [ 606.110205][ T8651] usb 1-1: SerialNumber: syz [ 606.209858][ T8651] usb 1-1: config 0 descriptor?? [ 606.260384][ T8651] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 606.310215][ T8651] usb 1-1: Detected FT-X [ 606.858594][ T8651] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 606.893133][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 606.902237][ T8729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'. [ 606.999748][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'. [ 607.210755][ T8651] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 607.219410][ T8651] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 607.236554][ T8651] usb 1-1: USB disconnect, device number 15 [ 607.245846][ T8651] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 607.256770][ T8651] ftdi_sio 1-1:0.0: device disconnected [ 607.268583][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1233'. [ 607.938843][ T8651] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 609.309565][ T8651] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 609.336224][ T8651] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 609.388606][ T8651] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 609.397820][ T8651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.431343][ T8651] usb 3-1: config 0 descriptor?? [ 609.452079][ T8744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 609.494750][ T8651] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 609.919231][ T8761] Device name cannot be null; rc = [-22] [ 611.211200][ T4210] usb 3-1: USB disconnect, device number 14 [ 611.979354][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 612.248188][ T4672] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 612.568695][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 613.538541][ T4672] usb 8-1: device descriptor read/64, error -71 [ 613.828891][ T4672] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 614.068534][ T4672] usb 8-1: device descriptor read/64, error -71 [ 614.108801][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 614.121089][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.139013][ T7] usb 3-1: Product: syz [ 614.143634][ T7] usb 3-1: Manufacturer: syz [ 614.149500][ T7] usb 3-1: SerialNumber: syz [ 614.187493][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 614.196530][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.204133][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.222649][ T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 614.230917][ T4672] usb usb8-port1: attempt power cycle [ 614.548511][ T4210] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 615.180402][ T4587] usb 3-1: USB disconnect, device number 15 [ 615.262265][ T7] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 615.273366][ T4587] usb 3-1: ath9k_htc: USB layer deinitialized [ 615.308556][ T4210] usb 9-1: Using ep0 maxpacket: 16 [ 615.428773][ T4210] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 615.452251][ T4210] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 615.478520][ T4210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.501665][ T4210] usb 9-1: config 0 descriptor?? [ 615.542442][ T4210] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input11 [ 615.765430][ T3532] bcm5974 9-1:0.0: could not read from device [ 615.808759][ T4210] bcm5974 9-1:0.0: could not read from device [ 615.858651][ T3532] bcm5974 9-1:0.0: could not read from device [ 615.889974][ T4210] input: failed to attach handler mousedev to device input11, error: -5 [ 615.925385][ T4210] usb 9-1: USB disconnect, device number 8 [ 615.964842][ T3532] bcm5974 9-1:0.0: could not read from device [ 616.025651][ T8818] vivid-000: disconnect [ 616.039484][ T3532] bcm5974 9-1:0.0: could not read from device [ 616.149898][ T8813] vivid-000: reconnect [ 618.428535][ T4991] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 618.648575][ T4991] usb 5-1: device descriptor read/64, error -71 [ 619.578752][ T4991] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 619.808984][ T4991] usb 5-1: device descriptor read/64, error -71 [ 619.938760][ T4991] usb usb5-port1: attempt power cycle [ 621.088739][ T4991] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 621.298768][ T4991] usb 5-1: device descriptor read/8, error -71 [ 624.517693][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1293'. [ 624.554660][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1293'. [ 624.646047][ T8910] device bond0 entered promiscuous mode [ 624.676643][ T8910] device bond_slave_0 entered promiscuous mode [ 625.473625][ T8910] device bond_slave_1 entered promiscuous mode [ 625.529444][ T8910] device batadv0 entered promiscuous mode [ 625.539164][ T8910] device erspan0 entered promiscuous mode [ 625.547379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 625.920441][ T4210] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 626.265163][ T4243] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 626.618269][ T4243] usb 1-1: device descriptor read/64, error -71 [ 626.723498][ T4210] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 626.838560][ T4210] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.038895][ T4243] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 627.039059][ T4210] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 627.335104][ T4243] usb 1-1: device descriptor read/64, error -71 [ 627.381556][ T4210] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 627.459998][ T4210] usb 8-1: Manufacturer: syz [ 627.468634][ T4243] usb usb1-port1: attempt power cycle [ 627.471761][ T4210] usb 8-1: config 0 descriptor?? [ 627.584370][ T8943] vivid-000: disconnect [ 627.622124][ T4210] rc_core: IR keymap rc-hauppauge not found [ 627.628205][ T4210] Registered IR keymap rc-empty [ 627.652519][ T4210] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 627.694211][ T4210] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 627.726031][ T8917] vivid-000: reconnect [ 627.918555][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 627.978550][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 627.979382][ T4211] usb 8-1: USB disconnect, device number 7 [ 627.984761][ C0] igorplugusb 8-1:0.0: submit urb failed: -19 [ 627.990717][ T4243] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 628.128670][ T4243] usb 1-1: device descriptor read/8, error -71 [ 628.408629][ T4243] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 628.764020][ T4243] usb 1-1: device descriptor read/8, error -71 [ 630.099745][ T4243] usb usb1-port1: unable to enumerate USB device [ 630.572440][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.630816][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.901419][ T8997] [ 632.903792][ T8997] ====================================================== [ 632.910817][ T8997] WARNING: possible circular locking dependency detected [ 632.917839][ T8997] 5.15.179-syzkaller #0 Not tainted [ 632.923036][ T8997] ------------------------------------------------------ [ 632.930038][ T8997] syz.8.1318/8997 is trying to acquire lock: [ 632.936005][ T8997] ffff88807dc50d00 (team->team_lock_key#15){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1f0 [ 632.945668][ T8997] [ 632.945668][ T8997] but task is already holding lock: [ 632.953040][ T8997] ffff8880249e8628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 632.962904][ T8997] [ 632.962904][ T8997] which lock already depends on the new lock. [ 632.962904][ T8997] [ 632.973331][ T8997] [ 632.973331][ T8997] the existing dependency chain (in reverse order) is: [ 632.982353][ T8997] [ 632.982353][ T8997] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 632.990074][ T8997] lock_acquire+0x1db/0x4f0 [ 632.995093][ T8997] __mutex_lock_common+0x1da/0x25a0 [ 633.000802][ T8997] mutex_lock_nested+0x17/0x20 [ 633.006076][ T8997] ieee80211_open+0x13a/0x1f0 [ 633.011276][ T8997] __dev_open+0x2c3/0x430 [ 633.016119][ T8997] dev_open+0xaa/0x1a0 [ 633.020692][ T8997] team_add_slave+0x9b9/0x2810 [ 633.025966][ T8997] do_setlink+0xddd/0x3d80 [ 633.030889][ T8997] rtnl_newlink+0x17bf/0x2050 [ 633.036075][ T8997] rtnetlink_rcv_msg+0x99d/0xef0 [ 633.041534][ T8997] netlink_rcv_skb+0x1cf/0x410 [ 633.046806][ T8997] netlink_unicast+0x7c0/0x990 [ 633.052097][ T8997] netlink_sendmsg+0xa30/0xd60 [ 633.057392][ T8997] ____sys_sendmsg+0x59e/0x8f0 [ 633.062675][ T8997] ___sys_sendmsg+0x252/0x2e0 [ 633.067885][ T8997] __se_sys_sendmsg+0x19a/0x260 [ 633.073255][ T8997] do_syscall_64+0x3b/0xb0 [ 633.078183][ T8997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.084590][ T8997] [ 633.084590][ T8997] -> #0 (team->team_lock_key#15){+.+.}-{3:3}: [ 633.092836][ T8997] validate_chain+0x1649/0x5930 [ 633.098197][ T8997] __lock_acquire+0x1295/0x1ff0 [ 633.103554][ T8997] lock_acquire+0x1db/0x4f0 [ 633.108576][ T8997] __mutex_lock_common+0x1da/0x25a0 [ 633.114288][ T8997] mutex_lock_nested+0x17/0x20 [ 633.119566][ T8997] team_del_slave+0x2e/0x1f0 [ 633.124666][ T8997] team_device_event+0x264/0x580 [ 633.130115][ T8997] raw_notifier_call_chain+0xd0/0x170 [ 633.135996][ T8997] unregister_netdevice_many+0xe98/0x1840 [ 633.142225][ T8997] unregister_netdevice_queue+0x2e6/0x350 [ 633.148462][ T8997] _cfg80211_unregister_wdev+0x181/0x510 [ 633.154611][ T8997] ieee80211_if_remove+0x1cc/0x2c0 [ 633.160229][ T8997] ieee80211_del_iface+0x15/0x20 [ 633.165680][ T8997] nl80211_del_interface+0x1f5/0x370 [ 633.171480][ T8997] genl_rcv_msg+0xfc2/0x14a0 [ 633.176583][ T8997] netlink_rcv_skb+0x1cf/0x410 [ 633.181866][ T8997] genl_rcv+0x24/0x40 [ 633.186367][ T8997] netlink_unicast+0x7c0/0x990 [ 633.191654][ T8997] netlink_sendmsg+0xa30/0xd60 [ 633.196944][ T8997] ____sys_sendmsg+0x59e/0x8f0 [ 633.202222][ T8997] ___sys_sendmsg+0x252/0x2e0 [ 633.207409][ T8997] __se_sys_sendmsg+0x19a/0x260 [ 633.212771][ T8997] do_syscall_64+0x3b/0xb0 [ 633.217706][ T8997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.224106][ T8997] [ 633.224106][ T8997] other info that might help us debug this: [ 633.224106][ T8997] [ 633.234313][ T8997] Possible unsafe locking scenario: [ 633.234313][ T8997] [ 633.241763][ T8997] CPU0 CPU1 [ 633.247112][ T8997] ---- ---- [ 633.252456][ T8997] lock(&rdev->wiphy.mtx); [ 633.256948][ T8997] lock(team->team_lock_key#15); [ 633.264474][ T8997] lock(&rdev->wiphy.mtx); [ 633.271480][ T8997] lock(team->team_lock_key#15); [ 633.276492][ T8997] [ 633.276492][ T8997] *** DEADLOCK *** [ 633.276492][ T8997] [ 633.284704][ T8997] 3 locks held by syz.8.1318/8997: [ 633.289797][ T8997] #0: ffffffff8dca15f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 633.297964][ T8997] #1: ffffffff8dc43ac8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x550 [ 633.307167][ T8997] #2: ffff8880249e8628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 633.317419][ T8997] [ 633.317419][ T8997] stack backtrace: [ 633.323289][ T8997] CPU: 1 PID: 8997 Comm: syz.8.1318 Not tainted 5.15.179-syzkaller #0 [ 633.331425][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 633.341517][ T8997] Call Trace: [ 633.344782][ T8997] [ 633.347704][ T8997] dump_stack_lvl+0x1e3/0x2d0 [ 633.352374][ T8997] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 633.358000][ T8997] ? print_circular_bug+0x12b/0x1a0 [ 633.363189][ T8997] check_noncircular+0x2f8/0x3b0 [ 633.368115][ T8997] ? add_chain_block+0x850/0x850 [ 633.373048][ T8997] ? lockdep_lock+0x11f/0x2a0 [ 633.377715][ T8997] validate_chain+0x1649/0x5930 [ 633.382561][ T8997] ? validate_chain+0x112/0x5930 [ 633.387498][ T8997] ? mark_lock+0x98/0x340 [ 633.391816][ T8997] ? reacquire_held_locks+0x660/0x660 [ 633.397180][ T8997] ? __lock_acquire+0x1295/0x1ff0 [ 633.402217][ T8997] ? reacquire_held_locks+0x660/0x660 [ 633.407601][ T8997] ? mark_lock+0x98/0x340 [ 633.411928][ T8997] ? mark_lock+0x98/0x340 [ 633.416245][ T8997] __lock_acquire+0x1295/0x1ff0 [ 633.421089][ T8997] lock_acquire+0x1db/0x4f0 [ 633.425581][ T8997] ? team_del_slave+0x2e/0x1f0 [ 633.430343][ T8997] ? read_lock_is_recursive+0x10/0x10 [ 633.435721][ T8997] ? __might_sleep+0xc0/0xc0 [ 633.440308][ T8997] ? xsk_notifier+0x37b/0x390 [ 633.444976][ T8997] __mutex_lock_common+0x1da/0x25a0 [ 633.450160][ T8997] ? team_del_slave+0x2e/0x1f0 [ 633.454914][ T8997] ? __local_bh_enable_ip+0x164/0x1f0 [ 633.460274][ T8997] ? team_del_slave+0x2e/0x1f0 [ 633.465027][ T8997] ? bond_netdev_event+0xd8/0xe90 [ 633.470046][ T8997] ? mutex_lock_io_nested+0x60/0x60 [ 633.475233][ T8997] ? mutex_unlock+0x10/0x10 [ 633.479727][ T8997] ? bond_ipsec_offload_ok+0x3f0/0x3f0 [ 633.485187][ T8997] ? memset+0x1f/0x40 [ 633.489155][ T8997] mutex_lock_nested+0x17/0x20 [ 633.493909][ T8997] team_del_slave+0x2e/0x1f0 [ 633.498498][ T8997] team_device_event+0x264/0x580 [ 633.503425][ T8997] raw_notifier_call_chain+0xd0/0x170 [ 633.508786][ T8997] unregister_netdevice_many+0xe98/0x1840 [ 633.514499][ T8997] ? __lock_acquire+0x1ff0/0x1ff0 [ 633.519511][ T8997] ? alloc_netdev_mqs+0xc10/0xc10 [ 633.524522][ T8997] ? kasan_quarantine_put+0xd4/0x220 [ 633.529796][ T8997] ? up_write+0x19d/0x580 [ 633.534117][ T8997] unregister_netdevice_queue+0x2e6/0x350 [ 633.539831][ T8997] ? list_netdevice+0x470/0x470 [ 633.544671][ T8997] _cfg80211_unregister_wdev+0x181/0x510 [ 633.550358][ T8997] ieee80211_if_remove+0x1cc/0x2c0 [ 633.555504][ T8997] ieee80211_del_iface+0x15/0x20 [ 633.560453][ T8997] nl80211_del_interface+0x1f5/0x370 [ 633.565837][ T8997] genl_rcv_msg+0xfc2/0x14a0 [ 633.570433][ T8997] ? genl_bind+0x420/0x420 [ 633.574971][ T8997] ? local_bh_enable+0x5/0x20 [ 633.579649][ T8997] ? mark_lock+0x98/0x340 [ 633.583966][ T8997] ? __lock_acquire+0x1295/0x1ff0 [ 633.588980][ T8997] ? nl80211_new_interface+0xfa0/0xfa0 [ 633.594543][ T8997] netlink_rcv_skb+0x1cf/0x410 [ 633.599480][ T8997] ? genl_bind+0x420/0x420 [ 633.603895][ T8997] ? netlink_ack+0xb10/0xb10 [ 633.608494][ T8997] ? down_read+0x1b3/0x2e0 [ 633.612935][ T8997] ? genl_rcv+0x9/0x40 [ 633.616993][ T8997] genl_rcv+0x24/0x40 [ 633.620971][ T8997] netlink_unicast+0x7c0/0x990 [ 633.625728][ T8997] ? netlink_detachskb+0x90/0x90 [ 633.630662][ T8997] ? __virt_addr_valid+0x3bb/0x460 [ 633.635759][ T8997] ? 0xffffffff81000000 [ 633.639892][ T8997] ? __check_object_size+0x300/0x410 [ 633.645168][ T8997] ? bpf_lsm_netlink_send+0x5/0x10 [ 633.650278][ T8997] netlink_sendmsg+0xa30/0xd60 [ 633.655050][ T8997] ? netlink_getsockopt+0x5b0/0x5b0 [ 633.660254][ T8997] ? plist_check_list+0x20d/0x220 [ 633.665285][ T8997] ? aa_sock_msg_perm+0x91/0x150 [ 633.670215][ T8997] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 633.675489][ T8997] ? security_socket_sendmsg+0x7d/0xa0 [ 633.680935][ T8997] ? netlink_getsockopt+0x5b0/0x5b0 [ 633.686124][ T8997] ____sys_sendmsg+0x59e/0x8f0 [ 633.690876][ T8997] ? iovec_from_user+0x300/0x390 [ 633.695814][ T8997] ? __sys_sendmsg_sock+0x30/0x30 [ 633.700833][ T8997] ___sys_sendmsg+0x252/0x2e0 [ 633.705498][ T8997] ? __sys_sendmsg+0x260/0x260 [ 633.710259][ T8997] ? __fdget+0x191/0x220 [ 633.714509][ T8997] __se_sys_sendmsg+0x19a/0x260 [ 633.719350][ T8997] ? __x64_sys_sendmsg+0x80/0x80 [ 633.724289][ T8997] ? syscall_enter_from_user_mode+0x2e/0x240 [ 633.730256][ T8997] ? lockdep_hardirqs_on+0x94/0x130 [ 633.735460][ T8997] ? syscall_enter_from_user_mode+0x2e/0x240 [ 633.741423][ T8997] do_syscall_64+0x3b/0xb0 [ 633.745912][ T8997] ? clear_bhb_loop+0x15/0x70 [ 633.750587][ T8997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.756472][ T8997] RIP: 0033:0x7fc153f16169 [ 633.760897][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.780502][ T8997] RSP: 002b:00007fc151d7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.788911][ T8997] RAX: ffffffffffffffda RBX: 00007fc15412efa0 RCX: 00007fc153f16169 [ 633.796873][ T8997] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 633.804846][ T8997] RBP: 00007fc153f972a0 R08: 0000000000000000 R09: 0000000000000000 [ 633.812808][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.820780][ T8997] R13: 0000000000000000 R14: 00007fc15412efa0 R15: 00007ffc2195bb38 [ 633.828759][ T8997] [ 633.902456][ T8997] team0: Port device wlan1 removed [ 637.598527][ T7] Bluetooth: hci4: command 0x0406 tx timeout